01}) 19:44:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x1, 0x4}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) 19:44:07 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) connect$bt_sco(r0, 0x0, 0x0) 19:44:07 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x16e80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0xa77, 0x6, 0x3, 0x1000, r2, 0x5, [], 0x0, r3, 0x4, 0x0, 0x3}, 0x40) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x16b002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@mcast1, 0x30}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x9) 19:44:07 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000200)=@fragment={0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x66}, 0x8) 19:44:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x1000, 0x7, 0x101, 0x3de, 0x1, 0x1bf, [], 0x0, r1, 0x2, 0x2}, 0x40) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x189083, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) 19:44:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private0={0xfc, 0x0, [], 0x1}, 0x73}) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:07 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x10, 0xfff2}, {0xc, 0x3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x400004d}, 0x20000040) connect$bt_sco(r0, 0x0, 0x0) 19:44:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x200100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="f6e1a02046ef39504e8562326c2aa31667b4228637", 0x15}, {&(0x7f0000000140)="306c04a4bad1fa76c4039f54b45b7079dc7ef8c734f4c02e0c5bba45cabaf402ac5072fcb89dde82ab0b9312ffa71b8b4c7590af8e62c628482a725586497886d7e40bdd55171a8437fda5ba46575d2c4e3005763d", 0x55}, {&(0x7f00000001c0)="e46f0fa674869345bda3306153d4ef2261fa0ed081c3278b73e720a53f38a8157a3090939dafd74218228dc8d3ef89520cd561441b33645d68504dbc358f4bf904401cc49dc44893a1867e0d6bce877c4b6777c0c3", 0x55}, {&(0x7f0000000240)="91dca879bc3cc1db39383c02ed256dc7c403e5ccc15dda93f6a630da9c7d0822c2de4b99e4815e65ffd3dda83983ec34b7b2cd5fe171f801f6ef942eb4652bb2ee61382e2573efeef8e224f5d761f6ae1a01753245e5d17a811191eb61f58a4bc354f35c18c2b7ac26114818d1832ff586d7863cdea45f61213073a7e0b2941af814d5b3ed4ec9c2eddefbb82d89fde2b7462c5383e22f8a9ee641f000eaf076e454c042", 0xa4}, {&(0x7f0000000300)="bd9ea0fcf1c223d16d0a5cc9bb8924d38d87490e2f39b54a6d8905b6cc5df3a3dbaffed8ba0546ebf68b6861625b7b70c67bef23881501bab5fb56ad6758666633af3fd5eff6751316086663d94f2f66a31dcc8d791a164c37cfcff6e9facdc8dddf6faf7b6d588884227707e8af9f170eecc54efc96dfee16332eee47b6978ea0a9ea85de298ac26a26d525cc118a9745ae55843d7e37f3d508e66d28c870696dc275a64f362312e91c2abfa011559c5f6653ed4cf60fa94c5e97ad41c5a393d9fb0446007b915155ed21c9e1a3abd85ac1d2aec156ca2d7d6bd33210", 0xdd}, {&(0x7f0000000400)="eabf8392ed757fd2d0da8e020a4cc064bfa38dfe", 0x14}, {&(0x7f0000000440)="d94b681a78987d26f9963fc16d7968284020e3e9f87a13f73ba2c03df5b14c329cadeb0324feaf4a52e0e9418fd8ea2eb7f6befc026f6a3b754ee64211d76220d1386c1c18efc522a3b8f1ed44a9d28e8891990733027f73ea9e3054fa1b4754a161470edda0", 0x66}], 0x7}, 0x80000) 19:44:07 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x2], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c, 0x800) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @isdn={0x22, 0x4, 0x1, 0x1, 0x3}, @can={0x1d, 0x0}, @ethernet={0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x6f}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000380)={@ipv4={[], [], @remote}, r3}, 0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) recvfrom$rxrpc(r4, &(0x7f00000000c0)=""/32, 0x20, 0x40, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) write$ppp(r5, &(0x7f00000001c0)="bac5d2fb928644d134edeea184574c4cd967551ecceaf23e42a7ddcd6f217c3385795a703faccf186b9100cf77ddc108708821642c2970370252f72b1b24dc3b0a9ea1c4a9e7f6d12ee1f82e538b5a5cd2edd237696f6e4cd2eed70c2172d67b8eb6d3d99c000ba41b92d752596396073b299afcb8fe1f9b715ddca5d45f70dbbfbac0", 0x83) 19:44:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) 19:44:07 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={[], 0x12}}, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, 0x14, 0x100, 0x70bd25, 0x25dfdbfc, {0x25, 0x92}, [@INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "36642d86532908b5dda8c06eb9db2d85456e816c32529d3bdc6b75665c82c152c67eef536c22b3e4c84a6b8f296c06a5b55ba6d5d7436a16f2895f8b0929ed931517f08b4fa711d7404bb62f38146225f567aa71b7e21b5c9f6a0e8874ba4e6ad35f77d3207884c7352214a086ca0eb0203d7093b6cdda2a9189a8282a05592f6eb808845ab684137163e39f4d6beda167cf177fd7af66b063863aa00fe75244420132355ec4d061150cb1"}, @INET_DIAG_REQ_BYTECODE={0x65, 0x1, "ef1f50b2f4efb64040c86476ebecc25dbc2a63522a6601744178f2fee15eec970ff4a919d868ea4273b7f8769b0c5ff2f909c46df651393bb834729698bc72c1ef2299f2689d5c99ea00c3af591fab129a7265adb128a65d6bc5545c38e56d26a4"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x880}, 0x20000040) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x286400, 0x0) connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @none}, 0x8) 19:44:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8001, 0xb}) 19:44:07 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80582, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x7}) 19:44:07 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x5e, 0x0, [], [@pad1, @ra={0x5, 0x2, 0x2}]}, 0x10) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x4}, 0x4) socketpair(0x27, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0xffffff7d, 0x5, 0xbbb9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 19:44:07 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @llc={0x1a, 0x104, 0x1, 0xb4, 0x8, 0x9, @multicast}, @sco={0x1f, @fixed={[], 0x10}}, @l2tp={0x2, 0x0, @local}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='tunl0\x00', 0x6, 0x3f, 0x4}) 19:44:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40, 0x9, 0x1}) 19:44:07 executing program 1: socketpair(0x10, 0x1, 0x20, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:07 executing program 3: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x6, 0x8001, {{0x19, 0x4, 0x3, 0x3b, 0x64, 0x64, 0x0, 0x3f, 0x4, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0xb, 0xfa, [@dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x13}]}, @noop, @noop, @noop, @timestamp_addr={0x44, 0x1c, 0xb7, 0x1, 0xe, [{@local, 0x7f}, {@multicast2, 0x1}, {@broadcast, 0x3ff}]}, @generic={0x82, 0xa, "443540ef8543215b"}, @timestamp={0x44, 0x8, 0x8f, 0x0, 0x8, [0x1ff]}, @end, @generic={0x89, 0x10, "4a0849292afd4a2b6909ef50726b"}, @end]}}}}}) 19:44:07 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x9, 0x1}) 19:44:07 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001140)={{{@in, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000001240)=0xe8) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) recvfrom$packet(r2, &(0x7f0000000140)=""/4096, 0x1000, 0x2000, 0x0, 0x0) connect$bt_sco(r1, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) 19:44:07 executing program 4: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200)='mptcp_pm\x00') accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="000826bd7000fddbdf2502000000080003000200000048000180060005004e2200000000000000000000000005000200050000000800030000000000080006000600000008000700", @ANYRES32=0x0, @ANYBLOB="08000300ac1e010108000200040000001c000180060005004e23000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e2300000800030004000000240001800800060004000000080006000200000008000700", @ANYRES32=r4, @ANYBLOB="08000600030000003c000180060005004e20000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000600010000000800060001000000080003000a010102060001000200000024000180060005004e21000006000100020000000800060005000000060001000a0000000800030007000000"], 0x11c}, 0x1, 0x0, 0x0, 0x8840}, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0xa41, 0x0) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000004c0)={@private2={0xfc, 0x2, [], 0x1}, r4}, 0x14) 19:44:07 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x301800, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0xe}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, 0x24) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f0000000080)="81d18e24c39d43f889519a53ada29396a859830d4ba78aead767bfdc37f25b30d7f241f0f2602f2bd53e963292ed0ffdb7000d41cb6b035efb76f99a1b1bdf7f4d54e5c050a48c6aca1210a66809fdd6f55c3dd445de387f38f6330e235e8020ed5a85fbf19da902", 0x68) 19:44:07 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x80000000044, 0x33}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x300, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) sendto$packet(r3, &(0x7f00000001c0)="3bd8b494ed7a537c497f2a7360598ed4acf46c1f1211a8c73ba2b3bdb3d7f33688d324aa7983a1ac41bdb91742f39c973e898babb575e6c05611678b25d4e0fba283f45540325ea29266d76d0622861be2cc435ecce481c07ad7b55b1933229f5982baa11d57c964ccaa4ea34a2675f7b86fffe8f43a6ce36c00458d8edc52fedb445fe21f8d44f965d106d504775c84ad6898464463fd46b0caa27310703bf893032d7d0bd923fb8828c9b1", 0xac, 0x801, &(0x7f0000000140)={0x11, 0x15, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 19:44:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x20, 0x70bd29, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) 19:44:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x240804, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:08 executing program 0: socketpair(0x1e, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r0, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @private=0xa010100}}, 0x1e) 19:44:08 executing program 1: socketpair(0x2b, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfbe) 19:44:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x4000080000000046, 0x33, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) connect$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34}) 19:44:08 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0x10}, {0xa, 0x3}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 19:44:08 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x0, 0x2], 0x2) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x20, 0xe7, 0x1, 0xffffff66}, {0x6, 0x2, 0x6, 0x5}, {0x3, 0x7f, 0x1f, 0x4}, {0x7, 0x5, 0x1, 0x7f}, {0x7dc1, 0x0, 0x1, 0xc07}, {0x5, 0x40, 0x3f, 0x24c}]}, 0x10) connect$bt_sco(r0, 0x0, 0x0) 19:44:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:08 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25060000002400018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="05000200080000000500020080000000050002000600000008000600010000000600010002000000080003000300000044000180060005004e230000060001000200000014000400fc00000000000000000000000000000114000400ff0200000000000000000000000000010600010002000000"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) 19:44:08 executing program 3: socket$inet6(0xa, 0x6, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) 19:44:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x4000) 19:44:08 executing program 1: socketpair(0x1e, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) recvfrom$packet(r1, &(0x7f00000000c0)=""/156, 0x9c, 0x140, 0x0, 0x0) 19:44:08 executing program 0: socketpair(0x25, 0x80000, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0xc0, 0x3, 0x5, 0xe}, {0x40, 0x5, 0x3, 0x2e}, {0x1, 0x1, 0x2, 0x9}, {0xfffc, 0x20, 0x5, 0x80000000}, {0x6, 0x6, 0x46, 0xc6a}, {0x800, 0x20, 0x8, 0x2040000}, {0x200, 0x77, 0x2}]}, 0x10) connect$bt_sco(r0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="6c2b000000000000027574957af8971229ae594c78ab202e0ea6b39874b934d334089099f8664f8f81e63e235d75d25c65a2796775ac95cc8f64378c12f1aa15fda673a26534e735c4c5b9b433515ec87e649a7e623162985ebf02c172ba57240594c948725cc8a1ee7cf0093be57da1887e85346b35a993491f45ea2fa1c5040104b7dd25b5bde4d7a84cf175e51b33b84a50204723c92a1905b9f79bf8b466b8ae23ceb7656de11d8c166b58da49526c053d04fc4ed41955f7989dce23bf628abfda56a9836d0c0228e772642798f67bd97cf52fd32b63fd14bda016a08c9fb37336949ddc51ceafe9304a36424a782a00c9fa6556ebabd8997ab853f5752524534ae5ad79143e85f62eb2b0db0b67aa5c83fb21f04d81b9de1c4bcfd6c1e39d55e437c1b731b709ca31faa179010da1fcc174ff77660600245fc858c2ec92ee7a79a1692a90791b1869362d724f16742e40319f8dc063f0a187e6d8523bbbf60000000000000001380ef4043112014ea3c5e6e41b6dad87fe09"], 0x168) 19:44:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3f, 0x1}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x65a020, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40100, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000180)}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x12b080, 0x0) 19:44:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@ipv4={[], [], @local}, 0x12, r1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:08 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x6000) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x7000) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2], 0x1, 0xc00, 0x0, 0xffffffffffffffff}) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x12, 0x39, 0x12, 0x1c, 0x5, 0x9, 0x6, 0x5a, 0x1}) 19:44:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:08 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0xd2b0141, @private1={0xfc, 0x1, [], 0x1}, 0x3}, {0xa, 0x4e24, 0xbfe, @empty, 0x1f}, 0x1ff, [0x400, 0x7b64, 0x6, 0x1, 0x10000, 0x3, 0x1, 0x8]}, 0x5c) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:08 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0x3], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x800, 0x1, 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x101, 0x5, 0xf9, 0x7}, {0x101, 0x24, 0xff, 0x3}, {0x4, 0x7, 0x0, 0x3}]}) 19:44:08 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) 19:44:08 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001780)=[@assoc={0x18, 0x117, 0x4, 0xf43}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xf, "78cc00000000001500000000000000"}, @iv={0x90, 0x117, 0x2, 0x77, "fe658862a9c9cb4fda2fdedb15d9fa50aa75f64895b7b7fb709597ef8cfeb7e7f1491d36bbc561545a2642a8d1808b337d1e8e205dc2f7e03db6119d03d24d51b61c4c59820bf0be3726fb84a539978aa925b12b89e757b7dd2da533f2c3ff5c066f87393052e6cbc03cc869002889d29a463ea6c80648"}, @op={0x18, 0x117, 0x3, 0x967949fb014afc92}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x130, 0x20008000}, 0x30000080) 19:44:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x8402, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0xd, 0x20, 0x7, 0x13, 0x9, 0x6, 0x5, 0x145, 0xa46e76f1bf10556c}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) 19:44:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3f, 0x1}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x65a020, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40100, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000180)}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x12b080, 0x0) 19:44:08 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x7fffffff, 0xfff, 0x9, 0x0, 0x6, 0x8, 0x9], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08032dbd7000fedbdf2506000000080003000000000008000200060000000800020006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$ion(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ion\x00', 0x600, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000140)=0x54) 19:44:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socketpair(0x29, 0x6, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) accept$inet6(r1, 0x0, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x9, 0x1}) 19:44:08 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="0205000000000e00072000000003063f7d00ff62426172237bed21623eb2a7fa971add2f5cee0e44d9378dfb0630e14696ffffff00000000040000000000007efdffffff78f67b"], 0x38) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000240)=[0x83, 0x2, 0x2e6, 0x7], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000140)) 19:44:08 executing program 1: socketpair(0x2, 0x4, 0xbc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfbe) 19:44:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2400, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/96, 0x60) socketpair(0x4, 0x0, 0x10000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000001c0)={0x8, {{0xa, 0x4e1f, 0x3, @empty, 0xfffffff7}}}, 0x88) 19:44:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$pptp(0x18, 0x1, 0x2) 19:44:08 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40, 0xb, 0x1}) 19:44:08 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x80000000044, 0x33}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x300, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) sendto$packet(r3, &(0x7f00000001c0)="3bd8b494ed7a537c497f2a7360598ed4acf46c1f1211a8c73ba2b3bdb3d7f33688d324aa7983a1ac41bdb91742f39c973e898babb575e6c05611678b25d4e0fba283f45540325ea29266d76d0622861be2cc435ecce481c07ad7b55b1933229f5982baa11d57c964ccaa4ea34a2675f7b86fffe8f43a6ce36c00458d8edc52fedb445fe21f8d44f965d106d504775c84ad6898464463fd46b0caa27310703bf893032d7d0bd923fb8828c9b1", 0xac, 0x801, &(0x7f0000000140)={0x11, 0x15, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 19:44:08 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000400)={0x18, 0x2, {0x2, @private}}, 0x1e) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x1, @fixed={[], 0x11}, 0xffff, 0x2}, @hci={0x1f, 0x2, 0x1}, 0x4e30, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='netpci0\x00', 0x5e, 0xff, 0x100}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) 19:44:08 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) 19:44:08 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x80000000044, 0x33}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x300, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) sendto$packet(r3, &(0x7f00000001c0)="3bd8b494ed7a537c497f2a7360598ed4acf46c1f1211a8c73ba2b3bdb3d7f33688d324aa7983a1ac41bdb91742f39c973e898babb575e6c05611678b25d4e0fba283f45540325ea29266d76d0622861be2cc435ecce481c07ad7b55b1933229f5982baa11d57c964ccaa4ea34a2675f7b86fffe8f43a6ce36c00458d8edc52fedb445fe21f8d44f965d106d504775c84ad6898464463fd46b0caa27310703bf893032d7d0bd923fb8828c9b1", 0xac, 0x801, &(0x7f0000000140)={0x11, 0x15, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 19:44:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x10000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) 19:44:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)={0x2e, 0x3, [], [@ra={0x5, 0x2, 0x400}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x7, 0x1, "7f"}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3f}]}, 0x20) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 19:44:08 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x42c, 0x3f4, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x1, 0x5, [0x1, 0x3ff, 0x8f8, 0x1a7, 0xad7d, 0xbcfd, 0x9, 0x4, 0x1, 0x8, 0x7ff, 0x0, 0x1000, 0x6, 0x7f, 0x7ff, 0xb, 0x1, 0x7f, 0x84, 0x1, 0x2, 0x7, 0x2316, 0x8, 0x42, 0x1b, 0x3ff, 0x3, 0x2, 0x0, 0xfffffffc, 0x599, 0x6, 0x7, 0x200, 0x8fb7, 0x18, 0x2, 0x9, 0x20, 0x3, 0x5, 0x6c37, 0x400, 0xfff, 0x4073, 0x7f, 0x4, 0xffffffff, 0x28ec, 0x1, 0x9, 0x10001, 0x59, 0xde77, 0x5, 0x3ff, 0x8, 0x400, 0x7fff, 0x2, 0x3, 0x2e], [0x1ff, 0x2, 0x1000, 0x80000000, 0x10001, 0xffffff61, 0x5, 0x9, 0x6, 0x80, 0xfffffeff, 0x4, 0x0, 0x3, 0x7, 0x6, 0x6, 0xda9e, 0x0, 0x7f, 0xffff, 0x1, 0x8b, 0x6, 0x3, 0x4, 0x1, 0x80000001, 0x10000, 0x3f, 0x9, 0x8, 0x8, 0x5, 0x81, 0x9, 0x5, 0x3f7, 0x7f, 0x401, 0x7, 0x0, 0x1, 0x7260, 0x5, 0x7, 0x7ff, 0x80, 0x3, 0x7fff, 0xfffffffb, 0x5, 0x6, 0x14000000, 0x8001, 0x8001, 0xeb, 0xffffff01, 0x10000, 0x7, 0x5, 0xce29, 0x6, 0x14a8d1ac], [0x5, 0x3ff, 0x9, 0x3, 0x1, 0x1f, 0x4, 0x9, 0x1000, 0x1, 0x2, 0x7, 0x4, 0xd5f, 0x18bcd8b7, 0xe15b, 0x2, 0x7, 0x64e, 0x1, 0xcc, 0x4, 0x8000, 0x0, 0x4, 0x7, 0x6, 0x8, 0x9, 0x1, 0x3, 0x957c, 0x4, 0x5, 0x3, 0x3, 0x7ff, 0x0, 0x3, 0x3f, 0x2742, 0x20, 0x6, 0xffffff79, 0x0, 0x7fff, 0x0, 0x4, 0x7f, 0x3, 0x5c2, 0x101, 0x0, 0x63a2, 0x5, 0x9b, 0x5, 0x2, 0x10001, 0x1, 0x7, 0x8000, 0x8001, 0x1], [0x4d, 0x1ff, 0x3, 0x10001, 0x95, 0x1, 0xffffffff, 0x4, 0x3, 0x4000, 0x4, 0x101, 0x40, 0xfb, 0x1, 0x7, 0x4, 0x80, 0x40, 0x6, 0x1, 0x81, 0x8, 0x6a1, 0x467, 0x8, 0x800, 0x9, 0xff2, 0x3, 0x1ff, 0x9a, 0x9, 0x81, 0x6, 0x8, 0xfff, 0x8, 0xd5, 0x7, 0x1, 0xfffffff8, 0x3f, 0x1, 0x4, 0x0, 0x6578, 0x3ff, 0x0, 0x4, 0x80000000, 0x7781, 0x778f, 0x3, 0x3, 0x5, 0x7fff, 0x5, 0x0, 0x4, 0x80000000, 0x5, 0x1, 0x21e1], 0xc, ['^\xf9$}+/!\x00', '\x1d\x00', '*\x00']}, ["", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x5}, 0x4004) 19:44:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x410002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80000) sendmsg$AUDIT_USER_TTY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x464, 0x8, 0x70bd2c, 0x25dfdbfe, "73388cb5a49d35359609c06638c77bc1d4871eaad0208241474ff6a9b92c9b717c7a4c405f1a2e80186fee4167298a8b9346e1e0", ["", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004890) 19:44:08 executing program 4: socketpair(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:08 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000400)={0x18, 0x2, {0x2, @private}}, 0x1e) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x1, @fixed={[], 0x11}, 0xffff, 0x2}, @hci={0x1f, 0x2, 0x1}, 0x4e30, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='netpci0\x00', 0x5e, 0xff, 0x100}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) 19:44:08 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000006c0)={0x6, 0x2}) ioctl$RTC_UIE_OFF(r2, 0x7004) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x43c, 0x3f4, 0x800, 0x70bd26, 0x25dfdbfc, {0x5, 0x92b5697fb31fae53, 0x36, [0x9, 0xfffffff8, 0x40, 0x0, 0x7, 0xff, 0x3ff, 0x6, 0x1, 0x0, 0x0, 0x1f, 0x5, 0x7, 0x9, 0x2, 0xffff, 0x49, 0x4, 0x9, 0x2, 0x10000, 0xdd0, 0xfffffffd, 0x3, 0x6, 0x7f, 0xfff, 0x40b, 0xfd, 0x2b7c, 0x7, 0x81, 0x1000, 0x0, 0x9, 0x4, 0x8, 0x150c, 0x2, 0x8, 0xfffff000, 0x4, 0xba, 0x8f, 0xfffffffc, 0x9, 0x9, 0x6, 0x9b, 0x39d, 0x5323, 0x8000, 0x1, 0x7fffffff, 0x40007, 0x7, 0xffffffff, 0x1ff, 0x3, 0x3cb, 0x3, 0x1000, 0x800], [0x3f, 0x527c, 0x4, 0x1000, 0x5, 0x3ff, 0x5, 0x3, 0x3, 0x3, 0x108, 0x7, 0x0, 0x6, 0x400000, 0x9, 0x2, 0x6, 0x800, 0x0, 0x2, 0x400, 0x0, 0x280, 0x1ff1, 0x1, 0xfff, 0x460bb664, 0x400, 0x5, 0x81, 0x1000, 0x1, 0x73b2, 0x4, 0x4, 0x81, 0x4, 0x0, 0x6, 0x9af, 0x80000001, 0x4c4e, 0x7fff, 0x0, 0x8, 0xfff, 0x101, 0x2, 0xfffffffd, 0x2, 0x0, 0x8000, 0x3ff, 0x5, 0x0, 0x3, 0x1, 0xc67b, 0x10001, 0x40000, 0x800, 0x1, 0x1f], [0x1000, 0x7, 0x2, 0xa245, 0xffffffff, 0x44, 0x10000, 0x81, 0xfffffffc, 0x2, 0x20, 0x9, 0x1f, 0x53d3, 0x1, 0x10000, 0x5, 0x8, 0xfffffe96, 0x1f, 0x31, 0x8, 0xfffff800, 0x0, 0x9, 0x5, 0x3990, 0x6, 0x26a, 0x0, 0xfb3, 0x7fffffff, 0x6, 0x8, 0xccd, 0x7, 0x4, 0x9, 0x3f, 0x7ff, 0x1, 0x6abc, 0x3, 0x2, 0x1adb, 0x2, 0x3, 0x6, 0x1, 0x3f, 0x2, 0x9, 0x7, 0x5, 0xdf4, 0xfe29, 0x1cdd, 0x0, 0xff, 0x1, 0x7fff, 0x9, 0x0, 0x7], [0x8, 0x7, 0x20000, 0x400, 0x80, 0x4, 0x8, 0x4, 0x81, 0xffff, 0x4, 0x7f, 0x1, 0x80000000, 0xa9, 0x2, 0x3, 0x2, 0x3f, 0x0, 0xfd, 0x9, 0x1f, 0x0, 0x4, 0xff, 0x0, 0x80000000, 0x7, 0x8, 0xc0f8, 0x7, 0x6c5d, 0x2, 0xf1ea, 0x7, 0x0, 0x8, 0xfffffff8, 0x100, 0x1, 0x0, 0x800, 0x7, 0x2, 0x4, 0x2f, 0x0, 0x0, 0x101, 0x556, 0x20, 0x3, 0x401, 0x6, 0x81, 0x800000, 0x80, 0x1e97da50, 0x1000, 0x3, 0x4, 0x8, 0x7ff], 0x1b, ['/dev/ion\x00', '/proc/sysvipc/sem\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x2e}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x31}) socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f6, 0x1, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x8800) 19:44:08 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x50042, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:08 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80582, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x7}) 19:44:08 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000400)={0x18, 0x2, {0x2, @private}}, 0x1e) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @isdn={0x22, 0x8, 0x5, 0x8, 0xff}, @vsock={0x28, 0x0, 0x2711, @local}, @can, 0x9, 0x0, 0x0, 0x0, 0x7a8, &(0x7f00000000c0)='vlan0\x00', 0x4, 0xe9, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x480, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000001c0)) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:08 executing program 4: socketpair(0x2b, 0x3, 0x800, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:08 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x16e80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0xa77, 0x6, 0x3, 0x1000, r2, 0x5, [], 0x0, r3, 0x4, 0x0, 0x3}, 0x40) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x16b002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@mcast1, 0x30}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x9) 19:44:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000001c0)={0xc029, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000080)={0xfb, 0x3}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x29, 0x1e, 0x7, 0x6, 0xa, 0xfff, 0x0, 0x2}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f00000000c0)=0x6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x9, 0xea8c], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x136a) 19:44:08 executing program 4: socketpair(0x9, 0x5, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:08 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80582, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x7}) 19:44:08 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0xb, 0x3b, 0xb, 0x1f, 0x5, 0x4, 0x2, 0x16d}) r6 = accept4$alg(r5, 0x0, 0x0, 0x800) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000380)={0x0, @ipx={0x4, 0x3dee, 0x1, "ed01eeb04449"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, @xdp={0x2c, 0x0, 0x0, 0x2a}, 0x1000, 0x0, 0x0, 0x0, 0xa33, &(0x7f0000000340)='batadv0\x00', 0xbed, 0x20, 0xf001}) 19:44:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:08 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000100)=0x48bf) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:44:08 executing program 4: socketpair(0x23, 0x4, 0x2c8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:08 executing program 2: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0), 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xffffffff, 0x401, 0x1, 0x2, 0x8], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:08 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0xb, 0x3b, 0xb, 0x1f, 0x5, 0x4, 0x2, 0x16d}) r6 = accept4$alg(r5, 0x0, 0x0, 0x800) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000380)={0x0, @ipx={0x4, 0x3dee, 0x1, "ed01eeb04449"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, @xdp={0x2c, 0x0, 0x0, 0x2a}, 0x1000, 0x0, 0x0, 0x0, 0xa33, &(0x7f0000000340)='batadv0\x00', 0xbed, 0x20, 0xf001}) 19:44:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x56, 0x9, 0x5, 0x81}, {0x400, 0x20, 0x8, 0x3f}, {0x101, 0x1, 0x40, 0x2}]}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x4040, 0x0) 19:44:08 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:08 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000011c0)={'syztnl0\x00', &(0x7f0000001340)=ANY=[@ANYBLOB="67726530000000000000000000000000db9c8c6b59dd1b390bcde352e81637e86ca2dfc556d9dac19b74a8159d32dd56cd0a3c3ad1e16d8fc0e21bfe203587f69e6aae407ba39ddf911fe6824f54adb00ac54d1e776d38237249c1151f3fd5e8dbb3e84a2c1763b9b875e7e516", @ANYRES32=0x0, @ANYBLOB="0080070000000004000000004f05007c00640000062f9078e0000002e000000283038b4454f5410000000000000004ac1e000100000100ac1414aa80000000ac1414aa00000002e000000100000004ac1414aafffffffe7f00000100000002ffffffff000000070a010102000000040000000000000006440c1441ac1414bb0000000244038e0000"]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1, 0x4, &(0x7f0000000080)=@raw=[@exit, @exit, @jmp={0x5, 0x0, 0xc, 0x27b897f6f7985ed8, 0x8, 0x20, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0xa, 0xa, 0x7, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x7fff, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x1f, [], r0, 0x23, r1, 0x8, &(0x7f0000001200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0x4, 0x81, 0x1ff}, 0x10, 0xffffffffffffffff}, 0x78) socketpair(0x6, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r2, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001140)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f00000014c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001440)={0x64, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) 19:44:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) socketpair(0x15, 0x2, 0xb3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x4c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfffe, 0x4}, {0x10, 0xe}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf0}}, @TCA_RATE={0x6, 0x5, {0x60, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x36, @remote, 0x68}}, 0x24) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a2ef505c4ec269e34e7fe65bc1a9d6b5666e1061000023116af6ae95bcbb6d4c36c53571b88c5aed67d3806f3a8910a987294751f246061ed068ed21695fdd1a4883bea2d7f2077949d3c19e7d40a7565375f568ba38c52876077f1969e16dc1cacab55497be4c6f4cd3e209d4292375453a7c15f32a60dece93", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080003000a010100060005004e200000060005004e21000014000400fe8800000000000000000000000001011400040000000000000000000000ffff7f000001080003000400000038000180060005004e210000060005004e2300000500020008000000080003000a01010114000400fc0200000000000000000000000000014800018008000300ac1414aa060005004e220000050002000900000005000200050000000500020001000000050002000400000014000400fe8000000000000000000000000000bb0800030008000000080002000000000008000300000000000800030002000000"], 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x890) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000)=0x20f0, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:09 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xab29, 0x8000}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040806) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x276bab8, 0x2, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x751200, 0x0) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0xb, 0x3b, 0xb, 0x1f, 0x5, 0x4, 0x2, 0x16d}) r6 = accept4$alg(r5, 0x0, 0x0, 0x800) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000380)={0x0, @ipx={0x4, 0x3dee, 0x1, "ed01eeb04449"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000}, @xdp={0x2c, 0x0, 0x0, 0x2a}, 0x1000, 0x0, 0x0, 0x0, 0xa33, &(0x7f0000000340)='batadv0\x00', 0xbed, 0x20, 0xf001}) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0xc, 0xe}, {0x6, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000300)={0x8, {{0xa, 0x4e22, 0x3, @empty}}, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x36}, 0x11b}}}, 0x108) 19:44:09 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xc6641, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$pptp(r0, &(0x7f0000000400)={0x18, 0x2, {0x2, @private}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 19:44:09 executing program 4: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)="f2034ce1ce86d62776d7590d288440f826d8dd6987b8af492069d1e0f1f57bd164a97f10ec9f6480a015dd331c59462c3b3f241f71bf2f974817086a72d868dcc6a06b35aa62c1487f41573374d7ba5034a40220005d304f35b8bd45d1c2c50cc83e657dbd5d8e484c103d2fb5fa3117fd1b268a1b7e68", 0x77) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0xb, 0x3b, 0xb, 0x1f, 0x5, 0x4, 0x2, 0x16d}) accept4$alg(r5, 0x0, 0x0, 0x800) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x36, 0x27, 0xe, 0xe, 0x0, 0x6, 0x3, 0xc5}) 19:44:09 executing program 1: socketpair(0x26, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000080)=""/102400, 0x19000, 0x0, 0x0, 0x0) 19:44:09 executing program 2: recvfrom$packet(0xffffffffffffffff, &(0x7f00000001c0)=""/137, 0x89, 0x10000, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\n ', @ANYRES16=0x0, @ANYBLOB="040029bd7000fedbdf250200000006000a004e240000040005000400050008000800ac1e01011400090000000000000000000000ffff7f00000106000a004e230000050002000200000008000b00", @ANYRES32=0x0, @ANYBLOB="14000900fc020000000000000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000005) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={@private2={0xfc, 0x2, [], 0x1}, 0x76}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="6a99e5eab08f4de7b135fcca3871cce2fd21c09de0fb3279d30968e8eda14312ebc3da21c20ee4022a23f7a40ac89a8e744a2a7484a6ba18", 0x38, 0x801, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[], 0x39}}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000340)={0x5, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0xff, 0x24}) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0xc, 0xe}, {0x6, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000300)={0x8, {{0xa, 0x4e22, 0x3, @empty}}, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x36}, 0x11b}}}, 0x108) 19:44:09 executing program 4: ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0xb, 0x3b, 0xb, 0x1f, 0x5, 0x4, 0x2, 0x16d}) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x202440, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:09 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x2c, 0x1f, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic={0x8, 0xe6, "b59afefed8747625c1cd2f85174051f86ec2b54cd3522b2ff4facb28db5eb169ebf22fbb055ed2cd3bf5bb06b608382ecf3679085d56f977f2cfd4a72904c32c6fb52f80355fdcbcb5db49e8f66ca9b36dd1b6f2a044278ad21050e60c8815aa12267901b0d8228badd936c70a2ad17a51d17801a7e59129e2b9d39160b953998e897c4a588583f7c84c1b704c3c50eb35fe5bf1a2040ea3d11f9313312a6bfb137d3abca4adb15be5ec4f1c197550d33b46ba36f5f6958a6b0d966b6fbbf687364c6cf2ab6c518858ca0888313cfb8f796c854c26ee8983a56a97bb0f534b8712e63e0f29d1"}, @ra={0x5, 0x2, 0x9}]}, 0x108) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0xc, 0xe}, {0x6, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000300)={0x8, {{0xa, 0x4e22, 0x3, @empty}}, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x36}, 0x11b}}}, 0x108) 19:44:09 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) 19:44:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x3b}, 0x8) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x2, 0x8}, {0xffe0, 0xffff}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0xc, 0xe}, {0x6, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) 19:44:09 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) getpeername$packet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x14) socket$nl_generic(0x10, 0x3, 0x10) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) 19:44:09 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {0xa, 0xc}, {0x6, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_pfifo_fast={0xf, 0x1, 'pfifo_fast\x00'}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x4c}}, 0x80) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000280)="03f70a71c61614503ab67d1e661604aeda2865e7f5b7663b9072a95b43812073c156e488cb18025f10e56d0e367a6e18857f21549043590c3a1a5b43dcf6298c10caef0ac7feaac0a3cfcea629fee0d61a741883235df41e880f393f01d8ef494dc65ceca4cde759db8ab2761851c3a81047d62bb2e8689ad3fcc4a575ea102d9bac769cd3219b27dbdb8c8972", 0x8d, 0x800c800, &(0x7f0000000080)={0x11, 0x6, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@private2}, &(0x7f0000000140)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x40, 0xd}) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0xc, 0xe}, {0x6, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040880) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x10}) 19:44:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x2, 0xa, [], [@hao={0xc9, 0x10, @empty}, @generic={0x0, 0x3c, "27743765d534cfd00279e106a3ac0ebc90a709ae3b776cd2a3202fd92a148da773571f90b9cf69f6b4ae578aa936f5e6cae92e2227a994d5916242e1"}]}, 0x58) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x41, 0x0, 0x0) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x5, 0xffffffff, 0xedac, 0x4], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:09 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) getsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040), &(0x7f0000000080)=0x4) accept$alg(r1, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0xc00) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c, 0xc0c00) getsockname$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) getsockname$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x1, 0x0, 0x7}, {0x8000, 0x20, 0xbc, 0x7}, {0x7, 0x5, 0x6, 0x2}, {0x3, 0x8, 0x8, 0x8a4}, {0x9, 0x81, 0x0, 0xffff}, {0x965, 0x42, 0x6, 0x3}]}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0xc, 0xe}, {0x6, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040880) 19:44:09 executing program 1: socketpair(0x1e, 0x4, 0x1000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:09 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x6, 0x40, 0x80, 0x7f}, {0x0, 0x9, 0x72, 0x5}]}, 0x10) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x4, 0x1, 0x0, 0xf89}, {0x4, 0x7, 0x1, 0xb5ff}, {0x6, 0x9, 0xd1}, {0x7ff, 0x0, 0x40, 0xe039}, {0x6, 0x0, 0x8, 0x4}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x800) 19:44:09 executing program 2: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000440)=0x80) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x6ea2cd119df6af6c}, 0x4000800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000fbdbdf25020000002c00018014080400fe8000000000000000000000000000bb14000400ff010000000000000000000000000001080002000100000008000300080000000800020001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x100, 0x6, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x991d50fbca58d8be}, 0x8000) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x20102, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x6}) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:09 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x5, 0x0, 0x8001, 0x81], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) sendto$packet(r1, &(0x7f0000000e40)="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", 0xfc, 0x810, &(0x7f0000000f40)={0x11, 0xf7, 0x0, 0x1, 0x2}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@newtclass={0xc6c, 0x28, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff9}, {0x0, 0xc}, {0x5, 0x9}}, [@tclass_kind_options=@c_red={0x8, 0x1, 'red\x00'}, @TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @tclass_kind_options=@c_netem={0xa, 0x1, 'netem\x00'}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0xc1c, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x2, 0x1, 0x1, 0x3, 0xffff, 0xffff, 0x7ff, 0x3, 0x5, 0x0, 0x1, 0x8, 0x40, 0x7, 0x7fff, 0x10001, 0x0, 0x6, 0x5, 0x80000001, 0x101, 0x0, 0x0, 0x10000, 0x8, 0x7, 0x1, 0x80000001, 0x9, 0xf85, 0x2, 0x6, 0xfffffff7, 0x6, 0x8, 0x8001, 0xfffffffa, 0x2, 0x7fff, 0x1000, 0x6, 0xff, 0x2, 0x8, 0x7, 0xffffffff, 0x40, 0x6, 0x8000, 0x1, 0x6000000, 0x1ff, 0x8, 0x401, 0x3, 0x3f, 0x3, 0x1f, 0x3ff, 0x5, 0xfff, 0x0, 0x418, 0x400, 0x80, 0x1ff8, 0x421, 0x4, 0x100, 0x9, 0x7, 0xc97, 0x7, 0x1f, 0x8001, 0x9, 0x6, 0x7fdffeab, 0x6, 0x0, 0x2, 0x25, 0x4, 0x10001, 0x5, 0x4, 0xb3dc, 0x7f, 0x0, 0x400000, 0x3, 0x100, 0x9367, 0x80000000, 0x1, 0x7, 0x400, 0xffffffe1, 0x4, 0x8, 0x7, 0x8, 0x3, 0x7fffffff, 0x31, 0x9, 0x1000, 0xf89, 0x43, 0x401, 0x3, 0x2, 0x80, 0x0, 0x0, 0x3, 0x3bba, 0x800, 0xfffffff8, 0x7f, 0x9, 0x2073, 0x1, 0xfffffffa, 0x8001, 0x3, 0x101, 0x18df, 0x3f, 0x0, 0x1, 0x3f, 0x2, 0x9, 0x100, 0x2000400, 0x80000000, 0xe35, 0x1, 0x7fffffff, 0x8, 0x3054, 0x4, 0x4, 0xaa, 0x5, 0x8a, 0x6c, 0x3, 0x0, 0x8, 0x0, 0x1, 0x6590, 0x4, 0x7, 0x2, 0x0, 0x4, 0xfffff801, 0x800, 0x5, 0x8, 0x6, 0x3, 0x6, 0x18, 0x1, 0x0, 0x1, 0x1cd, 0xca, 0x1, 0x9, 0x1, 0x9, 0x9, 0xfffff55d, 0xfad, 0x100, 0xe1, 0x80000001, 0xdd6, 0x1ff, 0x2e9b, 0xb0, 0x65, 0x2, 0x6, 0x1, 0x1, 0x100, 0x7ff, 0x8, 0x9, 0x3, 0x101, 0xff800000, 0x2, 0x7ff, 0x7ff, 0x7f, 0x8, 0x0, 0x10000000, 0x9, 0x9, 0x14, 0xe742, 0xfffffff9, 0x7, 0x2, 0x0, 0x3, 0x526, 0x9, 0xffff, 0x800, 0x5, 0x0, 0x4b, 0x10001, 0x0, 0x5, 0xa8f, 0x7, 0x1f, 0x9, 0x3, 0x8, 0x50e, 0x7, 0xffffffff, 0x6, 0x2, 0x81, 0x9, 0x8000, 0x80, 0x40, 0x0, 0x6, 0x7, 0x5, 0x0, 0x400, 0xffffffff, 0x6, 0x0, 0x40, 0x200, 0xa8f, 0x6, 0x8, 0xffffffff]}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x2, 0x8, 0x3, 0x3, 0x1a, 0x8, 0x513, 0xfffffff9, 0x9, 0x7fffffff, 0x10001, 0x80000001, 0xfc9, 0xfffffd59, 0x4, 0x1, 0x401, 0xfffffffa, 0x20, 0x2, 0x2, 0x1, 0xffffffff, 0x15, 0x8001, 0x3, 0xfffffffc, 0x8, 0x10000, 0x7fff, 0x7f, 0x3, 0xb06c, 0x5, 0x8, 0xe6, 0x40, 0x1, 0x38, 0x0, 0xb, 0x40000000, 0x6, 0xd06, 0x4, 0xdc1, 0x1000, 0x1, 0x6, 0x0, 0x400, 0x3, 0x1, 0xd5c7, 0x4, 0x0, 0x2, 0x8, 0x80000001, 0xc00000, 0x1, 0x800, 0x966a, 0x9, 0x5, 0x7fff, 0x0, 0x4, 0x1, 0xfffffffa, 0x8000, 0x3, 0x3, 0x5, 0x43, 0x4, 0x0, 0x8, 0x10001, 0x1, 0x4e, 0x7fff, 0x7ff, 0x7, 0x6, 0x0, 0x7183, 0x1e91, 0x1, 0x7, 0x5, 0x4, 0xf02, 0xfffffffe, 0x2, 0x2, 0x101, 0x3, 0x9, 0x7, 0x4, 0x9a, 0x28a, 0x7ff, 0x1, 0x5, 0x0, 0x9, 0x9, 0x1, 0x0, 0x3ff, 0x7, 0xffffffff, 0x10001, 0x3ff, 0x0, 0x1, 0x14, 0x2, 0xffff, 0x9, 0xeba7, 0x80, 0x5, 0xffff, 0x7, 0x4, 0x0, 0x6, 0x7fffffff, 0xffffffa1, 0xfffffffc, 0xffffffff, 0x8, 0x2575, 0x401, 0x5, 0x8, 0x6, 0x39, 0x7, 0xbf4, 0x4, 0x7, 0x10001, 0x8, 0xffff, 0x0, 0x9cd3, 0x9, 0x9, 0x7ff, 0x803, 0x3f, 0x5, 0xe41, 0xba4, 0x89c, 0x0, 0x8, 0x3, 0x9, 0x6cab, 0x719d7dce, 0xb47e, 0x8, 0x3, 0x2, 0x3, 0xb2, 0x3, 0x5, 0x0, 0xabce, 0x9, 0x81, 0x9, 0xb6, 0x8c, 0x7e, 0x7, 0x4, 0x4, 0x200, 0x2, 0x80, 0x5, 0x2, 0x473f, 0x40, 0x5a94, 0x4, 0x2, 0x0, 0x101, 0x6, 0x9, 0x5, 0x6, 0x6, 0x900, 0x2, 0x2, 0x6, 0xffffffff, 0x55, 0xb9, 0x40, 0x626, 0x40000000, 0x52, 0x0, 0x6, 0x4, 0x800, 0x1, 0x7fff, 0x7, 0x5, 0x5, 0x5, 0xffffffff, 0x5, 0x65bde7f8, 0xed, 0x1f, 0x1ff, 0x9, 0x400, 0x100, 0x1, 0x1, 0x8, 0x9, 0x1, 0x9, 0x3a0cbbd4, 0x2, 0x5, 0x1, 0xffff0000, 0x4, 0x1, 0x4, 0x4, 0xffff, 0x1, 0xffffffff, 0x7, 0x3, 0xffff, 0x1f, 0x9, 0x9]}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_RTAB={0x404, 0x4, [0x401, 0x2, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x3, 0x338, 0x5, 0x50000000, 0x5, 0x5, 0xffff, 0x2, 0x9, 0x4, 0x9, 0x1, 0x8000, 0xfff, 0xffff, 0x3, 0x50df, 0x2, 0xfffffff7, 0xfffffff9, 0x48c, 0x240000, 0xfff, 0x2, 0x6, 0x400, 0x10000, 0x800, 0x400, 0xcc000000, 0x8, 0x0, 0x3, 0x2, 0x6, 0x9b, 0x4, 0x20, 0x1, 0x7, 0x80, 0x4, 0x0, 0x0, 0x101, 0x0, 0x2, 0x8, 0xff, 0x8, 0xa98, 0x20, 0x7fff, 0xf4, 0x4b9, 0x7, 0x0, 0x3, 0x6, 0x1, 0xfff, 0x4, 0xfff, 0x7, 0x2fa, 0x2, 0x7fff, 0xfffffffc, 0x9, 0x8, 0x20, 0x0, 0x857, 0x125, 0x1, 0x2b9, 0x7, 0x4, 0xffff, 0x1, 0x24b8, 0x7, 0x7, 0x5, 0x3, 0x8, 0x8, 0x7, 0x8000, 0x97b, 0x0, 0x28, 0x9, 0x40, 0x6, 0x40bb44c0, 0x0, 0xffffffff, 0x9, 0x5, 0xaf, 0x4, 0x1f, 0x3f, 0x5, 0x7, 0x800, 0x3, 0x9, 0x9, 0x5, 0x1, 0x4596a853, 0x7, 0x5, 0x1, 0x80000000, 0x80000001, 0x4, 0x5, 0x2, 0xffffffaa, 0x7, 0x8, 0x8, 0x2, 0x81, 0x1216, 0x2, 0x7, 0xfffff9f2, 0x9, 0x100, 0x8, 0x7, 0x4, 0x2, 0x4, 0x2, 0xff, 0xfffffffd, 0xfff, 0xfffffffc, 0x6579, 0x3f, 0x10000, 0xe9d1, 0xbb, 0x7, 0x5, 0x81, 0x0, 0x5, 0x3ff, 0x1, 0x7ff, 0x9, 0xffff, 0x8, 0x8, 0x2, 0x1, 0xfffffff9, 0x8, 0x102, 0x5, 0x1, 0x9, 0x1, 0x2, 0xfb4, 0x3, 0x7f, 0x7, 0x8, 0x6, 0xcbe8, 0x7, 0x800, 0x3, 0x8, 0x401, 0x3, 0x4, 0x77, 0xfffffff9, 0xf5de, 0x38f9, 0x1ff, 0x1, 0x2, 0x1000, 0x3ff, 0x0, 0x9, 0xa4e, 0x1, 0x6, 0x6, 0x10000, 0x7, 0xfffffc21, 0x9, 0x8, 0x7f, 0x7, 0xee02, 0x3, 0x6, 0x7, 0x5, 0x3, 0x3, 0x400, 0x1, 0x16f0be23, 0x7, 0x80000000, 0x100, 0xfff, 0x7, 0xfffff99e, 0x8, 0x1, 0x101, 0x9, 0x0, 0x5, 0x1, 0x6, 0x3ff, 0x9, 0xff, 0x2, 0x0, 0xe0000, 0xd138, 0x0, 0x10001, 0x9, 0x2, 0x0, 0x1, 0x7, 0x10000, 0xa, 0x9, 0x1f]}]}}, @tclass_kind_options=@c_sfb={0x8, 0x1, 'sfb\x00'}]}, 0xc6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x40000000) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:09 executing program 4: socketpair(0x25, 0x3, 0x8ab3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x8b9f, {{0xa, 0x4e22, 0x119, @empty, 0x224}}, {{0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, [], 0x1}}}}, 0x108) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:09 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:09 executing program 1: socketpair(0x23, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="afab94cc1a0b71500313bfa4c94dd34e9ae49c998cf018680be1d2fcbf76ec95fb93006c4f0e98ae472f7ba97b6fdf3e01bc01cdd124038815021044df684d78cd7ca3d639a0869a382da90f82a0968e0370ba8f51fdaaac6901c5c8d80cb2618c5711448bdc4ca92b667c7b9d7f520c520589cc67085f2596198dc62a6b800e978c0e9906f8c3740e8d554dd87b79a11355bc4278fcd79af2ebfdad02ecf2251b95af01c69bf577943d7ab88a3412a05c77fe", 0xb3}], 0x1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1060, 0x11}, 0x40) 19:44:09 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x27a0, 0x31}) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) 19:44:09 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2c0, 0x14, 0x200, 0x70bd2d, 0x25dfdbfb, {0x15, 0xcc}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "1a153f03ffef8128226bd581b805841c74c4b6f94e6914cd399c94723b99dceca1fa8da8f96b75589b206a8a04434d0e32786b243e6655441163bad8814f62bd842c2c1c2359d59eb610162d57e516a62ad3ab28db61eb1fbab1f6beb888a333c6aa3e222729eb07edd7532bec76b0c41f7343c49079a062530280b0c28cfba4201e9f5d398179e52e054e1357fe58c3e457cd3ea87baf114fe27bf1d66360b35bccfb9e6647f28392a654092ca977301fa6011968c734254477af52e35122fb51c7cec68d78e85bd81add018399d2624350630d5e4a5b2a7c3b4c4b65c44f271495695a8cfc2eaf2b49f9fdd37ce8faee6c9c15b72c08f34d"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "fbbfb23c6bac1287d5358c26bbbe399fac164612e73e0b8b882af6e8fa7c7c67d57ee5920edf9daccabba817a51120c3c0e9e348686bf7356ddd4e9d493315e5089d47446bb1669eff95e2756c3457d17ff43f4e1edfc4f252043abba5f0f56c26376bf04af1a85e30186e731d7cb8ae8190a9af1487cdd42fe3be1cd3d553a9eb7c19566a8b31506cc0d854a9db711f9ab426480b0dad1ea765fa6bc12853af4f7767a9"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socketpair(0x563b516805f4d79e, 0x6, 0xffffffc1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x41c140, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x611000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:09 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x101000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6], 0x1, 0x0, 0x0, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x88000, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@private1, @local, @local, 0x4, 0xa78d, 0xfff9, 0x400, 0x1, 0x80500000}) r2 = socket$inet6(0xa, 0x80000, 0x7fffffff) accept4$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x80800) 19:44:09 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}}}, &(0x7f0000000280)=0xe8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @ldst={0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffffffffff2}, @ldst={0x2, 0x2, 0x1, 0x9, 0x2, 0x6, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x5, &(0x7f0000000100)=""/5, 0x41000, 0x1, [], r1, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x6, 0x1, 0x6}, 0x10, r2}, 0x78) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:09 executing program 4: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) getsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) sendto$packet(r1, &(0x7f00000000c0)="d888bceaa823a2af18c48fc26ca8d3339da78464dba949db3f2fb67187ee620acf5e18168d7c69afa17844a14e93c71568eccb62031c4cfe5fb5771ef11dbc3b2875b8c82061554dfc3456b0857744cc3f0fa6b584cf76b00036c67bb98189032162ed574aae563375f3af554ec2d30e97dcb80c9e971f9b11f414ecf03a47b3ebb6802251af0819f9df7eae776cb5eda50d23369a57069aa9cb8175e277929c0f205611bd359a74c8ccb72b91b35848b72df1a0e0855c16d1f29e45a3", 0xbd, 0x4000800, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x1, 0xf7, 0x6, @dev={[], 0x19}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0x5, 0x1fc1, {{0x17, 0x4, 0x0, 0x1, 0x5c, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe7, 0x1, 0x7, [{@local, 0x66}, {@rand_addr=0x64010100, 0x7f}, {@broadcast}]}, @rr={0x7, 0xf, 0xf8, [@multicast1, @broadcast, @private=0xa010102]}, @noop, @generic={0x88, 0x4, "3ac4"}, @noop, @timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0x2, [{@broadcast, 0x8}, {@remote, 0xffffffff}]}]}}}}}) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42000100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 19:44:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001640)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000001740)=0xe8) sendmsg$inet6(r0, &(0x7f0000001900)={&(0x7f0000000240)={0xa, 0x4e22, 0x6, @remote, 0x9}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000280)="88fef12c46fff6c59f65e1460828bed36f14d1f2b2cdbe200c483091955f36f99740f24e3c015346a52380a9537547ad14fe8723a001ef519e420d314c0d58328e22d69cef3efcd248e47bc9117e4841cbd6d2399cd7821bd383c451d37d3f179373ba91256f096804ec625227cafb8691e9af2fbbf5f78bfa707a206e", 0x7d}, {&(0x7f0000000300)="62ce73011a91604880a0b319e0c99d031d84ce0bce351e", 0x17}, {&(0x7f0000000340)="8239cc30f90c73c405f09f469a", 0xd}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="5e71726dd899e011d6a71b6a7f667701151e9f32fddcac37bf5b47b348455aab1a0dd932028f4689c08cc27cec62ce70b086e2ac3c616c8b7ed66a578b7b4e0b1c93f8ac4e8b96ac42aad6a7b25b5e7826", 0x51}, {&(0x7f0000001400)="7ae812b5da348e4b816595cc05c1ee8b7460f8b73e51df45828bf75eecedd396b5aa6a2e11c1cb3f4181fb8bf01650bc63da292c34f47af3e7fde484a962307af86e88386df91cb9241e347de65fcbb0016b4754045a5ce03757600e12cf664b10faa02ca1d0b5095a05e9773c590101a8b14456ab87502d264326d65f4743a842800fc280dc8ff9c4da94140182eda1966b5ff7cce2e6d015de11dd3fdc8032916dd8bdde0f0fe77378330d63c1027eb117dbebe384186ed0f2593aaf5d814aa9bf0a29812604c3cc89561ac5f7871131d8c9baa74f337e8ae8b662", 0xdc}, {&(0x7f0000001500)="419863e66d30c40c32a52e2bb9c2cdc52959da0ab19c610693769556eb6f5867c8128716dcde0cc1327185cc6c8ae7ad95e75f6bca15cd87a232833a6fc04028f34cbb1fd9ba704fc2140fa36713242a4e77194affb254126ad9748c4bc484b564b816c45f5ca8cd0d48f8607c02ebd8dcfd21e12940efb18b1494ad06ec3f1c8f9e0dff3ea7286859e78ae2acae67724c", 0x91}], 0x7, &(0x7f0000001780)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x800000}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x84, 0x18, [], [@calipso={0x7, 0x38, {0x3, 0xc, 0x3, 0x4, [0x7, 0x48, 0x8, 0xfff, 0x7, 0x1]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x81, 0x3ff, [0x5, 0x90d1]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x800, [0x0, 0x9]}}, @enc_lim={0x4, 0x1, 0x71}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x816c, [0x7, 0x9ab, 0x7164, 0x5, 0x0, 0x8000, 0x80000001]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x1, 0x0}, r1}}}], 0x168}, 0x8814) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xa01, 0x0) sendto$rxrpc(r3, &(0x7f0000000100)="afaa4394c1df01737cab10ab7f269419ef0295c2cb7a6f30d63ffd7349509e2f5315dcd1e2e8c86188f2b59fd0fa29cfa97fa62da2b1458bc8446f1992482c2d70dd085796a64fbd7221bfbb29f234308712e0b22451f9bb14a8901a46a58a19cbf477399dde40a411d4f9917b9d770ef24e614df358a2d5352282153d1c2bf48eabba42eacbce4fbf1578eba97df3afcfe0e8d6a7b66b75b74a75f4f1fac32954ee9b1b7bf907a014c6e8acc7b1102a7effb751889bbfd54e0c7d95592d257fee17512a7f77393669675122b6627f79c2a6b2d8c7", 0xd5, 0xc081, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 19:44:09 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:09 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 19:44:09 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000080)="0aa111d873468ed5c19d6ca629a114810ed9803daab56aa5faa3265fa2ec73420ae61d65438f7daa7b8b178fd4b7d5482ef552d300feb269ac8c3be56e20231e05e9dab613f0d0e9a54c3d8c18d5ea8d68519f31a346c95d53143c05840f114c20066e3a933b0e1cb93356b3aa8f4adc7ce34403a7dc596811d6c9a2d348c6e1afbe03e569e5ade3e6a72ad972199c86269677206c3d369b6711e35ab8df3ad10c6548f1487e7f009ef16dcf5a199da11644499cfee745584bf7b8170c64b8fc3aad6bac840d67439d223b799039a9d757e1b816ee5d27093c15e032", 0xdc) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:10 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x1, 0x22}) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1, 0x0, 0x26, 0x9}, {0x5, 0xc7, 0x10, 0x8}, {0x1ff, 0x81, 0x3e, 0x81}, {0x6e, 0x0, 0x8, 0x1000}, {0x0, 0x1, 0xac, 0x101}, {0xfffc, 0xff, 0x0, 0x1}, {0x0, 0x4, 0x2, 0xe96f}]}, 0x10) 19:44:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x2}) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x40) 19:44:10 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x4, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}], &(0x7f0000000080)='GPL\x00', 0x10001, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f0000001100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0xf, 0x7, 0x1}, 0x10}, 0x78) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:10 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x341200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000080)=""/16, 0x10, 0x40, 0x0, 0x0) 19:44:10 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x100800) 19:44:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10440, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0xffffffffffffff80, 0x20, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xfffffffffffffffd) 19:44:10 executing program 4: socketpair(0x1e, 0x2, 0x10002, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x48, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) r5 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x1c0800) recvfrom$packet(r5, 0x0, 0x0, 0x40012040, 0x0, 0xfffffffffffffeb3) 19:44:10 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x40100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0)='freezer.state\x00', 0x2, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000100)) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x5, 0x7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x800) 19:44:10 executing program 1: socketpair(0xb, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:10 executing program 4: socketpair(0x2b, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:10 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 1: ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)=0x8) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x424, 0x3f4, 0x800, 0x70bd2b, 0x25dfdbfd, {0x4, 0x0, 0x3, [0x80, 0xba9, 0x9, 0x1, 0x4, 0xfffffffb, 0x1725, 0x3, 0x1, 0x5, 0x30, 0x2, 0x4, 0x7, 0x8, 0x8, 0x10001, 0xffffdd91, 0x0, 0xaad, 0x0, 0x7ff, 0x4, 0x10001, 0x1ff, 0x0, 0x6, 0x1, 0x3, 0xfffffffc, 0x2, 0x401, 0x1000, 0x5, 0x6, 0x10001, 0x8, 0x80, 0x9, 0x1, 0x1f, 0x3, 0x4, 0x3, 0x8, 0xfffffffc, 0x36af, 0x5, 0x9, 0x10001, 0xfffffff7, 0x4, 0xac2, 0xff, 0x3, 0x80000001, 0x7fff, 0x0, 0x80000001, 0xb8, 0x4, 0x2, 0x7fff, 0xcf1], [0x6, 0x2, 0x10001, 0x94c, 0x2, 0x14, 0x2, 0x8, 0x3, 0x0, 0x54, 0xffffff01, 0x2d58, 0x6, 0xe3f, 0x5, 0x7, 0x0, 0x6, 0x5b, 0xb8a, 0xfffffeff, 0x3, 0xd924, 0x4, 0xffffff62, 0x1000000, 0x10000, 0x6, 0x8, 0x6f2, 0x7fffffff, 0x7, 0xff, 0x7, 0x0, 0x2, 0xfffffffe, 0xbfb87bf2, 0x6, 0x10000, 0x0, 0x6, 0xda8, 0xff, 0x4, 0x7f, 0x7fff, 0xd4, 0x7fff, 0x10001, 0x3, 0x4, 0x8, 0xc21, 0x4, 0x0, 0x9, 0xff, 0x5, 0x1, 0xf0, 0x800, 0x9], [0x5, 0x9, 0x100, 0x1, 0xef74, 0x101, 0xff, 0x8000, 0x3, 0x6, 0x7fffffff, 0x5, 0xc36, 0xffffff7f, 0x1ff4, 0x5, 0x3, 0x3f, 0x4, 0xffff, 0x3ff, 0x2, 0x1, 0xbc14, 0x4a9, 0x3ff, 0x6, 0x1000, 0x0, 0x1, 0x4, 0x2, 0x658, 0x7, 0x3, 0x7, 0x3, 0x1400000, 0x1, 0x7, 0x8000, 0xb3300, 0x1c73, 0xfffffffa, 0x8b, 0xff, 0x5f40, 0xc, 0xfffffffd, 0x8, 0x9753, 0x6, 0x100, 0x5, 0x8, 0x0, 0x100, 0x8f42, 0x2, 0x1, 0x6, 0x8, 0x100, 0x6], [0xfffff001, 0x8000, 0x4, 0xbe75, 0x5, 0x7fffffff, 0xa069, 0x800, 0x9, 0x1, 0x58000000, 0x400, 0x7e, 0x3f, 0x8000, 0x1, 0xfffff800, 0x6, 0x5, 0x401, 0x5, 0xe8, 0x64f3, 0x7fff, 0x20, 0x5, 0x9, 0x9, 0x2, 0x1, 0x8001, 0x7fff, 0x8, 0x5, 0x10001, 0xa4b, 0x2, 0x0, 0x0, 0x67, 0xc5, 0x1000, 0x9, 0x3ff, 0x6, 0x6, 0x3ff, 0xfffff801, 0xff800000, 0x3, 0xff, 0x2, 0x7, 0x3af, 0x4, 0x4, 0xffff, 0x1, 0x3, 0x4, 0x5, 0x8, 0x40, 0x81], 0x3, ['%+\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x800}, 0xc0) recvfrom$packet(r0, &(0x7f0000000780)=""/102400, 0x19000, 0x40, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) getsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:10 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 2: ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0xf4102, 0x0) read$alg(r1, &(0x7f0000000140)=""/55, 0x37) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xe25a}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000002c0)={0x34, 0x0, &(0x7f00000004c0)}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x44c, 0x3f4, 0x300, 0x70bd2d, 0x25dfdbfb, {0xcc7107d327bfc6ea, 0x1, 0x3b, [0x3, 0x4, 0x8a, 0x8, 0x0, 0x13, 0x6, 0x0, 0x6, 0x0, 0x1, 0x7, 0x4, 0x4, 0x2723, 0xfff, 0x1c25, 0x1, 0x1, 0x0, 0xfff, 0x0, 0x3ff, 0x1, 0xd4, 0x95f7, 0xb9, 0x3, 0xae, 0x9, 0xa79, 0x1, 0x5e, 0xfffffff9, 0x3, 0x7d3d, 0x10000, 0xdf18d3c9, 0xfffffffc, 0x6, 0x6, 0x880d, 0xffffffff, 0x5, 0x8, 0x10000, 0x7f, 0x81, 0x8f1, 0x200, 0x6, 0x1f, 0x9, 0x3, 0x2, 0x5, 0x6, 0x1, 0x5, 0x5, 0x7, 0x2, 0x6, 0x7], [0x800, 0x934a, 0x6, 0x40, 0x20, 0x8000, 0x3f, 0x4, 0x0, 0x7, 0x1596, 0x80000000, 0x40, 0x2, 0xfffffffd, 0x1, 0x4, 0x2, 0x1ff, 0x80, 0x1, 0x7, 0x4, 0x61f69fbf, 0x9, 0x7f, 0x6, 0x3ff, 0x8, 0xffffffe0, 0x7fff, 0x73, 0xe3ba, 0xffffff00, 0xfffffff9, 0x100, 0x8, 0x1, 0xed6f, 0xfffffffb, 0x7fffffff, 0xffff7fff, 0x5, 0x5, 0x3, 0x1ff, 0xfffff000, 0xe1d, 0x7f, 0x1f, 0x40, 0xfff, 0x8, 0x7, 0x6, 0x0, 0xfffffff9, 0x1f, 0x1, 0x7ff, 0x1, 0x1, 0x9, 0x400], [0xa5, 0x0, 0x1, 0xd469, 0x2, 0xffff, 0xfffffffa, 0x4, 0x48, 0x800, 0x8, 0x100, 0x3, 0xe6, 0x4, 0xd729, 0x8, 0xffffffff, 0x8, 0x10000, 0x7ff, 0x3, 0x40, 0x9, 0x5, 0x8, 0x4, 0x800, 0xff, 0x2, 0x6, 0x0, 0x20, 0x93, 0x3, 0x4, 0x400, 0x7, 0x1, 0x6, 0x7, 0x8, 0xa214, 0xfff, 0x2, 0x40, 0xebcc, 0x2, 0x1000, 0x0, 0x7ff, 0x29c5, 0x9, 0x3, 0x0, 0x9, 0x401, 0x3, 0x0, 0x3, 0x9, 0x2, 0x10001, 0x3], [0x6, 0x10, 0x8, 0x5, 0xfe7, 0xfffff972, 0xffffa981, 0x1, 0x7, 0x6, 0xffff, 0x7fff, 0x6, 0x1f, 0x6, 0x21c8, 0xb59, 0x2, 0x7, 0x0, 0xf6, 0x5, 0x5b0, 0x6, 0x2, 0xffff0001, 0x80000001, 0x9, 0x49c5, 0x10000, 0x9, 0x9, 0x4, 0x100, 0x3, 0x7, 0x8c7, 0x0, 0x0, 0x3, 0x2, 0x89e, 0xda1, 0x8, 0x1, 0x0, 0x0, 0x800, 0x20, 0x80, 0x1000, 0xe4a2, 0x4000000, 0x6, 0x5, 0x80000001, 0x3, 0x2, 0x0, 0xffffffff, 0xfffffff9, 0x7, 0x1, 0x8], 0x2b, ['/proc/asound/seq/clients\x00', '/proc/sysvipc/sem\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x4800}, 0x1) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000340)=""/82, &(0x7f00000003c0)=0x52) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x5, 0x0, 0x5, 0xa4], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000280)={0x8, &(0x7f0000000240)=[{0x8, 0x3f, 0x23, 0x2}, {0x8001, 0xe1, 0x1f, 0x1ff}, {0x0, 0x9, 0xe5, 0x7}, {0x8001, 0x2, 0x0, 0x1}, {0xa46e, 0x1, 0x3f, 0x75f4c789}, {0x4, 0x1, 0x3, 0x3ba6}, {0x1ff, 0xe0, 0x1, 0x7}, {0x3000, 0x9, 0xe0}]}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000400)={0x0, 0x38, 0x1}) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000480)={0x34, 0x0, &(0x7f0000000440)}) 19:44:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x137c, 0x14, 0x10, 0x70bd26, 0x25dfdbfc, {0x23, 0x81}, [@INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "fae9a2fb2b7ae6e59625bd74844c89d39bdcc72a7402f357cfe18a92f1677694b08fe8e02a596c66f43c64f44369ff693edb497657d98fbb9d7996a0ab00caf57b06641ea1839fc29ca1e7f44c7e9c4a9a2793ed7ef3b15f22535a7bc8c6d0b07ab0c23b0d54b2125c75115bd1c8b6cd0a20071ae1f85e1f90a4e9544a8174d0c1610d4239583568a30fc04c78e167394579372a6f955511c49a8385292f5f4234a6d295f6b705ca74b13a"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a137eaba22c5508a8dd03e2181d4517c0947081109657843d9d9eb51b005b09899f6440e9b029bc465cc96f860f819584c7e54d8c07de4dd337afbd45cf2c6f271b72d612947474a9caa7bb2b2cee7a61085c0e48a55b7527ba88534b4ced50d6a2b3f08afd0222aa5f965"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "912834d13e12e8083ee55ab7d4b72038db1c2d8376d86df9ccafd3ac2f8871a0a18811ab5c189ae06e799a2e707e84f545b72818c780c714ba0dc801f92c4613cf250ffb874d36a39bad0b5f1b8d2b10bebd39eb507069d2ee4c569cc71c8d65689cef1ec7b0b5721652a83c3d29c74a9162a7438eb1a8761f05816d5a228e0cd5685fc142cdaead78835bdca3bf9f71450622a8c109c7c021137a5d47d15b710259fa685c8ac999f1720eed6da728b5fac8cea4d65f143e8a2ab59ad9a739f9269d2b050ef364c25e5d76f3ed85203d3aa523c7e95210205fad8c73b52b5c2b1cab5da1a03fb98a76948b92"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "61e5999dd6cafe91180579f768fb6b4282fa85222577877dfff2d12bc0030aaba642fbd9401d25c74d2a7406b01f014e98ced06d071a97685525c7b0460ff568df81ac450779c6b49f8bd96a6827f171320ffe5ea685883e5a52d494090d3d44270253572fc0368d1582f4cb1d13f0e916a65245accdc731b5550605f7d7dcbf767ed9642a4c12c2527331b8302b6932e547062b528f6a6b831db8f54a21f9545c11216521092940492c8d1d7062ad535bd4bb1d7fd91cf3dc302b52f1638be4515987ed2eb3ed"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "36f73421030d796ed4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "21702495328116d28ee848878dd535222bf3d2315c28925d034a1372953a2320cd9416d7ce22f22bcc8ac9981560e32b3ffad553d1c65ddd76b0b650411eb611915f4079de85954988f20e7fdef70c2a783e57e26c2426d80cba18fa243ff06778674c6377e0151b0ab2964a1a230c6ec1cbcfdaf33538ffc1b0fefb686e61e7d49366f920033228039fea2a5a71476d819b36721566153c5f6ea59045e9391503f8301e6c8c7ebf3f797c9adde5de78a59960ed6bd297744598c5adf1c2f2b5ae76e3914badc7ce3f0c9d326c7c4afe0819460950e45e5809bdb734a065b9b82d2e20e63eac4425ef6d257390a34cb8b75aff7a0219093c5f4506967731ac85799a989f77b0b4b5f08dda0d70663f612bf7d98357754ec580076ba3643095d59371f9f5d91d325a1e255e8dd0dc0c7e91cfed103f2aadbcc4bdfcd88583080be13ac3a4f8a725711c00da6bea1bc6ef0bb7fd6b7eec79fa0ce74f8472cb7c2c67b2e47baa557636f96b68a46dda6b4d939513aa04181fcfa6814622ddc959bf3c039230bf8dd20fc9c0411700e166cae33fd6e9f4a52657a08a1de91c2c9c08718b46ddb4113f56598436f2bbbaf0e9340547c8ec3dfa86dad7e1d1bfa59624879b013f6e18189fed0b4c6539cb2d5adc9fe716a1490b6d53c84bf8854011540c465d6e0ca43b8e183f4bccb69430d6cb1d17368d90f1f1f2b79edbc996a84490941976f9db7e33887208580aa8e9ddb0e3cd7ee67ddb07455af95d2a285c8a83254b369579da70cfa948b5cff14e053840c454c9953bb1333b183abdfb2ffde21db43f69c617dc6fb2f9f15b43b21141d96ee4a705219446a703e689be3ae7602f4d2fec95bf07e2546edd59a8eda81f3ae440a33cb37a810cddfddf90fa38e1a96ce1ccf743ec5970195c82c1f599ba115663f61c6a49bf7f108335b7f2f72a23b8b56e89efaf49ae09fbe128571446c96eb201dbea4b11717e5b32ab2169508068bea8015804387022fcf5cc1357ef5675f475a717da4fec07b4d39ab201ee42990819d3720f0d3ef2a669ccae92ef42b873d422e09bfdbed090b5f0aa34cffb3b84c30b4f306a6f517cc1a70f4eddf08184499150c3cc4e20f91bfc5d98539375182bae4b1b13e38d65da752665a3c92e9c1bf4d1e42e86dde81a89a97b34582702000eba2b1f59aea8dd0ab4e757e297b659730377217548702208c82cacda78e5955cba112120b4734dc92065de3ab3a5a53b5b3f0e4ef8d30def7e8119192fbd5ed696d19fdf9aaedaeb0f8c08cfb9ac0c7ab307aa56489fdf8accd6d37db64e0b1c8e86499aebfb9ffba6feae278e37a2e784fc9699337cc75e55bfc72a4418087811e4b67a15eb359ef9b4fe642a6dd6c8d1fe857f93ffc64f8b505a8287358247b6e19a9003089539649541c52c8dae402a12992b270ed206d4201e361f6c851378391f33b18b4aa6d9de3916c428c1bd9229074c41102157cb96eade30f09d62303ecf19b359c548573a373ba91662371c9ee45edb12a6ebc932ab01383a405682ea237952947d4b5f75994c8fb493f2ffade2bd35783f864e447b71589192d7a78cea2ace53180ce5790f79595f637063006c1a7edf9ba953a38b2a70481f80ac2ae85703c8c45cf5b6c2dd6ef9539a87ca0db81a57aa0ae8f1a9bc0e2372235623baa347a3e2919c0eaf41625e532db0d52e4d8075badae2072dfc577bcc61ef665005768d24b50674f9ab6be854bbf293f09477f57c30d7da5d6b45f7641ab52a6f9fdb15c0bce84662b1e67e52ec907660ab1439bf88308fb8fa7a9b169eef74c1a32709372a1b1be98ce921486f5f8aaa9d8ee3376c0f2a5fa1d46d2a1ac1cb9a294837dd35aebbed60d3a597b43c7f2ad6cd86f4774a467dd044c3e9d4462adcd60445df557eb87563750c5d20f27fa9f4090884277f2e70d5d052c0e222691c3339f61f4ed52c34fdf6a122e29b74da0b24ea5076a4390c8591850eaf8c77e3f9805854c20ef76cb9c68b3cf164dab1c63f1e516dd7290fe9e06f070dc5a624bc61f7625ef140d341736797769b789903136aababbe48e92827f7ba0e3ed2f5e3c0ce3eda40c141e1a1fcb628a0feb449d8847ca2371f8e2969cabeeb8d92728a4252e08cbcdfaa1717517218215f81b73ebba08d93bcc31800f19ae073da104ca7b3346687dfb647311c829b9a860ef420ef678ce9e2462ea4f19a5a531604c089c48230200d8e8a0fab35fb19474a2d290f866985093d749555ed4e95d7102ede63c0590d8c0ba95df30314e6e05604e5d74cb4759cef95d0fa20d55911b35a7f53af5e06b94435fd910f520c2ab55e445b4debe5c00a65ed930453206b8d8d65e933a7b0dc75b69bf4bc2a4e70d5bf0c26441ef5b9f9a4f407e2bfdb8853035bbd6ab1e271759e9e746106baa7645934a07eb1a36db12cd3053f3f0286a268562c769124cec142878b681e0fabed73c25c77927dcbebb12ac07c62528955b8119de07159f9fdfc22bc6446b69a4a8ce2ec5dc97d669cb83b8a75c83cdb03c85b204d3c9c43fe2576531f4bb6a22791c1618d176db5db0ec2fe7d7201eb8b848144a46d01e28eb216f9ac8ced44aa7cb506f4590b7e79d48173c5ea2688e62643e9cc6fafe7bb24f3e8427dc5f68324679eecf1e8c68686447491f388a8847d0e1d0167d05e28d8b618697f5f04af423db6c0be89655b19a228acd11ea753fe952190fca7d220de0a844740d34b415b1459607ded2dadb97985c803552b47da05ec7bc2d76b1d6eb15127d43f847c5d0ce0e5e9e0534746f05f578470d7da9d4f54ef54ddd86aa8cef6e8dbb3dd91c652a6a31bcb305353c8953af495f3a56dcc171f8689ea84b23d67b1e13c035095d7630ab89b68e3de6b29ca29ecda57ab84454b4f0a51a80f20d3001140d5df173306cb0b85866b251d31625d1dab85e85f003bcdd9ae967d0a79261e70b6346409fee7dc8d8f0bf77dd4e43a1f5fcfedce9592b138b5969025f38ce74aa73f24e1e3775f2c72ffbb168dc9b658d5432bd89c0473d09e0db8a2c7102b79969da46c75a9ea49168dccc95172bd9663c43806bfe7e0cc18ef6ac4d823c51968d47c0e1c8a1505e447b633f7d3dd18e37920bfd4b26e0af9d70bac7d9aafe4ab302db251a0f15ec600ee68d22781e6f2dffcb1bb3eeba3258945d800b263ae25351ff89c3fd414e83d583bd2490846416af6af864d54f840e7ef4784c089656bb2b19410351540838e79b920268d699007ab524115ed2a11068152cc3084d151338b4c03f6efbcbc7e7b1460120397e23d3543aa98efd946c8f3b1854f71080a1f4745d792b998c460c13e87dc79a8c66f4601e97040d58a8b2eb4e11b9ad569ecb2da2c5f1018d56ed21a9bbcc8c34d709a452e2013a22a98760f35d97f588067048c65b37128acadd0b720391116041b1ee911e3aacdd8c9a3c576dd600140e0793efb19f35f45ec71de8ac24a4dff8f1866da8c39fdc0093a9e767598d39b08e0beabc59a34907f1b7f3e70235768283e4ab3b87050879eb707d251878595351cb27179c850fe3f2b6d84d2d00b0224cb418998e7a734c648dc83131c54889c7f5010043b82a5fa6175108815b4ad46b89e10d20d805df140cbe0f46612e6ed138b382bf5417157f7e1aa50a05cacee82e03c57d3c827644c72fc3bc6e029a990dbe7c563202d9a9089ec79e565ad77ec5f645d1ca31d769e28f068187df85b46a90ca20ba9b869f6577e0b07752c1571f7267b6961c0e58fa51bacfc9ea264a3a1113aa6990d4fb5a77192f62bdd68c605c8328c20bf2ab749de3faac84b68241dd0ed7039d9d04678aab0fdbfd12eae0fd0ac52a8f6d512656a710df18c2471fcdd39b8acfd7c1fc8672ccd6e16c6e07dc21f9639424922e28f69eabaf40c95b4f49e0287dd5368087a8fe7eb4acd3bdc9a5246e0406803039149eb39df7f32e7cb9f9ecbefebf93fb0602b00cea85b53027e0e3559b0a7df0fbf6cc0e4dbf80a3f0131d3804c5912f262da59f1e29ecfca23ce1bcab72ff7930dffc691cbe71f20116cbb067f9f1fbb0581074b1f5816293bbda4071ce2154975df51175f0cfc95799d9f329630be4f7dd2a984a3ae88bff9cc1caf3abbc38803dd58a8b86274ed153825e03cfaefb71e43dfdcd7a84d390014ed6201013bf7e39b004b25ad9e9782cb518080683f2658e87037916a0e8d11c3fbc507842893458667ac8308db6ee1c42717c8f0ad2133355a622769a01df1dce245738b54a1e6844ed51b534530344843e61300421ca180eed513f5a6979e6cda508119dee6da9128cbc40c36f58db28cccb1478ec6db96eac8f8e50c73059c5fd429896fb44834c708ae6707199db39eb47430e54f3217d5e92326abc2b051b87238542b6479e86f8e0e950f489274cd5af624b4c9631901ea5c0c71b807b9a1814e5c2332d85a09a3ca70691b64be639e6992f29e5f298d97d0fe1ccfa2fafb90726111b3b590b896982fe7b4b53b3e74a71b6514286089472b989fccc1de5f892daef72a7dfe6d886cb38f139d214187f38aedb5dc484978378512fbb325e8c81ea958a73fd5e0cc7e3b76b199ba7b64bb5f03349bbab27d1d7a2f56d843850ca66e0b591ed1d7bf05c97adac38aea32fb1bfde6971261b69c211c78bd54076d9e5ddf82c66acb57fa31c69408d845aa97f9c48fe39a62577ad3dde34736a862de16b100d3cc230f3af4c3462bb29adbf3f2f19c82b64b8ee82b2a27b0d7f5e8d657c04f3aec0ce17ed71a4ac5372e0cda40cebb4c64323dcaeb2f628f72b4365ef9b5fdb49cf9811c44d81056d3a88c7b8d0c835dd828b2ff1e73e8299a17134548a1b20a200e688fda3d1d00767b48ea8554738d0e819a3567f90a83d006f5a39eae7313eff2542f4bb8b0387ce4df294c6afdac854a8ce183dccbd141295e6909d362942d60a984341a8c9953577ff8dcf8d67ae85a847b07fa707eb66ab6207fe70711f4636adf9268458efd23c10695262a9dfdadaf6753027beeb0edeb333612e082985d87643ab89e440ed588d6dd83376a37a25dc109bfd757039d4d2fbf8d09154a47e5605542bea76f4d71528c38e5352e2f4b78da11b4220ef80e664894d820d08b66e22e5c5e6ff3be09e8197362d029c220d7256fb9b6a088af26b826a94c742ff64901e1bd141b3f667decc090949f65f16629b7ddadb5a8d216eb4255b825e0d7190637109bc84e8c432b98d3c9df09318e3b9ded6fb9e8b39c16e9ce5bfd9d903045b08b7f502bfc1a5768128c15da4e61a003bf69dafe323c4c7e4257b62814fd4a9e418934e092f05ca7338b21c431a7a103bd8695e3cae1098fad66327ff2b362bbb0abbc2a11d1869310679a3c8f037e5e2923ee875070fdc0a4290a851a62f767a09d3037e07520ebee29cc11940c77366cc42cd7f3312f85c20c4b03209937ba5892d36859ac33f329c4c8c764608fab1b012c7cf3df5ee556b60ded3514f3b5d43e0d40f329642f2cea82872887fea71ab377615d66c89b39cc9c80bc519eba7792fc4b1fa9ea470a43afcca9ca26e429f3bc7d1e7d2fed945db7aea0e52a70e39047919cc40787c40b03b3c903432ee7e891b025e3047ad2bfd6c18808a98662259dc6c2f36ad135328e3b677b60a73ffe348689f6d0551daf8696f79339b1599211667ac048d0dc1a7f6828327032c7dba14826da910eb153998a540be5bf043301ddce4f367c1dbce8cdb559ad6d3e80b1b2ceb07ffaa7ff59ee6cdabb2f97a608cdb1"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "97669d3fc338e2c68ea1e94983801c8a7596c92703d0bf1baccfd02905ffaa66cf7e2793a8390efd8988d9933a051e2733a7f7c8d4391824ee83890588835363bc5588176fa4842cf8742a3b44b1c4470aec62409deb298800383be9ff06706ef942c61076117b304a7adf37f45d548b942cff"}]}, 0x137c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8090) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x4, 0x1) accept$packet(r0, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001540)=0x14) getsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000001480), &(0x7f00000014c0)=0x4) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) socketpair(0x21, 0x3, 0x97, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x81, 0x0, 0x0, 0x1}]}, 0x10) 19:44:10 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xffffffffffffffc1, 0x20}) 19:44:10 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2940, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x430001, 0x0) 19:44:10 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400c0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:10 executing program 0: socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) accept(r0, 0x0, &(0x7f0000000080)) 19:44:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 4: socketpair(0x1d, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7f5, 0x37, 0x50, 0x80000000}, {0x401, 0x4, 0x2, 0xfffffff8}, {0x9e, 0x1f, 0x20, 0x80}, {0x0, 0x2e, 0x1, 0x9}, {0xfffe, 0x4, 0x9, 0x5}, {0x5, 0x1, 0x3f, 0x8001}]}, 0x10) 19:44:10 executing program 0: socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 2: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/230) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) r1 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/123) 19:44:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x424200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x1000260) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0x28}) 19:44:10 executing program 0: socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast1, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x10}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) [ 1196.329068] can: request_module (can-proto-0) failed. 19:44:10 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x7, 0x1, {{0xa, 0x4, 0x3, 0x37, 0x28, 0x68, 0x0, 0x32, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010102, {[@noop, @generic={0x83, 0x11, "61ab7e53db35f3702600fc5e7b8ca6"}]}}}}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) 19:44:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) [ 1196.371125] can: request_module (can-proto-0) failed. 19:44:10 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x0) 19:44:10 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000140)=""/40, 0x28, 0x41, 0x0, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000100)=""/2, 0x2, 0x12003, 0x0, 0x0) 19:44:10 executing program 2: r0 = semget(0x3, 0x4, 0x130) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000001c0)=""/4096) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5c2, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0x37}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd5, &(0x7f0000000100)=""/213, 0x40f00, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x20}, 0x10}, 0x78) 19:44:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3e, 0x15}) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) 19:44:10 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) 19:44:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10440, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x1a5000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000400)={0x18, 0x2, {0x2, @private}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000400)={0x18, 0x2, {0x2, @private}}, 0x1e) r3 = accept(r2, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, &(0x7f0000000100)=0x80) accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x80000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x3], 0x2) 19:44:10 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:10 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x40}, @ipv4={[], [], @local}, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x3, 0x7, 0x400, 0x4, 0x400000}) 19:44:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x702c2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x8}) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = accept(r1, &(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000000)=0x80) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000140)=0x3f, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0x6e, 0x6, 0x9, 0x296, 0x1ff, 0x1f, 0x7ff}, 0x1c) 19:44:11 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) 19:44:11 executing program 1: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @generic={0x25, "bad51e1d630035feca1def464bf9"}, @sco={0x1f, @fixed={[], 0x11}}, 0x40, 0x0, 0x0, 0x0, 0x4c, &(0x7f00000000c0), 0x1, 0x9b, 0x2}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=""/152, 0x98, 0x2060, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400000, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400840, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r2 = accept(r1, 0x0, &(0x7f0000000100)) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x4, 0x2a, 0xf, 0x10, 0xb, 0xfffffffb, 0x1, 0xa2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3e, 0x4}) 19:44:11 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x2, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, 0x0) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 19:44:11 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0xff) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@private0}, &(0x7f0000000100)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x6, 0x1f, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x2, 0xa, [], [@hao={0xc9, 0x10, @empty}, @generic={0x0, 0x3c, "27743765d534cfd00279e106a3ac0ebc90a709ae3b776cd2a3202fd92a148da773571f90b9cf69f6b4ae578aa936f5e6cae92e2227a994d5916242e1"}]}, 0x58) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x41, 0x0, 0x0) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', 0x0}) 19:44:11 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x2dadfc4b, 0x22}) 19:44:11 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0xc, 0xe}, {0x6, 0xd}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) 19:44:11 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 1: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)="f2034ce1ce86d62776d7590d288440f826d8dd6987b8af492069d1e0f1f57bd164a97f10ec9f6480a015dd331c59462c3b3f241f71bf2f974817086a72d868dcc6a06b35aa62c1487f41573374d7ba5034a40220005d304f35b8bd45d1c2c50cc83e657dbd5d8e484c103d2fb5fa3117fd1b268a1b7e68", 0x77) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x7c, 0x28, 0x20, 0x80000001, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0x2, 0x2}, {0xe, 0xfff1}}, [@tclass_kind_options=@c_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xe9}}}, @tclass_kind_options=@c_tbf={0x8, 0x1, 'tbf\x00'}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1f}}, @tclass_kind_options=@c_mq={0x7, 0x1, 'mq\x00'}, @TCA_RATE={0x6, 0x5, {0x40, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x20, 0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x4) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', 0x0}) 19:44:11 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x200, 0xb}) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000) 19:44:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x20, @ipv4={[], [], @local}, 0x800}}, 0x24) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xf, 0x7, 0x6, 0x80}, {0x1, 0x2, 0x2, 0x2753fad3}, {0x1, 0x0, 0x71, 0x5}]}) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', 0x0}) 19:44:11 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x3, 0x7, 0x400}, {0x7, 0x76, 0x8, 0x2}]}, 0x10) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @vsock, @llc={0x1a, 0x102, 0x8, 0xdd, 0x81, 0x6, @broadcast}, @xdp={0x2c, 0xa, 0x0, 0x13}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='veth0\x00', 0x10000, 0x6, 0x2}) 19:44:11 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) r2 = accept4$inet6(r1, 0x0, &(0x7f0000000080), 0x80800) getpeername$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000100)=0x1c) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) connect$bt_sco(r0, 0x0, 0x0) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x6, 0xf4, 0x3}, &(0x7f0000000180)=0x400ffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x1}}, 0x10) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x7, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000) 19:44:11 executing program 4: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000100)="34d2923ccca9ea1b77780eda07230d4c57f94f37c2a4358ffa19cb59dad31421cadce175e2c596e4ca2011b2ed5566b6e8e7fd370df847deb23e3044997a661b99751a8f225b1ec456b44f927a639584a75444fe1d4f423d947e29d04ccf28887649704267089cbdf173201aaab16c39ec6afaba89080a77d9d4eb39b1ec2319f0c11d3d9e355c5c533fccc30f87c7f99f7674cd1bbef7da1ae5b12b19e1d8d217eccfadab9e7b7fb48a2cc46852982954603c0d22da3856", 0xb8}, {&(0x7f00000001c0)="ff59de2a19109557f2b68b03d4532ffe3235d504787be143ecc404c61cf13291dc8c706849ba05ad874ed0e79f70d4e51d1c621595cd4ab4f5a179aa6f4ad19d9f3af6791d314c88c07e82f997de0a68fa3afa116ec60bb38813bf0a939ff24a808edcc798175bc07b21a7db17e99b02f920dd33b38e3f62da3a73bbf562778199b1e3d20ec6d5f4af785478474d427fb4", 0x91}, {&(0x7f0000000280)="84d13c3148939f278a5acb7c8a4cf5614ac14a0ea3d4d30a99b1c0a3a169a7dbba4651eecc037c35d81aac80ddb0dd2c0d148adc376a86c701d961fbe7f4abd53f7ed0095b1d475b35990f8f8a0c5307717f2a2a2fc45266d1767ac75d4af75098d500060e631507a1792e9ddb8d4f023d340b475bdb4ceaf4b0", 0x7a}, {&(0x7f0000000300)="ee39d2760e4ec3d55aca705d98cacc91132a2cdf0b0d0a53a2bb6fe4f7d1aba28bffc836e7ff", 0x26}, {&(0x7f0000000340)="41782eb6861c7435f25dbe99", 0xc}, {&(0x7f0000000380)="67ea28fbd471a159065c09e3c55e31d26c1f687ebd402e9fd00d50a9bb04cd623c654b17077e166c113ecb4569ddafe058dee30f9347b1feb19da78fc6d75a0cb94ce0a5263c41d8b783b23ad41833b78e7050d612364293ce92e0af566479fef17eba9e0268a684ae5a42b9441082d1470a6205b37d1a7d757dc9a69628c6d092996000f92b5e6e32169414f511c1e930b265794009a694615ac66eb498602bb6", 0xa1}, {&(0x7f0000000440)="e9e9a20aeea1d8afc5c429477e068ffa4fa04a142c7380c6e246426e1700d2f9149a49488cf989efa72ec6d064e5c4c4c99b0494131152c3372c8c610bb626c39c658edb18da24cc557fdb2511999689caa8fdc58364d1df23b6aca3a488c02cb9e24a85c6cd1cb11fd6268d7c9f4035116570fb3731761a781c50e85d70f3bcaebb736375d586cc8afff1926702813c4a985aa3dd7987864a1664fdb03f7d54e37964ce61c63275da7accfb8563bc2a76", 0xb1}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1400ef2fa9f54d000000007294e65031c0820000"], 0x18}, 0x8000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) recvfrom$packet(r1, &(0x7f0000000780)=""/4096, 0x1000, 0x40000102, 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) getsockname$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000640)=0x1c) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 2: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0xa400, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x165d) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000100)) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x283, 0x3}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7efc, 0x40, 0x2, 0x6}, {0x9, 0x4, 0x7f, 0x755}]}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)={0x6, 0x2, [], [@ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x8000}, @jumbo, @pad1, @ra]}, 0x20) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x6, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:11 executing program 2: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x6) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x7fffffff, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) sendto$rxrpc(r0, &(0x7f0000000080)="f7e53a1180b134c078e231563b0e07f2eaa219236a389c473c2e47b9ed54ecb493c600954ee825501e4c2ba47a725d9d67d086f95f73a7530da7e20e2d14cf0657c9bff658e3c1fce546df62dea11ba9e35d5e168b41b4fe0023fcbbb5824d635c0317f2cd87f8668158218222f016517bcb1932abb0b77d5b49a44495c8164b067de231fdcf27b89469eb9d88919b958c72fa2f8465974236a5bf775211fc7c2c6975144269eaba0c025321b2267fd03f78aa6134a5338ebe583d407bf603f83191d0da3a864c15fc43d437d2dc7ac8b571e566c215396e97899e12e23bf0dab0c4fed4b6b8505317df80af249b", 0xee, 0x8000, 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 19:44:11 executing program 1: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x40c4) socket$inet6(0xa, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xc000) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) 19:44:11 executing program 2: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001200)=ANY=[@ANYBLOB="ffff00000e058d67b95141ef3b5ce264d9461f771d14ac594a90a9ac8873851f17d41343c4d9fc1cfa26a5ad802702797bfef0a44b67f52de6eb3e3bed403135e5c25a9f4096044e23c164c769106c72ac66b166279ff61024daa3d99c6b379a05ffa3aae582b6b75d019c487de68b57a1bd5b4308a954af8e5dbb6bbfc3d1f19b37b449330b4614c2b8528564fb4277043808e65b04f94c443089f71628d8a946e88ec3", @ANYRES16=r2, @ANYBLOB="000300000000fddbdf256b0000000a00060008021100000100000a001a00ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0x40000) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$packet(0x11, 0x2, 0x300) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x2, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:11 executing program 4: recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 2: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x3d, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x206e01, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000400)={0x18, 0x2, {0x2, @private}}, 0x1e) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xffffffe0, 0x0, 0xffff], 0x3, 0x80800}) 19:44:11 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000680)={'NETMAP\x00'}, &(0x7f00000006c0)=0x1e) recvfrom$packet(r0, 0x0, 0x0, 0x40002120, 0x0, 0x3c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x7, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x10, 0x5, 0x6}, &(0x7f00000002c0)=0xed, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x6}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x1, 0xa, 0x1, 0x4, 0x8, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x775}], &(0x7f0000000480)='syzkaller\x00', 0x400, 0x15, &(0x7f00000004c0)=""/21, 0x41100, 0x1, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x3, 0xde25, 0x89b}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0x2, 0x8, 0x1, 0xc, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x400, 0x88, &(0x7f00000000c0)=""/136, 0x40f00, 0xc, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x6, 0x50a840bc}, 0x10, r1, r2}, 0x78) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) 19:44:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x220001}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbe70e30c665e9d2fedf250c0000000c0099000600000073000000040028000f00090093219c231cd83bf4cbbcbb0004000b0009000700e733fc5c180000000000090001ac0f00"], 0x58}, 0x1, 0x0, 0x0, 0x240040d1}, 0x50010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 19:44:11 executing program 2: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) 19:44:11 executing program 2: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000033f9a186c1bbfb50446612496abf10720be228e2de2ee84962d19caa5910d7a7236adbbbe79f6e1caee881e7d4d8ea363108c5fa526ccc469814a4a0e615a732cc62e3fda33367dd1ffb", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf251a0000000800010070000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40088cd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in=@multicast2}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1}) 19:44:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000000c0)={0x7fffffff, 0xfffff800, 0x5, 0x1, 0x9, 0x5, 0x18}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) 19:44:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:11 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x40, 0xb}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x4827, 0xe, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x8, 0x3, 0x1}) 19:44:11 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:12 executing program 4: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000540)={0x3c, 0x1, [], [@enc_lim={0x4, 0x1, 0xe1}, @ra={0x5, 0x2, 0x27e}, @pad1]}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xe82c, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0xa, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0x6, 0x4, 0x2, 0xae3caaee10308b31, 0xffffffffffffffff}, @generic={0x1f, 0xf, 0xa, 0xffff, 0x8}, @jmp={0x5, 0x1, 0x1, 0x7, 0x9, 0xfffffffffffffffe, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @map={0x18, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xed, &(0x7f00000001c0)=""/237, 0x41100, 0x1, [], r0, 0x23, r1, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x5, 0x7, 0x7}, 0x10, r2}, 0x78) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x3e, 0x1, 0x0, 0xffffffffffffffff}) accept4$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14, 0x800) r6 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r6, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14, 0x80000) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@getchain={0x34, 0x66, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0x2}, {0xa, 0x1}, {0xfff2}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10810}, 0x4048000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0xa, 0x3}, 0x0, 0x0, &(0x7f0000000940)={0x5, 0xd, 0x80000000, 0x5}, &(0x7f0000000980)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=0x400}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000780)=@raw=[@generic={0x69, 0x2, 0x1, 0x8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x67}, @jmp={0x5, 0x1, 0xd, 0x2, 0x78cb617228b7aa8e, 0xfffffffffffffff0, 0x1}, @generic={0x40, 0x1, 0x9, 0x7f, 0x4b5}], &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x19, &(0x7f0000000800)=""/25, 0x40f00, 0x0, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xf, 0x77e, 0x3}, 0x10, r7}, 0x78) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sysvipc/sem\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x8010) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000500)) 19:44:12 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25030000000000040001802c00018005000200400000000500020001000000060001000a0000000600010002000300000000000000000014000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4000080) socketpair(0x1, 0x6, 0x4, &(0x7f0000000300)) 19:44:12 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:12 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xd6, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x1, 0x662080) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x400, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000200)={0x4, 0x0, 0x1}) recvfrom$packet(r2, &(0x7f0000000080)=""/122, 0x7a, 0x40010041, &(0x7f0000000140)={0x11, 0xf7, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @func, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @generic={0x4, 0x1, 0x5, 0x401, 0x319f}], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x0, [], r6, 0x1b, r2, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xa, 0x6cca, 0x5}, 0x10}, 0x78) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80080000000040, 0x33}) 19:44:12 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:12 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0xe39f532de32632ff, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev}, @FOU_ATTR_TYPE={0x5}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004804) 19:44:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x1, 0x662080) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x400, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000200)={0x4, 0x0, 0x1}) recvfrom$packet(r2, &(0x7f0000000080)=""/122, 0x7a, 0x40010041, &(0x7f0000000140)={0x11, 0xf7, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @func, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @generic={0x4, 0x1, 0x5, 0x401, 0x319f}], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x0, [], r6, 0x1b, r2, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xa, 0x6cca, 0x5}, 0x10}, 0x78) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80080000000040, 0x33}) 19:44:12 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25030000000000040001802c00018005000200400000000500020001000000060001000a0000000600010002000300000000000000000014000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4000080) socketpair(0x1, 0x6, 0x4, &(0x7f0000000300)) 19:44:12 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:12 executing program 2: socketpair(0x1e, 0x1, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:12 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3e, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@private=0xa010101, 0x1}, {@multicast2, 0x6}, {@multicast2, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x101}]}]}}}}}) 19:44:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:12 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25030000000000040001802c00018005000200400000000500020001000000060001000a0000000600010002000300000000000000000014000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4000080) socketpair(0x1, 0x6, 0x4, &(0x7f0000000300)) 19:44:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:12 executing program 2: socketpair(0x1e, 0x1, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:12 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop, @end]}}}}}) 19:44:12 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25030000000000040001802c00018005000200400000000500020001000000060001000a0000000600010002000300000000000000000014000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4000080) 19:44:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_ID={0x9, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x14}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8805}, 0x20040006) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:12 executing program 2: socketpair(0x1e, 0x1, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:12 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}, @noop]}}}}}) 19:44:12 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x7, {{0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x9c, @loopback, 0x401}}]}, 0x110) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) [ 1198.828149] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1198.828353] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1198.864907] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1198.887413] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1198.900245] CPU: 1 PID: 11483 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1198.908145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1198.917488] Call Trace: [ 1198.920100] dump_stack+0x1b2/0x281 [ 1198.923728] warn_alloc.cold+0x96/0x1cc [ 1198.927697] ? zone_watermark_ok_safe+0x220/0x220 [ 1198.932530] __alloc_pages_nodemask+0x2127/0x2720 [ 1198.937368] ? __schedule+0x893/0x1de0 [ 1198.941251] ? lock_acquire+0x170/0x3f0 [ 1198.945213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1198.950041] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1198.955481] ? __mutex_unlock_slowpath+0x75/0x770 [ 1198.960313] alloc_pages_current+0x155/0x260 [ 1198.964704] ion_page_pool_alloc+0x118/0x1b0 [ 1198.969095] ion_system_heap_allocate+0x133/0x8c0 [ 1198.973936] ? ion_alloc+0x187/0x810 [ 1198.977637] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1198.983071] ? ion_system_contig_heap_create+0x130/0x130 [ 1198.988504] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1198.993503] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1198.998365] ion_alloc+0x204/0x810 [ 1199.001937] ? ion_dma_buf_release+0x40/0x40 [ 1199.006336] ? __might_fault+0x177/0x1b0 [ 1199.010381] ion_ioctl+0xea/0x1f0 [ 1199.013816] ? ion_query_heaps+0x360/0x360 [ 1199.018039] ? lock_acquire+0x170/0x3f0 [ 1199.022010] ? lock_downgrade+0x740/0x740 [ 1199.026147] ? ion_query_heaps+0x360/0x360 [ 1199.030364] do_vfs_ioctl+0x75a/0xff0 [ 1199.034148] ? ioctl_preallocate+0x1a0/0x1a0 [ 1199.038547] ? lock_downgrade+0x740/0x740 [ 1199.042695] ? __fget+0x225/0x360 [ 1199.046143] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.050119] ? security_file_ioctl+0x83/0xb0 [ 1199.054532] SyS_ioctl+0x7f/0xb0 [ 1199.057889] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.061860] do_syscall_64+0x1d5/0x640 [ 1199.065777] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1199.070960] RIP: 0033:0x45e219 [ 1199.074138] RSP: 002b:00007fe0451b4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.081838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1199.089088] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1199.096341] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1199.103601] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1199.110857] R13: 00007ffdd69fedbf R14: 00007fe0451b59c0 R15: 000000000119bf8c [ 1199.121975] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1199.148321] Mem-Info: [ 1199.150848] active_anon:15169 inactive_anon:6740 isolated_anon:0 [ 1199.150848] active_file:10639 inactive_file:10241 isolated_file:0 [ 1199.150848] unevictable:0 dirty:138 writeback:0 unstable:0 [ 1199.150848] slab_reclaimable:23637 slab_unreclaimable:122703 [ 1199.150848] mapped:62996 shmem:6925 pagetables:779 bounce:0 [ 1199.150848] free:26829 free_pcp:28 free_cma:0 [ 1199.164246] CPU: 0 PID: 11503 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1199.186522] Node 0 active_anon:60668kB inactive_anon:26960kB active_file:42552kB inactive_file:40960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251984kB dirty:548kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1199.192397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.192401] Call Trace: [ 1199.192418] dump_stack+0x1b2/0x281 [ 1199.192431] warn_alloc.cold+0x96/0x1cc [ 1199.222807] Node 1 active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1199.230053] ? zone_watermark_ok_safe+0x220/0x220 [ 1199.230079] __alloc_pages_nodemask+0x2127/0x2720 [ 1199.230090] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1199.230099] ? finish_task_switch+0x178/0x610 [ 1199.230109] ? finish_task_switch+0x14d/0x610 [ 1199.234974] Node 0 [ 1199.236297] ? lock_acquire+0x170/0x3f0 [ 1199.236313] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1199.240311] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1199.265929] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1199.265941] ? __mutex_unlock_slowpath+0x75/0x770 [ 1199.265951] ? alloc_pages_current+0x123/0x260 [ 1199.265962] alloc_pages_current+0x155/0x260 [ 1199.265977] ion_page_pool_alloc+0x118/0x1b0 [ 1199.265988] ion_system_heap_allocate+0x133/0x8c0 [ 1199.274358] lowmem_reserve[]: [ 1199.275665] ? ion_alloc+0x187/0x810 [ 1199.275676] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1199.275688] ? ion_system_contig_heap_create+0x130/0x130 [ 1199.280197] 0 [ 1199.284638] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1199.284650] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1199.284662] ion_alloc+0x204/0x810 [ 1199.284676] ? ion_dma_buf_release+0x40/0x40 [ 1199.284689] ? __might_fault+0x177/0x1b0 [ 1199.293433] 2717 [ 1199.295376] ion_ioctl+0xea/0x1f0 [ 1199.295387] ? ion_query_heaps+0x360/0x360 [ 1199.295400] ? lock_acquire+0x170/0x3f0 [ 1199.295410] ? lock_downgrade+0x740/0x740 [ 1199.295419] ? ion_query_heaps+0x360/0x360 [ 1199.295432] do_vfs_ioctl+0x75a/0xff0 [ 1199.303454] 2718 [ 1199.325772] ? ioctl_preallocate+0x1a0/0x1a0 [ 1199.325782] ? lock_downgrade+0x740/0x740 [ 1199.325794] ? __fget+0x225/0x360 [ 1199.325803] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.325813] ? security_file_ioctl+0x83/0xb0 [ 1199.325826] SyS_ioctl+0x7f/0xb0 [ 1199.333867] 2718 [ 1199.336102] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.336115] do_syscall_64+0x1d5/0x640 [ 1199.336132] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1199.336140] RIP: 0033:0x45e219 [ 1199.336144] RSP: 002b:00007fbde3056c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.343328] 2718 [ 1199.345104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1199.345110] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1199.345116] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1199.345121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1199.345126] R13: 00007ffee53ba35f R14: 00007fbde30579c0 R15: 000000000119c034 [ 1199.480818] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1199.521682] CPU: 0 PID: 11493 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1199.529566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.538916] Call Trace: [ 1199.541504] dump_stack+0x1b2/0x281 [ 1199.545133] warn_alloc.cold+0x96/0x1cc [ 1199.549102] ? zone_watermark_ok_safe+0x220/0x220 [ 1199.553955] __alloc_pages_nodemask+0x2127/0x2720 [ 1199.558801] ? lock_acquire+0x170/0x3f0 [ 1199.562777] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1199.567624] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1199.573076] ? __mutex_unlock_slowpath+0x75/0x770 [ 1199.577953] alloc_pages_current+0x155/0x260 [ 1199.582360] ion_page_pool_alloc+0x118/0x1b0 [ 1199.586772] ion_system_heap_allocate+0x133/0x8c0 [ 1199.591617] ? ion_alloc+0x187/0x810 [ 1199.595326] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1199.600772] ? ion_system_contig_heap_create+0x130/0x130 [ 1199.606216] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1199.611227] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1199.616068] ion_alloc+0x204/0x810 [ 1199.619609] ? ion_dma_buf_release+0x40/0x40 [ 1199.624015] ? __might_fault+0x177/0x1b0 [ 1199.628078] ion_ioctl+0xea/0x1f0 [ 1199.631524] ? ion_query_heaps+0x360/0x360 [ 1199.631538] ? lock_acquire+0x170/0x3f0 [ 1199.639764] ? lock_downgrade+0x740/0x740 [ 1199.641239] Node 0 [ 1199.643904] ? ion_query_heaps+0x360/0x360 [ 1199.643914] do_vfs_ioctl+0x75a/0xff0 [ 1199.643925] ? ioctl_preallocate+0x1a0/0x1a0 [ 1199.651625] DMA32 free:46096kB min:36200kB low:45248kB high:54296kB active_anon:60468kB inactive_anon:26960kB active_file:40264kB inactive_file:40212kB unevictable:0kB writepending:548kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3116kB bounce:0kB free_pcp:1444kB local_pcp:740kB free_cma:0kB [ 1199.654130] ? lock_downgrade+0x740/0x740 [ 1199.654145] ? __fget+0x225/0x360 [ 1199.665082] lowmem_reserve[]: [ 1199.687601] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.687613] ? security_file_ioctl+0x83/0xb0 [ 1199.687625] SyS_ioctl+0x7f/0xb0 [ 1199.710016] ? do_vfs_ioctl+0xff0/0xff0 [ 1199.713991] do_syscall_64+0x1d5/0x640 [ 1199.715687] 0 [ 1199.717908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1199.717918] RIP: 0033:0x45e219 [ 1199.721934] 0 [ 1199.724875] RSP: 002b:00007fbde3077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.724885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1199.724890] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1199.724894] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1199.724898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1199.724903] R13: 00007ffee53ba35f R14: 00007fbde30789c0 R15: 000000000119bf8c [ 1199.905033] 0 0 0 [ 1199.909458] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.022294] lowmem_reserve[]: 0 0 0 0 0 [ 1200.028098] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1200.086260] lowmem_reserve[]: 0 0 0 0 0 [ 1200.107803] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11076kB [ 1200.143539] Node 0 DMA32: 1391*4kB (MEH) 733*8kB (MEH) 726*16kB (UMEH) 305*32kB (UMEH) 20*64kB (UM) 10*128kB (UMH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35620kB [ 1200.204607] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1200.242263] Node 1 Normal: 71*4kB (UME) 370*8kB (UME) 292*16kB (UME) 86*32kB (UME) 4*64kB (ME) 2*128kB (UE) 2*256kB (ME) 2*512kB (M) 2*1024kB (UE) 3*2048kB (M) 8*4096kB (UM) = 53676kB [ 1200.286185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1200.310318] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1200.343910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1200.367026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1200.381869] 14023 total pagecache pages [ 1200.412335] 0 pages in swap cache [ 1200.422443] Swap cache stats: add 0, delete 0, find 0/0 [ 1200.451784] Free swap = 0kB [ 1200.461575] Total swap = 0kB [ 1200.476641] 2097051 pages RAM [ 1200.491558] 0 pages HighMem/MovableOnly [ 1200.503312] 363840 pages reserved [ 1200.517132] 0 pages cma reserved [ 1200.822772] oom_reaper: reaped process 11503 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1200.952069] oom_reaper: reaped process 11483 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1200.959298] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1200.976166] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1200.979513] syz-executor.4: [ 1200.988374] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1200.995179] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1201.005716] systemd-journal cpuset=/ mems_allowed=0-1 [ 1201.018827] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1201.023942] CPU: 0 PID: 11493 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1201.029224] syz-executor.4 cpuset= [ 1201.031807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.031813] / [ 1201.035355] Call Trace: [ 1201.035373] dump_stack+0x1b2/0x281 [ 1201.052709] warn_alloc.cold+0x96/0x1cc [ 1201.054143] mems_allowed=0-1 [ 1201.056684] ? zone_watermark_ok_safe+0x220/0x220 [ 1201.064587] ? usleep_range+0x130/0x130 [ 1201.068542] ? try_to_free_pages+0x23f/0x6e0 [ 1201.072930] ? _find_next_bit+0xdb/0x100 [ 1201.076973] ? run_timer_softirq+0x5a0/0x5a0 [ 1201.081388] __alloc_pages_nodemask+0x2127/0x2720 [ 1201.086215] ? lock_acquire+0x170/0x3f0 [ 1201.090188] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1201.095015] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1201.099494] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1201.104928] ? alloc_pages_current+0x73/0x260 [ 1201.109404] alloc_pages_current+0x155/0x260 [ 1201.113829] ion_page_pool_alloc+0x118/0x1b0 [ 1201.118219] ion_system_heap_allocate+0x133/0x8c0 [ 1201.123040] ? ion_alloc+0x187/0x810 [ 1201.126733] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1201.132169] ? ion_system_contig_heap_create+0x130/0x130 [ 1201.137658] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1201.142655] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1201.147478] ion_alloc+0x204/0x810 [ 1201.151001] ? ion_dma_buf_release+0x40/0x40 [ 1201.155391] ? __might_fault+0x177/0x1b0 [ 1201.159450] ion_ioctl+0xea/0x1f0 [ 1201.162885] ? ion_query_heaps+0x360/0x360 [ 1201.167099] ? lock_acquire+0x170/0x3f0 [ 1201.171052] ? lock_downgrade+0x740/0x740 [ 1201.175197] ? ion_query_heaps+0x360/0x360 [ 1201.179426] do_vfs_ioctl+0x75a/0xff0 [ 1201.183209] ? ioctl_preallocate+0x1a0/0x1a0 [ 1201.187627] ? lock_downgrade+0x740/0x740 [ 1201.191760] ? __fget+0x225/0x360 [ 1201.195192] ? do_vfs_ioctl+0xff0/0xff0 [ 1201.199149] ? security_file_ioctl+0x83/0xb0 [ 1201.203539] SyS_ioctl+0x7f/0xb0 [ 1201.206885] ? do_vfs_ioctl+0xff0/0xff0 [ 1201.210839] do_syscall_64+0x1d5/0x640 [ 1201.214711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1201.219880] RIP: 0033:0x45e219 [ 1201.223050] RSP: 002b:00007fbde3077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.230743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1201.238010] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1201.245261] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.252511] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1201.259862] R13: 00007ffee53ba35f R14: 00007fbde30789c0 R15: 000000000119bf8c [ 1201.267138] CPU: 1 PID: 11503 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1201.267833] syz-executor.5 cpuset= [ 1201.275013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.275017] Call Trace: [ 1201.275033] dump_stack+0x1b2/0x281 [ 1201.275045] warn_alloc.cold+0x96/0x1cc [ 1201.275055] ? zone_watermark_ok_safe+0x220/0x220 [ 1201.275063] ? usleep_range+0x130/0x130 [ 1201.275071] ? try_to_free_pages+0x23f/0x6e0 [ 1201.275081] ? _find_next_bit+0xdb/0x100 [ 1201.275092] ? run_timer_softirq+0x5a0/0x5a0 [ 1201.275109] __alloc_pages_nodemask+0x2127/0x2720 [ 1201.275126] ? lock_acquire+0x170/0x3f0 [ 1201.275143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1201.275154] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1201.275169] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1201.275186] ? alloc_pages_current+0x15d/0x260 [ 1201.275198] alloc_pages_current+0x155/0x260 [ 1201.275211] ion_page_pool_alloc+0x118/0x1b0 [ 1201.275223] ion_system_heap_allocate+0x133/0x8c0 [ 1201.275239] ? ion_alloc+0x187/0x810 [ 1201.275249] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1201.275261] ? ion_system_contig_heap_create+0x130/0x130 [ 1201.294110] / [ 1201.294293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1201.298234] mems_allowed=0-1 [ 1201.385706] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1201.390531] ion_alloc+0x204/0x810 [ 1201.394058] ? ion_dma_buf_release+0x40/0x40 [ 1201.398449] ? __might_fault+0x177/0x1b0 [ 1201.402495] ion_ioctl+0xea/0x1f0 [ 1201.405940] ? ion_query_heaps+0x360/0x360 [ 1201.410158] ? lock_acquire+0x170/0x3f0 [ 1201.414117] ? lock_downgrade+0x740/0x740 [ 1201.418257] ? ion_query_heaps+0x360/0x360 [ 1201.422473] do_vfs_ioctl+0x75a/0xff0 [ 1201.426255] ? ioctl_preallocate+0x1a0/0x1a0 [ 1201.430642] ? lock_downgrade+0x740/0x740 [ 1201.434771] ? __fget+0x225/0x360 [ 1201.438202] ? do_vfs_ioctl+0xff0/0xff0 [ 1201.442159] ? security_file_ioctl+0x83/0xb0 [ 1201.446545] SyS_ioctl+0x7f/0xb0 [ 1201.449891] ? do_vfs_ioctl+0xff0/0xff0 [ 1201.453846] do_syscall_64+0x1d5/0x640 [ 1201.457728] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1201.462915] RIP: 0033:0x45e219 [ 1201.466084] RSP: 002b:00007fbde3056c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.473771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1201.481019] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1201.488285] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1201.495535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1201.502802] R13: 00007ffee53ba35f R14: 00007fbde30579c0 R15: 000000000119c034 [ 1201.510067] CPU: 0 PID: 11483 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1201.517949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.527309] Call Trace: [ 1201.529887] dump_stack+0x1b2/0x281 [ 1201.533497] warn_alloc.cold+0x96/0x1cc [ 1201.537472] ? zone_watermark_ok_safe+0x220/0x220 [ 1201.542292] ? usleep_range+0x130/0x130 [ 1201.546245] ? try_to_free_pages+0x23f/0x6e0 [ 1201.550634] ? _find_next_bit+0xdb/0x100 [ 1201.554676] ? run_timer_softirq+0x5a0/0x5a0 [ 1201.559069] __alloc_pages_nodemask+0x2127/0x2720 [ 1201.563898] ? lock_acquire+0x170/0x3f0 [ 1201.567860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1201.572683] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1201.577167] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1201.582606] alloc_pages_current+0x155/0x260 [ 1201.586998] ion_page_pool_alloc+0x118/0x1b0 [ 1201.591386] ion_system_heap_allocate+0x133/0x8c0 [ 1201.596222] ? ion_alloc+0x187/0x810 [ 1201.599917] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1201.605347] ? ion_system_contig_heap_create+0x130/0x130 [ 1201.610778] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1201.615789] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1201.620613] ion_alloc+0x204/0x810 [ 1201.624136] ? ion_dma_buf_release+0x40/0x40 [ 1201.628525] ? __might_fault+0x177/0x1b0 [ 1201.632569] ion_ioctl+0xea/0x1f0 [ 1201.636003] ? ion_query_heaps+0x360/0x360 [ 1201.640218] ? lock_acquire+0x170/0x3f0 [ 1201.644173] ? lock_downgrade+0x740/0x740 [ 1201.648299] ? ion_query_heaps+0x360/0x360 [ 1201.652527] do_vfs_ioctl+0x75a/0xff0 [ 1201.656308] ? ioctl_preallocate+0x1a0/0x1a0 [ 1201.660698] ? lock_downgrade+0x740/0x740 [ 1201.664829] ? __fget+0x225/0x360 [ 1201.668260] ? do_vfs_ioctl+0xff0/0xff0 [ 1201.672215] ? security_file_ioctl+0x83/0xb0 [ 1201.676621] SyS_ioctl+0x7f/0xb0 [ 1201.679966] ? do_vfs_ioctl+0xff0/0xff0 [ 1201.683920] do_syscall_64+0x1d5/0x640 [ 1201.687923] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1201.693096] RIP: 0033:0x45e219 [ 1201.696268] RSP: 002b:00007fe0451b4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.703963] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1201.711242] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1201.718500] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.725752] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1201.733006] R13: 00007ffdd69fedbf R14: 00007fe0451b59c0 R15: 000000000119bf8c [ 1201.740274] CPU: 1 PID: 4621 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1201.740984] warn_alloc_show_mem: 2 callbacks suppressed [ 1201.740987] Mem-Info: [ 1201.748148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.748154] Call Trace: [ 1201.748174] dump_stack+0x1b2/0x281 [ 1201.748185] dump_header+0x178/0x82f [ 1201.748196] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1201.753550] active_anon:20397 inactive_anon:6740 isolated_anon:0 [ 1201.753550] active_file:12 inactive_file:12 isolated_file:0 [ 1201.753550] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1201.753550] slab_reclaimable:23483 slab_unreclaimable:111510 [ 1201.753550] mapped:54373 shmem:6925 pagetables:778 bounce:0 [ 1201.753550] free:13921 free_pcp:108 free_cma:0 [ 1201.755926] ? ___ratelimit+0x2cd/0x530 [ 1201.755935] oom_kill_process.cold+0x10/0xb18 [ 1201.755952] out_of_memory+0xe3e/0x1190 [ 1201.755964] ? oom_killer_disable+0x1c0/0x1c0 [ 1201.755970] ? mutex_trylock+0x152/0x1a0 [ 1201.755982] __alloc_pages_nodemask+0x23e1/0x2720 [ 1201.765366] Node 0 active_anon:81580kB inactive_anon:26960kB active_file:40kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:217492kB dirty:0kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1201.767890] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1201.771510] Node 1 active_anon:8kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1201.775204] ? cache_grow_begin+0x41/0x630 [ 1201.775214] cache_grow_begin+0x91/0x630 [ 1201.775223] ? cache_grow_begin+0x91/0x630 [ 1201.780306] Node 0 [ 1201.813338] fallback_alloc+0x207/0x2c0 [ 1201.813351] kmem_cache_alloc+0x1e5/0x3c0 [ 1201.813373] getname_flags+0xc8/0x550 [ 1201.813383] do_sys_open+0x1ce/0x410 [ 1201.813390] ? filp_open+0x60/0x60 [ 1201.813400] ? do_syscall_64+0x4c/0x640 [ 1201.813405] ? do_sys_open+0x410/0x410 [ 1201.813414] do_syscall_64+0x1d5/0x640 [ 1201.813427] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1201.813434] RIP: 0033:0x7fc75a0d4840 [ 1201.813438] RSP: 002b:00007fff37796d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1201.813447] RAX: ffffffffffffffda RBX: 00007fff37797090 RCX: 00007fc75a0d4840 [ 1201.813451] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000559a69f22270 [ 1201.813457] RBP: 000000000000000d R08: 00000000000001e0 R09: 00000000ffffffff [ 1201.817466] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.821881] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1201.825851] lowmem_reserve[]: [ 1201.830304] R13: 0000559a69f1d040 R14: 00007fff37797050 R15: 0000559a69f2b760 [ 1201.834384] 0 2717 2718 2718 2718 [ 1202.039024] Node 0 DMA32 free:82664kB min:36200kB low:45248kB high:54296kB active_anon:81544kB inactive_anon:26960kB active_file:652kB inactive_file:1176kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3108kB bounce:0kB free_pcp:252kB local_pcp:116kB free_cma:0kB [ 1202.077661] Mem-Info: [ 1202.080142] active_anon:20388 inactive_anon:6740 isolated_anon:0 [ 1202.080142] active_file:205 inactive_file:289 isolated_file:0 [ 1202.080142] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1202.080142] slab_reclaimable:23483 slab_unreclaimable:111514 [ 1202.080142] mapped:54732 shmem:6925 pagetables:777 bounce:0 [ 1202.080142] free:63695 free_pcp:99 free_cma:0 [ 1202.104105] lowmem_reserve[]: 0 0 0 0 0 [ 1202.134131] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.194105] Node 0 active_anon:81544kB inactive_anon:26960kB active_file:820kB inactive_file:1204kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:219228kB dirty:0kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1202.204117] lowmem_reserve[]: [ 1202.225531] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1202.256028] 0 0 0 0 0 [ 1202.260786] Node 1 Normal free:91728kB min:53696kB low:67120kB high:80544kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1304kB local_pcp:632kB free_cma:0kB [ 1202.305600] lowmem_reserve[]: 0 0 0 0 0 [ 1202.307656] syz-executor.5: [ 1202.309655] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1202.315771] page allocation failure: order:4 [ 1202.324597] Node 0 [ 1202.328187] Node 0 [ 1202.329232] DMA: [ 1202.331300] DMA free:11028kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.333484] syz-executor.4 cpuset= [ 1202.335712] lowmem_reserve[]: [ 1202.361796] 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11028kB [ 1202.368693] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1202.380399] Node 0 [ 1202.380506] (null) [ 1202.387741] DMA32: 2652*4kB (UMEH) 5360*8kB (UMEH) 781*16kB (UMEH) 404*32kB (UMEH) 5*64kB (UH) 6*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 80768kB [ 1202.393356] syz-executor.5 cpuset= [ 1202.407134] / [ 1202.407251] 0 [ 1202.410875] mems_allowed=0-1 [ 1202.412433] 2717 [ 1202.414774] CPU: 0 PID: 11503 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1202.420926] / [ 1202.427311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1202.427377] 2718 [ 1202.429009] Call Trace: [ 1202.429026] dump_stack+0x1b2/0x281 [ 1202.429039] warn_alloc.cold+0x96/0x1cc [ 1202.438421] mems_allowed=0-1 [ 1202.440433] ? zone_watermark_ok_safe+0x220/0x220 [ 1202.440457] __alloc_pages_nodemask+0x2127/0x2720 [ 1202.447450] 2718 [ 1202.450604] ? io_schedule_timeout+0x140/0x140 [ 1202.450621] ? lock_acquire+0x170/0x3f0 [ 1202.456961] 2718 [ 1202.458533] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1202.458555] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1202.474400] ? __mutex_unlock_slowpath+0x75/0x770 [ 1202.476469] Node 0 [ 1202.481278] alloc_pages_current+0x155/0x260 [ 1202.481294] ion_page_pool_alloc+0x118/0x1b0 [ 1202.491089] DMA32 free:80692kB min:36200kB low:45248kB high:54296kB active_anon:81544kB inactive_anon:26960kB active_file:952kB inactive_file:1144kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3108kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1202.491549] ion_system_heap_allocate+0x133/0x8c0 [ 1202.497031] lowmem_reserve[]: [ 1202.498151] ? _raw_spin_unlock+0x29/0x40 [ 1202.498162] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1202.503646] 0 [ 1202.530918] ? ion_system_contig_heap_create+0x130/0x130 [ 1202.530934] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1202.530947] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1202.530958] ion_alloc+0x27a/0x810 [ 1202.568970] ? ion_dma_buf_release+0x40/0x40 [ 1202.573364] ? __might_fault+0x177/0x1b0 [ 1202.574046] 0 0 [ 1202.577410] ion_ioctl+0xea/0x1f0 [ 1202.577420] ? ion_query_heaps+0x360/0x360 [ 1202.579379] 0 [ 1202.582822] ? lock_acquire+0x170/0x3f0 [ 1202.592777] ? lock_downgrade+0x740/0x740 [ 1202.596912] ? ion_query_heaps+0x360/0x360 [ 1202.601129] do_vfs_ioctl+0x75a/0xff0 [ 1202.604043] 0 [ 1202.604918] ? ioctl_preallocate+0x1a0/0x1a0 [ 1202.606700] Node 0 [ 1202.611086] ? lock_downgrade+0x740/0x740 [ 1202.611102] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.613315] ? __fget+0x225/0x360 [ 1202.624067] lowmem_reserve[]: [ 1202.642334] ? do_vfs_ioctl+0xff0/0xff0 [ 1202.642344] ? security_file_ioctl+0x83/0xb0 [ 1202.642354] SyS_ioctl+0x7f/0xb0 [ 1202.660896] ? do_vfs_ioctl+0xff0/0xff0 [ 1202.664854] do_syscall_64+0x1d5/0x640 [ 1202.668728] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1202.673915] RIP: 0033:0x45e219 [ 1202.674038] 0 [ 1202.677097] RSP: 002b:00007fbde3056c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1202.678889] 0 [ 1202.686573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1202.686578] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1202.686582] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1202.686586] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1202.686591] R13: 00007ffee53ba35f R14: 00007fbde30579c0 R15: 000000000119c034 [ 1202.688326] Node 0 [ 1202.689054] CPU: 1 PID: 11483 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1202.696130] Normal: [ 1202.702932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1202.702936] Call Trace: [ 1202.702951] dump_stack+0x1b2/0x281 [ 1202.702964] warn_alloc.cold+0x96/0x1cc [ 1202.710278] 0*4kB [ 1202.717488] ? zone_watermark_ok_safe+0x220/0x220 [ 1202.717511] __alloc_pages_nodemask+0x2127/0x2720 [ 1202.717522] ? lock_acquire+0x170/0x3f0 [ 1202.717540] ? lock_acquire+0x170/0x3f0 [ 1202.717556] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1202.724898] 0*8kB [ 1202.727043] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1202.727055] ? __mutex_unlock_slowpath+0x75/0x770 [ 1202.734978] 0*16kB [ 1202.737230] alloc_pages_current+0x155/0x260 [ 1202.737246] ion_page_pool_alloc+0x118/0x1b0 [ 1202.746638] 0*32kB [ 1202.749142] ion_system_heap_allocate+0x133/0x8c0 [ 1202.749155] ? _raw_spin_unlock+0x29/0x40 [ 1202.752817] 0*64kB [ 1202.756771] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1202.756782] ? ion_system_contig_heap_create+0x130/0x130 [ 1202.756792] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1202.756801] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1202.756812] ion_alloc+0x27a/0x810 [ 1202.758954] 0*128kB [ 1202.763767] ? ion_dma_buf_release+0x40/0x40 [ 1202.763779] ? __might_fault+0x177/0x1b0 [ 1202.768660] 0*256kB [ 1202.772594] ion_ioctl+0xea/0x1f0 [ 1202.772606] ? ion_query_heaps+0x360/0x360 [ 1202.776603] 0*512kB [ 1202.781380] ? lock_acquire+0x170/0x3f0 [ 1202.781392] ? lock_downgrade+0x740/0x740 [ 1202.783531] 0*1024kB [ 1202.788948] ? ion_query_heaps+0x360/0x360 [ 1202.788959] do_vfs_ioctl+0x75a/0xff0 [ 1202.788972] ? ioctl_preallocate+0x1a0/0x1a0 [ 1202.788979] ? lock_downgrade+0x740/0x740 [ 1202.788991] ? __fget+0x225/0x360 [ 1202.793840] 0*2048kB [ 1202.796043] ? do_vfs_ioctl+0xff0/0xff0 [ 1202.796054] ? security_file_ioctl+0x83/0xb0 [ 1202.796064] SyS_ioctl+0x7f/0xb0 [ 1202.796072] ? do_vfs_ioctl+0xff0/0xff0 [ 1202.796083] do_syscall_64+0x1d5/0x640 [ 1202.800484] 0*4096kB [ 1202.804863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1202.804872] RIP: 0033:0x45e219 [ 1202.804877] RSP: 002b:00007fe0451b4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1202.804887] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1202.804891] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1202.804899] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1202.807129] = 0kB [ 1202.811929] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1202.811935] R13: 00007ffdd69fedbf R14: 00007fe0451b59c0 R15: 000000000119bf8c [ 1202.824140] 0 [ 1202.830224] Node 1 [ 1202.838915] 0 [ 1202.839440] Normal: [ 1202.842752] 0 [ 1202.842760] Node 1 Normal free:26888kB min:53696kB low:67120kB high:80544kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.842780] lowmem_reserve[]: [ 1202.845187] 34*4kB [ 1202.849669] 0 [ 1202.853732] (UM) [ 1202.859420] 0 [ 1202.863758] 34*8kB [ 1202.866056] 0 [ 1202.870051] (UM) [ 1202.877472] 0 [ 1202.880987] 35*16kB [ 1202.884747] 0 [ 1202.889191] (UM) [ 1202.893194] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) [ 1202.896727] 35*32kB (UM) 2*64kB (M) [ 1202.902576] 0*32kB [ 1202.903235] 1*128kB [ 1202.907616] 0*64kB [ 1202.911011] (U) [ 1202.914951] 0*128kB [ 1202.918936] 2*256kB [ 1202.921180] 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11028kB [ 1202.921210] Node 0 [ 1202.926482] (UM) 45*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 26920kB [ 1202.926527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.926533] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1202.926539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.926544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1202.926548] 7509 total pagecache pages [ 1202.926556] 0 pages in swap cache [ 1202.926561] Swap cache stats: add 0, delete 0, find 0/0 [ 1202.926565] Free swap = 0kB [ 1202.926569] Total swap = 0kB [ 1202.926575] 2097051 pages RAM [ 1202.926578] 0 pages HighMem/MovableOnly [ 1202.926581] 363840 pages reserved [ 1202.926602] 0 pages cma reserved [ 1203.112209] warn_alloc_show_mem: 2 callbacks suppressed [ 1203.112213] Mem-Info: [ 1203.112231] active_anon:20365 inactive_anon:6740 isolated_anon:24 [ 1203.112231] active_file:171 inactive_file:119 isolated_file:0 [ 1203.112231] unevictable:0 dirty:37 writeback:0 unstable:0 [ 1203.112231] slab_reclaimable:23479 slab_unreclaimable:111525 [ 1203.112231] mapped:54681 shmem:6925 pagetables:777 bounce:0 [ 1203.112231] free:38764 free_pcp:126 free_cma:0 [ 1203.112249] Node 0 active_anon:81452kB inactive_anon:26960kB active_file:684kB inactive_file:472kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:218724kB dirty:148kB writeback:0kB shmem:27700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1203.116524] DMA32: [ 1203.127971] syz-executor.4: [ 1203.128112] 3031*4kB [ 1203.134899] page allocation failure: order:4 [ 1203.138421] (UMEH) [ 1203.141574] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1203.145119] 7417*8kB [ 1203.157391] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1203.186416] (UMEH) [ 1203.269386] (null) [ 1203.273780] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1203.274039] Node 0 [ 1203.279239] CPU: 1 PID: 11493 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1203.289350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.294086] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.298693] Call Trace: [ 1203.326780] dump_stack+0x1b2/0x281 [ 1203.330412] warn_alloc.cold+0x96/0x1cc [ 1203.334476] ? zone_watermark_ok_safe+0x220/0x220 [ 1203.339331] __alloc_pages_nodemask+0x2127/0x2720 [ 1203.344169] ? finish_task_switch+0x178/0x610 [ 1203.348659] ? switch_mm_irqs_off+0x601/0xeb0 [ 1203.353156] ? lock_acquire+0x170/0x3f0 [ 1203.357135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1203.361983] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1203.367444] ? __mutex_unlock_slowpath+0x75/0x770 [ 1203.372282] ? ion_page_pool_remove+0xf2/0x280 [ 1203.374032] lowmem_reserve[]: 0 [ 1203.376858] alloc_pages_current+0x155/0x260 [ 1203.376863] 2717 [ 1203.380124] ion_page_pool_alloc+0x118/0x1b0 [ 1203.386720] 2718 2718 [ 1203.390947] ion_system_heap_allocate+0x133/0x8c0 [ 1203.390959] ? _raw_spin_unlock+0x29/0x40 [ 1203.393431] 2718 [ 1203.398252] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1203.398261] ? ion_system_contig_heap_create+0x130/0x130 [ 1203.398271] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1203.398281] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1203.398293] ion_alloc+0x27a/0x810 [ 1203.404457] ? ion_dma_buf_release+0x40/0x40 [ 1203.404469] ? __might_fault+0x177/0x1b0 [ 1203.404482] ion_ioctl+0xea/0x1f0 [ 1203.404491] ? ion_query_heaps+0x360/0x360 [ 1203.404510] ? lock_acquire+0x170/0x3f0 [ 1203.409416] syz-executor.4: [ 1203.414837] ? lock_downgrade+0x740/0x740 [ 1203.414846] ? ion_query_heaps+0x360/0x360 [ 1203.414855] do_vfs_ioctl+0x75a/0xff0 [ 1203.414865] ? ioctl_preallocate+0x1a0/0x1a0 [ 1203.414872] ? lock_downgrade+0x740/0x740 [ 1203.414887] ? __fget+0x225/0x360 [ 1203.423557] Node 0 [ 1203.424705] ? do_vfs_ioctl+0xff0/0xff0 [ 1203.424715] ? security_file_ioctl+0x83/0xb0 [ 1203.424725] SyS_ioctl+0x7f/0xb0 [ 1203.424732] ? do_vfs_ioctl+0xff0/0xff0 [ 1203.424744] do_syscall_64+0x1d5/0x640 [ 1203.428271] DMA32 free:17828kB min:36200kB low:45248kB high:54296kB active_anon:81556kB inactive_anon:26960kB active_file:508kB inactive_file:156kB unevictable:0kB writepending:56kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:3108kB bounce:0kB free_pcp:776kB local_pcp:744kB free_cma:0kB [ 1203.432653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1203.438503] page allocation failure: order:0 [ 1203.440115] RIP: 0033:0x45e219 [ 1203.444351] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1203.448273] RSP: 002b:00007fbde3077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.451271] (null) [ 1203.455394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1203.455399] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1203.455404] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.455410] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1203.455415] R13: 00007ffee53ba35f R14: 00007fbde30789c0 R15: 000000000119bf8c [ 1203.458124] 1722*16kB [ 1203.471694] lowmem_reserve[]: [ 1203.474153] (UMEH) [ 1203.487657] 0 [ 1203.489597] 498*32kB [ 1203.493549] 0 [ 1203.497464] (UMEH) 4*64kB (H) 5*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 116612kB [ 1203.497501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1203.497546] Node 1 Normal: 72*4kB (UM) 371*8kB (UM) 292*16kB (UM) 87*32kB (UM) 3*64kB (UM) 1*128kB (U) 2*256kB [ 1203.536194] syz-executor.4 cpuset= [ 1203.538931] (UM) [ 1203.551107] / [ 1203.553718] 20*512kB [ 1203.555888] mems_allowed=0-1 [ 1203.555900] CPU: 0 PID: 11503 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1203.563147] (UM) [ 1203.570397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.570401] Call Trace: [ 1203.570418] dump_stack+0x1b2/0x281 [ 1203.570432] warn_alloc.cold+0x96/0x1cc [ 1203.577689] 3*1024kB [ 1203.584947] ? zone_watermark_ok_safe+0x220/0x220 [ 1203.584957] ? usleep_range+0x130/0x130 [ 1203.584967] ? try_to_free_pages+0x23f/0x6e0 [ 1203.592215] (U) [ 1203.594693] ? _find_next_bit+0xdb/0x100 [ 1203.594703] ? run_timer_softirq+0x5a0/0x5a0 [ 1203.594720] __alloc_pages_nodemask+0x2127/0x2720 [ 1203.597792] 1*2048kB [ 1203.600018] ? lock_acquire+0x170/0x3f0 [ 1203.601784] (U) [ 1203.604182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1203.604191] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1203.604206] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1203.605981] 0*4096kB [ 1203.615153] ? alloc_pages_current+0x73/0x260 [ 1203.615165] alloc_pages_current+0x155/0x260 [ 1203.644541] = 26904kB [ 1203.645686] ion_page_pool_alloc+0x118/0x1b0 [ 1203.648767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.656642] ion_system_heap_allocate+0x133/0x8c0 [ 1203.656655] ? _raw_spin_unlock+0x29/0x40 [ 1203.656665] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1203.673233] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1203.674227] ? ion_system_contig_heap_create+0x130/0x130 [ 1203.674237] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1203.674250] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1203.678200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.680596] ion_alloc+0x27a/0x810 [ 1203.689925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1203.693792] ? ion_dma_buf_release+0x40/0x40 [ 1203.695757] 6950 total pagecache pages [ 1203.699793] ? __might_fault+0x177/0x1b0 [ 1203.704223] 0 pages in swap cache [ 1203.709015] ion_ioctl+0xea/0x1f0 [ 1203.711396] Swap cache stats: add 0, delete 0, find 0/0 [ 1203.715352] ? ion_query_heaps+0x360/0x360 [ 1203.715365] ? lock_acquire+0x170/0x3f0 [ 1203.715376] ? lock_downgrade+0x740/0x740 [ 1203.717327] Free swap = 0kB [ 1203.722153] ? ion_query_heaps+0x360/0x360 [ 1203.726638] Total swap = 0kB [ 1203.732050] do_vfs_ioctl+0x75a/0xff0 [ 1203.734454] 2097051 pages RAM [ 1203.738914] ? ioctl_preallocate+0x1a0/0x1a0 [ 1203.743290] 0 pages HighMem/MovableOnly [ 1203.745694] ? lock_downgrade+0x740/0x740 [ 1203.745707] ? __fget+0x225/0x360 [ 1203.745716] ? do_vfs_ioctl+0xff0/0xff0 [ 1203.750094] 363840 pages reserved [ 1203.758921] ? security_file_ioctl+0x83/0xb0 [ 1203.758930] SyS_ioctl+0x7f/0xb0 [ 1203.758939] ? do_vfs_ioctl+0xff0/0xff0 [ 1203.763754] 0 pages cma reserved [ 1203.767883] do_syscall_64+0x1d5/0x640 [ 1203.767904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1203.772806] Out of memory (oom_kill_allocating_task): Kill process 4621 (systemd-journal) score 0 or sacrifice child [ 1203.781354] RIP: 0033:0x45e219 [ 1203.781359] RSP: 002b:00007fbde3056c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.781370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1203.786941] Killed process 4621 (systemd-journal) total-vm:54288kB, anon-rss:512kB, file-rss:4kB, shmem-rss:11540kB [ 1203.791802] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1203.791809] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1203.797377] oom_reaper: reaped process 4621 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:11540kB [ 1203.805442] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1203.805447] R13: 00007ffee53ba35f R14: 00007fbde30579c0 R15: 000000000119c034 [ 1203.814957] 0 0 0 [ 1204.005687] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1204.035605] lowmem_reserve[]: 0 0 0 0 0 [ 1204.039762] Node 1 Normal free:322812kB min:53696kB low:67120kB high:80544kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1204.068506] lowmem_reserve[]: 0 0 0 0 0 [ 1204.072688] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 11084kB [ 1204.086520] Node 0 DMA32: 397*4kB (UME) 201*8kB (UME) 137*16kB (UME) 213*32kB (UME) 444*64kB (UM) 98*128kB (UM) 40*256kB (U) 19*512kB (U) 67*1024kB (U) 28*2048kB (U) 4*4096kB (U) = 215468kB [ 1204.103966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1204.115322] Node 1 Normal: 41*4kB (UM) 371*8kB (UM) 292*16kB (UM) 88*32kB (UM) 1070*64kB (UM) 132*128kB (U) 90*256kB (UM) 120*512kB (UM) 121*1024kB (U) 7*2048kB (U) 1*4096kB (U) = 322812kB [ 1204.133655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.143111] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1204.151917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.161227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.170553] 8483 total pagecache pages [ 1204.174885] 0 pages in swap cache [ 1204.178412] Swap cache stats: add 0, delete 0, find 0/0 [ 1204.183858] Free swap = 0kB [ 1204.187270] Total swap = 0kB [ 1204.190560] 2097051 pages RAM [ 1204.193892] 0 pages HighMem/MovableOnly [ 1204.198393] 363840 pages reserved [ 1204.201934] 0 pages cma reserved [ 1204.282549] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1204.299208] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1204.317148] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1204.323865] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1204.339935] systemd[1]: Stopped Journal Service. [ 1204.367494] systemd[1]: Starting Journal Service... [ 1204.690417] systemd-journald[11518]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1205.115883] systemd[1]: Started Journal Service. 19:44:19 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r2 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) 19:44:19 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:19 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x8, [{@local, 0x2}, {@multicast1, 0xfffff0dc}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@broadcast, 0x2}]}]}}}}}) 19:44:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:19 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) socket$inet6(0xa, 0x3, 0x4) 19:44:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:20 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:20 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}, @timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@remote, 0xfffffffa}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x180}, {@rand_addr=0x64010102, 0x60}, {@remote, 0x1000}]}]}}}}}) 19:44:20 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) 19:44:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x6aba, 0x1c, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) [ 1207.039107] warn_alloc: 1 callbacks suppressed [ 1207.039112] syz-executor.4: [ 1207.042053] syz-executor.5: [ 1207.043953] page allocation failure: order:4 [ 1207.051562] syz-executor.5: [ 1207.056028] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1207.056044] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1207.056064] CPU: 1 PID: 11534 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1207.056069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.056072] Call Trace: [ 1207.056087] dump_stack+0x1b2/0x281 [ 1207.056102] warn_alloc.cold+0x96/0x1cc [ 1207.063258] page allocation failure: order:4 [ 1207.069493] ? zone_watermark_ok_safe+0x220/0x220 [ 1207.069516] __alloc_pages_nodemask+0x2127/0x2720 [ 1207.069527] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1207.069535] ? finish_task_switch+0x178/0x610 [ 1207.069545] ? finish_task_switch+0x14d/0x610 [ 1207.075227] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1207.082496] ? lock_acquire+0x170/0x3f0 [ 1207.082512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1207.145231] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1207.150669] ? __mutex_unlock_slowpath+0x75/0x770 [ 1207.155491] ? alloc_pages_current+0x15d/0x260 [ 1207.160065] alloc_pages_current+0x155/0x260 [ 1207.164460] ion_page_pool_alloc+0x118/0x1b0 [ 1207.168852] ion_system_heap_allocate+0x133/0x8c0 [ 1207.173678] ? ion_alloc+0x187/0x810 [ 1207.177371] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1207.182807] ? ion_system_contig_heap_create+0x130/0x130 [ 1207.188237] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1207.193249] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1207.198087] ion_alloc+0x204/0x810 [ 1207.201613] ? ion_dma_buf_release+0x40/0x40 [ 1207.206018] ? __might_fault+0x177/0x1b0 [ 1207.210078] ion_ioctl+0xea/0x1f0 [ 1207.213522] ? ion_query_heaps+0x360/0x360 [ 1207.217738] ? lock_acquire+0x170/0x3f0 [ 1207.221705] ? lock_downgrade+0x740/0x740 [ 1207.225845] ? ion_query_heaps+0x360/0x360 [ 1207.230083] do_vfs_ioctl+0x75a/0xff0 [ 1207.233867] ? ioctl_preallocate+0x1a0/0x1a0 [ 1207.238272] ? lock_downgrade+0x740/0x740 [ 1207.242410] ? __fget+0x225/0x360 [ 1207.245843] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.249799] ? security_file_ioctl+0x83/0xb0 [ 1207.254188] SyS_ioctl+0x7f/0xb0 [ 1207.257535] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.261492] do_syscall_64+0x1d5/0x640 [ 1207.265366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1207.270535] RIP: 0033:0x45e219 [ 1207.273703] RSP: 002b:00007fe0451b4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.281391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1207.288659] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1207.295910] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.303160] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1207.310410] R13: 00007ffdd69fedbf R14: 00007fe0451b59c0 R15: 000000000119bf8c [ 1207.317845] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1207.334388] (null) [ 1207.337705] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1207.342888] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1207.353753] CPU: 0 PID: 11539 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1207.361660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.371012] Call Trace: [ 1207.373607] dump_stack+0x1b2/0x281 [ 1207.377237] warn_alloc.cold+0x96/0x1cc [ 1207.381214] ? zone_watermark_ok_safe+0x220/0x220 [ 1207.386072] __alloc_pages_nodemask+0x2127/0x2720 [ 1207.390913] ? __schedule+0x893/0x1de0 [ 1207.394809] ? lock_acquire+0x170/0x3f0 [ 1207.398787] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1207.403632] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1207.409093] ? check_preemption_disabled+0x35/0x240 [ 1207.414151] ? __mutex_unlock_slowpath+0x75/0x770 [ 1207.419004] alloc_pages_current+0x155/0x260 [ 1207.423430] ion_page_pool_alloc+0x118/0x1b0 [ 1207.427848] ion_system_heap_allocate+0x133/0x8c0 [ 1207.432730] ? ion_alloc+0x187/0x810 [ 1207.436445] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1207.437568] warn_alloc_show_mem: 3 callbacks suppressed [ 1207.437572] Mem-Info: [ 1207.441892] ? ion_system_contig_heap_create+0x130/0x130 [ 1207.441905] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1207.449189] active_anon:22256 inactive_anon:7997 isolated_anon:0 [ 1207.449189] active_file:1875 inactive_file:1877 isolated_file:27 [ 1207.449189] unevictable:0 dirty:67 writeback:0 unstable:0 [ 1207.449189] slab_reclaimable:23345 slab_unreclaimable:111306 [ 1207.449189] mapped:55320 shmem:8973 pagetables:775 bounce:0 [ 1207.449189] free:63521 free_pcp:187 free_cma:0 [ 1207.449647] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1207.449660] ion_alloc+0x204/0x810 [ 1207.461962] Node 0 active_anon:88372kB inactive_anon:23792kB active_file:7260kB inactive_file:7456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219408kB dirty:236kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1207.493675] ? ion_dma_buf_release+0x40/0x40 [ 1207.493687] ? __might_fault+0x177/0x1b0 [ 1207.493697] ion_ioctl+0xea/0x1f0 [ 1207.493707] ? ion_query_heaps+0x360/0x360 [ 1207.493718] ? lock_acquire+0x170/0x3f0 [ 1207.493727] ? lock_downgrade+0x740/0x740 [ 1207.493734] ? ion_query_heaps+0x360/0x360 [ 1207.493744] do_vfs_ioctl+0x75a/0xff0 [ 1207.493756] ? ioctl_preallocate+0x1a0/0x1a0 [ 1207.493763] ? lock_downgrade+0x740/0x740 [ 1207.493777] ? __fget+0x225/0x360 [ 1207.493787] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.493797] ? security_file_ioctl+0x83/0xb0 [ 1207.493806] SyS_ioctl+0x7f/0xb0 [ 1207.493813] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.493824] do_syscall_64+0x1d5/0x640 [ 1207.493841] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1207.506803] Node 1 active_anon:652kB inactive_anon:8196kB active_file:240kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:1872kB dirty:32kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1207.530315] RIP: 0033:0x45e219 [ 1207.530320] RSP: 002b:00007fbde3056c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.530329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1207.530334] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1207.530338] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1207.530342] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1207.530347] R13: 00007ffee53ba35f R14: 00007fbde30579c0 R15: 000000000119c034 [ 1207.531666] CPU: 0 PID: 11543 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1207.542415] syz-executor.4: [ 1207.546558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.546562] Call Trace: [ 1207.546579] dump_stack+0x1b2/0x281 [ 1207.546592] warn_alloc.cold+0x96/0x1cc [ 1207.546603] ? zone_watermark_ok_safe+0x220/0x220 [ 1207.546625] __alloc_pages_nodemask+0x2127/0x2720 [ 1207.546634] ? io_schedule_timeout+0x140/0x140 [ 1207.546649] ? lock_acquire+0x170/0x3f0 [ 1207.546662] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1207.546679] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1207.546692] ? __mutex_unlock_slowpath+0x75/0x770 [ 1207.546707] alloc_pages_current+0x155/0x260 [ 1207.546721] ion_page_pool_alloc+0x118/0x1b0 [ 1207.546733] ion_system_heap_allocate+0x133/0x8c0 [ 1207.546744] ? ion_alloc+0x187/0x810 [ 1207.546753] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1207.546764] ? ion_system_contig_heap_create+0x130/0x130 [ 1207.558297] page allocation failure: order:4 [ 1207.559090] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1207.565285] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1207.567294] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1207.567307] ion_alloc+0x204/0x810 [ 1207.571463] Node 0 [ 1207.574905] ? ion_dma_buf_release+0x40/0x40 [ 1207.574915] ? __might_fault+0x177/0x1b0 [ 1207.574927] ion_ioctl+0xea/0x1f0 [ 1207.574937] ? ion_query_heaps+0x360/0x360 [ 1207.574949] ? lock_acquire+0x170/0x3f0 [ 1207.574957] ? lock_downgrade+0x740/0x740 [ 1207.574965] ? ion_query_heaps+0x360/0x360 [ 1207.574975] do_vfs_ioctl+0x75a/0xff0 [ 1207.574987] ? ioctl_preallocate+0x1a0/0x1a0 [ 1207.574994] ? lock_downgrade+0x740/0x740 [ 1207.575007] ? __fget+0x225/0x360 [ 1207.575015] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.575027] ? security_file_ioctl+0x83/0xb0 [ 1207.586843] (null) [ 1207.590684] SyS_ioctl+0x7f/0xb0 [ 1207.590691] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.590703] do_syscall_64+0x1d5/0x640 [ 1207.598145] DMA free:11080kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:44kB inactive_file:176kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1207.599748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1207.599758] RIP: 0033:0x45e219 [ 1207.632533] syz-executor.4 cpuset= [ 1207.637684] RSP: 002b:00007fe045193c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.637694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1207.637698] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1207.637703] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1207.637707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1207.637712] R13: 00007ffdd69fedbf R14: 00007fe0451949c0 R15: 000000000119c034 [ 1207.761295] lowmem_reserve[]: [ 1207.767563] / [ 1207.785545] 0 [ 1207.788941] mems_allowed=0-1 [ 1207.800956] 2717 [ 1207.803267] CPU: 1 PID: 11527 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1207.815536] 2718 [ 1207.818046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.818051] Call Trace: [ 1207.818069] dump_stack+0x1b2/0x281 [ 1207.827732] 2718 [ 1207.830463] warn_alloc.cold+0x96/0x1cc [ 1207.830475] ? zone_watermark_ok_safe+0x220/0x220 [ 1207.848724] 2718 [ 1207.851986] __alloc_pages_nodemask+0x2127/0x2720 [ 1207.885878] ? _raw_spin_unlock_irq+0x24/0x80 [ 1207.885893] ? lock_acquire+0x170/0x3f0 [ 1207.885909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1207.885924] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1207.909326] Node 0 [ 1207.912795] ? __mutex_unlock_slowpath+0x75/0x770 [ 1207.912810] alloc_pages_current+0x155/0x260 [ 1207.920130] DMA32 free:36724kB min:36200kB low:45248kB high:54296kB active_anon:88328kB inactive_anon:23792kB active_file:7320kB inactive_file:7188kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2772kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1207.927341] ion_page_pool_alloc+0x118/0x1b0 [ 1207.927353] ion_system_heap_allocate+0x133/0x8c0 [ 1207.927362] ? ion_alloc+0x187/0x810 [ 1207.927372] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1207.927381] ? ion_system_contig_heap_create+0x130/0x130 [ 1207.927394] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1207.934720] lowmem_reserve[]: [ 1207.941909] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1207.941920] ion_alloc+0x204/0x810 [ 1207.941935] ? ion_dma_buf_release+0x40/0x40 [ 1207.945062] 0 [ 1207.946714] ? __might_fault+0x177/0x1b0 [ 1207.946727] ion_ioctl+0xea/0x1f0 [ 1207.948528] 0 [ 1207.951598] ? ion_query_heaps+0x360/0x360 [ 1207.951608] ? lock_acquire+0x170/0x3f0 [ 1207.951618] ? lock_downgrade+0x740/0x740 [ 1207.953675] 0 [ 1207.961520] ? ion_query_heaps+0x360/0x360 [ 1207.961532] do_vfs_ioctl+0x75a/0xff0 [ 1207.961544] ? ioctl_preallocate+0x1a0/0x1a0 [ 1207.961557] ? lock_downgrade+0x740/0x740 [ 1207.963617] 0 [ 1207.972941] ? __fget+0x225/0x360 [ 1207.972951] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.972961] ? security_file_ioctl+0x83/0xb0 [ 1207.972971] SyS_ioctl+0x7f/0xb0 [ 1207.975572] 0 [ 1207.979145] ? do_vfs_ioctl+0xff0/0xff0 [ 1207.979156] do_syscall_64+0x1d5/0x640 [ 1207.979174] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1207.985162] RIP: 0033:0x45e219 [ 1207.985167] RSP: 002b:00007fbde3077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.985177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1207.985182] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1207.985190] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.990035] Node 0 [ 1207.992054] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1207.992060] R13: 00007ffee53ba35f R14: 00007fbde30789c0 R15: 000000000119bf8c [ 1208.233124] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.258750] lowmem_reserve[]: 0 0 0 0 0 [ 1208.264463] Node 1 Normal free:53224kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:8196kB active_file:172kB inactive_file:140kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1208.293032] lowmem_reserve[]: 0 0 0 0 0 [ 1208.298909] Node 0 DMA: 6*4kB (M) 1*8kB (M) 4*16kB (UM) 3*32kB (UM) 2*64kB (UM) 2*128kB (M) 1*256kB (U) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11072kB [ 1208.313963] Node 0 DMA32: 1108*4kB (UME) 409*8kB (UME) 165*16kB (ME) 679*32kB (UME) 20*64kB (M) 9*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36296kB [ 1208.331258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1208.343558] Node 1 Normal: 30*4kB (M) 341*8kB (UM) 324*16kB (UM) 121*32kB (UM) 18*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (M) 2*1024kB (UM) 0*2048kB 9*4096kB (U) = 53632kB [ 1208.362353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1208.373335] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1208.382112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1208.391510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1208.400159] 9018 total pagecache pages [ 1208.404102] 0 pages in swap cache [ 1208.407561] Swap cache stats: add 0, delete 0, find 0/0 [ 1208.412923] Free swap = 0kB [ 1208.415965] Total swap = 0kB [ 1208.419001] 2097051 pages RAM [ 1208.422096] 0 pages HighMem/MovableOnly [ 1208.426111] 363840 pages reserved [ 1208.429569] 0 pages cma reserved [ 1208.561747] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1208.578222] systemd-journal cpuset=/ mems_allowed=0-1 [ 1208.583665] CPU: 0 PID: 11518 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1208.591628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1208.600974] Call Trace: [ 1208.603577] dump_stack+0x1b2/0x281 [ 1208.607211] dump_header+0x178/0x82f [ 1208.610938] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1208.616061] ? ___ratelimit+0x2cd/0x530 [ 1208.620050] oom_kill_process.cold+0x10/0xb18 [ 1208.624560] out_of_memory+0xe3e/0x1190 [ 1208.628558] ? oom_killer_disable+0x1c0/0x1c0 [ 1208.633067] ? mutex_trylock+0x152/0x1a0 [ 1208.637140] __alloc_pages_nodemask+0x23e1/0x2720 [ 1208.641970] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1208.646828] alloc_pages_current+0x155/0x260 [ 1208.651216] filemap_fault+0xea3/0x1980 [ 1208.655175] ext4_filemap_fault+0x84/0xb0 [ 1208.659302] __do_fault+0xfa/0x380 [ 1208.662822] __handle_mm_fault+0x2497/0x4620 [ 1208.667211] ? vm_insert_page+0x7c0/0x7c0 [ 1208.671351] ? __fsnotify_inode_delete+0x20/0x20 [ 1208.676085] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1208.682737] handle_mm_fault+0x391/0x860 [ 1208.686782] __do_page_fault+0x549/0xad0 [ 1208.690826] ? spurious_fault+0x640/0x640 [ 1208.694969] ? do_page_fault+0x60/0x500 [ 1208.698957] ? page_fault+0x2f/0x50 [ 1208.702573] page_fault+0x45/0x50 [ 1208.706017] RIP: 0122:0x55ee43cc7958 [ 1208.709710] RSP: a0cd5fe0:0000000000000000 EFLAGS: 7fffa0cd3de0 [ 1208.715667] Mem-Info: [ 1208.731417] active_anon:22256 inactive_anon:7997 isolated_anon:0 [ 1208.731417] active_file:9 inactive_file:0 isolated_file:0 [ 1208.731417] unevictable:0 dirty:5 writeback:1 unstable:0 [ 1208.731417] slab_reclaimable:23302 slab_unreclaimable:111068 [ 1208.731417] mapped:52622 shmem:8973 pagetables:775 bounce:0 [ 1208.731417] free:25083 free_pcp:1 free_cma:0 [ 1208.770744] Node 0 active_anon:88372kB inactive_anon:23792kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:16kB writeback:4kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1208.805429] Node 1 active_anon:652kB inactive_anon:8196kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1584kB dirty:4kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1208.838731] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.872511] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1208.877642] Node 0 DMA32 free:35628kB min:36200kB low:45248kB high:54296kB active_anon:88328kB inactive_anon:23792kB active_file:32kB inactive_file:64kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2772kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1208.913068] lowmem_reserve[]: 0 0 0 0 0 [ 1208.917360] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.949566] lowmem_reserve[]: 0 0 0 0 0 [ 1208.953576] Node 1 Normal free:53632kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:8196kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:224kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1208.988375] lowmem_reserve[]: 0 0 0 0 0 [ 1208.992388] Node 0 DMA: 6*4kB (M) 1*8kB (M) 4*16kB (UM) 3*32kB (UM) 2*64kB (UM) 2*128kB (M) 1*256kB (U) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11072kB [ 1209.014457] Node 0 DMA32: 1196*4kB (ME) 429*8kB (ME) 170*16kB (ME) 637*32kB (UME) 21*64kB (M) 9*128kB (M) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 35864kB [ 1209.036534] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1209.049604] Node 1 Normal: 30*4kB (M) 341*8kB (UM) 324*16kB (UM) 121*32kB (UM) 18*64kB (M) 3*128kB (UM) 3*256kB (UM) 1*512kB (M) 2*1024kB (UM) 0*2048kB 9*4096kB (U) = 53632kB [ 1209.072121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.095924] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1209.106803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.120109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1209.132845] 9019 total pagecache pages [ 1209.143001] 0 pages in swap cache [ 1209.151224] Swap cache stats: add 0, delete 0, find 0/0 [ 1209.163118] Free swap = 0kB [ 1209.170108] Total swap = 0kB [ 1209.173284] 2097051 pages RAM [ 1209.182880] 0 pages HighMem/MovableOnly [ 1209.191046] 363840 pages reserved [ 1209.200744] 0 pages cma reserved [ 1209.208826] Out of memory (oom_kill_allocating_task): Kill process 11518 (systemd-journal) score 0 or sacrifice child [ 1209.246414] Killed process 11518 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:1548kB [ 1209.281680] oom_reaper: reaped process 11518 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1548kB [ 1209.514326] oom_reaper: reaped process 11534 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1209.602603] oom_reaper: reaped process 11539 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1209.617804] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1209.623063] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1209.629670] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1209.644824] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1209.655529] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1209.668257] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1209.677114] (null), order=0, oom_score_adj=0 [ 1209.683459] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1209.689680] CPU: 1 PID: 11527 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1209.691529] syz-executor.5 cpuset= [ 1209.697550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1209.697554] Call Trace: [ 1209.697575] dump_stack+0x1b2/0x281 [ 1209.697589] warn_alloc.cold+0x96/0x1cc [ 1209.697601] ? zone_watermark_ok_safe+0x220/0x220 [ 1209.697610] ? usleep_range+0x130/0x130 [ 1209.697623] ? try_to_free_pages+0x23f/0x6e0 [ 1209.714057] / [ 1209.716686] ? _find_next_bit+0xdb/0x100 [ 1209.720635] mems_allowed=0-1 [ 1209.725456] ? run_timer_softirq+0x5a0/0x5a0 [ 1209.725473] __alloc_pages_nodemask+0x2127/0x2720 [ 1209.725490] ? lock_acquire+0x170/0x3f0 [ 1209.725503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1209.725515] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1209.725531] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1209.725551] alloc_pages_current+0x155/0x260 [ 1209.725563] ion_page_pool_alloc+0x118/0x1b0 [ 1209.742075] syz-fuzzer cpuset= [ 1209.742743] ion_system_heap_allocate+0x133/0x8c0 [ 1209.749233] / [ 1209.751951] ? ion_alloc+0x187/0x810 [ 1209.751963] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1209.780723] mems_allowed=0-1 [ 1209.782695] ? ion_system_contig_heap_create+0x130/0x130 [ 1209.806855] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1209.811861] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1209.816694] ion_alloc+0x204/0x810 [ 1209.820234] ? ion_dma_buf_release+0x40/0x40 [ 1209.824642] ? __might_fault+0x177/0x1b0 [ 1209.828766] ion_ioctl+0xea/0x1f0 [ 1209.832209] ? ion_query_heaps+0x360/0x360 [ 1209.836434] ? lock_acquire+0x170/0x3f0 [ 1209.840401] ? lock_downgrade+0x740/0x740 [ 1209.844546] ? ion_query_heaps+0x360/0x360 [ 1209.848774] do_vfs_ioctl+0x75a/0xff0 [ 1209.852564] ? ioctl_preallocate+0x1a0/0x1a0 [ 1209.856957] ? lock_downgrade+0x740/0x740 [ 1209.861100] ? __fget+0x225/0x360 [ 1209.864544] ? do_vfs_ioctl+0xff0/0xff0 [ 1209.868510] ? security_file_ioctl+0x83/0xb0 [ 1209.872922] SyS_ioctl+0x7f/0xb0 [ 1209.876280] ? do_vfs_ioctl+0xff0/0xff0 [ 1209.880252] do_syscall_64+0x1d5/0x640 [ 1209.884141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1209.889319] RIP: 0033:0x45e219 [ 1209.892514] RSP: 002b:00007fbde3077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1209.900207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1209.907490] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1209.914750] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.922009] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1209.929265] R13: 00007ffee53ba35f R14: 00007fbde30789c0 R15: 000000000119bf8c [ 1209.941324] CPU: 0 PID: 8012 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 1209.948778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1209.954573] syz-executor.5 cpuset= [ 1209.958111] Call Trace: [ 1209.958117] / [ 1209.961641] dump_stack+0x1b2/0x281 [ 1209.969492] dump_header+0x178/0x82f [ 1209.973186] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1209.973635] mems_allowed=0-1 [ 1209.978289] ? ___ratelimit+0x2cd/0x530 [ 1209.985318] oom_kill_process.cold+0x10/0xb18 [ 1209.989795] out_of_memory+0xe3e/0x1190 [ 1209.993751] ? oom_killer_disable+0x1c0/0x1c0 [ 1209.998223] ? mutex_trylock+0x152/0x1a0 [ 1210.002263] __alloc_pages_nodemask+0x23e1/0x2720 [ 1210.007093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1210.011926] alloc_pages_current+0x155/0x260 [ 1210.016315] filemap_fault+0xea3/0x1980 [ 1210.020274] ext4_filemap_fault+0x84/0xb0 [ 1210.024403] __do_fault+0xfa/0x380 [ 1210.027924] __handle_mm_fault+0x2497/0x4620 [ 1210.032310] ? vm_insert_page+0x7c0/0x7c0 [ 1210.036444] handle_mm_fault+0x391/0x860 [ 1210.040484] __do_page_fault+0x549/0xad0 [ 1210.044527] ? spurious_fault+0x640/0x640 [ 1210.048655] ? do_page_fault+0x60/0x500 [ 1210.052607] ? page_fault+0x2f/0x50 [ 1210.056211] page_fault+0x45/0x50 [ 1210.059669] RIP: 376480:0x119a9ea940d [ 1210.063446] RSP: 03dd:000000c00046de40 EFLAGS: 00000003 [ 1210.063466] CPU: 1 PID: 11534 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1210.076683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.086018] Call Trace: [ 1210.088606] dump_stack+0x1b2/0x281 [ 1210.092228] warn_alloc.cold+0x96/0x1cc [ 1210.096201] ? zone_watermark_ok_safe+0x220/0x220 [ 1210.101033] ? usleep_range+0x130/0x130 [ 1210.104992] ? try_to_free_pages+0x23f/0x6e0 [ 1210.109396] ? _find_next_bit+0xdb/0x100 [ 1210.113497] ? run_timer_softirq+0x5a0/0x5a0 [ 1210.117894] __alloc_pages_nodemask+0x2127/0x2720 [ 1210.122733] ? lock_acquire+0x170/0x3f0 [ 1210.126707] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1210.131542] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1210.136040] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1210.141484] alloc_pages_current+0x155/0x260 [ 1210.145883] ion_page_pool_alloc+0x118/0x1b0 [ 1210.150284] ion_system_heap_allocate+0x133/0x8c0 [ 1210.155122] ? ion_alloc+0x187/0x810 [ 1210.158823] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1210.164271] ? ion_system_contig_heap_create+0x130/0x130 [ 1210.169716] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1210.174727] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1210.179559] ion_alloc+0x204/0x810 [ 1210.183084] ? ion_dma_buf_release+0x40/0x40 [ 1210.187482] ? __might_fault+0x177/0x1b0 [ 1210.191540] ion_ioctl+0xea/0x1f0 [ 1210.194989] ? ion_query_heaps+0x360/0x360 [ 1210.199211] ? lock_acquire+0x170/0x3f0 [ 1210.203165] ? lock_downgrade+0x740/0x740 [ 1210.207302] ? ion_query_heaps+0x360/0x360 [ 1210.211529] do_vfs_ioctl+0x75a/0xff0 [ 1210.215324] ? ioctl_preallocate+0x1a0/0x1a0 [ 1210.219720] ? lock_downgrade+0x740/0x740 [ 1210.223857] ? __fget+0x225/0x360 [ 1210.227306] ? do_vfs_ioctl+0xff0/0xff0 [ 1210.231274] ? security_file_ioctl+0x83/0xb0 [ 1210.235677] SyS_ioctl+0x7f/0xb0 [ 1210.239030] ? do_vfs_ioctl+0xff0/0xff0 [ 1210.242987] do_syscall_64+0x1d5/0x640 [ 1210.246867] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1210.252081] RIP: 0033:0x45e219 [ 1210.255264] RSP: 002b:00007fe0451b4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.262960] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1210.270213] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1210.277471] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1210.284726] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1210.291986] R13: 00007ffdd69fedbf R14: 00007fe0451b59c0 R15: 000000000119bf8c [ 1210.299266] CPU: 0 PID: 11543 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1210.307146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.316485] Call Trace: [ 1210.319060] dump_stack+0x1b2/0x281 [ 1210.322672] warn_alloc.cold+0x96/0x1cc [ 1210.326630] ? zone_watermark_ok_safe+0x220/0x220 [ 1210.331452] ? usleep_range+0x130/0x130 [ 1210.335404] ? try_to_free_pages+0x23f/0x6e0 [ 1210.339793] ? _find_next_bit+0xdb/0x100 [ 1210.343837] ? run_timer_softirq+0x5a0/0x5a0 [ 1210.348229] __alloc_pages_nodemask+0x2127/0x2720 [ 1210.353054] ? lock_acquire+0x170/0x3f0 [ 1210.357011] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1210.361834] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1210.366311] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1210.371740] ? check_preemption_disabled+0x35/0x240 [ 1210.376742] alloc_pages_current+0x155/0x260 [ 1210.381133] ion_page_pool_alloc+0x118/0x1b0 [ 1210.385522] ion_system_heap_allocate+0x133/0x8c0 [ 1210.390344] ? ion_alloc+0x187/0x810 [ 1210.394037] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1210.399467] ? ion_system_contig_heap_create+0x130/0x130 [ 1210.404897] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1210.409894] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1210.414717] ion_alloc+0x204/0x810 [ 1210.418239] ? ion_dma_buf_release+0x40/0x40 [ 1210.422629] ? __might_fault+0x177/0x1b0 [ 1210.426671] ion_ioctl+0xea/0x1f0 [ 1210.430104] ? ion_query_heaps+0x360/0x360 [ 1210.434318] ? lock_acquire+0x170/0x3f0 [ 1210.438287] ? lock_downgrade+0x740/0x740 [ 1210.442414] ? ion_query_heaps+0x360/0x360 [ 1210.446630] do_vfs_ioctl+0x75a/0xff0 [ 1210.450410] ? ioctl_preallocate+0x1a0/0x1a0 [ 1210.454813] ? lock_downgrade+0x740/0x740 [ 1210.458943] ? __fget+0x225/0x360 [ 1210.462376] ? do_vfs_ioctl+0xff0/0xff0 [ 1210.466331] ? security_file_ioctl+0x83/0xb0 [ 1210.470719] SyS_ioctl+0x7f/0xb0 [ 1210.474063] ? do_vfs_ioctl+0xff0/0xff0 [ 1210.478017] do_syscall_64+0x1d5/0x640 [ 1210.481889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1210.487059] RIP: 0033:0x45e219 [ 1210.490226] RSP: 002b:00007fe045193c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.497916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1210.505164] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1210.512412] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1210.519672] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1210.526923] R13: 00007ffdd69fedbf R14: 00007fe0451949c0 R15: 000000000119c034 [ 1210.534188] CPU: 1 PID: 11539 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1210.542071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.547278] Mem-Info: [ 1210.551412] Call Trace: [ 1210.556390] dump_stack+0x1b2/0x281 [ 1210.560014] warn_alloc.cold+0x96/0x1cc [ 1210.562561] active_anon:21057 inactive_anon:7996 isolated_anon:0 [ 1210.562561] active_file:12 inactive_file:10 isolated_file:0 [ 1210.562561] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1210.562561] slab_reclaimable:23293 slab_unreclaimable:110773 [ 1210.562561] mapped:52225 shmem:8973 pagetables:748 bounce:0 [ 1210.562561] free:13641 free_pcp:168 free_cma:0 [ 1210.563976] ? zone_watermark_ok_safe+0x220/0x220 [ 1210.563986] ? usleep_range+0x130/0x130 [ 1210.563995] ? try_to_free_pages+0x23f/0x6e0 [ 1210.564005] ? _find_next_bit+0xdb/0x100 [ 1210.564016] ? run_timer_softirq+0x5a0/0x5a0 [ 1210.564037] __alloc_pages_nodemask+0x2127/0x2720 [ 1210.609481] Node 0 active_anon:84180kB inactive_anon:23792kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1210.610249] ? lock_acquire+0x170/0x3f0 [ 1210.619584] Node 1 active_anon:48kB inactive_anon:8192kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1210.623506] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1210.663448] warn_alloc_show_mem: 3 callbacks suppressed [ 1210.663451] Mem-Info: [ 1210.681386] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1210.681403] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1210.681422] alloc_pages_current+0x155/0x260 [ 1210.681436] ion_page_pool_alloc+0x118/0x1b0 [ 1210.681448] ion_system_heap_allocate+0x133/0x8c0 [ 1210.681460] ? ion_alloc+0x187/0x810 [ 1210.681470] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1210.681480] ? ion_system_contig_heap_create+0x130/0x130 [ 1210.681489] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1210.681498] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1210.681509] ion_alloc+0x204/0x810 [ 1210.699055] Node 0 [ 1210.704033] ? ion_dma_buf_release+0x40/0x40 [ 1210.704046] ? __might_fault+0x177/0x1b0 [ 1210.704059] ion_ioctl+0xea/0x1f0 [ 1210.704069] ? ion_query_heaps+0x360/0x360 [ 1210.704083] ? lock_acquire+0x170/0x3f0 [ 1210.704093] ? lock_downgrade+0x740/0x740 [ 1210.720802] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1210.721390] ? ion_query_heaps+0x360/0x360 [ 1210.730375] lowmem_reserve[]: [ 1210.732261] do_vfs_ioctl+0x75a/0xff0 [ 1210.749500] 0 [ 1210.752201] ? ioctl_preallocate+0x1a0/0x1a0 [ 1210.761739] active_anon:21057 inactive_anon:7996 isolated_anon:0 [ 1210.761739] active_file:12 inactive_file:10 isolated_file:0 [ 1210.761739] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1210.761739] slab_reclaimable:23293 slab_unreclaimable:110773 [ 1210.761739] mapped:52225 shmem:8973 pagetables:748 bounce:0 [ 1210.761739] free:13641 free_pcp:168 free_cma:0 [ 1210.763877] ? lock_downgrade+0x740/0x740 [ 1210.763891] ? __fget+0x225/0x360 [ 1210.763902] ? do_vfs_ioctl+0xff0/0xff0 [ 1210.763913] ? security_file_ioctl+0x83/0xb0 [ 1210.763923] SyS_ioctl+0x7f/0xb0 [ 1210.763931] ? do_vfs_ioctl+0xff0/0xff0 [ 1210.763942] do_syscall_64+0x1d5/0x640 [ 1210.780348] Node 0 active_anon:84180kB inactive_anon:23792kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1210.797871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1210.797880] RIP: 0033:0x45e219 [ 1210.797886] RSP: 002b:00007fbde3056c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.797896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1210.797901] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1210.797907] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1210.797913] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1210.797918] R13: 00007ffee53ba35f R14: 00007fbde30579c0 R15: 000000000119c034 [ 1210.916365] syz-executor.5: [ 1210.919977] 2717 [ 1210.982649] page allocation failure: order:4 [ 1210.995756] 2718 2718 2718 [ 1211.001787] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1211.003095] Node 0 [ 1211.003096] (null) [ 1211.003103] syz-executor.5 cpuset= [ 1211.028775] DMA32 free:25516kB min:36200kB low:45248kB high:54296kB active_anon:84164kB inactive_anon:23792kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2772kB bounce:0kB free_pcp:864kB local_pcp:184kB free_cma:0kB [ 1211.058591] / mems_allowed=0-1 [ 1211.080786] CPU: 1 PID: 11534 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1211.088677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.098019] Call Trace: [ 1211.100614] dump_stack+0x1b2/0x281 [ 1211.104269] warn_alloc.cold+0x96/0x1cc [ 1211.108238] ? zone_watermark_ok_safe+0x220/0x220 [ 1211.113088] __alloc_pages_nodemask+0x2127/0x2720 [ 1211.117931] ? lock_acquire+0x170/0x3f0 [ 1211.121905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1211.126749] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1211.132194] ? __mutex_unlock_slowpath+0x75/0x770 [ 1211.137038] alloc_pages_current+0x155/0x260 [ 1211.141444] ion_page_pool_alloc+0x118/0x1b0 [ 1211.145849] ion_system_heap_allocate+0x133/0x8c0 [ 1211.150691] ? _raw_spin_unlock+0x29/0x40 [ 1211.154833] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1211.159498] lowmem_reserve[]: [ 1211.159775] ? ion_system_contig_heap_create+0x130/0x130 [ 1211.159777] 0 0 [ 1211.162868] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1211.162880] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1211.180111] ion_alloc+0x27a/0x810 [ 1211.183652] ? ion_dma_buf_release+0x40/0x40 [ 1211.188057] ? __might_fault+0x177/0x1b0 [ 1211.192117] ion_ioctl+0xea/0x1f0 [ 1211.195594] ? ion_query_heaps+0x360/0x360 [ 1211.199824] ? lock_acquire+0x170/0x3f0 [ 1211.203791] ? lock_downgrade+0x740/0x740 [ 1211.207163] 0 [ 1211.207925] ? ion_query_heaps+0x360/0x360 [ 1211.207936] do_vfs_ioctl+0x75a/0xff0 [ 1211.209718] 0 [ 1211.213960] ? ioctl_preallocate+0x1a0/0x1a0 [ 1211.213969] ? lock_downgrade+0x740/0x740 [ 1211.213981] ? __fget+0x225/0x360 [ 1211.213990] ? do_vfs_ioctl+0xff0/0xff0 [ 1211.235467] ? security_file_ioctl+0x83/0xb0 [ 1211.239870] SyS_ioctl+0x7f/0xb0 [ 1211.242950] 0 [ 1211.243225] ? do_vfs_ioctl+0xff0/0xff0 [ 1211.243231] Node 0 [ 1211.245034] do_syscall_64+0x1d5/0x640 [ 1211.245052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1211.245060] RIP: 0033:0x45e219 [ 1211.245065] RSP: 002b:00007fe0451b4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.245076] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1211.245080] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1211.245087] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.265305] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.271171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1211.325088] R13: 00007ffdd69fedbf R14: 00007fe0451b59c0 R15: 000000000119bf8c [ 1211.341542] lowmem_reserve[]: 0 0 0 0 0 [ 1211.352284] Node 1 Normal free:106320kB min:53696kB low:67120kB high:80544kB active_anon:48kB inactive_anon:8192kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:120kB bounce:0kB free_pcp:832kB local_pcp:184kB free_cma:0kB [ 1211.427813] Node 1 active_anon:48kB inactive_anon:8192kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1211.490641] lowmem_reserve[]: 0 0 0 0 0 [ 1211.498049] Node 0 DMA: 9*4kB (UM) 2*8kB (M) 5*16kB (UM) 2*32kB (UM) 4*64kB (UM) 4*128kB (UM) 0*256kB 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 11204kB [ 1211.546937] Node 0 DMA free:11204kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.593375] Node 0 DMA32: 686*4kB (UME) 431*8kB (UME) 173*16kB (UME) 46*32kB (UME) 2263*64kB (UME) 430*128kB (UM) 241*256kB (UM) 140*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 343680kB [ 1211.633613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1211.673624] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1211.678707] Node 0 DMA32 free:435128kB min:36200kB low:45248kB high:54296kB active_anon:84264kB inactive_anon:23792kB active_file:140kB inactive_file:1780kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2772kB bounce:0kB free_pcp:412kB local_pcp:196kB free_cma:0kB [ 1211.713602] Node 1 Normal: 68*4kB (UME) 372*8kB (UME) 358*16kB (UME) 61*32kB (UME) 4181*64kB (UME) 635*128kB (UME) 359*256kB (UME) 247*512kB (UME) 199*1024kB (UME) 16*2048kB (UE) 6*4096kB (U) = 839280kB [ 1211.783582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.792457] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1211.823571] lowmem_reserve[]: 0 0 0 0 0 [ 1211.827602] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.864099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.872975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1211.913606] 9513 total pagecache pages [ 1211.953633] lowmem_reserve[]: 0 0 0 0 0 [ 1211.953655] Node 1 Normal free:1145264kB min:53696kB low:67120kB high:80544kB active_anon:48kB inactive_anon:8192kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:120kB bounce:0kB free_pcp:832kB local_pcp:184kB free_cma:0kB [ 1211.953677] lowmem_reserve[]: 0 0 0 0 0 [ 1211.953695] Node 0 DMA: 9*4kB (UM) 2*8kB (M) 5*16kB (UM) 2*32kB (UM) 10*64kB (UM) 7*128kB (UM) 3*256kB (U) 3*512kB [ 1211.990248] 0 pages in swap cache [ 1212.023562] Swap cache stats: add 0, delete 0, find 0/0 [ 1212.028946] Free swap = 0kB [ 1212.031952] Total swap = 0kB [ 1212.063570] 2097051 pages RAM [ 1212.066697] 0 pages HighMem/MovableOnly [ 1212.070661] 363840 pages reserved [ 1212.093551] 0 pages cma reserved [ 1212.096962] Out of memory (oom_kill_allocating_task): Kill process 8012 (syz-fuzzer) score 0 or sacrifice child [ 1212.107280] (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 11204kB [ 1212.118885] Node 0 DMA32: 2993*4kB (UME) 9803*8kB (UME) 3599*16kB (UME) 1200*32kB (UME) 2669*64kB (UME) 620*128kB (UM) 351*256kB (UM) 205*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 631372kB [ 1212.146131] Killed process 8023 (syz-executor.4) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1212.178695] oom_reaper: reaped process 8023 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1212.184247] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1212.222581] Node 1 Normal: 129*4kB (UME) 427*8kB (UME) 351*16kB (UME) 145*32kB (UME) 3136*64kB (UME) 718*128kB (UME) 518*256kB (UME) 442*512kB (UME) 3*1024kB (UME) 19*2048kB (UE) 13*4096kB (U) = 760940kB [ 1212.245867] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1212.267671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.279396] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1212.288385] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1212.309395] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1212.309505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.332641] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1212.341199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1212.358331] systemd[1]: Stopped Journal Service. [ 1212.359873] 11934 total pagecache pages [ 1212.375249] 0 pages in swap cache [ 1212.383126] Swap cache stats: add 0, delete 0, find 0/0 [ 1212.394089] Free swap = 0kB [ 1212.399547] systemd[1]: Starting Journal Service... [ 1212.400423] Total swap = 0kB [ 1212.421163] 2097051 pages RAM [ 1212.424350] 0 pages HighMem/MovableOnly [ 1212.428330] 363840 pages reserved [ 1212.431794] 0 pages cma reserved [ 1212.572163] systemd-journald[11560]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1212.701957] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1212.714895] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1212.726792] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1212.732222] CPU: 1 PID: 11527 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1212.740104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.749461] Call Trace: [ 1212.752058] dump_stack+0x1b2/0x281 [ 1212.755693] warn_alloc.cold+0x96/0x1cc [ 1212.759672] ? zone_watermark_ok_safe+0x220/0x220 [ 1212.764528] __alloc_pages_nodemask+0x2127/0x2720 [ 1212.769370] ? lock_acquire+0x170/0x3f0 [ 1212.773350] ? lock_acquire+0x170/0x3f0 [ 1212.777325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1212.782171] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1212.787627] ? __mutex_unlock_slowpath+0x75/0x770 [ 1212.792481] alloc_pages_current+0x155/0x260 [ 1212.796898] ion_page_pool_alloc+0x118/0x1b0 [ 1212.801313] ion_system_heap_allocate+0x133/0x8c0 [ 1212.806242] ? _raw_spin_unlock+0x29/0x40 [ 1212.810386] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1212.815309] ? ion_system_contig_heap_create+0x130/0x130 [ 1212.820751] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1212.825762] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1212.830604] ion_alloc+0x27a/0x810 [ 1212.834154] ? ion_dma_buf_release+0x40/0x40 [ 1212.838562] ? __might_fault+0x177/0x1b0 [ 1212.842630] ion_ioctl+0xea/0x1f0 [ 1212.846082] ? ion_query_heaps+0x360/0x360 [ 1212.850312] ? lock_acquire+0x170/0x3f0 [ 1212.854279] ? lock_downgrade+0x740/0x740 [ 1212.858423] ? ion_query_heaps+0x360/0x360 [ 1212.862650] do_vfs_ioctl+0x75a/0xff0 [ 1212.866451] ? ioctl_preallocate+0x1a0/0x1a0 [ 1212.870854] ? lock_downgrade+0x740/0x740 [ 1212.875004] ? __fget+0x225/0x360 [ 1212.878460] ? do_vfs_ioctl+0xff0/0xff0 [ 1212.882445] ? security_file_ioctl+0x83/0xb0 [ 1212.886858] SyS_ioctl+0x7f/0xb0 [ 1212.890217] ? do_vfs_ioctl+0xff0/0xff0 [ 1212.894187] do_syscall_64+0x1d5/0x640 [ 1212.898086] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1212.903270] RIP: 0033:0x45e219 [ 1212.906452] RSP: 002b:00007fbde3077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.914157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1212.921425] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1212.928693] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.935960] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1212.943228] R13: 00007ffee53ba35f R14: 00007fbde30789c0 R15: 000000000119bf8c [ 1212.958981] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1212.968036] CPU: 1 PID: 11539 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1212.975930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.985282] Call Trace: [ 1212.987871] dump_stack+0x1b2/0x281 [ 1212.991500] warn_alloc.cold+0x96/0x1cc [ 1212.995482] ? zone_watermark_ok_safe+0x220/0x220 [ 1213.000338] __alloc_pages_nodemask+0x2127/0x2720 [ 1213.005187] ? lock_acquire+0x170/0x3f0 [ 1213.009165] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1213.014017] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1213.019479] ? __mutex_unlock_slowpath+0x75/0x770 [ 1213.024325] alloc_pages_current+0x155/0x260 [ 1213.028740] ion_page_pool_alloc+0x118/0x1b0 [ 1213.033177] ion_system_heap_allocate+0x133/0x8c0 [ 1213.038024] ? _raw_spin_unlock+0x29/0x40 [ 1213.042169] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1213.047096] ? ion_system_contig_heap_create+0x130/0x130 [ 1213.052546] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1213.057565] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1213.062412] ion_alloc+0x27a/0x810 [ 1213.065957] ? ion_dma_buf_release+0x40/0x40 [ 1213.070367] ? __might_fault+0x177/0x1b0 [ 1213.074433] ion_ioctl+0xea/0x1f0 [ 1213.077886] ? ion_query_heaps+0x360/0x360 [ 1213.082122] ? lock_acquire+0x170/0x3f0 [ 1213.086093] ? lock_downgrade+0x740/0x740 [ 1213.090238] ? ion_query_heaps+0x360/0x360 [ 1213.094468] do_vfs_ioctl+0x75a/0xff0 [ 1213.098265] ? ioctl_preallocate+0x1a0/0x1a0 [ 1213.102672] ? lock_downgrade+0x740/0x740 [ 1213.106828] ? __fget+0x225/0x360 [ 1213.110279] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.114249] ? security_file_ioctl+0x83/0xb0 [ 1213.118655] SyS_ioctl+0x7f/0xb0 [ 1213.122015] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.125990] do_syscall_64+0x1d5/0x640 [ 1213.129886] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1213.135069] RIP: 0033:0x45e219 [ 1213.138249] RSP: 002b:00007fbde3056c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.145950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1213.153211] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1213.157798] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1213.160471] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1213.160477] (null) [ 1213.169720] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1213.169726] R13: 00007ffee53ba35f R14: 00007fbde30579c0 R15: 000000000119c034 [ 1213.179474] warn_alloc_show_mem: 4 callbacks suppressed [ 1213.179477] Mem-Info: [ 1213.209275] , order=0, oom_score_adj=0 [ 1213.209718] active_anon:20749 inactive_anon:10029 isolated_anon:0 [ 1213.209718] active_file:32 inactive_file:13 isolated_file:0 [ 1213.209718] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1213.209718] slab_reclaimable:23302 slab_unreclaimable:110867 [ 1213.209718] mapped:43853 shmem:11021 pagetables:723 bounce:0 [ 1213.209718] free:13950 free_pcp:162 free_cma:0 [ 1213.213287] ion_system_heap cpuset= [ 1213.250588] Node 0 active_anon:82920kB inactive_anon:31984kB active_file:124kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175412kB dirty:72kB writeback:0kB shmem:35888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1213.286269] Node 1 active_anon:76kB inactive_anon:8132kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1213.316607] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1213.343477] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1213.346415] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1213.360385] Node 0 DMA32 free:17972kB min:36200kB low:45248kB high:54296kB active_anon:82920kB inactive_anon:31984kB active_file:440kB inactive_file:120kB unevictable:0kB writepending:172kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2672kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1213.360499] syz-executor.4 cpuset= [ 1213.389578] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1213.396911] lowmem_reserve[]: 0 0 0 0 0 [ 1213.405097] / mems_allowed=0-1 [ 1213.411439] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1213.412119] CPU: 0 PID: 11527 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1213.412127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.444611] / [ 1213.445469] Call Trace: [ 1213.445491] dump_stack+0x1b2/0x281 [ 1213.454953] lowmem_reserve[]: [ 1213.456628] warn_alloc.cold+0x96/0x1cc [ 1213.459181] 0 [ 1213.462794] ? zone_watermark_ok_safe+0x220/0x220 [ 1213.465887] 0 [ 1213.469827] ? usleep_range+0x130/0x130 [ 1213.471609] 0 [ 1213.476425] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1213.476437] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1213.476446] ? run_timer_softirq+0x5a0/0x5a0 [ 1213.478225] 0 [ 1213.482184] __alloc_pages_nodemask+0x2127/0x2720 [ 1213.484061] 0 [ 1213.489136] ? lock_acquire+0x170/0x3f0 [ 1213.498521] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1213.500291] Node 1 [ 1213.505118] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1213.505134] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1213.506925] Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:76kB inactive_anon:8132kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1213.510876] alloc_pages_current+0x155/0x260 [ 1213.515698] lowmem_reserve[]: [ 1213.517906] ion_page_pool_alloc+0x118/0x1b0 [ 1213.522367] 0 [ 1213.527832] ion_system_heap_allocate+0x133/0x8c0 [ 1213.527842] ? _raw_spin_unlock+0x29/0x40 [ 1213.527854] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1213.555077] 0 [ 1213.559454] ? ion_system_contig_heap_create+0x130/0x130 [ 1213.562528] 0 [ 1213.566912] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1213.566923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1213.566934] ion_alloc+0x27a/0x810 [ 1213.568709] 0 [ 1213.573535] ? ion_dma_buf_release+0x40/0x40 [ 1213.573548] ? __might_fault+0x177/0x1b0 [ 1213.577666] 0 [ 1213.582575] ion_ioctl+0xea/0x1f0 [ 1213.589780] ? ion_query_heaps+0x360/0x360 [ 1213.591553] Node 0 [ 1213.596548] ? lock_acquire+0x170/0x3f0 [ 1213.596557] ? lock_downgrade+0x740/0x740 [ 1213.596567] ? ion_query_heaps+0x360/0x360 [ 1213.601381] DMA: [ 1213.604901] do_vfs_ioctl+0x75a/0xff0 [ 1213.604912] ? ioctl_preallocate+0x1a0/0x1a0 [ 1213.604922] ? lock_downgrade+0x740/0x740 [ 1213.606702] 2*4kB [ 1213.611096] ? __fget+0x225/0x360 [ 1213.615136] (UM) [ 1213.616908] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.620333] 2*8kB [ 1213.624547] ? security_file_ioctl+0x83/0xb0 [ 1213.624556] SyS_ioctl+0x7f/0xb0 [ 1213.624565] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.626775] (UM) [ 1213.630729] do_syscall_64+0x1d5/0x640 [ 1213.634865] 2*16kB [ 1213.639096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1213.641121] (UM) [ 1213.644899] RIP: 0033:0x45e219 [ 1213.644904] RSP: 002b:00007fbde3077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.644916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1213.649298] 3*32kB [ 1213.653422] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1213.653427] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1213.653432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1213.653437] R13: 00007ffee53ba35f R14: 00007fbde30789c0 R15: 000000000119bf8c [ 1213.654128] syz-executor.5 cpuset= [ 1213.656209] (UM) [ 1213.659006] / [ 1213.661048] 1*64kB [ 1213.665036] mems_allowed=0-1 [ 1213.665049] CPU: 0 PID: 11543 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1213.665054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.665058] Call Trace: [ 1213.665073] dump_stack+0x1b2/0x281 [ 1213.665086] warn_alloc.cold+0x96/0x1cc [ 1213.665103] ? zone_watermark_ok_safe+0x220/0x220 [ 1213.665112] ? usleep_range+0x130/0x130 [ 1213.665121] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1213.665132] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1213.665142] ? run_timer_softirq+0x5a0/0x5a0 [ 1213.665157] __alloc_pages_nodemask+0x2127/0x2720 [ 1213.665172] ? lock_acquire+0x170/0x3f0 [ 1213.674414] (M) [ 1213.675040] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1213.678982] 4*128kB [ 1213.681030] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1213.684908] (UM) [ 1213.687116] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1213.692272] 4*256kB [ 1213.694328] ? check_preemption_disabled+0x35/0x240 [ 1213.694346] alloc_pages_current+0x155/0x260 [ 1213.694361] ion_page_pool_alloc+0x118/0x1b0 [ 1213.697532] (UM) [ 1213.705230] ion_system_heap_allocate+0x133/0x8c0 [ 1213.705243] ? _raw_spin_unlock+0x29/0x40 [ 1213.705251] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1213.705263] ? ion_system_contig_heap_create+0x130/0x130 [ 1213.712513] 2*512kB [ 1213.714730] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1213.714740] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1213.714754] ion_alloc+0x27a/0x810 [ 1213.722012] (UM) [ 1213.729271] ? ion_dma_buf_release+0x40/0x40 [ 1213.729285] ? __might_fault+0x177/0x1b0 [ 1213.736546] 2*1024kB [ 1213.743792] ion_ioctl+0xea/0x1f0 [ 1213.743801] ? ion_query_heaps+0x360/0x360 [ 1213.743814] ? lock_acquire+0x170/0x3f0 [ 1213.747324] (UM) [ 1213.749386] ? lock_downgrade+0x740/0x740 [ 1213.751076] 1*2048kB [ 1213.753300] ? ion_query_heaps+0x360/0x360 [ 1213.756440] (U) [ 1213.764266] do_vfs_ioctl+0x75a/0xff0 [ 1213.764280] ? ioctl_preallocate+0x1a0/0x1a0 [ 1213.764288] ? lock_downgrade+0x740/0x740 [ 1213.764301] ? __fget+0x225/0x360 [ 1213.777120] 1*4096kB [ 1213.779947] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.783920] (M) [ 1213.788727] ? security_file_ioctl+0x83/0xb0 [ 1213.792670] = 10968kB [ 1213.797768] SyS_ioctl+0x7f/0xb0 [ 1213.797778] ? do_vfs_ioctl+0xff0/0xff0 [ 1213.797790] do_syscall_64+0x1d5/0x640 [ 1213.802781] Node 0 [ 1213.807175] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1213.807184] RIP: 0033:0x45e219 [ 1213.812001] DMA32: [ 1213.815948] RSP: 002b:00007fe045193c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.815959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1213.815964] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1213.815971] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1213.817925] 892*4kB [ 1213.822748] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1213.822756] R13: 00007ffdd69fedbf R14: 00007fe0451949c0 R15: 000000000119c034 [ 1213.825101] (UME) 482*8kB (ME) 172*16kB (UME) 217*32kB (UME) 15*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18208kB [ 1214.049518] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.073454] Node 1 Normal: 94*4kB (UM) 397*8kB (UM) 318*16kB (UM) 111*32kB (UM) 13*64kB (UM) 20*128kB (UM) 2*256kB (M) 21*512kB (UM) 169*1024kB (U) 6*2048kB (U) 0*4096kB = 212192kB [ 1214.103442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.112308] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1214.143439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.152330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.169589] 12045 total pagecache pages [ 1214.184300] 0 pages in swap cache [ 1214.188150] systemd[1]: Started Journal Service. [ 1214.201296] Swap cache stats: add 0, delete 0, find 0/0 [ 1214.231006] Free swap = 0kB [ 1214.238497] Total swap = 0kB [ 1214.241613] 2097051 pages RAM [ 1214.258297] 0 pages HighMem/MovableOnly [ 1214.265120] 363840 pages reserved [ 1214.268662] 0 pages cma reserved [ 1214.444210] mems_allowed=0-1 [ 1214.447840] CPU: 1 PID: 4245 Comm: ion_system_heap Not tainted 4.14.217-syzkaller #0 [ 1214.455724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1214.465110] Call Trace: [ 1214.467702] dump_stack+0x1b2/0x281 [ 1214.471327] dump_header+0x178/0x82f [ 1214.475036] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1214.480131] ? ___ratelimit+0x2cd/0x530 [ 1214.484102] oom_kill_process.cold+0x10/0xb18 [ 1214.488597] ? lock_downgrade+0x740/0x740 [ 1214.492748] out_of_memory+0x2dc/0x1190 [ 1214.496722] ? oom_killer_disable+0x1c0/0x1c0 [ 1214.501211] ? mutex_trylock+0x152/0x1a0 [ 1214.505271] __alloc_pages_nodemask+0x23e1/0x2720 [ 1214.510118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1214.514961] ? ion_heap_sglist_zero+0x165/0x220 [ 1214.519635] ? cache_grow_begin+0x41/0x630 [ 1214.523867] cache_grow_begin+0x91/0x630 [ 1214.527923] ? cache_grow_begin+0x91/0x630 [ 1214.532150] fallback_alloc+0x207/0x2c0 [ 1214.536118] kmem_cache_alloc_node_trace+0xed/0x400 [ 1214.541129] __get_vm_area_node+0xed/0x340 [ 1214.545360] vmap+0xd5/0x290 [ 1214.548385] ? ion_heap_clear_pages+0x23/0x70 [ 1214.552871] ? vunmap+0x50/0x50 [ 1214.556140] ? __vunmap+0x21c/0x300 [ 1214.559761] ion_heap_clear_pages+0x23/0x70 [ 1214.564078] ion_heap_sglist_zero+0x165/0x220 [ 1214.568567] ? ion_heap_clear_pages+0x70/0x70 [ 1214.573058] ? finish_task_switch+0x178/0x610 [ 1214.577564] ? ion_heap_deferred_free+0x222/0x470 [ 1214.582407] ion_system_heap_free+0x1d0/0x240 [ 1214.586899] ion_buffer_destroy+0x132/0x190 [ 1214.591214] ion_heap_deferred_free+0x22a/0x470 [ 1214.595876] ? __schedule+0x13f7/0x1de0 [ 1214.599846] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1214.604530] ? wait_woken+0x230/0x230 [ 1214.608326] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1214.613015] kthread+0x30d/0x420 [ 1214.616382] ? kthread_create_on_node+0xd0/0xd0 [ 1214.621045] ret_from_fork+0x24/0x30 [ 1214.627106] Mem-Info: [ 1214.629541] active_anon:20749 inactive_anon:10029 isolated_anon:0 [ 1214.629541] active_file:1042 inactive_file:1076 isolated_file:0 [ 1214.629541] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1214.629541] slab_reclaimable:23162 slab_unreclaimable:111526 [ 1214.629541] mapped:44968 shmem:11021 pagetables:723 bounce:0 [ 1214.629541] free:322001 free_pcp:323 free_cma:0 [ 1214.668543] Node 0 active_anon:82920kB inactive_anon:31984kB active_file:4160kB inactive_file:4300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179872kB dirty:0kB writeback:0kB shmem:35888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1214.701720] Node 1 active_anon:76kB inactive_anon:8132kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1214.732580] Node 0 DMA free:11224kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.764698] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1214.769759] Node 0 DMA32 free:281264kB min:36200kB low:45248kB high:54296kB active_anon:82920kB inactive_anon:31984kB active_file:4160kB inactive_file:4300kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2672kB bounce:0kB free_pcp:1408kB local_pcp:652kB free_cma:0kB [ 1214.804183] lowmem_reserve[]: 0 0 0 0 0 [ 1214.808195] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.839240] lowmem_reserve[]: 0 0 0 0 0 [ 1214.843239] Node 1 Normal free:867040kB min:53696kB low:67120kB high:80544kB active_anon:76kB inactive_anon:8132kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.875973] lowmem_reserve[]: 0 0 0 0 0 [ 1214.880110] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 4*64kB (U) 3*128kB (U) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11228kB [ 1214.899642] Node 0 DMA32: 175*4kB (ME) 93*8kB (ME) 32*16kB (ME) 35*32kB (ME) 27*64kB (UME) 3*128kB (UM) 0*256kB 1*512kB (U) 1*1024kB (U) 33*2048kB (U) 17*4096kB (U) = 143940kB [ 1214.920868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.932435] Node 1 Normal: 94*4kB (UM) 397*8kB (UM) 318*16kB (UM) 111*32kB (UM) 3371*64kB (UM) 289*128kB (UM) 300*256kB (UM) 206*512kB (UM) 332*1024kB (U) 35*2048kB (U) 2*4096kB (U) = 867040kB [ 1214.954314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.963166] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 1214.975420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.986188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1215.002532] 13187 total pagecache pages [ 1215.009100] 0 pages in swap cache [ 1215.012561] Swap cache stats: add 0, delete 0, find 0/0 [ 1215.020752] Free swap = 0kB [ 1215.026153] Total swap = 0kB [ 1215.029182] 2097051 pages RAM [ 1215.032273] 0 pages HighMem/MovableOnly [ 1215.039346] 363840 pages reserved [ 1215.042805] 0 pages cma reserved [ 1215.049203] Out of memory: Kill process 7999 (syz-fuzzer) score 8 or sacrifice child [ 1215.060541] Killed process 8021 (syz-executor.0) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1215.101977] oom_reaper: reaped process 8021 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 19:44:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) 19:44:30 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:44:30 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}, @timestamp_addr={0x44, 0x14, 0x85, 0x1, 0x6, [{@private=0xa010101, 0x36}, {@remote, 0xb4}]}]}}}}}) 19:44:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:30 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) 19:44:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:30 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:30 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:30 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) socket$inet6(0xa, 0x3, 0x4) [ 1216.372558] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1216.388354] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1216.395399] CPU: 1 PID: 11567 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1216.403289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.412636] Call Trace: [ 1216.415222] dump_stack+0x1b2/0x281 [ 1216.418859] warn_alloc.cold+0x96/0x1cc [ 1216.422833] ? zone_watermark_ok_safe+0x220/0x220 [ 1216.427694] __alloc_pages_nodemask+0x2127/0x2720 [ 1216.432541] ? lock_acquire+0x170/0x3f0 [ 1216.436523] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1216.441373] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1216.446849] ? __mutex_unlock_slowpath+0x75/0x770 [ 1216.451690] ? alloc_pages_current+0x16/0x260 [ 1216.456196] alloc_pages_current+0x155/0x260 [ 1216.460604] ion_page_pool_alloc+0x118/0x1b0 [ 1216.465027] ion_system_heap_allocate+0x133/0x8c0 [ 1216.469866] ? ion_alloc+0x187/0x810 [ 1216.473580] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1216.479052] ? ion_system_contig_heap_create+0x130/0x130 [ 1216.484516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1216.489528] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1216.494365] ion_alloc+0x204/0x810 [ 1216.497907] ? ion_dma_buf_release+0x40/0x40 [ 1216.502308] ? __might_fault+0x177/0x1b0 [ 1216.506367] ion_ioctl+0xea/0x1f0 [ 1216.509819] ? ion_query_heaps+0x360/0x360 [ 1216.514061] ? lock_acquire+0x170/0x3f0 [ 1216.518033] ? lock_downgrade+0x740/0x740 [ 1216.522174] ? ion_query_heaps+0x360/0x360 [ 1216.526408] do_vfs_ioctl+0x75a/0xff0 [ 1216.530206] ? ioctl_preallocate+0x1a0/0x1a0 [ 1216.534611] ? lock_downgrade+0x740/0x740 [ 1216.538756] ? __fget+0x225/0x360 [ 1216.542207] ? do_vfs_ioctl+0xff0/0xff0 [ 1216.546187] ? security_file_ioctl+0x83/0xb0 [ 1216.550590] SyS_ioctl+0x7f/0xb0 [ 1216.553953] ? do_vfs_ioctl+0xff0/0xff0 [ 1216.557925] do_syscall_64+0x1d5/0x640 [ 1216.561821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1216.567068] RIP: 0033:0x45e219 [ 1216.570246] RSP: 002b:00007fe0451b4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.577971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1216.585242] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1216.592512] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.599776] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1216.607042] R13: 00007ffdd69fedbf R14: 00007fe0451b59c0 R15: 000000000119bf8c [ 1216.617418] warn_alloc_show_mem: 3 callbacks suppressed [ 1216.619060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.631377] Mem-Info: [ 1216.634206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.640683] active_anon:19193 inactive_anon:10026 isolated_anon:0 [ 1216.640683] active_file:2225 inactive_file:4211 isolated_file:0 [ 1216.640683] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1216.640683] slab_reclaimable:23061 slab_unreclaimable:108279 [ 1216.640683] mapped:38364 shmem:11014 pagetables:699 bounce:0 [ 1216.640683] free:252753 free_pcp:356 free_cma:0 [ 1216.680132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.687393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.698001] Node 0 active_anon:76500kB inactive_anon:31972kB active_file:8876kB inactive_file:16828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153456kB dirty:0kB writeback:0kB shmem:35860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1216.701594] device bridge_slave_1 left promiscuous mode [ 1216.735678] Node 1 active_anon:272kB inactive_anon:8132kB active_file:24kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1216.762710] Node 0 DMA free:13360kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.789999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.798676] lowmem_reserve[]: [ 1216.801648] device bridge_slave_0 left promiscuous mode [ 1216.810634] 0 2717 2718 2718 2718 [ 1216.814607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.821118] Node 0 DMA32 free:242104kB min:36200kB low:45248kB high:54296kB active_anon:76544kB inactive_anon:31972kB active_file:8484kB inactive_file:17368kB unevictable:0kB writepending:200kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2796kB bounce:0kB free_pcp:976kB local_pcp:232kB free_cma:0kB [ 1216.859517] lowmem_reserve[]: 0 0 0 0 0 [ 1216.864826] device veth1_macvtap left promiscuous mode [ 1216.870816] device veth0_macvtap left promiscuous mode [ 1216.876610] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1216.902792] device veth1_vlan left promiscuous mode [ 1216.908832] device veth0_vlan left promiscuous mode [ 1216.929091] lowmem_reserve[]: 0 0 0 0 0 [ 1216.937930] Node 1 Normal free:573024kB min:53696kB low:67120kB high:80544kB active_anon:176kB inactive_anon:8132kB active_file:32kB inactive_file:148kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:624kB local_pcp:0kB free_cma:0kB [ 1217.003162] lowmem_reserve[]: 0 0 0 0 0 [ 1217.011961] Node 0 DMA: 4*4kB (U) 7*8kB (U) 2*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11176kB [ 1217.049770] Node 0 DMA32: 813*4kB (UME) 10709*8kB (UME) 4303*16kB (UME) 1878*32kB (UME) 1*64kB (U) 32*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 222028kB [ 1217.092591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1217.118569] device hsr_slave_1 left promiscuous mode [ 1217.127562] Node 1 Normal: 64*4kB (UM) 36*8kB (UM) 34*16kB (UM) 33*32kB (UM) 25*64kB (UM) 115*128kB (UM) 99*256kB (UM) 126*512kB (UM) 268*1024kB (U) 34*2048kB (U) 4*4096kB (U) = 468768kB [ 1217.150400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1217.153637] device hsr_slave_0 left promiscuous mode [ 1217.176918] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1217.185596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1217.206173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1217.221485] team0 (unregistering): Port device team_slave_1 removed [ 1217.228439] 15666 total pagecache pages [ 1217.232426] 0 pages in swap cache [ 1217.243597] Swap cache stats: add 0, delete 0, find 0/0 [ 1217.244029] team0 (unregistering): Port device team_slave_0 removed [ 1217.260157] Free swap = 0kB [ 1217.263199] Total swap = 0kB [ 1217.266560] 2097051 pages RAM [ 1217.269669] 0 pages HighMem/MovableOnly [ 1217.283119] 363840 pages reserved [ 1217.287013] 0 pages cma reserved [ 1217.290426] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1217.321391] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1217.398922] bond0 (unregistering): Released all slaves 19:44:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:32 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) [ 1219.125626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.132373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.143953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.150756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.163695] device bridge_slave_1 left promiscuous mode [ 1219.169302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.179965] device bridge_slave_0 left promiscuous mode [ 1219.186048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.198838] device veth1_macvtap left promiscuous mode [ 1219.204257] device veth0_macvtap left promiscuous mode [ 1219.209681] device veth1_vlan left promiscuous mode [ 1219.218686] device veth0_vlan left promiscuous mode [ 1219.342422] device hsr_slave_1 left promiscuous mode [ 1219.352728] device hsr_slave_0 left promiscuous mode [ 1219.372246] team0 (unregistering): Port device team_slave_1 removed [ 1219.386629] team0 (unregistering): Port device team_slave_0 removed [ 1219.402211] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1219.417412] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1219.456128] bond0 (unregistering): Released all slaves [ 1220.084488] IPVS: ftp: loaded support on port[0] = 21 [ 1220.121416] IPVS: ftp: loaded support on port[0] = 21 [ 1220.208683] chnl_net:caif_netlink_parms(): no params data found [ 1220.316743] chnl_net:caif_netlink_parms(): no params data found [ 1220.367741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.374819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.381701] device bridge_slave_0 entered promiscuous mode [ 1220.388732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.395401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.402468] device bridge_slave_1 entered promiscuous mode [ 1220.435682] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1220.445163] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1220.452770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.459292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.468961] device bridge_slave_0 entered promiscuous mode [ 1220.480998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.490007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.497118] device bridge_slave_1 entered promiscuous mode [ 1220.516579] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1220.524236] team0: Port device team_slave_0 added [ 1220.535677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1220.542754] team0: Port device team_slave_1 added [ 1220.556474] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1220.566180] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1220.587836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.594853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.620758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.639374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.645753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.672050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.685717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1220.692896] team0: Port device team_slave_0 added [ 1220.698714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1220.706285] team0: Port device team_slave_1 added [ 1220.711531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1220.730773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1220.738470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.744809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.770685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.787088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.793398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.818678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.836124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1220.844657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1220.855238] device hsr_slave_0 entered promiscuous mode [ 1220.860863] device hsr_slave_1 entered promiscuous mode [ 1220.867132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1220.879909] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1220.902803] device hsr_slave_0 entered promiscuous mode [ 1220.908921] device hsr_slave_1 entered promiscuous mode [ 1220.921199] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1220.928358] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1221.048082] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1221.069319] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1221.097528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.108494] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1221.118328] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1221.127289] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1221.133908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.141198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1221.148226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1221.157029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1221.165716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1221.173798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1221.181487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.187895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.197473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1221.206221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1221.213884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1221.221640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1221.229375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.235786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.249851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1221.260177] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1221.266474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.272876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1221.284467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1221.293880] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1221.300094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1221.310936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1221.320993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1221.328544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1221.336638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1221.345184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1221.352792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1221.361043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1221.369838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1221.376942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1221.385348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1221.397431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1221.407797] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1221.414422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.421484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1221.431773] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1221.438390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1221.445407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1221.456772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1221.467597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1221.475775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1221.483952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1221.491498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.497906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.504834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1221.512594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1221.521068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.527467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.538065] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1221.545356] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1221.552506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1221.553596] Bluetooth: hci5 command 0x0409 tx timeout [ 1221.562058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1221.570411] Bluetooth: hci0 command 0x0409 tx timeout [ 1221.574118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1221.587108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1221.596083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1221.606528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1221.614564] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1221.621059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1221.629005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1221.636881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1221.643859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1221.650946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1221.661241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1221.669154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1221.677159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1221.687264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1221.697777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1221.705683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1221.713317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1221.720812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1221.729252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1221.739332] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1221.739359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1221.741214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.768854] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1221.779069] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1221.785843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1221.792506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1221.808545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.862285] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1221.872744] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1221.883223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1221.891035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1221.912498] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1221.922813] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1221.930548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1221.938635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1221.965849] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1221.972923] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1221.981233] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1221.990977] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1221.998938] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1222.005839] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1222.012908] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1222.021948] device veth0_vlan entered promiscuous mode [ 1222.028872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1222.036417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1222.046677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1222.053672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1222.063303] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1222.071419] device veth0_vlan entered promiscuous mode [ 1222.078575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1222.086203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1222.093706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1222.100578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1222.112153] device veth1_vlan entered promiscuous mode [ 1222.118669] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1222.129024] device veth1_vlan entered promiscuous mode [ 1222.135418] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1222.142758] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1222.152274] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1222.165642] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1222.177951] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1222.185720] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1222.193893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1222.201129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1222.208772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1222.216403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1222.224037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1222.231579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1222.241145] device veth0_macvtap entered promiscuous mode [ 1222.247726] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1222.257171] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1222.264212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1222.271385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1222.279171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1222.288738] device veth1_macvtap entered promiscuous mode [ 1222.295465] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1222.305054] device veth0_macvtap entered promiscuous mode [ 1222.311137] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1222.319868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1222.329786] device veth1_macvtap entered promiscuous mode [ 1222.336896] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1222.345264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1222.356188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.366211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.376845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.386625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.396434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.406204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.415371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.425158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.435716] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1222.442643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.451309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1222.461411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1222.469109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1222.476870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1222.484342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1222.491929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1222.500976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.511008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.520572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.530772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.539945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.549864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.559031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.568784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.579036] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1222.586307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.595790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1222.603544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1222.611197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1222.628733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.638699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.648893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.659074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.668281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.678582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.687761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.697532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.706808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1222.716606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.726740] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1222.733893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.742553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1222.751116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1222.763629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.773565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.782698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.793010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.802144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.812358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.821532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.831304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.841364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1222.851140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.861206] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1222.868331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.875690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1222.883921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:44:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) 19:44:37 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:37 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25030000000000040001802c00018005000200400000000500020001000000060001000a0000000600010002000300000000000000000014000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4000080) 19:44:37 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:37 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end, @cipso={0x86, 0x4e, 0x0, [{0x7, 0xc, "81f4fd03299ed96b11a1"}, {0x3, 0x12, "c223d3be37af1966759f29d741ddbc6d"}, {0x1, 0xe, "f4afc06180897ee0772017e2"}, {0x5, 0x8, "b296baac944f"}, {0x1, 0x8, "41c241501522"}, {0x1, 0x7, "0f25abba28"}, {0x5, 0x5, "98fcf9"}]}]}}}}}) 19:44:37 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25030000000000040001802c00018005000200400000000500020001000000060001000a0000000600010002000300000000000000000014000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4000080) 19:44:37 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:37 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1, {[@end]}}}}}) 19:44:37 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:37 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25030000000000040001802c00018005000200400000000500020001000000060001000a0000000600010002000300000000000000000014000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x4000080) [ 1223.633501] Bluetooth: hci0 command 0x041b tx timeout [ 1223.640796] Bluetooth: hci5 command 0x041b tx timeout [ 1223.892238] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1223.910115] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1223.916659] CPU: 1 PID: 12121 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1223.924557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.933914] Call Trace: [ 1223.936510] dump_stack+0x1b2/0x281 [ 1223.940156] warn_alloc.cold+0x96/0x1cc [ 1223.944129] ? zone_watermark_ok_safe+0x220/0x220 [ 1223.948986] __alloc_pages_nodemask+0x2127/0x2720 [ 1223.953845] ? _raw_spin_unlock_irq+0x24/0x80 [ 1223.958342] ? lock_acquire+0x170/0x3f0 [ 1223.962346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1223.967206] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1223.972669] ? __mutex_unlock_slowpath+0x75/0x770 [ 1223.977513] alloc_pages_current+0x155/0x260 [ 1223.981934] ion_page_pool_alloc+0x118/0x1b0 [ 1223.986343] ion_system_heap_allocate+0x133/0x8c0 [ 1223.991192] ? ion_alloc+0x187/0x810 [ 1223.994918] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1224.000367] ? ion_system_contig_heap_create+0x130/0x130 [ 1224.005839] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1224.010862] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1224.015719] ion_alloc+0x204/0x810 [ 1224.019269] ? ion_dma_buf_release+0x40/0x40 [ 1224.023692] ? __might_fault+0x177/0x1b0 [ 1224.027754] ion_ioctl+0xea/0x1f0 [ 1224.031205] ? ion_query_heaps+0x360/0x360 [ 1224.035461] ? lock_acquire+0x170/0x3f0 [ 1224.039433] ? lock_downgrade+0x740/0x740 [ 1224.043595] ? ion_query_heaps+0x360/0x360 [ 1224.047828] do_vfs_ioctl+0x75a/0xff0 [ 1224.051629] ? ioctl_preallocate+0x1a0/0x1a0 [ 1224.056036] ? lock_downgrade+0x740/0x740 [ 1224.060205] ? __fget+0x225/0x360 [ 1224.063659] ? do_vfs_ioctl+0xff0/0xff0 [ 1224.067631] ? security_file_ioctl+0x83/0xb0 [ 1224.072040] SyS_ioctl+0x7f/0xb0 [ 1224.075401] ? do_vfs_ioctl+0xff0/0xff0 [ 1224.079371] do_syscall_64+0x1d5/0x640 [ 1224.083266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1224.088450] RIP: 0033:0x45e219 [ 1224.091661] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.099365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1224.106641] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1224.113907] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.121172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1224.128458] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1224.151307] Mem-Info: [ 1224.157214] active_anon:19297 inactive_anon:10031 isolated_anon:0 [ 1224.157214] active_file:2845 inactive_file:3385 isolated_file:0 [ 1224.157214] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1224.157214] slab_reclaimable:22479 slab_unreclaimable:103516 [ 1224.157214] mapped:56027 shmem:11022 pagetables:794 bounce:0 [ 1224.157214] free:68924 free_pcp:59 free_cma:0 [ 1224.197960] Node 0 active_anon:77116kB inactive_anon:31996kB active_file:11376kB inactive_file:13536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224108kB dirty:20kB writeback:0kB shmem:35896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1224.234810] Node 1 active_anon:72kB inactive_anon:8128kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1224.271773] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.298917] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1224.305326] Node 0 DMA32 free:209160kB min:36200kB low:45248kB high:54296kB active_anon:77116kB inactive_anon:31996kB active_file:11376kB inactive_file:13536kB unevictable:0kB writepending:20kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3176kB bounce:0kB free_pcp:232kB local_pcp:208kB free_cma:0kB [ 1224.335858] lowmem_reserve[]: 0 0 0 0 0 [ 1224.339931] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.367583] lowmem_reserve[]: 0 0 0 0 0 [ 1224.371634] Node 1 Normal free:53776kB min:53696kB low:67120kB high:80544kB active_anon:72kB inactive_anon:8128kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.400788] lowmem_reserve[]: 0 0 0 0 0 [ 1224.405608] Node 0 DMA: 1*4kB (U) 6*8kB (U) 5*16kB (U) 3*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11108kB [ 1224.420194] Node 0 DMA32: 570*4kB (ME) 6098*8kB (UE) 4665*16kB (UE) 2566*32kB (UME) 7*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 208264kB [ 1224.436595] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1224.448219] Node 1 Normal: 86*4kB (UM) 389*8kB (UM) 315*16kB (UM) 109*32kB (UM) 31*64kB (UM) 9*128kB (UM) 5*256kB (UM) 73*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53776kB [ 1224.464342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1224.473940] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1224.482587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1224.492560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1224.501933] 15464 total pagecache pages [ 1224.506600] 0 pages in swap cache [ 1224.510115] Swap cache stats: add 0, delete 0, find 0/0 [ 1224.517763] Free swap = 0kB [ 1224.520865] Total swap = 0kB [ 1224.524881] 2097051 pages RAM [ 1224.528073] 0 pages HighMem/MovableOnly [ 1224.532148] 363840 pages reserved [ 1224.547384] 0 pages cma reserved 19:44:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) 19:44:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:39 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:39 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r2, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r3 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) recvfrom$packet(r1, &(0x7f0000000040)=""/5, 0x5, 0x40, 0x0, 0x0) 19:44:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:39 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:39 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) r2 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet6(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xffffffffffffffd8, &(0x7f0000000940)}, 0x0) 19:44:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:39 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) [ 1225.713075] Bluetooth: hci5 command 0x040f tx timeout [ 1225.718650] Bluetooth: hci0 command 0x040f tx timeout 19:44:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:41 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:41 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) socket$inet6(0xa, 0x3, 0x4) 19:44:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:41 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) 19:44:41 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:41 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @none, 0x1}, @ethernet={0x1, @local}, @qipcrtr={0x2a, 0x3, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000080)='veth0_vlan\x00', 0x2, 0x40000000066b, 0x8a70}) 19:44:41 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:41 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000640)=[0x3, 0x9], 0x2, 0x800}) 19:44:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 19:44:41 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) [ 1227.793046] Bluetooth: hci0 command 0x0419 tx timeout [ 1227.798669] Bluetooth: hci5 command 0x0419 tx timeout 19:44:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:42 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x14) 19:44:42 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) 19:44:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 19:44:42 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:42 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:42 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) 19:44:42 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:42 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 19:44:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:43 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:43 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:43 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={0x0, 0x0, 0x800}) 19:44:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:43 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:43 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={0x0}) 19:44:43 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:43 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:44 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:44 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:44 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:44 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:44 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000380)=""/71, 0x47) 19:44:45 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:45 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:46 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:46 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:46 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:46 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:46 executing program 3: read$alg(0xffffffffffffffff, 0x0, 0x0) 19:44:46 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:46 executing program 3: read$alg(0xffffffffffffffff, 0x0, 0x0) 19:44:46 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) 19:44:46 executing program 0: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) [ 1233.209514] syz-executor.1: [ 1233.209517] syz-executor.4: page allocation failure: order:4 [ 1233.212825] syz-executor.1: [ 1233.217914] syz-executor.4: [ 1233.218649] page allocation failure: order:4 [ 1233.221658] page allocation failure: order:4 [ 1233.224724] page allocation failure: order:4 [ 1233.233631] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1233.234299] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1233.238083] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1233.251222] (null) [ 1233.252330] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1233.260914] syz-executor.1 cpuset= [ 1233.261635] (null) [ 1233.273496] (null) [ 1233.274596] (null) [ 1233.276570] syz-executor.4 cpuset= [ 1233.278715] syz-executor.1 cpuset= [ 1233.278733] / [ 1233.285786] / [ 1233.287509] / [ 1233.287658] syz-executor.4 cpuset= [ 1233.289889] mems_allowed=0-1 [ 1233.290963] / [ 1233.297861] mems_allowed=0-1 [ 1233.299937] mems_allowed=0-1 [ 1233.305206] CPU: 0 PID: 12350 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1233.313718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.323053] Call Trace: [ 1233.325661] dump_stack+0x1b2/0x281 [ 1233.329273] warn_alloc.cold+0x96/0x1cc [ 1233.333231] ? zone_watermark_ok_safe+0x220/0x220 [ 1233.338062] __alloc_pages_nodemask+0x2127/0x2720 [ 1233.342900] ? lock_acquire+0x170/0x3f0 [ 1233.346863] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1233.351690] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1233.357139] ? __mutex_unlock_slowpath+0x75/0x770 [ 1233.361965] alloc_pages_current+0x155/0x260 [ 1233.366365] ion_page_pool_alloc+0x118/0x1b0 [ 1233.370757] ion_system_heap_allocate+0x133/0x8c0 [ 1233.375582] ? ion_alloc+0x187/0x810 [ 1233.379278] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1233.384719] ? ion_system_contig_heap_create+0x130/0x130 [ 1233.390149] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1233.395150] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1233.399973] ion_alloc+0x204/0x810 [ 1233.403519] ? ion_dma_buf_release+0x40/0x40 [ 1233.407910] ? __might_fault+0x177/0x1b0 [ 1233.411953] ion_ioctl+0xea/0x1f0 [ 1233.415389] ? ion_query_heaps+0x360/0x360 [ 1233.419604] ? lock_acquire+0x170/0x3f0 [ 1233.423559] ? lock_downgrade+0x740/0x740 [ 1233.427686] ? ion_query_heaps+0x360/0x360 [ 1233.431902] do_vfs_ioctl+0x75a/0xff0 [ 1233.435687] ? ioctl_preallocate+0x1a0/0x1a0 [ 1233.440074] ? lock_downgrade+0x740/0x740 [ 1233.444210] ? __fget+0x225/0x360 [ 1233.447659] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.451615] ? security_file_ioctl+0x83/0xb0 [ 1233.456003] SyS_ioctl+0x7f/0xb0 [ 1233.459349] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.463305] do_syscall_64+0x1d5/0x640 [ 1233.467181] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1233.472374] RIP: 0033:0x45e219 [ 1233.475544] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.483406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1233.490655] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1233.497904] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1233.505173] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1233.512421] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1233.519685] CPU: 1 PID: 12346 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1233.524761] mems_allowed=0-1 [ 1233.527566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.527570] Call Trace: [ 1233.527589] dump_stack+0x1b2/0x281 [ 1233.546189] warn_alloc.cold+0x96/0x1cc [ 1233.550156] ? zone_watermark_ok_safe+0x220/0x220 [ 1233.554991] __alloc_pages_nodemask+0x2127/0x2720 [ 1233.559826] ? _raw_spin_unlock_irq+0x24/0x80 [ 1233.564309] ? lock_acquire+0x170/0x3f0 [ 1233.568269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1233.573100] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1233.578550] ? __mutex_unlock_slowpath+0x75/0x770 [ 1233.583384] alloc_pages_current+0x155/0x260 [ 1233.587789] ion_page_pool_alloc+0x118/0x1b0 [ 1233.592181] ion_system_heap_allocate+0x133/0x8c0 [ 1233.597024] ? ion_alloc+0x187/0x810 [ 1233.600720] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1233.606171] ? ion_system_contig_heap_create+0x130/0x130 [ 1233.611610] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1233.616609] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1233.621435] ion_alloc+0x204/0x810 [ 1233.624980] ? ion_dma_buf_release+0x40/0x40 [ 1233.629375] ? __might_fault+0x177/0x1b0 [ 1233.633423] ion_ioctl+0xea/0x1f0 [ 1233.636873] ? ion_query_heaps+0x360/0x360 [ 1233.641105] ? lock_acquire+0x170/0x3f0 [ 1233.645079] ? lock_downgrade+0x740/0x740 [ 1233.649218] ? ion_query_heaps+0x360/0x360 [ 1233.653448] do_vfs_ioctl+0x75a/0xff0 [ 1233.657251] ? ioctl_preallocate+0x1a0/0x1a0 [ 1233.661644] ? lock_downgrade+0x740/0x740 [ 1233.665794] ? __fget+0x225/0x360 [ 1233.669231] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.673189] ? security_file_ioctl+0x83/0xb0 [ 1233.677581] SyS_ioctl+0x7f/0xb0 [ 1233.680932] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.684893] do_syscall_64+0x1d5/0x640 [ 1233.688773] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1233.693944] RIP: 0033:0x45e219 [ 1233.697116] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.704808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1233.712096] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1233.719353] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.726610] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1233.733864] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1233.741132] CPU: 0 PID: 12356 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1233.749022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.758376] Call Trace: [ 1233.760969] dump_stack+0x1b2/0x281 [ 1233.764600] warn_alloc.cold+0x96/0x1cc [ 1233.768575] ? zone_watermark_ok_safe+0x220/0x220 [ 1233.773430] __alloc_pages_nodemask+0x2127/0x2720 [ 1233.778272] ? io_schedule_timeout+0x140/0x140 [ 1233.782850] ? lock_acquire+0x170/0x3f0 [ 1233.786819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1233.791656] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1233.797089] ? __mutex_unlock_slowpath+0x75/0x770 [ 1233.801941] alloc_pages_current+0x155/0x260 [ 1233.806346] ion_page_pool_alloc+0x118/0x1b0 [ 1233.810749] ion_system_heap_allocate+0x133/0x8c0 [ 1233.815578] ? ion_alloc+0x187/0x810 [ 1233.819274] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1233.824708] ? ion_system_contig_heap_create+0x130/0x130 [ 1233.830155] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1233.835158] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1233.839991] ion_alloc+0x204/0x810 [ 1233.843515] ? ion_dma_buf_release+0x40/0x40 [ 1233.847906] ? __might_fault+0x177/0x1b0 [ 1233.851950] ion_ioctl+0xea/0x1f0 [ 1233.855384] ? ion_query_heaps+0x360/0x360 [ 1233.859600] ? lock_acquire+0x170/0x3f0 [ 1233.863554] ? lock_downgrade+0x740/0x740 [ 1233.867683] ? ion_query_heaps+0x360/0x360 [ 1233.871898] do_vfs_ioctl+0x75a/0xff0 [ 1233.875681] ? ioctl_preallocate+0x1a0/0x1a0 [ 1233.880071] ? lock_downgrade+0x740/0x740 [ 1233.884202] ? __fget+0x225/0x360 [ 1233.887641] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.891596] ? security_file_ioctl+0x83/0xb0 [ 1233.895985] SyS_ioctl+0x7f/0xb0 [ 1233.899335] ? do_vfs_ioctl+0xff0/0xff0 [ 1233.903297] do_syscall_64+0x1d5/0x640 [ 1233.907170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1233.912339] RIP: 0033:0x45e219 [ 1233.915510] RSP: 002b:00007febfb8b3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.923307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1233.930580] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1233.937864] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1233.945115] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1233.952390] R13: 00007ffeb68c5c4f R14: 00007febfb8b49c0 R15: 000000000119c034 [ 1233.959656] CPU: 1 PID: 12341 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1233.967537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.968817] Mem-Info: [ 1233.976894] Call Trace: [ 1233.976911] dump_stack+0x1b2/0x281 [ 1233.976924] warn_alloc.cold+0x96/0x1cc [ 1233.976936] ? zone_watermark_ok_safe+0x220/0x220 [ 1233.976964] __alloc_pages_nodemask+0x2127/0x2720 [ 1233.979971] active_anon:18675 inactive_anon:10030 isolated_anon:0 [ 1233.979971] active_file:3022 inactive_file:3549 isolated_file:0 [ 1233.979971] unevictable:0 dirty:75 writeback:0 unstable:0 [ 1233.979971] slab_reclaimable:16458 slab_unreclaimable:118386 [ 1233.979971] mapped:55900 shmem:11021 pagetables:770 bounce:0 [ 1233.979971] free:64525 free_pcp:99 free_cma:0 [ 1233.981933] ? lock_acquire+0x170/0x3f0 [ 1233.981954] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1233.988858] Node 0 active_anon:74628kB inactive_anon:31992kB active_file:12084kB inactive_file:14192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:223600kB dirty:292kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1233.989514] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1233.995168] Node 1 active_anon:72kB inactive_anon:8128kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1233.999154] ? __mutex_unlock_slowpath+0x75/0x770 [ 1233.999178] alloc_pages_current+0x155/0x260 [ 1234.038027] Node 0 [ 1234.041529] ion_page_pool_alloc+0x118/0x1b0 [ 1234.041542] ion_system_heap_allocate+0x133/0x8c0 [ 1234.073597] DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.075153] ? ion_alloc+0x187/0x810 [ 1234.075167] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1234.105762] lowmem_reserve[]: [ 1234.106273] ? ion_system_contig_heap_create+0x130/0x130 [ 1234.110692] 0 [ 1234.112875] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1234.112887] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1234.112898] ion_alloc+0x204/0x810 [ 1234.112911] ? ion_dma_buf_release+0x40/0x40 [ 1234.112923] ? __might_fault+0x177/0x1b0 [ 1234.112939] ion_ioctl+0xea/0x1f0 [ 1234.112950] ? ion_query_heaps+0x360/0x360 [ 1234.117938] 2717 [ 1234.122178] ? lock_acquire+0x170/0x3f0 [ 1234.122186] ? lock_downgrade+0x740/0x740 [ 1234.122194] ? ion_query_heaps+0x360/0x360 [ 1234.122204] do_vfs_ioctl+0x75a/0xff0 [ 1234.122216] ? ioctl_preallocate+0x1a0/0x1a0 [ 1234.122224] ? lock_downgrade+0x740/0x740 [ 1234.122238] ? __fget+0x225/0x360 [ 1234.122246] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.122257] ? security_file_ioctl+0x83/0xb0 [ 1234.122270] SyS_ioctl+0x7f/0xb0 [ 1234.151644] 2718 [ 1234.156904] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.156916] do_syscall_64+0x1d5/0x640 [ 1234.156938] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1234.156945] RIP: 0033:0x45e219 [ 1234.156950] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.156959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1234.156966] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1234.160904] 2718 [ 1234.165481] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1234.165487] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1234.165492] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1234.306290] 2718 [ 1234.308420] Node 0 DMA32 free:108460kB min:36200kB low:45248kB high:54296kB active_anon:74628kB inactive_anon:31992kB active_file:12140kB inactive_file:14200kB unevictable:0kB writepending:300kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3080kB bounce:0kB free_pcp:484kB local_pcp:192kB free_cma:0kB [ 1234.338257] lowmem_reserve[]: 0 0 0 0 0 [ 1234.342530] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.368576] lowmem_reserve[]: 0 0 0 0 0 [ 1234.372900] Node 1 Normal free:53632kB min:53696kB low:67120kB high:80544kB active_anon:72kB inactive_anon:8128kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.400901] lowmem_reserve[]: 0 0 0 0 0 [ 1234.404999] Node 0 DMA: 2*4kB (U) 4*8kB (U) 2*16kB (U) 4*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11080kB [ 1234.418908] Node 0 DMA32: 2502*4kB (UME) 918*8kB (ME) 159*16kB (UME) 451*32kB (UME) 24*64kB (UM) 8*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36888kB [ 1234.449632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1234.460505] Node 1 Normal: 86*4kB (UM) 407*8kB (UM) 315*16kB (UM) 110*32kB (UM) 10*64kB (M) 5*128kB (M) 1*256kB (M) 4*512kB (UM) 1*1024kB (U) 0*2048kB 9*4096kB (U) = 53632kB [ 1234.489607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1234.503654] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1234.517107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1234.557253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1234.577853] 11849 total pagecache pages [ 1234.593478] 0 pages in swap cache [ 1234.600251] Swap cache stats: add 0, delete 0, find 0/0 [ 1234.615185] Free swap = 0kB [ 1234.621544] Total swap = 0kB [ 1234.627299] 2097051 pages RAM [ 1234.636553] 0 pages HighMem/MovableOnly [ 1234.640542] 363840 pages reserved [ 1234.647733] 0 pages cma reserved [ 1234.708800] oom_reaper: reaped process 12350 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1234.736989] oom_reaper: reaped process 12356 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1234.780765] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1234.798418] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1234.803914] CPU: 0 PID: 12346 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1234.807257] syz-executor.1: [ 1234.811784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.811792] page allocation failure: order:0 [ 1234.814782] Call Trace: [ 1234.814807] dump_stack+0x1b2/0x281 [ 1234.814820] dump_header+0x178/0x82f [ 1234.814831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1234.814842] ? ___ratelimit+0x2cd/0x530 [ 1234.824222] syz-executor.4: [ 1234.828575] oom_kill_process.cold+0x10/0xb18 [ 1234.828595] out_of_memory+0xe3e/0x1190 [ 1234.831148] page allocation failure: order:0 [ 1234.834775] ? oom_killer_disable+0x1c0/0x1c0 [ 1234.834784] ? mutex_trylock+0x152/0x1a0 [ 1234.834797] __alloc_pages_nodemask+0x23e1/0x2720 [ 1234.838516] syz-executor.1: [ 1234.843599] ? lock_acquire+0x170/0x3f0 [ 1234.843616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1234.852994] page allocation failure: order:0 [ 1234.855050] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1234.859005] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1234.863402] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1234.863414] ? audit_kill_trees+0x230/0x230 [ 1234.863429] alloc_pages_current+0x155/0x260 [ 1234.867916] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1234.871959] ion_page_pool_alloc+0x118/0x1b0 [ 1234.871971] ion_system_heap_allocate+0x133/0x8c0 [ 1234.871980] ? ion_alloc+0x187/0x810 [ 1234.871993] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1234.876856] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1234.879846] ? ion_system_contig_heap_create+0x130/0x130 [ 1234.883822] (null) [ 1234.888623] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1234.893023] (null) [ 1234.897482] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1234.904583] (null) [ 1234.909996] ion_alloc+0x204/0x810 [ 1234.914311] syz-executor.4 cpuset= [ 1234.918682] ? ion_dma_buf_release+0x40/0x40 [ 1234.925800] syz-executor.1 cpuset= [ 1234.930169] ? __might_fault+0x177/0x1b0 [ 1234.935001] syz-executor.1 cpuset= [ 1234.938680] ion_ioctl+0xea/0x1f0 [ 1234.951958] / [ 1234.956630] ? ion_query_heaps+0x360/0x360 [ 1234.958758] mems_allowed=0-1 [ 1234.963755] ? lock_acquire+0x170/0x3f0 [ 1234.963764] ? lock_downgrade+0x740/0x740 [ 1234.963771] ? ion_query_heaps+0x360/0x360 [ 1234.963782] do_vfs_ioctl+0x75a/0xff0 [ 1234.965916] / [ 1234.970733] ? ioctl_preallocate+0x1a0/0x1a0 [ 1234.972886] / [ 1234.976402] ? lock_downgrade+0x740/0x740 [ 1234.979913] mems_allowed=0-1 [ 1234.984303] ? __fget+0x225/0x360 [ 1234.984312] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.984324] ? security_file_ioctl+0x83/0xb0 [ 1234.987844] mems_allowed=0-1 [ 1234.991908] SyS_ioctl+0x7f/0xb0 [ 1234.991917] ? do_vfs_ioctl+0xff0/0xff0 [ 1234.991931] do_syscall_64+0x1d5/0x640 [ 1235.064862] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1235.070034] RIP: 0033:0x45e219 [ 1235.073203] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.080889] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1235.088138] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1235.095388] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.102653] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1235.109914] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1235.117183] CPU: 1 PID: 12341 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1235.125064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.133668] Mem-Info: [ 1235.134405] Call Trace: [ 1235.136815] active_anon:18721 inactive_anon:10030 isolated_anon:0 [ 1235.136815] active_file:31 inactive_file:0 isolated_file:0 [ 1235.136815] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1235.136815] slab_reclaimable:16454 slab_unreclaimable:117503 [ 1235.136815] mapped:52710 shmem:11021 pagetables:770 bounce:0 [ 1235.136815] free:13577 free_pcp:82 free_cma:0 [ 1235.139385] dump_stack+0x1b2/0x281 [ 1235.176107] warn_alloc.cold+0x96/0x1cc [ 1235.180062] ? zone_watermark_ok_safe+0x220/0x220 [ 1235.184884] ? usleep_range+0x130/0x130 [ 1235.188837] ? try_to_free_pages+0x23f/0x6e0 [ 1235.193231] ? _find_next_bit+0xdb/0x100 [ 1235.197280] ? run_timer_softirq+0x5a0/0x5a0 [ 1235.201673] __alloc_pages_nodemask+0x2127/0x2720 [ 1235.206500] ? lock_acquire+0x170/0x3f0 [ 1235.210461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1235.215290] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1235.215321] Node 0 active_anon:74812kB inactive_anon:31992kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210840kB dirty:72kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1235.219777] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1235.252930] alloc_pages_current+0x155/0x260 [ 1235.257331] ion_page_pool_alloc+0x118/0x1b0 [ 1235.261734] ion_system_heap_allocate+0x133/0x8c0 [ 1235.266563] ? ion_alloc+0x187/0x810 [ 1235.270259] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1235.275691] ? ion_system_contig_heap_create+0x130/0x130 [ 1235.281124] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1235.286126] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1235.290952] ion_alloc+0x204/0x810 [ 1235.291876] Node 1 active_anon:72kB inactive_anon:8128kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1235.294494] ? ion_dma_buf_release+0x40/0x40 [ 1235.325275] ? __might_fault+0x177/0x1b0 [ 1235.329327] ion_ioctl+0xea/0x1f0 [ 1235.332781] ? ion_query_heaps+0x360/0x360 [ 1235.336998] ? lock_acquire+0x170/0x3f0 [ 1235.340953] ? lock_downgrade+0x740/0x740 [ 1235.345087] ? ion_query_heaps+0x360/0x360 [ 1235.349400] do_vfs_ioctl+0x75a/0xff0 [ 1235.353189] ? ioctl_preallocate+0x1a0/0x1a0 [ 1235.357575] ? lock_downgrade+0x740/0x740 [ 1235.361719] ? __fget+0x225/0x360 [ 1235.365159] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.365332] Node 0 [ 1235.369121] ? security_file_ioctl+0x83/0xb0 [ 1235.369133] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.369137] lowmem_reserve[]: [ 1235.371356] SyS_ioctl+0x7f/0xb0 [ 1235.385916] 0 [ 1235.401238] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.401251] do_syscall_64+0x1d5/0x640 [ 1235.401268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1235.401278] RIP: 0033:0x45e219 [ 1235.425695] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.431816] 2717 [ 1235.433383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1235.433389] 2718 [ 1235.435425] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1235.435432] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.459230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1235.465391] 2718 [ 1235.466485] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1235.475889] CPU: 0 PID: 12356 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1235.483768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.493115] Call Trace: [ 1235.495691] dump_stack+0x1b2/0x281 [ 1235.499299] warn_alloc.cold+0x96/0x1cc [ 1235.503265] ? zone_watermark_ok_safe+0x220/0x220 [ 1235.508104] ? usleep_range+0x130/0x130 [ 1235.512059] ? try_to_free_pages+0x23f/0x6e0 [ 1235.516448] ? _find_next_bit+0xdb/0x100 [ 1235.520499] ? run_timer_softirq+0x5a0/0x5a0 [ 1235.524924] __alloc_pages_nodemask+0x2127/0x2720 [ 1235.529755] ? lock_acquire+0x170/0x3f0 [ 1235.533713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1235.538537] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1235.543018] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1235.548454] alloc_pages_current+0x155/0x260 [ 1235.552862] ion_page_pool_alloc+0x118/0x1b0 [ 1235.557252] ion_system_heap_allocate+0x133/0x8c0 [ 1235.562101] ? ion_alloc+0x187/0x810 [ 1235.565798] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1235.571228] ? ion_system_contig_heap_create+0x130/0x130 [ 1235.576657] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1235.581653] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1235.586478] ion_alloc+0x204/0x810 [ 1235.590003] ? ion_dma_buf_release+0x40/0x40 [ 1235.594393] ? __might_fault+0x177/0x1b0 [ 1235.598435] ion_ioctl+0xea/0x1f0 [ 1235.601869] ? ion_query_heaps+0x360/0x360 [ 1235.606089] ? lock_acquire+0x170/0x3f0 [ 1235.610044] ? lock_downgrade+0x740/0x740 [ 1235.614168] ? ion_query_heaps+0x360/0x360 [ 1235.618385] do_vfs_ioctl+0x75a/0xff0 [ 1235.622166] ? ioctl_preallocate+0x1a0/0x1a0 [ 1235.626552] ? lock_downgrade+0x740/0x740 [ 1235.630682] ? __fget+0x225/0x360 [ 1235.634112] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.638066] ? security_file_ioctl+0x83/0xb0 [ 1235.642458] SyS_ioctl+0x7f/0xb0 [ 1235.645802] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.649756] do_syscall_64+0x1d5/0x640 [ 1235.653629] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1235.658798] RIP: 0033:0x45e219 [ 1235.661967] RSP: 002b:00007febfb8b3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.669656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1235.676906] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1235.684156] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1235.691405] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1235.698665] R13: 00007ffeb68c5c4f R14: 00007febfb8b49c0 R15: 000000000119c034 [ 1235.705936] CPU: 1 PID: 12350 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1235.711937] 2718 [ 1235.713815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.713823] Node 0 [ 1235.715864] Call Trace: [ 1235.728811] DMA32 free:17148kB min:36200kB low:45248kB high:54296kB active_anon:74412kB inactive_anon:31992kB active_file:112kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3080kB bounce:0kB free_pcp:276kB local_pcp:136kB free_cma:0kB [ 1235.730029] dump_stack+0x1b2/0x281 [ 1235.761929] lowmem_reserve[]: 0 0 [ 1235.761985] warn_alloc.cold+0x96/0x1cc [ 1235.761998] ? zone_watermark_ok_safe+0x220/0x220 [ 1235.765421] 0 [ 1235.769376] ? usleep_range+0x130/0x130 [ 1235.775972] 0 [ 1235.779924] ? try_to_free_pages+0x23f/0x6e0 [ 1235.779926] 0 [ 1235.781711] ? _find_next_bit+0xdb/0x100 [ 1235.781721] ? run_timer_softirq+0x5a0/0x5a0 [ 1235.781738] __alloc_pages_nodemask+0x2127/0x2720 [ 1235.781760] ? lock_acquire+0x170/0x3f0 [ 1235.787928] Node 0 [ 1235.791967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1235.791979] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1235.791996] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1235.792027] alloc_pages_current+0x155/0x260 [ 1235.792040] ion_page_pool_alloc+0x118/0x1b0 [ 1235.798170] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.801251] ion_system_heap_allocate+0x133/0x8c0 [ 1235.807030] lowmem_reserve[]: [ 1235.807464] ? ion_alloc+0x187/0x810 [ 1235.814205] 0 [ 1235.816782] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1235.824044] 0 [ 1235.826605] ? ion_system_contig_heap_create+0x130/0x130 [ 1235.830982] 0 [ 1235.855875] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1235.855888] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1235.855901] ion_alloc+0x204/0x810 [ 1235.855915] ? ion_dma_buf_release+0x40/0x40 [ 1235.855925] ? __might_fault+0x177/0x1b0 [ 1235.855937] ion_ioctl+0xea/0x1f0 [ 1235.855946] ? ion_query_heaps+0x360/0x360 [ 1235.855958] ? lock_acquire+0x170/0x3f0 [ 1235.855967] ? lock_downgrade+0x740/0x740 [ 1235.855974] ? ion_query_heaps+0x360/0x360 [ 1235.855984] do_vfs_ioctl+0x75a/0xff0 [ 1235.855994] ? ioctl_preallocate+0x1a0/0x1a0 [ 1235.856005] ? lock_downgrade+0x740/0x740 [ 1235.864879] 0 [ 1235.867745] ? __fget+0x225/0x360 [ 1235.869525] 0 [ 1235.874969] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.874980] ? security_file_ioctl+0x83/0xb0 [ 1235.874989] SyS_ioctl+0x7f/0xb0 [ 1235.874997] ? do_vfs_ioctl+0xff0/0xff0 [ 1235.875008] do_syscall_64+0x1d5/0x640 [ 1235.875023] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1235.875031] RIP: 0033:0x45e219 [ 1235.875036] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.875044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1235.875068] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1235.882268] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1235.882273] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1235.882278] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1235.897231] warn_alloc_show_mem: 3 callbacks suppressed [ 1235.897234] Mem-Info: [ 1235.901122] Node 1 [ 1235.908983] active_anon:18721 inactive_anon:10030 isolated_anon:0 [ 1235.908983] active_file:31 inactive_file:0 isolated_file:0 [ 1235.908983] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1235.908983] slab_reclaimable:16454 slab_unreclaimable:117503 [ 1235.908983] mapped:52710 shmem:11021 pagetables:770 bounce:0 [ 1235.908983] free:13577 free_pcp:114 free_cma:0 [ 1235.909714] Normal free:26192kB min:53696kB low:67120kB high:80544kB active_anon:72kB inactive_anon:8128kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:188kB local_pcp:68kB free_cma:0kB [ 1235.917502] Node 0 active_anon:74812kB inactive_anon:31992kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210840kB dirty:72kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1235.921475] lowmem_reserve[]: [ 1235.929350] Node 1 active_anon:72kB inactive_anon:8128kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1235.930136] 0 [ 1235.938009] Node 0 [ 1235.942224] 0 [ 1235.950722] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.955847] 0 [ 1235.960887] lowmem_reserve[]: [ 1235.961426] 0 [ 1235.972122] 0 [ 1235.977109] 0 [ 1235.981383] 2717 [ 1235.988676] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10968kB [ 1235.988760] Node 0 DMA32: 2396*4kB (ME) 741*8kB [ 1236.044751] syz-executor.1: [ 1236.127418] (UME) [ 1236.151611] 2718 [ 1236.170227] 103*16kB [ 1236.179031] 2718 [ 1236.185932] (UME) [ 1236.187353] 2718 [ 1236.188125] syz-executor.4: [ 1236.213135] 1*32kB [ 1236.215181] Node 0 DMA32 free:82724kB min:36200kB low:45248kB high:54296kB active_anon:74820kB inactive_anon:31992kB active_file:560kB inactive_file:2536kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:3080kB bounce:0kB free_pcp:336kB local_pcp:112kB free_cma:0kB [ 1236.215205] lowmem_reserve[]: [ 1236.217307] (U) [ 1236.219659] 0 0 0 0 0 [ 1236.219678] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1236.219695] lowmem_reserve[]: [ 1236.225470] 0*64kB [ 1236.225982] page allocation failure: order:4 [ 1236.229028] 0*128kB [ 1236.231190] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1236.231200] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1236.265311] 0*256kB [ 1236.265509] 0 [ 1236.270642] 0*512kB [ 1236.293665] 0 0 0 0 [ 1236.293684] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:72kB inactive_anon:8128kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1236.293704] lowmem_reserve[]: 0 0 0 0 0 [ 1236.293718] Node 0 DMA: 3*4kB (U) 3*8kB (U) 1*16kB (U) 2*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10996kB [ 1236.293780] Node 0 DMA32: 2793*4kB (UME) 1188*8kB (UME) 1248*16kB (UME) 1296*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1236.302221] 0*1024kB [ 1236.303684] CPU: 1 PID: 12356 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1236.306528] 0*2048kB [ 1236.313565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.313568] Call Trace: [ 1236.313585] dump_stack+0x1b2/0x281 [ 1236.313598] warn_alloc.cold+0x96/0x1cc [ 1236.313610] ? zone_watermark_ok_safe+0x220/0x220 [ 1236.313634] __alloc_pages_nodemask+0x2127/0x2720 [ 1236.313650] ? lock_acquire+0x170/0x3f0 [ 1236.313664] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.313680] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1236.313692] ? __mutex_unlock_slowpath+0x75/0x770 [ 1236.313704] ? __list_del_entry_valid+0xb3/0xf0 [ 1236.313717] alloc_pages_current+0x155/0x260 [ 1236.313732] ion_page_pool_alloc+0x118/0x1b0 [ 1236.324090] page allocation failure: order:4 [ 1236.325221] ion_system_heap_allocate+0x133/0x8c0 [ 1236.325234] ? _raw_spin_unlock+0x29/0x40 [ 1236.325243] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1236.325254] ? ion_system_contig_heap_create+0x130/0x130 [ 1236.325265] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1236.325275] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1236.325287] ion_alloc+0x27a/0x810 [ 1236.328055] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1236.355185] ? ion_dma_buf_release+0x40/0x40 [ 1236.355197] ? __might_fault+0x177/0x1b0 [ 1236.355208] ion_ioctl+0xea/0x1f0 [ 1236.355217] ? ion_query_heaps+0x360/0x360 [ 1236.355229] ? lock_acquire+0x170/0x3f0 [ 1236.355236] ? lock_downgrade+0x740/0x740 [ 1236.355243] ? ion_query_heaps+0x360/0x360 [ 1236.355252] do_vfs_ioctl+0x75a/0xff0 [ 1236.355263] ? ioctl_preallocate+0x1a0/0x1a0 [ 1236.355270] ? lock_downgrade+0x740/0x740 [ 1236.355283] ? __fget+0x225/0x360 [ 1236.355293] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.355302] ? security_file_ioctl+0x83/0xb0 [ 1236.355311] SyS_ioctl+0x7f/0xb0 [ 1236.355317] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.355327] do_syscall_64+0x1d5/0x640 [ 1236.355343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1236.355351] RIP: 0033:0x45e219 [ 1236.355355] RSP: 002b:00007febfb8b3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.355366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1236.355371] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1236.355376] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1236.355381] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1236.355386] R13: 00007ffeb68c5c4f R14: 00007febfb8b49c0 R15: 000000000119c034 [ 1236.355768] = 82116kB [ 1236.373703] 0*4096kB [ 1236.386432] Node 0 Normal: 0*4kB 0*8kB [ 1236.407099] = 17192kB [ 1236.411855] 0*16kB [ 1236.427369] Node 0 [ 1236.440697] 0*32kB [ 1236.450018] (null) [ 1236.464761] 0*64kB [ 1236.484918] syz-executor.1 cpuset= [ 1236.535065] 0*128kB [ 1236.539751] Normal: [ 1236.586537] 0*256kB [ 1236.591294] 0*4kB [ 1236.627444] 0*512kB [ 1236.630198] / [ 1236.647195] 0*1024kB [ 1236.649473] mems_allowed=0-1 [ 1236.655564] 0*2048kB [ 1236.656387] CPU: 0 PID: 12350 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1236.658460] 0*4096kB [ 1236.660760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.681494] = 0kB [ 1236.689909] Call Trace: [ 1236.694538] dump_stack+0x1b2/0x281 [ 1236.698161] warn_alloc.cold+0x96/0x1cc [ 1236.702131] ? zone_watermark_ok_safe+0x220/0x220 [ 1236.702757] Node 1 [ 1236.706974] __alloc_pages_nodemask+0x2127/0x2720 [ 1236.706985] ? lock_acquire+0x170/0x3f0 [ 1236.706998] ? lock_acquire+0x170/0x3f0 [ 1236.713515] Normal: [ 1236.714049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.717991] 60*4kB [ 1236.721952] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1236.721965] ? __mutex_unlock_slowpath+0x75/0x770 [ 1236.733890] (UM) [ 1236.736738] alloc_pages_current+0x155/0x260 [ 1236.741579] 447*8kB [ 1236.743622] ion_page_pool_alloc+0x118/0x1b0 [ 1236.748012] (UM) [ 1236.750319] ion_system_heap_allocate+0x133/0x8c0 [ 1236.754713] 229*16kB [ 1236.756743] ? _raw_spin_unlock+0x29/0x40 [ 1236.761569] (UM) [ 1236.763951] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1236.768080] 65*32kB (UM) [ 1236.770132] ? ion_system_contig_heap_create+0x130/0x130 [ 1236.775045] 11*64kB [ 1236.777774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1236.783208] (UM) [ 1236.785505] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1236.790486] 6*128kB [ 1236.792534] ion_alloc+0x27a/0x810 [ 1236.792550] ? ion_dma_buf_release+0x40/0x40 [ 1236.797363] (UM) [ 1236.799671] ? __might_fault+0x177/0x1b0 [ 1236.803199] 2*256kB [ 1236.807573] ion_ioctl+0xea/0x1f0 [ 1236.809603] (UM) [ 1236.813662] ? ion_query_heaps+0x360/0x360 [ 1236.813674] ? lock_acquire+0x170/0x3f0 [ 1236.813684] ? lock_downgrade+0x740/0x740 [ 1236.815982] 2*512kB [ 1236.819417] ? ion_query_heaps+0x360/0x360 [ 1236.821467] (M) [ 1236.825671] do_vfs_ioctl+0x75a/0xff0 [ 1236.829615] 0*1024kB [ 1236.833742] ? ioctl_preallocate+0x1a0/0x1a0 [ 1236.833750] ? lock_downgrade+0x740/0x740 [ 1236.833763] ? __fget+0x225/0x360 [ 1236.836056] 1*2048kB [ 1236.840272] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.842238] (U) [ 1236.846007] ? security_file_ioctl+0x83/0xb0 [ 1236.848387] 3*4096kB [ 1236.852775] SyS_ioctl+0x7f/0xb0 [ 1236.852783] ? do_vfs_ioctl+0xff0/0xff0 [ 1236.852794] do_syscall_64+0x1d5/0x640 [ 1236.856913] (U) [ 1236.860351] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1236.862769] = 26904kB [ 1236.866703] RIP: 0033:0x45e219 [ 1236.868658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1236.873039] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.873049] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1236.873054] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1236.873059] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1236.873067] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1236.875462] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1236.878799] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1236.885395] aoe: skb alloc failure [ 1236.885465] aoe: skb alloc failure [ 1236.885498] aoe: skb alloc failure [ 1236.886320] 0*8kB [ 1236.890005] syz-executor.4: [ 1236.891988] 0*16kB [ 1236.909463] page allocation failure: order:0 [ 1236.915143] 0*32kB [ 1236.924807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1236.926770] 0*64kB [ 1236.944180] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1236.951962] 0*128kB [ 1236.967408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1236.969629] 0*256kB [ 1236.978236] 11054 total pagecache pages [ 1236.981231] 0*512kB [ 1236.985761] (null) [ 1236.988594] 0*1024kB [ 1236.989036] syz-executor.4 cpuset= [ 1236.999144] 0*2048kB [ 1237.007016] 0 pages in swap cache [ 1237.009030] 0*4096kB [ 1237.009556] Swap cache stats: add 0, delete 0, find 0/0 [ 1237.020324] = 0kB [ 1237.030637] / [ 1237.034803] Node 1 [ 1237.037236] Free swap = 0kB [ 1237.037274] Normal: [ 1237.040704] Total swap = 0kB [ 1237.043126] 60*4kB (UM) 447*8kB (UM) 229*16kB (UM) 65*32kB (UM) 11*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB [ 1237.056414] mems_allowed=0-1 [ 1237.060326] (M) [ 1237.068265] 2097051 pages RAM [ 1237.075593] 0*1024kB 1*2048kB (U) 3*4096kB (U) = 26904kB [ 1237.083187] CPU: 1 PID: 12356 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1237.086777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.094644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.094647] Call Trace: [ 1237.094667] dump_stack+0x1b2/0x281 [ 1237.094681] warn_alloc.cold+0x96/0x1cc [ 1237.094693] ? zone_watermark_ok_safe+0x220/0x220 [ 1237.094702] ? usleep_range+0x130/0x130 [ 1237.094713] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1237.106950] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1237.112868] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1237.112879] ? run_timer_softirq+0x5a0/0x5a0 [ 1237.112895] __alloc_pages_nodemask+0x2127/0x2720 [ 1237.112910] ? lock_acquire+0x170/0x3f0 [ 1237.115469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.119077] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1237.126451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1237.127847] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1237.131819] 11049 total pagecache pages [ 1237.136883] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1237.149336] 0 pages in swap cache [ 1237.150430] ? __sanitizer_cov_trace_pc+0x34/0x50 [ 1237.154842] Swap cache stats: add 0, delete 0, find 0/0 [ 1237.159637] alloc_pages_current+0x155/0x260 [ 1237.167033] Free swap = 0kB [ 1237.172427] ion_page_pool_alloc+0x118/0x1b0 [ 1237.172438] ion_system_heap_allocate+0x133/0x8c0 [ 1237.172450] ? _raw_spin_unlock+0x29/0x40 [ 1237.172461] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1237.177297] Total swap = 0kB [ 1237.185862] ? ion_system_contig_heap_create+0x130/0x130 [ 1237.185872] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1237.185882] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1237.185894] ion_alloc+0x27a/0x810 [ 1237.185911] ? ion_dma_buf_release+0x40/0x40 [ 1237.193723] 2097051 pages RAM [ 1237.194340] ? __might_fault+0x177/0x1b0 [ 1237.199764] 0 pages HighMem/MovableOnly [ 1237.203202] ion_ioctl+0xea/0x1f0 [ 1237.203212] ? ion_query_heaps+0x360/0x360 [ 1237.203225] ? lock_acquire+0x170/0x3f0 [ 1237.203235] ? lock_downgrade+0x740/0x740 [ 1237.208265] 363840 pages reserved [ 1237.213394] ? ion_query_heaps+0x360/0x360 [ 1237.213405] do_vfs_ioctl+0x75a/0xff0 [ 1237.213417] ? ioctl_preallocate+0x1a0/0x1a0 [ 1237.213425] ? lock_downgrade+0x740/0x740 [ 1237.213439] ? __fget+0x225/0x360 [ 1237.219593] 0 pages cma reserved [ 1237.220825] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.226983] Out of memory (oom_kill_allocating_task): Kill process 12346 (syz-executor.4) score 0 or sacrifice child [ 1237.230037] ? security_file_ioctl+0x83/0xb0 [ 1237.236117] Killed process 12346 (syz-executor.4) total-vm:93612kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1237.239071] SyS_ioctl+0x7f/0xb0 [ 1237.239081] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.239092] do_syscall_64+0x1d5/0x640 [ 1237.239110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1237.239119] RIP: 0033:0x45e219 [ 1237.239124] RSP: 002b:00007febfb8b3c68 EFLAGS: 00000246 [ 1237.271782] warn_alloc_show_mem: 3 callbacks suppressed [ 1237.271785] Mem-Info: [ 1237.272530] ORIG_RAX: 0000000000000010 [ 1237.291296] active_anon:18726 inactive_anon:10030 isolated_anon:0 [ 1237.291296] active_file:13 inactive_file:190 isolated_file:0 [ 1237.291296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1237.291296] slab_reclaimable:16447 slab_unreclaimable:117452 [ 1237.291296] mapped:52841 shmem:11021 pagetables:770 bounce:0 [ 1237.291296] free:41767 free_pcp:74 free_cma:0 [ 1237.292219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1237.295665] Node 0 active_anon:74832kB inactive_anon:31992kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210864kB dirty:0kB writeback:0kB shmem:35892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1237.299863] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1237.299868] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1237.299871] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1237.299876] R13: 00007ffeb68c5c4f R14: 00007febfb8b49c0 R15: 000000000119c034 [ 1237.304190] 0 pages HighMem/MovableOnly [ 1237.334380] Node 1 active_anon:72kB inactive_anon:8128kB active_file:0kB inactive_file:1204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:700kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1237.338458] 363840 pages reserved [ 1237.417704] Node 0 [ 1237.418675] 0 pages cma reserved [ 1237.444646] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.701172] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1237.706266] Node 0 DMA32 free:143212kB min:36200kB low:45248kB high:54296kB active_anon:74832kB inactive_anon:31992kB active_file:52kB inactive_file:5956kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3080kB bounce:0kB free_pcp:1376kB local_pcp:720kB free_cma:0kB [ 1237.784843] lowmem_reserve[]: 0 0 0 0 0 [ 1237.788881] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.854955] lowmem_reserve[]: 0 0 0 0 0 [ 1237.861160] Node 1 Normal free:544140kB min:53696kB low:67120kB high:80544kB active_anon:72kB inactive_anon:8128kB active_file:100kB inactive_file:1100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1312kB local_pcp:640kB free_cma:0kB [ 1237.893953] lowmem_reserve[]: 0 0 0 0 0 19:44:52 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000380)=""/71, 0x47) [ 1237.897977] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 3*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11008kB [ 1237.915193] Node 0 DMA32: 2880*4kB (UE) 1719*8kB (UME) 3983*16kB (UME) 1237*32kB (UME) 727*64kB (UM) 227*128kB (UM) 123*256kB (UM) 40*512kB (U) 135*1024kB (UM) 12*2048kB (U) 0*4096kB = 418952kB [ 1237.937298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1237.962218] Node 1 Normal: 52*4kB (UM) 402*8kB (UM) 303*16kB (UM) 102*32kB (UM) 1399*64kB (UM) 95*128kB (UM) 71*256kB (UM) 47*512kB (UM) 373*1024kB (U) 62*2048kB (U) 7*4096kB (U) = 693072kB [ 1238.002149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1238.018569] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1238.027987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1238.041903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1238.056541] 13704 total pagecache pages [ 1238.060535] 0 pages in swap cache [ 1238.066362] Swap cache stats: add 0, delete 0, find 0/0 [ 1238.074768] Free swap = 0kB [ 1238.077795] Total swap = 0kB [ 1238.081083] 2097051 pages RAM [ 1238.084191] 0 pages HighMem/MovableOnly [ 1238.088153] 363840 pages reserved [ 1238.091716] 0 pages cma reserved 19:44:54 executing program 3: read$alg(0xffffffffffffffff, 0x0, 0x0) 19:44:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:54 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:54 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:54 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:44:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:54 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, 0x0, 0x0) 19:44:54 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:44:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:44:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) 19:44:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, 0x0, 0x0) [ 1240.959732] warn_alloc: 1 callbacks suppressed [ 1240.959736] syz-executor.2: [ 1240.964554] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1240.999755] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1241.020000] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1241.038959] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1241.057608] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1241.059672] syz-executor.4: [ 1241.063938] CPU: 0 PID: 12389 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1241.065025] syz-executor.2 cpuset= [ 1241.066965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.066969] Call Trace: [ 1241.066987] dump_stack+0x1b2/0x281 [ 1241.067001] warn_alloc.cold+0x96/0x1cc [ 1241.092361] / [ 1241.093900] ? zone_watermark_ok_safe+0x220/0x220 [ 1241.104409] __alloc_pages_nodemask+0x2127/0x2720 [ 1241.108782] mems_allowed=0-1 [ 1241.109247] ? _raw_spin_unlock_irq+0x24/0x80 [ 1241.116834] ? lock_acquire+0x170/0x3f0 [ 1241.120912] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.125750] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1241.131194] ? __mutex_unlock_slowpath+0x75/0x770 [ 1241.136029] alloc_pages_current+0x155/0x260 [ 1241.140433] ion_page_pool_alloc+0x118/0x1b0 [ 1241.144829] ion_system_heap_allocate+0x133/0x8c0 [ 1241.149658] ? ion_alloc+0x187/0x810 [ 1241.153355] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1241.158797] ? ion_system_contig_heap_create+0x130/0x130 [ 1241.164235] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1241.169240] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1241.174068] ion_alloc+0x204/0x810 [ 1241.177606] ? ion_dma_buf_release+0x40/0x40 [ 1241.182008] ? __might_fault+0x177/0x1b0 [ 1241.186051] ion_ioctl+0xea/0x1f0 [ 1241.189485] ? ion_query_heaps+0x360/0x360 [ 1241.193704] ? lock_acquire+0x170/0x3f0 [ 1241.197665] ? lock_downgrade+0x740/0x740 [ 1241.201813] ? ion_query_heaps+0x360/0x360 [ 1241.206030] do_vfs_ioctl+0x75a/0xff0 [ 1241.209818] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.214205] ? lock_downgrade+0x740/0x740 [ 1241.218337] ? __fget+0x225/0x360 [ 1241.221769] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.225724] ? security_file_ioctl+0x83/0xb0 [ 1241.230115] SyS_ioctl+0x7f/0xb0 [ 1241.233477] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.237432] do_syscall_64+0x1d5/0x640 [ 1241.241307] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.246479] RIP: 0033:0x45e219 [ 1241.249648] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.257336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1241.264587] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1241.271836] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.279090] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1241.286340] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1241.293605] CPU: 1 PID: 12400 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1241.301500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.310632] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1241.310850] Call Trace: [ 1241.310864] dump_stack+0x1b2/0x281 [ 1241.326909] warn_alloc.cold+0x96/0x1cc [ 1241.330884] ? zone_watermark_ok_safe+0x220/0x220 [ 1241.335740] __alloc_pages_nodemask+0x2127/0x2720 [ 1241.340610] ? __schedule+0x893/0x1de0 [ 1241.344502] ? lock_acquire+0x170/0x3f0 [ 1241.347902] (null) [ 1241.348476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.355448] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1241.356100] syz-executor.4 cpuset= [ 1241.360894] ? check_preemption_disabled+0x35/0x240 [ 1241.360905] ? __mutex_unlock_slowpath+0x75/0x770 [ 1241.360918] alloc_pages_current+0x155/0x260 [ 1241.360933] ion_page_pool_alloc+0x118/0x1b0 [ 1241.360945] ion_system_heap_allocate+0x133/0x8c0 [ 1241.360955] ? ion_alloc+0x187/0x810 [ 1241.379597] / [ 1241.383111] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1241.398776] ? ion_system_contig_heap_create+0x130/0x130 [ 1241.404236] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1241.405376] mems_allowed=0-1 [ 1241.409262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1241.409278] ion_alloc+0x204/0x810 [ 1241.409293] ? ion_dma_buf_release+0x40/0x40 [ 1241.425147] ? __might_fault+0x177/0x1b0 [ 1241.429213] ion_ioctl+0xea/0x1f0 [ 1241.432667] ? ion_query_heaps+0x360/0x360 [ 1241.436897] ? lock_acquire+0x170/0x3f0 [ 1241.440866] ? lock_downgrade+0x740/0x740 [ 1241.445024] ? ion_query_heaps+0x360/0x360 [ 1241.449251] do_vfs_ioctl+0x75a/0xff0 [ 1241.453046] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.457448] ? lock_downgrade+0x740/0x740 [ 1241.461600] ? __fget+0x225/0x360 [ 1241.465040] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.469008] ? security_file_ioctl+0x83/0xb0 [ 1241.473416] SyS_ioctl+0x7f/0xb0 [ 1241.476796] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.480787] do_syscall_64+0x1d5/0x640 [ 1241.484667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.489848] RIP: 0033:0x45e219 [ 1241.493031] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.500733] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1241.507994] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1241.515260] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1241.522522] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1241.529784] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1241.547510] CPU: 0 PID: 12404 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1241.555434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.564785] Call Trace: [ 1241.567393] dump_stack+0x1b2/0x281 [ 1241.571010] warn_alloc.cold+0x96/0x1cc [ 1241.574982] ? zone_watermark_ok_safe+0x220/0x220 [ 1241.579847] __alloc_pages_nodemask+0x2127/0x2720 [ 1241.584701] ? lock_acquire+0x170/0x3f0 [ 1241.588665] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.593495] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1241.598943] ? __mutex_unlock_slowpath+0x75/0x770 [ 1241.603790] alloc_pages_current+0x155/0x260 [ 1241.608189] ion_page_pool_alloc+0x118/0x1b0 [ 1241.612584] ion_system_heap_allocate+0x133/0x8c0 [ 1241.617411] ? ion_alloc+0x187/0x810 [ 1241.621110] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1241.626553] ? ion_system_contig_heap_create+0x130/0x130 [ 1241.632032] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1241.637038] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1241.641877] ion_alloc+0x204/0x810 [ 1241.645422] ? ion_dma_buf_release+0x40/0x40 [ 1241.649828] ? __might_fault+0x177/0x1b0 [ 1241.653900] ion_ioctl+0xea/0x1f0 [ 1241.657359] ? ion_query_heaps+0x360/0x360 [ 1241.661595] ? lock_acquire+0x170/0x3f0 [ 1241.665567] ? lock_downgrade+0x740/0x740 [ 1241.669704] ? ion_query_heaps+0x360/0x360 [ 1241.673940] do_vfs_ioctl+0x75a/0xff0 [ 1241.677751] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.682142] ? lock_downgrade+0x740/0x740 [ 1241.686274] ? __fget+0x225/0x360 [ 1241.689706] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.693665] ? security_file_ioctl+0x83/0xb0 [ 1241.698055] SyS_ioctl+0x7f/0xb0 [ 1241.701402] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.705357] do_syscall_64+0x1d5/0x640 [ 1241.709230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.714399] RIP: 0033:0x45e219 [ 1241.717584] RSP: 002b:00007febfb8b3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.725272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1241.732522] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1241.739770] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1241.747023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1241.754274] R13: 00007ffeb68c5c4f R14: 00007febfb8b49c0 R15: 000000000119c034 [ 1241.761628] CPU: 1 PID: 12413 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1241.769522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.778871] Call Trace: [ 1241.781462] dump_stack+0x1b2/0x281 [ 1241.785092] warn_alloc.cold+0x96/0x1cc [ 1241.789069] ? zone_watermark_ok_safe+0x220/0x220 [ 1241.793928] __alloc_pages_nodemask+0x2127/0x2720 [ 1241.798807] ? retint_kernel+0x2d/0x2d [ 1241.802700] ? lock_acquire+0x170/0x3f0 [ 1241.806680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.811535] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1241.816991] ? __mutex_unlock_slowpath+0x75/0x770 [ 1241.821846] ? retint_kernel+0x2d/0x2d [ 1241.825740] alloc_pages_current+0x155/0x260 [ 1241.830157] ion_page_pool_alloc+0x118/0x1b0 [ 1241.834571] ion_system_heap_allocate+0x133/0x8c0 [ 1241.839415] ? ion_alloc+0x187/0x810 [ 1241.843129] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1241.848580] ? ion_system_contig_heap_create+0x130/0x130 [ 1241.854032] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1241.859046] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1241.863890] ion_alloc+0x204/0x810 [ 1241.867429] ? ion_dma_buf_release+0x40/0x40 [ 1241.871841] ? __might_fault+0x177/0x1b0 [ 1241.875910] ion_ioctl+0xea/0x1f0 [ 1241.879367] ? ion_query_heaps+0x360/0x360 [ 1241.883616] ? lock_acquire+0x170/0x3f0 [ 1241.887588] ? lock_downgrade+0x740/0x740 [ 1241.891732] ? ion_query_heaps+0x360/0x360 [ 1241.895968] do_vfs_ioctl+0x75a/0xff0 [ 1241.899770] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.904186] ? lock_downgrade+0x740/0x740 [ 1241.908337] ? __fget+0x225/0x360 [ 1241.911796] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.915764] ? security_file_ioctl+0x83/0xb0 [ 1241.920174] SyS_ioctl+0x7f/0xb0 [ 1241.923538] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.927514] do_syscall_64+0x1d5/0x640 [ 1241.931409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.936594] RIP: 0033:0x45e219 [ 1241.939775] RSP: 002b:00007f8fa5a54c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.947480] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1241.954749] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1241.962011] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.969278] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1241.976540] R13: 00007ffc9c2201af R14: 00007f8fa5a559c0 R15: 000000000119bf8c [ 1242.093753] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1242.109723] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1242.114976] CPU: 1 PID: 12388 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1242.122855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.127266] warn_alloc_show_mem: 1 callbacks suppressed [ 1242.127269] Mem-Info: [ 1242.132203] Call Trace: [ 1242.132224] dump_stack+0x1b2/0x281 [ 1242.132237] warn_alloc.cold+0x96/0x1cc [ 1242.132249] ? zone_watermark_ok_safe+0x220/0x220 [ 1242.132275] __alloc_pages_nodemask+0x2127/0x2720 [ 1242.151507] active_anon:19835 inactive_anon:10029 isolated_anon:18 [ 1242.151507] active_file:396 inactive_file:364 isolated_file:0 [ 1242.151507] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1242.151507] slab_reclaimable:16361 slab_unreclaimable:117566 [ 1242.151507] mapped:53509 shmem:11021 pagetables:798 bounce:0 [ 1242.151507] free:36900 free_pcp:156 free_cma:0 [ 1242.154998] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1242.155011] ? lock_acquire+0x170/0x3f0 [ 1242.178930] Node 0 active_anon:78624kB inactive_anon:31976kB active_file:1524kB inactive_file:1396kB unevictable:0kB isolated(anon):72kB isolated(file):0kB mapped:213940kB dirty:56kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1242.193544] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1242.193563] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1242.193575] ? __mutex_unlock_slowpath+0x75/0x770 [ 1242.193590] alloc_pages_current+0x155/0x260 [ 1242.229948] Node 1 active_anon:716kB inactive_anon:8140kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1242.230682] ion_page_pool_alloc+0x118/0x1b0 [ 1242.249446] Node 0 [ 1242.250192] ion_system_heap_allocate+0x133/0x8c0 [ 1242.250203] ? ion_alloc+0x187/0x810 [ 1242.250212] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1242.250223] ? ion_system_contig_heap_create+0x130/0x130 [ 1242.250231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1242.250252] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1242.312631] ion_alloc+0x204/0x810 [ 1242.316181] ? ion_dma_buf_release+0x40/0x40 [ 1242.320599] ? __might_fault+0x177/0x1b0 [ 1242.324662] ion_ioctl+0xea/0x1f0 [ 1242.328134] ? ion_query_heaps+0x360/0x360 [ 1242.332366] ? lock_acquire+0x170/0x3f0 [ 1242.336334] ? lock_downgrade+0x740/0x740 [ 1242.340507] ? ion_query_heaps+0x360/0x360 [ 1242.344243] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.344738] do_vfs_ioctl+0x75a/0xff0 [ 1242.374027] ? ioctl_preallocate+0x1a0/0x1a0 [ 1242.378439] ? lock_downgrade+0x740/0x740 [ 1242.382591] ? __fget+0x225/0x360 [ 1242.386044] ? do_vfs_ioctl+0xff0/0xff0 [ 1242.390019] ? security_file_ioctl+0x83/0xb0 [ 1242.394424] SyS_ioctl+0x7f/0xb0 [ 1242.397785] ? do_vfs_ioctl+0xff0/0xff0 [ 1242.401764] do_syscall_64+0x1d5/0x640 [ 1242.405660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1242.410846] RIP: 0033:0x45e219 [ 1242.414028] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1242.421735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1242.429001] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1242.436264] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.443531] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1242.450803] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1242.456668] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1242.487266] Node 0 DMA32 free:108796kB min:36200kB low:45248kB high:54296kB active_anon:78624kB inactive_anon:31976kB active_file:1444kB inactive_file:1836kB unevictable:0kB writepending:56kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2860kB bounce:0kB free_pcp:760kB local_pcp:620kB free_cma:0kB [ 1242.598409] lowmem_reserve[]: 0 0 0 0 0 [ 1242.615349] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.662314] lowmem_reserve[]: 0 0 0 0 0 [ 1242.670480] Node 1 Normal free:53480kB min:53696kB low:67120kB high:80544kB active_anon:716kB inactive_anon:8140kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.700658] lowmem_reserve[]: 0 0 0 0 0 [ 1242.705170] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11060kB [ 1242.719138] Node 0 DMA32: 2642*4kB (UME) 1282*8kB (ME) 280*16kB (UME) 69*32kB (UME) 4*64kB (UM) 1*128kB (U) 2*256kB (U) 2*512kB (U) 82*1024kB (U) 0*2048kB 0*4096kB = 113400kB [ 1242.735538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1242.746735] Node 1 Normal: 158*4kB (UM) 56*8kB (UM) 29*16kB (UM) 36*32kB (UM) 13*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (U) 0*1024kB 2*2048kB (U) 11*4096kB (U) = 53576kB [ 1242.762861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1242.772298] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1242.837325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1242.879087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1242.915379] 12315 total pagecache pages [ 1242.930346] 0 pages in swap cache [ 1242.945247] Swap cache stats: add 0, delete 0, find 0/0 [ 1242.969690] Free swap = 0kB [ 1242.972773] Total swap = 0kB [ 1242.975787] 2097051 pages RAM [ 1242.978885] 0 pages HighMem/MovableOnly [ 1243.009622] 363840 pages reserved [ 1243.013099] 0 pages cma reserved [ 1245.028206] oom_reaper: reaped process 12400 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1245.043198] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1245.064007] in:imklog cpuset=/ mems_allowed=0-1 [ 1245.068721] CPU: 1 PID: 7702 Comm: in:imklog Not tainted 4.14.217-syzkaller #0 [ 1245.076082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1245.085464] Call Trace: [ 1245.088053] dump_stack+0x1b2/0x281 [ 1245.091683] dump_header+0x178/0x82f [ 1245.095392] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1245.100491] ? ___ratelimit+0x2cd/0x530 [ 1245.104462] oom_kill_process.cold+0x10/0xb18 [ 1245.108952] out_of_memory+0xe3e/0x1190 [ 1245.112912] ? oom_killer_disable+0x1c0/0x1c0 [ 1245.117386] ? mutex_trylock+0x152/0x1a0 [ 1245.121443] __alloc_pages_nodemask+0x23e1/0x2720 [ 1245.122418] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1245.126285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1245.126290] (null) [ 1245.137547] alloc_pages_current+0x155/0x260 [ 1245.137558] filemap_fault+0xea3/0x1980 [ 1245.137575] ext4_filemap_fault+0x84/0xb0 [ 1245.137585] __do_fault+0xfa/0x380 [ 1245.137593] __handle_mm_fault+0x2497/0x4620 [ 1245.137605] ? vm_insert_page+0x7c0/0x7c0 [ 1245.148388] syz-executor.1: [ 1245.148973] ? lock_downgrade+0x740/0x740 [ 1245.148990] handle_mm_fault+0x391/0x860 [ 1245.149003] __do_page_fault+0x549/0xad0 [ 1245.149013] ? spurious_fault+0x640/0x640 [ 1245.149022] ? do_page_fault+0x60/0x500 [ 1245.149031] ? page_fault+0x2f/0x50 [ 1245.149039] page_fault+0x45/0x50 [ 1245.149047] RIP: 1fa0:0x1f9f [ 1245.149054] RSP: 0000:000055e890b409d0 EFLAGS: 7f35f648cda0 [ 1245.154145] page allocation failure: order:0 [ 1245.168998] Mem-Info: [ 1245.171220] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1245.172309] active_anon:19314 inactive_anon:10030 isolated_anon:0 [ 1245.172309] active_file:12 inactive_file:12 isolated_file:0 [ 1245.172309] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1245.172309] slab_reclaimable:16283 slab_unreclaimable:117078 [ 1245.172309] mapped:52786 shmem:11021 pagetables:798 bounce:0 [ 1245.172309] free:13923 free_pcp:189 free_cma:0 [ 1245.176421] (null) [ 1245.176427] syz-executor.1 cpuset= [ 1245.192045] syz-executor.1 cpuset= [ 1245.194597] / [ 1245.264636] / [ 1245.266655] mems_allowed=0-1 [ 1245.272069] CPU: 0 PID: 12389 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1245.276123] Node 0 active_anon:76644kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211144kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.279940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1245.279944] Call Trace: [ 1245.279962] dump_stack+0x1b2/0x281 [ 1245.279976] warn_alloc.cold+0x96/0x1cc [ 1245.307655] mems_allowed=0-1 [ 1245.316968] ? zone_watermark_ok_safe+0x220/0x220 [ 1245.316978] ? usleep_range+0x130/0x130 [ 1245.316986] ? try_to_free_pages+0x23f/0x6e0 [ 1245.316997] ? _find_next_bit+0xdb/0x100 [ 1245.347400] ? run_timer_softirq+0x5a0/0x5a0 [ 1245.348941] Node 1 active_anon:612kB inactive_anon:8140kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.351795] __alloc_pages_nodemask+0x2127/0x2720 [ 1245.383139] ? lock_acquire+0x170/0x3f0 [ 1245.387095] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1245.391921] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1245.396399] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1245.398915] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.401864] alloc_pages_current+0x155/0x260 [ 1245.401876] ion_page_pool_alloc+0x118/0x1b0 [ 1245.436765] ion_system_heap_allocate+0x133/0x8c0 [ 1245.441588] ? ion_alloc+0x187/0x810 [ 1245.445282] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1245.450719] ? ion_system_contig_heap_create+0x130/0x130 [ 1245.456165] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1245.458897] lowmem_reserve[]: [ 1245.461174] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1245.461176] 0 2717 [ 1245.464266] ion_alloc+0x204/0x810 [ 1245.474841] ? ion_dma_buf_release+0x40/0x40 [ 1245.478892] 2718 2718 [ 1245.479234] ? __might_fault+0x177/0x1b0 [ 1245.479239] 2718 [ 1245.481722] ion_ioctl+0xea/0x1f0 [ 1245.487801] ? ion_query_heaps+0x360/0x360 [ 1245.495444] ? lock_acquire+0x170/0x3f0 [ 1245.499399] ? lock_downgrade+0x740/0x740 [ 1245.503526] ? ion_query_heaps+0x360/0x360 [ 1245.507741] do_vfs_ioctl+0x75a/0xff0 [ 1245.508883] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:76644kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2864kB bounce:0kB free_pcp:392kB local_pcp:92kB free_cma:0kB [ 1245.511536] ? ioctl_preallocate+0x1a0/0x1a0 [ 1245.511546] ? lock_downgrade+0x740/0x740 [ 1245.548832] ? __fget+0x225/0x360 [ 1245.552269] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.556222] ? security_file_ioctl+0x83/0xb0 [ 1245.560612] SyS_ioctl+0x7f/0xb0 [ 1245.563957] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.567914] do_syscall_64+0x1d5/0x640 [ 1245.568865] lowmem_reserve[]: 0 [ 1245.571791] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1245.571792] 0 0 [ 1245.575055] RIP: 0033:0x45e219 [ 1245.585332] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.588860] 0 [ 1245.593036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1245.593042] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1245.594822] 0 [ 1245.602067] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.602072] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1245.602078] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1245.604829] CPU: 0 PID: 12400 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1245.626545] warn_alloc_show_mem: 4 callbacks suppressed [ 1245.626548] Mem-Info: [ 1245.632891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1245.632895] Call Trace: [ 1245.632914] dump_stack+0x1b2/0x281 [ 1245.632927] warn_alloc.cold+0x96/0x1cc [ 1245.646148] ? zone_watermark_ok_safe+0x220/0x220 [ 1245.648531] Node 0 [ 1245.657901] ? usleep_range+0x130/0x130 [ 1245.657909] ? try_to_free_pages+0x23f/0x6e0 [ 1245.657918] ? _find_next_bit+0xdb/0x100 [ 1245.657929] ? run_timer_softirq+0x5a0/0x5a0 [ 1245.660533] active_anon:19314 inactive_anon:10030 isolated_anon:0 [ 1245.660533] active_file:12 inactive_file:12 isolated_file:0 [ 1245.660533] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1245.660533] slab_reclaimable:16283 slab_unreclaimable:117078 [ 1245.660533] mapped:52786 shmem:11021 pagetables:798 bounce:0 [ 1245.660533] free:13923 free_pcp:187 free_cma:0 [ 1245.664116] __alloc_pages_nodemask+0x2127/0x2720 [ 1245.668069] Node 0 active_anon:76644kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211144kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.672887] ? lock_acquire+0x170/0x3f0 [ 1245.672903] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1245.675125] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.679071] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1245.679085] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1245.679103] alloc_pages_current+0x155/0x260 [ 1245.683476] lowmem_reserve[]: [ 1245.687523] ion_page_pool_alloc+0x118/0x1b0 [ 1245.691935] Node 1 active_anon:612kB inactive_anon:8140kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.725146] ion_system_heap_allocate+0x133/0x8c0 [ 1245.725162] ? ion_alloc+0x187/0x810 [ 1245.725173] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1245.725186] ? ion_system_contig_heap_create+0x130/0x130 [ 1245.730040] 0 [ 1245.757664] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1245.757676] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1245.757688] ion_alloc+0x204/0x810 [ 1245.757701] ? ion_dma_buf_release+0x40/0x40 [ 1245.761679] Node 0 [ 1245.766480] ? __might_fault+0x177/0x1b0 [ 1245.791368] 0 [ 1245.795828] ion_ioctl+0xea/0x1f0 [ 1245.801263] 0 [ 1245.805639] ? ion_query_heaps+0x360/0x360 [ 1245.808721] 0 [ 1245.813111] ? lock_acquire+0x170/0x3f0 [ 1245.813120] ? lock_downgrade+0x740/0x740 [ 1245.813131] ? ion_query_heaps+0x360/0x360 [ 1245.839684] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.844471] do_vfs_ioctl+0x75a/0xff0 [ 1245.848153] lowmem_reserve[]: [ 1245.853585] ? ioctl_preallocate+0x1a0/0x1a0 [ 1245.853594] ? lock_downgrade+0x740/0x740 [ 1245.853607] ? __fget+0x225/0x360 [ 1245.859040] 0 [ 1245.860812] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.865799] 2717 [ 1245.870620] ? security_file_ioctl+0x83/0xb0 [ 1245.870630] SyS_ioctl+0x7f/0xb0 [ 1245.870639] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.874183] 0 [ 1245.878576] do_syscall_64+0x1d5/0x640 [ 1245.884839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1245.886609] Node 1 [ 1245.890040] RIP: 0033:0x45e219 [ 1245.890045] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.890054] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1245.890061] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1245.891877] 2718 [ 1245.896075] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1245.897854] 2718 [ 1245.901803] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1245.901808] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1245.907806] Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:612kB inactive_anon:8140kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:356kB local_pcp:228kB free_cma:0kB [ 1245.928797] 2718 [ 1245.949107] lowmem_reserve[]: [ 1246.139157] 0 0 0 0 0 [ 1246.141705] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10960kB [ 1246.168765] Node 0 DMA32: 2401*4kB (UME) 763*8kB (ME) 104*16kB (ME) 6*32kB (UM) 823*64kB (UME) 62*128kB (U) 36*256kB (U) 6*512kB (U) 14*1024kB (U) 0*2048kB 0*4096kB = 104796kB [ 1246.190178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1246.218733] Node 1 Normal: 1863*4kB (UM) 71*8kB (U) 63*16kB (UM) 63*32kB (U) 1783*64kB (U) 122*128kB (UM) 56*256kB (UM) 33*512kB (UM) 102*1024kB (U) 4*2048kB (UM) 4*4096kB (U) = 301028kB [ 1246.239266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.259164] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1246.262090] Node 0 [ 1246.267748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.267762] DMA32 free:99720kB min:36200kB low:45248kB high:54296kB active_anon:76644kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2864kB bounce:0kB free_pcp:368kB local_pcp:88kB free_cma:0kB [ 1246.267766] lowmem_reserve[]: [ 1246.298693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1246.358733] 12016 total pagecache pages [ 1246.362766] 0 pages in swap cache [ 1246.366210] Swap cache stats: add 0, delete 0, find 0/0 [ 1246.398673] Free swap = 0kB [ 1246.401713] Total swap = 0kB [ 1246.404732] 2097051 pages RAM [ 1246.407832] 0 pages HighMem/MovableOnly [ 1246.408654] 0 0 0 0 0 [ 1246.414310] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1246.438652] 363840 pages reserved [ 1246.443685] 0 pages cma reserved [ 1246.447060] Out of memory (oom_kill_allocating_task): Kill process 7702 (in:imklog) score 0 or sacrifice child [ 1246.478698] Killed process 7691 (rsyslogd) total-vm:254332kB, anon-rss:1024kB, file-rss:0kB, shmem-rss:0kB [ 1246.503481] oom_reaper: reaped process 7691 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1246.526606] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1246.538781] lowmem_reserve[]: 0 0 0 0 0 [ 1246.538809] Node 1 Normal free:39004kB min:53696kB low:67120kB high:80544kB active_anon:612kB inactive_anon:8140kB active_file:1204kB inactive_file:920kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:800kB local_pcp:152kB free_cma:0kB [ 1246.538828] lowmem_reserve[]: 0 0 0 0 0 [ 1246.538848] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) [ 1246.568628] systemd-journal cpuset= [ 1246.583624] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1246.592913] / mems_allowed=0-1 [ 1246.607709] CPU: 0 PID: 11560 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1246.607856] syz-executor.1 cpuset= [ 1246.615660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.615664] Call Trace: [ 1246.615681] dump_stack+0x1b2/0x281 [ 1246.615692] dump_header+0x178/0x82f [ 1246.615702] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1246.615710] ? ___ratelimit+0x2cd/0x530 [ 1246.615719] oom_kill_process.cold+0x10/0xb18 [ 1246.615735] out_of_memory+0xe3e/0x1190 [ 1246.619276] 0*1024kB [ 1246.628616] ? oom_killer_disable+0x1c0/0x1c0 [ 1246.628623] ? mutex_trylock+0x152/0x1a0 [ 1246.628634] __alloc_pages_nodemask+0x23e1/0x2720 [ 1246.631197] / [ 1246.634823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1246.638514] mems_allowed=0-1 [ 1246.643624] ? cache_grow_begin+0x41/0x630 [ 1246.643634] cache_grow_begin+0x91/0x630 [ 1246.643645] ? cache_grow_begin+0x91/0x630 [ 1246.647612] 1*2048kB [ 1246.652086] fallback_alloc+0x207/0x2c0 [ 1246.652102] kmem_cache_alloc+0x1e5/0x3c0 [ 1246.652117] getname_flags+0xc8/0x550 [ 1246.656063] (M) 2*4096kB [ 1246.658468] user_path_at_empty+0x2a/0x50 [ 1246.678560] (UM) [ 1246.681366] SyS_faccessat+0x21b/0x680 [ 1246.685572] = 10960kB [ 1246.689615] ? SyS_fallocate+0x80/0x80 [ 1246.689626] ? do_syscall_64+0x4c/0x640 [ 1246.708549] Node 0 [ 1246.710800] ? SyS_faccessat+0x680/0x680 [ 1246.714918] DMA32: [ 1246.716961] do_syscall_64+0x1d5/0x640 [ 1246.728542] 2488*4kB [ 1246.731049] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1246.733252] (UME) [ 1246.737291] RIP: 0033:0x7f3f2bd0d9c7 [ 1246.748535] 801*8kB [ 1246.750907] RSP: 002b:00007ffdf6c3b2b8 EFLAGS: 00000246 [ 1246.753035] (UME) [ 1246.756720] ORIG_RAX: 0000000000000015 [ 1246.756727] RAX: ffffffffffffffda RBX: 00007ffdf6c3e1d0 RCX: 00007f3f2bd0d9c7 [ 1246.768535] 116*16kB [ 1246.770442] RDX: 00007f3f2c77ea00 RSI: 0000000000000000 RDI: 000055f8ccdc89a3 [ 1246.777687] (UME) [ 1246.780072] RBP: 00007ffdf6c3b2f0 R08: 0000000000000000 R09: 0000000000000000 [ 1246.780077] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1246.780082] R13: 0000000000000000 R14: 00007ffdf6c3e1d0 R15: 00007ffdf6c3b7e0 [ 1246.789735] Mem-Info: [ 1246.811723] CPU: 1 PID: 12400 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1246.819452] active_anon:19039 inactive_anon:10030 isolated_anon:0 [ 1246.819452] active_file:25 inactive_file:7 isolated_file:0 [ 1246.819452] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1246.819452] slab_reclaimable:16283 slab_unreclaimable:117149 [ 1246.819452] mapped:52812 shmem:11021 pagetables:798 bounce:0 [ 1246.819452] free:14188 free_pcp:0 free_cma:0 [ 1246.821968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.860523] Node 0 active_anon:75544kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211144kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1246.864269] Call Trace: [ 1246.894506] dump_stack+0x1b2/0x281 [ 1246.897224] Node 1 active_anon:612kB inactive_anon:8140kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1246.898127] warn_alloc.cold+0x96/0x1cc [ 1246.928633] ? zone_watermark_ok_safe+0x220/0x220 [ 1246.932952] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1246.933482] __alloc_pages_nodemask+0x2127/0x2720 [ 1246.933495] ? lock_acquire+0x170/0x3f0 [ 1246.965067] lowmem_reserve[]: [ 1246.968479] ? lock_acquire+0x170/0x3f0 [ 1246.968495] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1246.968512] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1246.971618] 0 [ 1246.975577] ? __mutex_unlock_slowpath+0x75/0x770 [ 1246.985802] 2717 [ 1246.985835] alloc_pages_current+0x155/0x260 [ 1246.987605] 2718 [ 1246.992435] ion_page_pool_alloc+0x118/0x1b0 [ 1246.992446] ion_system_heap_allocate+0x133/0x8c0 [ 1246.992458] ? _raw_spin_unlock+0x29/0x40 [ 1246.992466] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1246.992477] ? ion_system_contig_heap_create+0x130/0x130 [ 1246.992487] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1246.992498] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1246.992509] ion_alloc+0x27a/0x810 [ 1246.992523] ? ion_dma_buf_release+0x40/0x40 [ 1246.992534] ? __might_fault+0x177/0x1b0 [ 1246.992546] ion_ioctl+0xea/0x1f0 [ 1246.992555] ? ion_query_heaps+0x360/0x360 [ 1246.992565] ? lock_acquire+0x170/0x3f0 [ 1246.992573] ? lock_downgrade+0x740/0x740 [ 1246.992583] ? ion_query_heaps+0x360/0x360 [ 1246.995028] 10*32kB [ 1246.999015] do_vfs_ioctl+0x75a/0xff0 [ 1246.999027] ? ioctl_preallocate+0x1a0/0x1a0 [ 1246.999040] ? lock_downgrade+0x740/0x740 [ 1246.999053] ? __fget+0x225/0x360 [ 1246.999063] ? do_vfs_ioctl+0xff0/0xff0 [ 1246.999074] ? security_file_ioctl+0x83/0xb0 [ 1246.999084] SyS_ioctl+0x7f/0xb0 [ 1246.999093] ? do_vfs_ioctl+0xff0/0xff0 [ 1247.006399] 2718 [ 1247.010548] do_syscall_64+0x1d5/0x640 [ 1247.010565] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1247.010574] RIP: 0033:0x45e219 [ 1247.010578] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1247.010587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1247.010594] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1247.014721] 2718 [ 1247.019628] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1247.019633] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1247.019638] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1247.032669] warn_alloc_show_mem: 1 callbacks suppressed [ 1247.032673] Mem-Info: [ 1247.034984] (UM) [ 1247.047339] active_anon:19023 inactive_anon:10030 isolated_anon:0 [ 1247.047339] active_file:12 inactive_file:12 isolated_file:0 [ 1247.047339] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1247.047339] slab_reclaimable:16275 slab_unreclaimable:117164 [ 1247.047339] mapped:52808 shmem:11021 pagetables:798 bounce:0 [ 1247.047339] free:14299 free_pcp:8 free_cma:0 [ 1247.054698] Node 0 active_anon:75480kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211232kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.059198] 0*64kB [ 1247.075310] Node 1 active_anon:612kB inactive_anon:8140kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.078479] Node 0 [ 1247.087814] Node 0 [ 1247.090351] DMA32 free:18660kB min:36200kB low:45248kB high:54296kB active_anon:75480kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2864kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1247.100853] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.101026] lowmem_reserve[]: [ 1247.103051] lowmem_reserve[]: [ 1247.106941] 0 [ 1247.124562] 0*128kB [ 1247.132078] 0 [ 1247.145469] 0*256kB [ 1247.147042] 0 [ 1247.159425] 0 [ 1247.163375] 0 [ 1247.166959] 2717 [ 1247.169374] 0 [ 1247.169382] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.169398] lowmem_reserve[]: 0 0 0 0 0 [ 1247.169416] Node 1 Normal free:27576kB min:53696kB low:67120kB high:80544kB active_anon:612kB inactive_anon:8140kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.169432] lowmem_reserve[]: 0 0 0 0 0 [ 1247.169450] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB [ 1247.183811] 0*512kB [ 1247.213938] 1*512kB [ 1247.238564] 2718 [ 1247.283912] (U) [ 1247.300232] 0*1024kB [ 1247.329041] 0*1024kB [ 1247.335528] 2718 [ 1247.336051] 1*2048kB [ 1247.337837] 2718 [ 1247.343285] (M) [ 1247.374424] 2*4096kB [ 1247.403271] 0*2048kB [ 1247.420646] (UM) [ 1247.423967] 0*4096kB [ 1247.424467] = 10960kB [ 1247.426854] = 18536kB [ 1247.437520] Node 0 [ 1247.437710] Node 0 [ 1247.443683] DMA32: [ 1247.446457] Normal: [ 1247.447004] 2516*4kB [ 1247.449446] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1247.449486] Node 1 Normal: 64*4kB (UM) [ 1247.464394] (UME) [ 1247.472087] 49*8kB (UM) 29*16kB (M) 27*32kB (UM) 12*64kB (UM) 2*128kB (UM) 24*256kB (UM) 32*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 27576kB [ 1247.486646] Node 0 [ 1247.491502] 802*8kB [ 1247.491616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1247.493771] (UME) [ 1247.496077] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1247.517488] DMA32 free:18660kB min:36200kB low:45248kB high:54296kB active_anon:75480kB inactive_anon:31980kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2864kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1247.517795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1247.556725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1247.560794] 116*16kB (UME) 10*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1247.565326] 11045 total pagecache pages [ 1247.565328] 0*2048kB 0*4096kB [ 1247.572862] 0 pages in swap cache [ 1247.572868] Swap cache stats: add 0, delete 0, find 0/0 [ 1247.572871] Free swap = 0kB [ 1247.572874] Total swap = 0kB [ 1247.572881] 2097051 pages RAM [ 1247.572884] 0 pages HighMem/MovableOnly [ 1247.572888] 363840 pages reserved [ 1247.572891] 0 pages cma reserved [ 1247.609609] lowmem_reserve[]: 0 0 0 0 0 [ 1247.613810] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.639569] lowmem_reserve[]: 0 0 0 0 0 [ 1247.643696] Node 1 Normal free:93380kB min:53696kB low:67120kB high:80544kB active_anon:612kB inactive_anon:8140kB active_file:12kB inactive_file:512kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:196kB local_pcp:0kB free_cma:0kB [ 1247.673143] = 18656kB [ 1247.676149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1247.687497] Node 1 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 13*32kB (M) 11*64kB (M) 1*128kB (M) 2*256kB (UM) 1*512kB (U) 111*1024kB (U) 6*2048kB (UM) 0*4096kB = 128236kB [ 1247.702960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1247.712303] lowmem_reserve[]: 0 0 0 0 0 [ 1247.716305] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10960kB [ 1247.733041] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1247.742873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1247.756245] Node 0 DMA32: 2485*4kB (UME) 802*8kB (UME) 116*16kB (UME) 10*32kB (UM) 17*64kB (U) 3*128kB (U) 5*256kB (U) 3*512kB (U) 10*1024kB (U) 0*2048kB 0*4096kB = 33060kB [ 1247.788353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1247.800660] 11526 total pagecache pages [ 1247.805219] 0 pages in swap cache [ 1247.808744] Swap cache stats: add 0, delete 0, find 0/0 [ 1247.814101] Free swap = 0kB [ 1247.817105] Total swap = 0kB [ 1247.831072] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1247.848262] 2097051 pages RAM [ 1247.851380] 0 pages HighMem/MovableOnly [ 1247.855347] 363840 pages reserved [ 1247.868830] 0 pages cma reserved [ 1247.872228] Out of memory (oom_kill_allocating_task): Kill process 11560 (systemd-journal) score 0 or sacrifice child [ 1247.878260] Node 1 Normal: 1*4kB (M) 1*8kB (U) 2*16kB (UM) 7*32kB (UM) 422*64kB (UM) 84*128kB (UM) 79*256kB (UM) 60*512kB (U) 121*1024kB (U) 11*2048kB (UM) 0*4096kB = 235404kB [ 1247.898302] Killed process 11560 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2248kB [ 1247.929297] oom_reaper: reaped process 11560 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2248kB [ 1247.958322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1247.967191] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1248.017657] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1248.018221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.048260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.056859] 12452 total pagecache pages [ 1248.062231] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1248.068216] 0 pages in swap cache [ 1248.074887] Swap cache stats: add 0, delete 0, find 0/0 [ 1248.095889] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1248.118489] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1248.121000] Free swap = 0kB [ 1248.125311] systemd[1]: Stopped Journal Service. [ 1248.136076] Total swap = 0kB [ 1248.155453] systemd[1]: Starting Journal Service... [ 1248.160871] 2097051 pages RAM [ 1248.163975] 0 pages HighMem/MovableOnly [ 1248.167943] 363840 pages reserved [ 1248.192169] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1248.200611] 0 pages cma reserved [ 1248.231164] systemd[1]: Stopped System Logging Service. [ 1248.557721] oom_reaper: reaped process 12418 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1248.580411] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1248.601162] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1248.622657] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1248.626547] syz-executor.1 cpuset= [ 1248.627796] CPU: 0 PID: 12389 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1248.627798] / [ 1248.631320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.631324] Call Trace: [ 1248.631344] dump_stack+0x1b2/0x281 [ 1248.639332] mems_allowed=0-1 [ 1248.641002] warn_alloc.cold+0x96/0x1cc [ 1248.663506] ? zone_watermark_ok_safe+0x220/0x220 [ 1248.668352] __alloc_pages_nodemask+0x2127/0x2720 [ 1248.673198] ? lock_acquire+0x170/0x3f0 [ 1248.677171] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.682048] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1248.687486] ? __mutex_unlock_slowpath+0x75/0x770 [ 1248.692321] alloc_pages_current+0x155/0x260 [ 1248.696719] ion_page_pool_alloc+0x118/0x1b0 [ 1248.701113] ion_system_heap_allocate+0x133/0x8c0 [ 1248.705941] ? _raw_spin_unlock+0x29/0x40 [ 1248.710088] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1248.715004] ? ion_system_contig_heap_create+0x130/0x130 [ 1248.720469] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1248.725472] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1248.730300] ion_alloc+0x27a/0x810 [ 1248.733828] ? ion_dma_buf_release+0x40/0x40 [ 1248.738223] ? __might_fault+0x177/0x1b0 [ 1248.742266] ion_ioctl+0xea/0x1f0 [ 1248.745701] ? ion_query_heaps+0x360/0x360 [ 1248.749918] ? lock_acquire+0x170/0x3f0 [ 1248.753875] ? lock_downgrade+0x740/0x740 [ 1248.758021] ? ion_query_heaps+0x360/0x360 [ 1248.762237] do_vfs_ioctl+0x75a/0xff0 [ 1248.766021] ? ioctl_preallocate+0x1a0/0x1a0 [ 1248.770408] ? lock_downgrade+0x740/0x740 [ 1248.774539] ? __fget+0x225/0x360 [ 1248.777975] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.781930] ? security_file_ioctl+0x83/0xb0 [ 1248.786334] SyS_ioctl+0x7f/0xb0 [ 1248.789678] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.793635] do_syscall_64+0x1d5/0x640 [ 1248.797508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1248.802676] RIP: 0033:0x45e219 [ 1248.805845] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.813533] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1248.820781] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1248.828031] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.835278] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1248.842529] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1248.849807] CPU: 1 PID: 12400 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1248.857380] syz-executor.2: [ 1248.857683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.857688] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1248.860687] Call Trace: [ 1248.860704] dump_stack+0x1b2/0x281 [ 1248.860717] dump_header+0x178/0x82f [ 1248.860730] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1248.894995] ? ___ratelimit+0x2cd/0x530 [ 1248.898976] oom_kill_process.cold+0x10/0xb18 [ 1248.902275] Mem-Info: [ 1248.903470] out_of_memory+0xe3e/0x1190 [ 1248.905870] active_anon:19129 inactive_anon:10030 isolated_anon:0 [ 1248.905870] active_file:50 inactive_file:0 isolated_file:0 [ 1248.905870] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1248.905870] slab_reclaimable:16267 slab_unreclaimable:117028 [ 1248.905870] mapped:52262 shmem:11021 pagetables:805 bounce:0 [ 1248.905870] free:13793 free_pcp:0 free_cma:0 [ 1248.909993] ? oom_killer_disable+0x1c0/0x1c0 [ 1248.910006] ? mutex_trylock+0x152/0x1a0 [ 1248.910018] __alloc_pages_nodemask+0x23e1/0x2720 [ 1248.910033] ? lock_acquire+0x170/0x3f0 [ 1248.910048] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.910059] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1248.910075] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1248.910090] ? alloc_pages_current+0x135/0x260 [ 1248.910100] alloc_pages_current+0x155/0x260 [ 1248.910110] ion_page_pool_alloc+0x118/0x1b0 [ 1248.910122] ion_system_heap_allocate+0x133/0x8c0 [ 1248.910133] ? _raw_spin_unlock+0x29/0x40 [ 1248.910142] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1248.910152] ? ion_system_contig_heap_create+0x130/0x130 [ 1248.910162] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1248.910172] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1248.910184] ion_alloc+0x27a/0x810 [ 1248.910206] ? ion_dma_buf_release+0x40/0x40 [ 1248.957302] (null) [ 1248.960475] ? __might_fault+0x177/0x1b0 [ 1248.960491] ion_ioctl+0xea/0x1f0 [ 1248.960502] ? ion_query_heaps+0x360/0x360 [ 1248.960514] ? lock_acquire+0x170/0x3f0 [ 1248.960535] ? lock_downgrade+0x740/0x740 [ 1248.978896] syz-executor.2 cpuset= [ 1248.979857] ? ion_query_heaps+0x360/0x360 [ 1248.984239] / [ 1248.988630] do_vfs_ioctl+0x75a/0xff0 [ 1249.008567] mems_allowed=0-1 [ 1249.012921] ? ioctl_preallocate+0x1a0/0x1a0 [ 1249.053104] Node 0 active_anon:75036kB inactive_anon:31972kB active_file:28kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208868kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1249.055302] ? lock_downgrade+0x740/0x740 [ 1249.057003] Node 1 active_anon:1432kB inactive_anon:8140kB active_file:116kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1249.060780] ? __fget+0x225/0x360 [ 1249.060789] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.060799] ? security_file_ioctl+0x83/0xb0 [ 1249.060809] SyS_ioctl+0x7f/0xb0 [ 1249.060817] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.060829] do_syscall_64+0x1d5/0x640 [ 1249.060846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1249.060855] RIP: 0033:0x45e219 [ 1249.060859] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.060869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1249.060874] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1249.060879] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1249.060887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1249.101811] Node 0 [ 1249.126838] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1249.142968] Mem-Info: [ 1249.148500] CPU: 0 PID: 12418 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1249.158771] active_anon:19112 inactive_anon:10028 isolated_anon:0 [ 1249.158771] active_file:16 inactive_file:16 isolated_file:0 [ 1249.158771] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1249.158771] slab_reclaimable:16265 slab_unreclaimable:117066 [ 1249.158771] mapped:52225 shmem:11021 pagetables:807 bounce:0 [ 1249.158771] free:13824 free_pcp:17 free_cma:0 [ 1249.166051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.173334] Node 0 active_anon:75008kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1249.180553] Call Trace: [ 1249.180573] dump_stack+0x1b2/0x281 [ 1249.180587] warn_alloc.cold+0x96/0x1cc [ 1249.187849] Node 1 active_anon:1440kB inactive_anon:8140kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1249.195094] ? zone_watermark_ok_safe+0x220/0x220 [ 1249.197302] Node 0 [ 1249.204555] ? usleep_range+0x130/0x130 [ 1249.204564] ? try_to_free_pages+0x23f/0x6e0 [ 1249.204574] ? _find_next_bit+0xdb/0x100 [ 1249.206969] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.214819] ? run_timer_softirq+0x5a0/0x5a0 [ 1249.214850] __alloc_pages_nodemask+0x2127/0x2720 [ 1249.247976] lowmem_reserve[]: [ 1249.257311] ? lock_acquire+0x170/0x3f0 [ 1249.284964] 0 [ 1249.287527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1249.291155] 2717 [ 1249.295104] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1249.321721] 2718 [ 1249.326538] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1249.328753] 2718 [ 1249.332706] alloc_pages_current+0x155/0x260 [ 1249.337079] 2718 [ 1249.341125] ion_page_pool_alloc+0x118/0x1b0 [ 1249.341139] ion_system_heap_allocate+0x133/0x8c0 [ 1249.371095] ? ion_alloc+0x187/0x810 [ 1249.371103] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1249.371115] ? ion_system_contig_heap_create+0x130/0x130 [ 1249.375927] Node 0 [ 1249.379015] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1249.379025] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1249.379037] ion_alloc+0x204/0x810 [ 1249.382997] DMA32 free:17688kB min:36200kB low:45248kB high:54296kB active_anon:74992kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2744kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 1249.384775] ? ion_dma_buf_release+0x40/0x40 [ 1249.389597] lowmem_reserve[]: [ 1249.391635] ? __might_fault+0x177/0x1b0 [ 1249.396099] 0 [ 1249.398148] ion_ioctl+0xea/0x1f0 [ 1249.398158] ? ion_query_heaps+0x360/0x360 [ 1249.398168] ? lock_acquire+0x170/0x3f0 [ 1249.403587] 0 [ 1249.405632] ? lock_downgrade+0x740/0x740 [ 1249.410025] 0 [ 1249.412056] ? ion_query_heaps+0x360/0x360 [ 1249.412067] do_vfs_ioctl+0x75a/0xff0 [ 1249.416445] 0 [ 1249.421272] ? ioctl_preallocate+0x1a0/0x1a0 [ 1249.421280] ? lock_downgrade+0x740/0x740 [ 1249.421294] ? __fget+0x225/0x360 [ 1249.424976] 0 [ 1249.430405] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.430415] ? security_file_ioctl+0x83/0xb0 [ 1249.430425] SyS_ioctl+0x7f/0xb0 [ 1249.438058] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.438069] do_syscall_64+0x1d5/0x640 [ 1249.438085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1249.443066] Node 0 [ 1249.447885] RIP: 0033:0x45e219 [ 1249.447891] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.447902] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1249.451428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.479410] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1249.479415] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1249.479421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1249.479426] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1249.482186] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.498734] lowmem_reserve[]: [ 1249.502233] lowmem_reserve[]: [ 1249.504384] 0 [ 1249.506162] 0 2717 [ 1249.529972] 0 [ 1249.532313] 2718 [ 1249.533934] 0 [ 1249.535710] 2718 2718 [ 1249.553616] 0 [ 1249.572212] 0 [ 1249.575395] Node 0 [ 1249.607626] DMA32 free:17688kB min:36200kB low:45248kB high:54296kB active_anon:74992kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2744kB bounce:0kB free_pcp:188kB local_pcp:68kB free_cma:0kB [ 1249.620208] Node 1 [ 1249.630336] lowmem_reserve[]: [ 1249.642605] Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:8140kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.669415] 0 [ 1249.677674] lowmem_reserve[]: [ 1249.685958] 0 [ 1249.719980] 0 [ 1249.756536] 0 0 0 [ 1249.760519] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.761022] 0 0 0 0 [ 1249.796157] lowmem_reserve[]: [ 1249.796470] Node 0 [ 1249.796472] 0 0 [ 1249.800760] DMA: [ 1249.801830] 0 [ 1249.803782] 2*4kB [ 1249.805819] 0 0 [ 1249.807601] (M) 1*8kB (M) 1*16kB (U) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB [ 1249.819896] 2*4096kB (UM) = 10976kB [ 1249.837210] Node 1 [ 1249.842737] Node 0 [ 1249.843928] Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:8140kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.844964] DMA32: 2385*4kB [ 1249.847194] lowmem_reserve[]: 0 [ 1249.884063] (ME) 773*8kB (UME) 93*16kB (UME) 12*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17596kB [ 1249.888214] 0 [ 1249.907122] Node 0 [ 1249.907252] 0 [ 1249.908952] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB [ 1249.912959] 0 [ 1249.913003] 0*128kB [ 1249.926163] 0 [ 1249.927971] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1249.936115] Node 1 [ 1249.936118] Node 0 DMA: [ 1249.938449] Normal: 38*4kB (UM) 24*8kB (UM) 7*16kB (M) 818*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26632kB [ 1249.954004] Mem-Info: [ 1249.954268] 2*4kB (M) [ 1249.956427] active_anon:19112 inactive_anon:10028 isolated_anon:0 [ 1249.956427] active_file:16 inactive_file:16 isolated_file:0 [ 1249.956427] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1249.956427] slab_reclaimable:16257 slab_unreclaimable:117057 [ 1249.956427] mapped:52225 shmem:11021 pagetables:807 bounce:0 [ 1249.956427] free:13801 free_pcp:48 free_cma:0 [ 1249.956443] Node 0 active_anon:75008kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1249.974821] 1*8kB [ 1249.992198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.992206] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1249.992213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.992220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1249.992224] 11053 total pagecache pages [ 1249.992234] 0 pages in swap cache [ 1249.992239] Swap cache stats: add 0, delete 0, find 0/0 [ 1249.992245] Free swap = 0kB [ 1250.036178] (M) [ 1250.039553] Node 1 active_anon:1440kB inactive_anon:8140kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1250.039557] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.039577] lowmem_reserve[]: [ 1250.064054] 1*16kB [ 1250.064432] Total swap = 0kB [ 1250.085435] (U) [ 1250.101425] 0 2717 2718 2718 2718 [ 1250.101445] Node 0 DMA32 free:17596kB min:36200kB low:45248kB high:54296kB active_anon:74992kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2744kB bounce:0kB free_pcp:192kB local_pcp:124kB free_cma:0kB [ 1250.101466] lowmem_reserve[]: 0 0 0 0 0 [ 1250.101486] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.101517] lowmem_reserve[]: [ 1250.133209] 2*32kB [ 1250.146687] 0 [ 1250.181859] (UM) [ 1250.205404] 2097051 pages RAM [ 1250.212508] 0 pages HighMem/MovableOnly [ 1250.215339] 2*64kB [ 1250.216465] 363840 pages reserved [ 1250.216471] 0 pages cma reserved [ 1250.218729] (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10976kB [ 1250.227471] Out of memory (oom_kill_allocating_task): Kill process 12400 (syz-executor.1) score 0 or sacrifice child [ 1250.244875] Node 0 DMA32: 2385*4kB (ME) 773*8kB (UME) 93*16kB (UME) 12*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17596kB [ 1250.250930] Killed process 12389 (syz-executor.1) total-vm:93612kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1250.270889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.275507] 0 [ 1250.281805] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1250.299666] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1250.314882] 0 0 0 [ 1250.315043] Node 1 [ 1250.317040] Node 1 [ 1250.317043] Normal: 38*4kB [ 1250.319345] Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:8140kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.324002] (UM) [ 1250.324487] lowmem_reserve[]: [ 1250.352274] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1250.357760] systemd-journal cpuset= [ 1250.369202] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1250.376787] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1250.381418] CPU: 1 PID: 12400 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1250.390960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.400303] Call Trace: [ 1250.402881] dump_stack+0x1b2/0x281 [ 1250.406490] warn_alloc.cold+0x96/0x1cc [ 1250.410456] ? zone_watermark_ok_safe+0x220/0x220 [ 1250.415303] ? wait_for_completion_io+0x10/0x10 [ 1250.416118] 24*8kB [ 1250.419965] __alloc_pages_nodemask+0x2127/0x2720 [ 1250.419982] ? lock_acquire+0x170/0x3f0 [ 1250.419996] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1250.420008] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1250.422254] (UM) [ 1250.427083] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1250.447807] ? alloc_pages_current+0x135/0x260 [ 1250.452386] alloc_pages_current+0x155/0x260 [ 1250.456806] ion_page_pool_alloc+0x118/0x1b0 [ 1250.459843] 7*16kB (M) [ 1250.461201] ion_system_heap_allocate+0x133/0x8c0 [ 1250.461213] ? _raw_spin_unlock+0x29/0x40 [ 1250.463772] 818*32kB [ 1250.468592] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1250.468602] ? ion_system_contig_heap_create+0x130/0x130 [ 1250.468612] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1250.468623] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1250.468635] ion_alloc+0x27a/0x810 [ 1250.468650] ? ion_dma_buf_release+0x40/0x40 [ 1250.468662] ? __might_fault+0x177/0x1b0 [ 1250.468677] ion_ioctl+0xea/0x1f0 [ 1250.502662] (UM) [ 1250.503262] ? ion_query_heaps+0x360/0x360 [ 1250.507288] 0*64kB [ 1250.510722] ? lock_acquire+0x170/0x3f0 [ 1250.510731] ? lock_downgrade+0x740/0x740 [ 1250.510739] ? ion_query_heaps+0x360/0x360 [ 1250.510748] do_vfs_ioctl+0x75a/0xff0 [ 1250.510760] ? ioctl_preallocate+0x1a0/0x1a0 [ 1250.510769] ? lock_downgrade+0x740/0x740 [ 1250.510782] ? __fget+0x225/0x360 [ 1250.510791] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.531078] 0*128kB [ 1250.531571] ? security_file_ioctl+0x83/0xb0 [ 1250.535350] 0*256kB [ 1250.539740] SyS_ioctl+0x7f/0xb0 [ 1250.539749] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.539759] do_syscall_64+0x1d5/0x640 [ 1250.539775] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1250.539784] RIP: 0033:0x45e219 [ 1250.539788] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.539799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1250.539805] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1250.539810] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1250.539815] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1250.539822] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1250.575039] 0*512kB [ 1250.584235] / [ 1250.596778] CPU: 0 PID: 12404 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1250.608133] 0 [ 1250.609501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.616752] 0 [ 1250.623999] Call Trace: [ 1250.624017] dump_stack+0x1b2/0x281 [ 1250.624029] warn_alloc.cold+0x96/0x1cc [ 1250.624040] ? zone_watermark_ok_safe+0x220/0x220 [ 1250.626347] mems_allowed=0-1 [ 1250.628031] ? usleep_range+0x130/0x130 [ 1250.628040] ? try_to_free_pages+0x23f/0x6e0 [ 1250.628053] ? _find_next_bit+0xdb/0x100 [ 1250.647506] 0 [ 1250.648828] ? run_timer_softirq+0x5a0/0x5a0 [ 1250.651388] 0 [ 1250.655006] __alloc_pages_nodemask+0x2127/0x2720 [ 1250.667471] 0 [ 1250.670982] ? lock_acquire+0x170/0x3f0 [ 1250.679400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1250.679410] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1250.679428] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1250.697475] Node 0 [ 1250.697948] alloc_pages_current+0x155/0x260 [ 1250.702756] DMA: [ 1250.707240] ion_page_pool_alloc+0x118/0x1b0 [ 1250.725709] ion_system_heap_allocate+0x133/0x8c0 [ 1250.727460] 2*4kB (M) [ 1250.730561] ? ion_alloc+0x187/0x810 [ 1250.730574] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1250.733051] 1*8kB [ 1250.736762] ? ion_system_contig_heap_create+0x130/0x130 [ 1250.749750] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1250.754754] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1250.757440] (M) 1*16kB [ 1250.759582] ion_alloc+0x204/0x810 [ 1250.759598] ? ion_dma_buf_release+0x40/0x40 [ 1250.762149] (U) [ 1250.765687] ? __might_fault+0x177/0x1b0 [ 1250.776084] ion_ioctl+0xea/0x1f0 [ 1250.779521] ? ion_query_heaps+0x360/0x360 [ 1250.783739] ? lock_acquire+0x170/0x3f0 [ 1250.787428] 2*32kB (UM) [ 1250.787701] ? lock_downgrade+0x740/0x740 [ 1250.787703] 2*64kB (UM) [ 1250.790358] ? ion_query_heaps+0x360/0x360 [ 1250.794479] 2*128kB [ 1250.797132] do_vfs_ioctl+0x75a/0xff0 [ 1250.807422] ? ioctl_preallocate+0x1a0/0x1a0 [ 1250.807423] (UM) 1*256kB [ 1250.811816] ? lock_downgrade+0x740/0x740 [ 1250.811829] ? __fget+0x225/0x360 [ 1250.814558] (M) [ 1250.818702] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.818712] ? security_file_ioctl+0x83/0xb0 [ 1250.818722] SyS_ioctl+0x7f/0xb0 [ 1250.835766] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.837414] 2*512kB (UM) [ 1250.839739] do_syscall_64+0x1d5/0x640 [ 1250.839755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1250.842483] 1*1024kB [ 1250.846349] RIP: 0033:0x45e219 [ 1250.857091] RSP: 002b:00007febfb8b3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.864779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1250.867405] (M) [ 1250.872028] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1250.872035] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1250.873989] 0*2048kB [ 1250.881244] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1250.881250] R13: 00007ffeb68c5c4f R14: 00007febfb8b49c0 R15: 000000000119c034 [ 1250.895989] 0*1024kB [ 1250.905229] CPU: 1 PID: 12427 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1250.906840] 0*2048kB [ 1250.908092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.908096] Call Trace: [ 1250.908114] dump_stack+0x1b2/0x281 [ 1250.908125] dump_header+0x178/0x82f [ 1250.908135] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1250.908143] ? ___ratelimit+0x2cd/0x530 [ 1250.908152] oom_kill_process.cold+0x10/0xb18 [ 1250.908169] out_of_memory+0xe3e/0x1190 [ 1250.908183] ? oom_killer_disable+0x1c0/0x1c0 [ 1250.908194] ? mutex_trylock+0x152/0x1a0 [ 1250.908205] __alloc_pages_nodemask+0x23e1/0x2720 [ 1250.908223] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1250.908246] alloc_pages_current+0x155/0x260 [ 1250.908254] filemap_fault+0xea3/0x1980 [ 1250.908270] ext4_filemap_fault+0x84/0xb0 [ 1250.908279] __do_fault+0xfa/0x380 [ 1250.908288] __handle_mm_fault+0x2497/0x4620 [ 1250.908297] ? vm_insert_page+0x7c0/0x7c0 [ 1250.908304] ? __might_fault+0x104/0x1b0 [ 1250.908325] handle_mm_fault+0x391/0x860 [ 1250.908337] __do_page_fault+0x549/0xad0 [ 1250.908350] ? spurious_fault+0x640/0x640 [ 1250.908359] ? do_page_fault+0x60/0x500 [ 1250.908368] ? page_fault+0x2f/0x50 [ 1250.908376] page_fault+0x45/0x50 [ 1250.908381] RIP: 335050e8: (null) [ 1250.908385] RSP: ac29db48:0000000000000001 EFLAGS: 7fabac097032 [ 1250.909037] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1250.919367] 0*4096kB = 26632kB [ 1250.919381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.919387] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1250.919395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.928798] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1250.933369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.944022] Mem-Info: [ 1250.952932] 11053 total pagecache pages [ 1250.957407] active_anon:19112 inactive_anon:10028 isolated_anon:0 [ 1250.957407] active_file:25 inactive_file:7 isolated_file:0 [ 1250.957407] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1250.957407] slab_reclaimable:16257 slab_unreclaimable:117063 [ 1250.957407] mapped:52225 shmem:11021 pagetables:807 bounce:0 [ 1250.957407] free:13810 free_pcp:36 free_cma:0 [ 1250.960898] 0 pages in swap cache [ 1250.964793] Node 0 active_anon:75008kB inactive_anon:31972kB active_file:12kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1250.974854] Swap cache stats: add 0, delete 0, find 0/0 [ 1250.985161] 2*4096kB [ 1250.987058] Free swap = 0kB [ 1250.990742] (UM) [ 1251.000755] Total swap = 0kB [ 1251.008450] = 10976kB [ 1251.014976] Node 1 active_anon:1440kB inactive_anon:8140kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1251.015657] Node 0 [ 1251.021908] 2097051 pages RAM [ 1251.028438] Mem-Info: [ 1251.034571] Node 0 [ 1251.037043] active_anon:19112 inactive_anon:10028 isolated_anon:0 [ 1251.037043] active_file:16 inactive_file:16 isolated_file:0 [ 1251.037043] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1251.037043] slab_reclaimable:16257 slab_unreclaimable:117063 [ 1251.037043] mapped:52225 shmem:11021 pagetables:807 bounce:0 [ 1251.037043] free:13810 free_pcp:39 free_cma:0 [ 1251.045301] 0 pages HighMem/MovableOnly [ 1251.053600] DMA32: [ 1251.060842] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.071019] Node 0 active_anon:75008kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1251.073024] 363840 pages reserved [ 1251.086321] 2386*4kB [ 1251.088095] lowmem_reserve[]: [ 1251.095658] (ME) [ 1251.127570] 0 pages cma reserved [ 1251.129555] 0 [ 1251.143272] Node 1 active_anon:1440kB inactive_anon:8140kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1251.159364] syz-executor.1: [ 1251.164143] Node 0 [ 1251.166533] page allocation failure: order:0 [ 1251.181522] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.203666] 2717 2718 2718 2718 [ 1251.203683] Node 0 DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:74992kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2744kB bounce:0kB free_pcp:156kB local_pcp:80kB free_cma:0kB [ 1251.203702] lowmem_reserve[]: 0 0 0 0 0 [ 1251.203720] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.203735] lowmem_reserve[]: 0 0 0 [ 1251.211152] 773*8kB [ 1251.218479] 0 [ 1251.252161] lowmem_reserve[]: [ 1251.260018] 0 [ 1251.283943] (UME) [ 1251.321968] 0 [ 1251.322853] Node 1 [ 1251.362089] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1251.465757] 93*16kB (UME) 13*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 1251.486289] systemd[1]: Starting System Logging Service... [ 1251.490665] 2717 2718 2718 2718 [ 1251.495295] Node 0 DMA32 free:20544kB min:36200kB low:45248kB high:54296kB active_anon:74992kB inactive_anon:31972kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2744kB bounce:0kB free_pcp:156kB local_pcp:76kB free_cma:0kB [ 1251.524233] Normal free:142244kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:8140kB active_file:144kB inactive_file:7144kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:336kB free_cma:0kB [ 1251.526911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1251.564922] lowmem_reserve[]: 0 0 0 0 0 [ 1251.569208] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.594931] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (U) 788*32kB (UM) 409*64kB (U) 55*128kB (UM) 39*256kB (U) 34*512kB (U) 96*1024kB (UM) 5*2048kB (U) 0*4096kB = 194400kB [ 1251.610396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.619308] lowmem_reserve[]: 0 0 0 0 0 [ 1251.623301] Node 1 Normal free:213436kB min:53696kB low:67120kB high:80544kB active_anon:1240kB inactive_anon:8140kB active_file:1644kB inactive_file:7644kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:480kB bounce:0kB free_pcp:552kB local_pcp:108kB free_cma:0kB [ 1251.653119] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1251.661741] (null) [ 1251.663884] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1251.669066] CPU: 1 PID: 12389 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1251.672870] lowmem_reserve[]: [ 1251.676939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1251.676944] Call Trace: [ 1251.676959] dump_stack+0x1b2/0x281 [ 1251.676973] warn_alloc.cold+0x96/0x1cc [ 1251.699550] ? zone_watermark_ok_safe+0x220/0x220 [ 1251.701273] 0 [ 1251.704405] ? usleep_range+0x130/0x130 [ 1251.704416] ? try_to_free_pages+0x23f/0x6e0 [ 1251.704425] ? _find_next_bit+0xdb/0x100 [ 1251.704436] ? run_timer_softirq+0x5a0/0x5a0 [ 1251.704453] __alloc_pages_nodemask+0x2127/0x2720 [ 1251.727868] ? lock_acquire+0x170/0x3f0 [ 1251.730558] 0 [ 1251.731841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1251.731852] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1251.731866] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1251.731885] alloc_pages_current+0x155/0x260 [ 1251.731896] ion_page_pool_alloc+0x118/0x1b0 [ 1251.731907] ion_system_heap_allocate+0x133/0x8c0 [ 1251.731917] ? _raw_spin_unlock+0x29/0x40 [ 1251.731926] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1251.731936] ? ion_system_contig_heap_create+0x130/0x130 [ 1251.734004] 0 [ 1251.738548] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1251.738559] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1251.738570] ion_alloc+0x27a/0x810 [ 1251.738583] ? ion_dma_buf_release+0x40/0x40 [ 1251.738595] ? __might_fault+0x177/0x1b0 [ 1251.738607] ion_ioctl+0xea/0x1f0 [ 1251.738616] ? ion_query_heaps+0x360/0x360 [ 1251.738627] ? lock_acquire+0x170/0x3f0 [ 1251.738635] ? lock_downgrade+0x740/0x740 [ 1251.738643] ? ion_query_heaps+0x360/0x360 [ 1251.738652] do_vfs_ioctl+0x75a/0xff0 [ 1251.738663] ? ioctl_preallocate+0x1a0/0x1a0 [ 1251.750569] 0 [ 1251.752980] ? lock_downgrade+0x740/0x740 [ 1251.790464] 0 [ 1251.791805] ? __fget+0x225/0x360 [ 1251.791816] ? do_vfs_ioctl+0xff0/0xff0 [ 1251.791827] ? security_file_ioctl+0x83/0xb0 [ 1251.791837] SyS_ioctl+0x7f/0xb0 [ 1251.791844] ? do_vfs_ioctl+0xff0/0xff0 [ 1251.791856] do_syscall_64+0x1d5/0x640 [ 1251.800298] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1251.800306] RIP: 0033:0x45e219 [ 1251.800310] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1251.800319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1251.800324] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1251.800329] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1251.800334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1251.800339] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1251.801166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.814003] Node 0 [ 1251.816133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1251.816138] 13865 total pagecache pages [ 1251.816148] 0 pages in swap cache [ 1251.816153] Swap cache stats: add 0, delete 0, find 0/0 [ 1251.816156] Free swap = 0kB [ 1251.816159] Total swap = 0kB [ 1251.816166] 2097051 pages RAM [ 1251.816169] 0 pages HighMem/MovableOnly [ 1251.816175] 363840 pages reserved [ 1251.845246] DMA: [ 1251.848282] lowmem_reserve[]: 0 0 0 0 0 [ 1251.848306] Node 0 DMA: 3*4kB (M) 1*8kB (M) 1*16kB (U) 2*32kB (UM) 3*64kB (UM) [ 1251.860034] 3*4kB [ 1251.864744] 2*128kB [ 1251.907752] (M) [ 1251.913242] 0 pages cma reserved [ 1251.948287] 1*8kB [ 1251.999958] (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11044kB [ 1252.016475] Node 0 DMA32: 2243*4kB (UE) 1099*8kB (UME) 330*16kB (UME) 277*32kB (UME) 1114*64kB (UME) 230*128kB (UM) 141*256kB (U) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 188196kB [ 1252.027182] (M) 1*16kB (U) 2*32kB (UM) 3*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11044kB [ 1252.070104] Node 0 DMA32: 2244*4kB (UME) 1064*8kB (UME) 330*16kB (UME) 275*32kB (UME) 1056*64kB (UME) 229*128kB (UM) 143*256kB (U) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 184528kB [ 1252.091865] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1252.110969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1252.117097] Node 1 Normal: 186*4kB (UM) 212*8kB (UM) 193*16kB (U) 937*32kB (U) 1784*64kB (UM) 203*128kB (U) 95*256kB (U) [ 1252.131091] warn_alloc_show_mem: 1 callbacks suppressed [ 1252.131095] Mem-Info: [ 1252.137119] 61*512kB [ 1252.142741] systemd[1]: Started System Logging Service. [ 1252.167199] (U) 1*1024kB (U) 0*2048kB 0*4096kB = 232248kB [ 1252.167288] Node 1 Normal: 303*4kB (UM) 332*8kB (UM) 310*16kB (U) 1054*32kB (U) 1914*64kB (UM) 254*128kB (U) 100*256kB (U) [ 1252.172869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.187936] 62*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 255932kB [ 1252.203402] active_anon:19175 inactive_anon:10028 isolated_anon:0 [ 1252.203402] active_file:686 inactive_file:2442 isolated_file:0 [ 1252.203402] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1252.203402] slab_reclaimable:16254 slab_unreclaimable:116643 [ 1252.203402] mapped:54102 shmem:11021 pagetables:806 bounce:0 [ 1252.203402] free:86090 free_pcp:684 free_cma:0 [ 1252.247138] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1252.255743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.287054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.295921] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1252.297088] Node 0 active_anon:75712kB inactive_anon:31972kB active_file:960kB inactive_file:2164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210188kB dirty:300kB writeback:0kB shmem:35880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.327028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1252.341972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.367016] 14278 total pagecache pages [ 1252.371018] 0 pages in swap cache [ 1252.374469] Swap cache stats: add 0, delete 0, find 0/0 [ 1252.380044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1252.388691] 14278 total pagecache pages [ 1252.393195] 0 pages in swap cache [ 1252.396654] Swap cache stats: add 0, delete 0, find 0/0 [ 1252.402096] Free swap = 0kB [ 1252.405115] Total swap = 0kB [ 1252.408362] 2097051 pages RAM [ 1252.417217] 0 pages HighMem/MovableOnly [ 1252.421212] 363840 pages reserved [ 1252.424665] 0 pages cma reserved [ 1252.431084] Node 1 active_anon:1288kB inactive_anon:8140kB active_file:1784kB inactive_file:8004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6520kB dirty:0kB writeback:0kB shmem:8204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1252.436996] Free swap = 0kB [ 1252.497023] Total swap = 0kB [ 1252.500066] 2097051 pages RAM [ 1252.503160] 0 pages HighMem/MovableOnly [ 1252.517016] 363840 pages reserved [ 1252.520523] 0 pages cma reserved [ 1252.523901] Out of memory (oom_kill_allocating_task): Kill process 12427 (systemd-journal) score 0 or sacrifice child [ 1252.527004] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.556986] Killed process 12427 (systemd-journal) total-vm:37764kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 1252.592134] oom_reaper: reaped process 12404 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1252.640938] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1252.646012] Node 0 DMA32 free:44728kB min:36200kB low:45248kB high:54296kB active_anon:73600kB inactive_anon:31972kB active_file:960kB inactive_file:2164kB unevictable:0kB writepending:296kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2756kB bounce:0kB free_pcp:1276kB local_pcp:628kB free_cma:0kB [ 1252.750405] lowmem_reserve[]: 0 0 0 0 0 [ 1252.761024] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.797549] lowmem_reserve[]: 0 0 0 0 0 [ 1252.807187] Node 1 Normal free:147812kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:8140kB active_file:3884kB inactive_file:6704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:316kB bounce:0kB free_pcp:1336kB local_pcp:632kB free_cma:0kB [ 1252.880782] lowmem_reserve[]: 0 0 0 0 0 [ 1252.884809] Node 0 DMA: 64*4kB (UM) 2*8kB (UM) 1*16kB (U) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 10976kB [ 1252.904564] systemd-journald[12433]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1252.976869] Node 0 DMA32: 2348*4kB (UME) 1171*8kB (UME) 689*16kB (UME) 427*32kB (UM) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 45240kB [ 1253.006872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1253.027125] Node 1 Normal: 3481*4kB (UME) 3440*8kB (UME) 3441*16kB (UME) 4064*32kB (UE) 115*64kB (UME) 83*128kB (UM) 16*256kB (UM) 9*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 259380kB [ 1253.086845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.095712] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1253.136818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.145686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1253.166805] 16609 total pagecache pages [ 1253.170806] 0 pages in swap cache [ 1253.174247] Swap cache stats: add 0, delete 0, find 0/0 [ 1253.206805] Free swap = 0kB [ 1253.209872] Total swap = 0kB [ 1253.212882] 2097051 pages RAM [ 1253.215975] 0 pages HighMem/MovableOnly [ 1253.236829] 363840 pages reserved [ 1253.240337] 0 pages cma reserved [ 1253.759401] systemd[1]: Started Journal Service. 19:45:08 executing program 0: socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:45:08 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) 19:45:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:45:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:09 executing program 0: socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:45:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:45:09 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) 19:45:09 executing program 0: socketpair(0x1e, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:45:09 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) [ 1255.495086] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1255.540994] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1255.566178] CPU: 1 PID: 12444 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1255.574092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.583453] Call Trace: [ 1255.586063] dump_stack+0x1b2/0x281 [ 1255.589705] warn_alloc.cold+0x96/0x1cc [ 1255.593683] ? zone_watermark_ok_safe+0x220/0x220 [ 1255.598550] __alloc_pages_nodemask+0x2127/0x2720 [ 1255.603408] ? __schedule+0x893/0x1de0 [ 1255.607311] ? lock_acquire+0x170/0x3f0 [ 1255.611309] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1255.616155] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1255.621614] ? __mutex_unlock_slowpath+0x75/0x770 [ 1255.626453] ? retint_kernel+0x2d/0x2d [ 1255.630347] alloc_pages_current+0x155/0x260 [ 1255.634758] ion_page_pool_alloc+0x118/0x1b0 [ 1255.639176] ion_system_heap_allocate+0x133/0x8c0 [ 1255.644045] ? ion_alloc+0x187/0x810 [ 1255.647777] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1255.653248] ? ion_system_contig_heap_create+0x130/0x130 [ 1255.658709] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1255.663743] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1255.668595] ion_alloc+0x204/0x810 [ 1255.672154] ? ion_dma_buf_release+0x40/0x40 [ 1255.676580] ? __might_fault+0x177/0x1b0 [ 1255.680666] ion_ioctl+0xea/0x1f0 [ 1255.684140] ? ion_query_heaps+0x360/0x360 [ 1255.688406] ? lock_acquire+0x170/0x3f0 [ 1255.692407] ? lock_downgrade+0x740/0x740 [ 1255.696580] ? ion_query_heaps+0x360/0x360 [ 1255.700834] do_vfs_ioctl+0x75a/0xff0 [ 1255.704653] ? ioctl_preallocate+0x1a0/0x1a0 [ 1255.709083] ? lock_downgrade+0x740/0x740 [ 1255.713245] ? __fget+0x225/0x360 [ 1255.715732] syz-executor.2: [ 1255.716699] ? do_vfs_ioctl+0xff0/0xff0 [ 1255.716709] ? security_file_ioctl+0x83/0xb0 [ 1255.716718] SyS_ioctl+0x7f/0xb0 [ 1255.716727] ? do_vfs_ioctl+0xff0/0xff0 [ 1255.716752] do_syscall_64+0x1d5/0x640 [ 1255.716767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1255.716775] RIP: 0033:0x45e219 [ 1255.716779] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.719960] syz-executor.1: [ 1255.723750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1255.723755] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1255.723760] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1255.723765] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1255.723773] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1255.728283] page allocation failure: order:4 [ 1255.748977] Mem-Info: [ 1255.755774] syz-executor.1: [ 1255.762197] active_anon:19276 inactive_anon:12061 isolated_anon:36 [ 1255.762197] active_file:2154 inactive_file:1827 isolated_file:12 [ 1255.762197] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1255.762197] slab_reclaimable:15862 slab_unreclaimable:122743 [ 1255.762197] mapped:55882 shmem:13069 pagetables:800 bounce:0 [ 1255.762197] free:128198 free_pcp:47 free_cma:0 [ 1255.766045] page allocation failure: order:4 [ 1255.774855] Node 0 active_anon:76140kB inactive_anon:32004kB active_file:3280kB inactive_file:3268kB unevictable:0kB isolated(anon):96kB isolated(file):48kB mapped:213824kB dirty:84kB writeback:0kB shmem:35972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1255.781208] page allocation failure: order:4 [ 1255.792839] Node 1 active_anon:964kB inactive_anon:16240kB active_file:5336kB inactive_file:4040kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:9704kB dirty:8kB writeback:0kB shmem:16304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1255.795452] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1255.807865] Node 0 [ 1255.839393] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1255.848129] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.872165] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1255.883704] lowmem_reserve[]: [ 1255.904197] (null) [ 1255.904203] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1255.904227] CPU: 0 PID: 12443 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1255.904232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.904239] Call Trace: [ 1255.926065] 0 [ 1255.946431] dump_stack+0x1b2/0x281 [ 1255.946447] warn_alloc.cold+0x96/0x1cc [ 1255.953536] (null) [ 1255.956617] ? zone_watermark_ok_safe+0x220/0x220 [ 1255.956638] __alloc_pages_nodemask+0x2127/0x2720 [ 1255.956649] ? retint_kernel+0x2d/0x2d [ 1255.956666] ? lock_acquire+0x170/0x3f0 [ 1255.961616] syz-executor.1 cpuset= [ 1255.964060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1255.972730] / [ 1255.981267] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1255.983864] 2717 [ 1255.985612] ? __mutex_unlock_slowpath+0x75/0x770 [ 1255.989220] 2718 [ 1255.993167] alloc_pages_current+0x155/0x260 [ 1255.995282] 2718 [ 1256.000110] ion_page_pool_alloc+0x118/0x1b0 [ 1256.000123] ion_system_heap_allocate+0x133/0x8c0 [ 1256.004944] mems_allowed=0-1 [ 1256.008804] ? ion_alloc+0x187/0x810 [ 1256.008813] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1256.008823] ? ion_system_contig_heap_create+0x130/0x130 [ 1256.008833] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1256.008845] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1256.036022] 2718 [ 1256.037187] ion_alloc+0x204/0x810 [ 1256.043875] ? ion_dma_buf_release+0x40/0x40 [ 1256.066010] Node 0 [ 1256.070686] ? __might_fault+0x177/0x1b0 [ 1256.086017] DMA32 free:241008kB min:36200kB low:45248kB high:54296kB active_anon:76140kB inactive_anon:32004kB active_file:3784kB inactive_file:2884kB unevictable:0kB writepending:476kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2968kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 1256.086043] ion_ioctl+0xea/0x1f0 [ 1256.090417] lowmem_reserve[]: [ 1256.092635] ? ion_query_heaps+0x360/0x360 [ 1256.106014] 0 [ 1256.125547] ? lock_acquire+0x170/0x3f0 [ 1256.125558] ? lock_downgrade+0x740/0x740 [ 1256.146176] ? ion_query_heaps+0x360/0x360 [ 1256.150396] do_vfs_ioctl+0x75a/0xff0 [ 1256.154180] ? ioctl_preallocate+0x1a0/0x1a0 [ 1256.155997] 0 [ 1256.158571] ? lock_downgrade+0x740/0x740 [ 1256.158576] 0 [ 1256.160360] ? __fget+0x225/0x360 [ 1256.164486] 0 [ 1256.166286] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.166296] ? security_file_ioctl+0x83/0xb0 [ 1256.166306] SyS_ioctl+0x7f/0xb0 [ 1256.183207] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.185993] 0 [ 1256.187165] do_syscall_64+0x1d5/0x640 [ 1256.187181] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1256.188959] Node 0 [ 1256.192827] RIP: 0033:0x45e219 [ 1256.203373] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.211080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1256.215994] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.218334] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1256.250465] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1256.257719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1256.264974] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1256.265960] lowmem_reserve[]: 0 0 0 0 0 [ 1256.273183] (null) [ 1256.278450] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1256.283651] CPU: 0 PID: 12418 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1256.291521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.297211] Node 1 [ 1256.300855] Call Trace: [ 1256.300876] Normal free:259408kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:16240kB active_file:5288kB inactive_file:4080kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.303085] dump_stack+0x1b2/0x281 [ 1256.305656] lowmem_reserve[]: [ 1256.333748] warn_alloc.cold+0x96/0x1cc [ 1256.333759] ? zone_watermark_ok_safe+0x220/0x220 [ 1256.333780] __alloc_pages_nodemask+0x2127/0x2720 [ 1256.333790] ? io_schedule_timeout+0x140/0x140 [ 1256.333807] ? lock_acquire+0x170/0x3f0 [ 1256.362589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1256.367418] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1256.372869] ? __mutex_unlock_slowpath+0x75/0x770 [ 1256.377777] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1256.382514] alloc_pages_current+0x155/0x260 [ 1256.385927] 0 0 [ 1256.386907] ion_page_pool_alloc+0x118/0x1b0 [ 1256.386908] 0 0 [ 1256.388871] ion_system_heap_allocate+0x133/0x8c0 [ 1256.393257] 0 [ 1256.395218] ? _raw_spin_unlock+0x29/0x40 [ 1256.405935] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1256.410845] ? ion_system_contig_heap_create+0x130/0x130 [ 1256.416274] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1256.416281] Node 0 [ 1256.421273] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1256.421275] DMA: 59*4kB [ 1256.423497] ion_alloc+0x27a/0x810 [ 1256.434488] ? ion_dma_buf_release+0x40/0x40 [ 1256.435908] (U) 11*8kB [ 1256.438880] ? __might_fault+0x177/0x1b0 [ 1256.438892] ion_ioctl+0xea/0x1f0 [ 1256.441448] (U) [ 1256.445489] ? ion_query_heaps+0x360/0x360 [ 1256.455099] ? lock_acquire+0x170/0x3f0 [ 1256.459070] ? lock_downgrade+0x740/0x740 [ 1256.463199] ? ion_query_heaps+0x360/0x360 [ 1256.467502] do_vfs_ioctl+0x75a/0xff0 [ 1256.471286] ? ioctl_preallocate+0x1a0/0x1a0 [ 1256.475674] ? lock_downgrade+0x740/0x740 [ 1256.475905] 9*16kB (U) [ 1256.479806] ? __fget+0x225/0x360 [ 1256.479808] 2*32kB (U) [ 1256.482375] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.485809] 0*64kB [ 1256.488375] ? security_file_ioctl+0x83/0xb0 [ 1256.488386] SyS_ioctl+0x7f/0xb0 [ 1256.488394] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.506263] do_syscall_64+0x1d5/0x640 [ 1256.510136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1256.515305] RIP: 0033:0x45e219 [ 1256.515899] 0*128kB [ 1256.518475] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.520789] 1*256kB [ 1256.528469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1256.528474] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1256.528479] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1256.528483] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1256.528488] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1256.575566] CPU: 1 PID: 12450 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1256.583465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.592824] Call Trace: [ 1256.595429] dump_stack+0x1b2/0x281 [ 1256.599067] warn_alloc.cold+0x96/0x1cc [ 1256.603043] ? zone_watermark_ok_safe+0x220/0x220 [ 1256.607905] __alloc_pages_nodemask+0x2127/0x2720 [ 1256.612754] ? lock_acquire+0x170/0x3f0 [ 1256.616733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1256.621582] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1256.627039] ? __mutex_unlock_slowpath+0x75/0x770 [ 1256.631881] ? alloc_pages_current+0x73/0x260 [ 1256.636378] alloc_pages_current+0x155/0x260 [ 1256.640790] ion_page_pool_alloc+0x118/0x1b0 [ 1256.645203] ion_system_heap_allocate+0x133/0x8c0 [ 1256.650049] ? ion_alloc+0x187/0x810 [ 1256.653760] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1256.659385] ? ion_system_contig_heap_create+0x130/0x130 [ 1256.664831] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1256.669848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1256.674693] ion_alloc+0x204/0x810 [ 1256.678239] ? ion_dma_buf_release+0x40/0x40 [ 1256.682648] ? __might_fault+0x177/0x1b0 [ 1256.686718] ion_ioctl+0xea/0x1f0 [ 1256.690171] ? ion_query_heaps+0x360/0x360 [ 1256.694412] ? lock_acquire+0x170/0x3f0 [ 1256.698382] ? lock_downgrade+0x740/0x740 [ 1256.702531] ? ion_query_heaps+0x360/0x360 [ 1256.706773] do_vfs_ioctl+0x75a/0xff0 [ 1256.710584] ? ioctl_preallocate+0x1a0/0x1a0 [ 1256.714994] ? lock_downgrade+0x740/0x740 [ 1256.719143] ? __fget+0x225/0x360 [ 1256.722601] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.726585] ? security_file_ioctl+0x83/0xb0 [ 1256.730996] SyS_ioctl+0x7f/0xb0 [ 1256.734363] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.738338] do_syscall_64+0x1d5/0x640 [ 1256.742241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1256.747430] RIP: 0033:0x45e219 [ 1256.750629] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.758343] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1256.765611] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1256.772889] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1256.780158] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1256.787426] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1256.814510] (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11028kB [ 1256.824808] Node 0 DMA32: 2586*4kB (UME) 824*8kB (UME) 114*16kB (UME) 794*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44168kB [ 1256.850886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1256.861724] Node 1 Normal: 1*4kB (U) 4*8kB (UME) 659*16kB (UME) 4114*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 142228kB [ 1256.880377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.889316] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1256.902583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.915330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1256.928271] 17059 total pagecache pages [ 1256.932267] 0 pages in swap cache [ 1256.935713] Swap cache stats: add 0, delete 0, find 0/0 [ 1256.943036] Free swap = 0kB [ 1256.972877] Total swap = 0kB [ 1256.985136] 2097051 pages RAM [ 1257.009044] 0 pages HighMem/MovableOnly [ 1257.013104] 363840 pages reserved [ 1257.040475] 0 pages cma reserved [ 1257.113159] oom_reaper: reaped process 12443 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1257.151038] warn_alloc_show_mem: 2 callbacks suppressed [ 1257.151042] Mem-Info: [ 1257.154720] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1257.156546] active_anon:18741 inactive_anon:12061 isolated_anon:0 [ 1257.156546] active_file:36 inactive_file:0 isolated_file:0 [ 1257.156546] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1257.156546] slab_reclaimable:15862 slab_unreclaimable:123402 [ 1257.156546] mapped:52729 shmem:13069 pagetables:800 bounce:0 [ 1257.156546] free:17028 free_pcp:73 free_cma:0 [ 1257.200902] (null), order=0, oom_score_adj=0 [ 1257.210834] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1257.217314] Node 0 active_anon:74000kB inactive_anon:32004kB active_file:144kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209072kB dirty:72kB writeback:0kB shmem:35972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.221940] CPU: 0 PID: 11618 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1257.248060] Node 1 active_anon:964kB inactive_anon:16240kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1744kB dirty:4kB writeback:0kB shmem:16304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.253031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.280103] Node 0 [ 1257.289425] Call Trace: [ 1257.289443] dump_stack+0x1b2/0x281 [ 1257.289456] dump_header+0x178/0x82f [ 1257.291682] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.294235] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1257.297848] lowmem_reserve[]: [ 1257.301529] ? ___ratelimit+0x2cd/0x530 [ 1257.327023] 0 [ 1257.332089] oom_kill_process.cold+0x10/0xb18 [ 1257.335171] 2717 [ 1257.339134] out_of_memory+0xe3e/0x1190 [ 1257.339147] ? oom_killer_disable+0x1c0/0x1c0 [ 1257.340938] 2718 [ 1257.345410] ? mutex_trylock+0x152/0x1a0 [ 1257.347460] 2718 [ 1257.351398] __alloc_pages_nodemask+0x23e1/0x2720 [ 1257.355903] 2718 [ 1257.357944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.364022] alloc_pages_current+0x155/0x260 [ 1257.368863] Node 0 [ 1257.370895] filemap_fault+0xea3/0x1980 [ 1257.375737] DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:74000kB inactive_anon:32004kB active_file:640kB inactive_file:720kB unevictable:0kB writepending:72kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.380105] ext4_filemap_fault+0x84/0xb0 [ 1257.382307] lowmem_reserve[]: [ 1257.386260] __do_fault+0xfa/0x380 [ 1257.386269] __handle_mm_fault+0x2497/0x4620 [ 1257.386281] ? vm_insert_page+0x7c0/0x7c0 [ 1257.415070] 0 [ 1257.419185] ? free_object+0xe4/0x240 [ 1257.419206] handle_mm_fault+0x391/0x860 [ 1257.422281] 0 [ 1257.425803] __do_page_fault+0x549/0xad0 [ 1257.425817] ? spurious_fault+0x640/0x640 [ 1257.430196] 0 [ 1257.434326] ? do_page_fault+0x60/0x500 [ 1257.436118] 0 [ 1257.439884] ? page_fault+0x2f/0x50 [ 1257.443913] 0 [ 1257.445716] page_fault+0x45/0x50 [ 1257.445724] RIP: 0007:0x32 [ 1257.445731] RSP: 0bb8:00000000001328bb EFLAGS: 00000026 [ 1257.454914] syz-executor.2: [ 1257.461148] syz-executor.1: [ 1257.461448] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1257.465056] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1257.474222] Mem-Info: [ 1257.483985] Node 0 [ 1257.484550] active_anon:18741 inactive_anon:12061 isolated_anon:0 [ 1257.484550] active_file:36 inactive_file:0 isolated_file:0 [ 1257.484550] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1257.484550] slab_reclaimable:15862 slab_unreclaimable:123402 [ 1257.484550] mapped:52704 shmem:13069 pagetables:800 bounce:0 [ 1257.484550] free:13808 free_pcp:0 free_cma:0 [ 1257.494427] (null) [ 1257.494433] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1257.494454] CPU: 1 PID: 12443 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1257.494460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.494464] Call Trace: [ 1257.494481] dump_stack+0x1b2/0x281 [ 1257.494495] warn_alloc.cold+0x96/0x1cc [ 1257.511097] (null) [ 1257.542104] ? zone_watermark_ok_safe+0x220/0x220 [ 1257.542114] ? usleep_range+0x130/0x130 [ 1257.542123] ? try_to_free_pages+0x23f/0x6e0 [ 1257.542131] ? _find_next_bit+0xdb/0x100 [ 1257.542146] ? run_timer_softirq+0x5a0/0x5a0 [ 1257.542163] __alloc_pages_nodemask+0x2127/0x2720 [ 1257.542181] ? lock_acquire+0x170/0x3f0 [ 1257.542195] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.542206] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1257.542221] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1257.551129] Node 0 active_anon:74000kB inactive_anon:32004kB active_file:144kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209072kB dirty:72kB writeback:0kB shmem:35972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.557306] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1257.557321] alloc_pages_current+0x155/0x260 [ 1257.557337] ion_page_pool_alloc+0x118/0x1b0 [ 1257.557348] ion_system_heap_allocate+0x133/0x8c0 [ 1257.557360] ? ion_alloc+0x187/0x810 [ 1257.573394] syz-executor.2 cpuset= [ 1257.576824] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1257.576836] ? ion_system_contig_heap_create+0x130/0x130 [ 1257.576845] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1257.576857] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1257.576868] ion_alloc+0x204/0x810 [ 1257.576881] ? ion_dma_buf_release+0x40/0x40 [ 1257.576892] ? __might_fault+0x177/0x1b0 [ 1257.579491] / [ 1257.583849] ion_ioctl+0xea/0x1f0 [ 1257.594550] Node 1 active_anon:964kB inactive_anon:16240kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1744kB dirty:4kB writeback:0kB shmem:16304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.596238] ? ion_query_heaps+0x360/0x360 [ 1257.596251] ? lock_acquire+0x170/0x3f0 [ 1257.596259] ? lock_downgrade+0x740/0x740 [ 1257.596266] ? ion_query_heaps+0x360/0x360 [ 1257.596276] do_vfs_ioctl+0x75a/0xff0 [ 1257.600672] Node 0 [ 1257.605515] ? ioctl_preallocate+0x1a0/0x1a0 [ 1257.619758] mems_allowed=0-1 [ 1257.624191] ? lock_downgrade+0x740/0x740 [ 1257.660836] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.661574] ? __fget+0x225/0x360 [ 1257.667731] lowmem_reserve[]: [ 1257.670776] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.674468] 0 [ 1257.677986] ? security_file_ioctl+0x83/0xb0 [ 1257.677996] SyS_ioctl+0x7f/0xb0 [ 1257.678005] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.678016] do_syscall_64+0x1d5/0x640 [ 1257.678033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1257.678041] RIP: 0033:0x45e219 [ 1257.678046] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.678056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1257.678061] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1257.678066] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.678071] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1257.678076] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1257.694004] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.695259] CPU: 0 PID: 12418 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1257.698985] lowmem_reserve[]: [ 1257.702476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.706897] 0 [ 1257.710914] Call Trace: [ 1257.712606] 0 [ 1257.716049] dump_stack+0x1b2/0x281 [ 1257.716066] warn_alloc.cold+0x96/0x1cc [ 1257.742863] 0 [ 1257.747062] ? zone_watermark_ok_safe+0x220/0x220 [ 1257.747072] ? usleep_range+0x130/0x130 [ 1257.747081] ? try_to_free_pages+0x23f/0x6e0 [ 1257.751043] 0 [ 1257.755184] ? _find_next_bit+0xdb/0x100 [ 1257.759413] 0 [ 1257.763181] ? run_timer_softirq+0x5a0/0x5a0 [ 1257.769799] __alloc_pages_nodemask+0x2127/0x2720 [ 1257.769817] ? lock_acquire+0x170/0x3f0 [ 1257.772895] Node 1 [ 1257.777027] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.777037] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1257.777053] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1257.802575] Normal free:26592kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:16240kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.806006] alloc_pages_current+0x155/0x260 [ 1257.806020] ion_page_pool_alloc+0x118/0x1b0 [ 1257.809096] lowmem_reserve[]: [ 1257.813051] ion_system_heap_allocate+0x133/0x8c0 [ 1257.814827] 0 [ 1257.819220] ? _raw_spin_unlock+0x29/0x40 [ 1257.819230] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1257.819241] ? ion_system_contig_heap_create+0x130/0x130 [ 1257.822668] 0 [ 1257.826627] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1257.826641] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1257.830498] 0 [ 1257.835670] ion_alloc+0x27a/0x810 [ 1257.835689] ? ion_dma_buf_release+0x40/0x40 [ 1257.838853] 0 [ 1257.846542] ? __might_fault+0x177/0x1b0 [ 1257.846559] ion_ioctl+0xea/0x1f0 [ 1257.853802] 0 [ 1257.861079] ? ion_query_heaps+0x360/0x360 [ 1257.861092] ? lock_acquire+0x170/0x3f0 [ 1257.861100] ? lock_downgrade+0x740/0x740 [ 1257.861107] ? ion_query_heaps+0x360/0x360 [ 1257.861119] do_vfs_ioctl+0x75a/0xff0 [ 1257.875650] ? ioctl_preallocate+0x1a0/0x1a0 [ 1257.875659] ? lock_downgrade+0x740/0x740 [ 1257.875673] ? __fget+0x225/0x360 [ 1257.895549] Node 0 [ 1257.907813] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.907827] ? security_file_ioctl+0x83/0xb0 [ 1257.935539] DMA: [ 1257.937849] SyS_ioctl+0x7f/0xb0 [ 1257.941796] 45*4kB [ 1257.943577] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.955522] (U) [ 1257.956744] do_syscall_64+0x1d5/0x640 [ 1257.958520] 11*8kB [ 1257.962572] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1257.964337] (U) [ 1257.968727] RIP: 0033:0x45e219 [ 1257.968732] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.968741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1257.968748] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1257.995520] 9*16kB [ 1258.021870] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1258.021875] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1258.021880] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1258.035533] 2717 [ 1258.168170] (U) [ 1258.205851] 2718 2718 2718 [ 1258.223698] Node 0 DMA32 free:42804kB min:36200kB low:45248kB high:54296kB active_anon:73992kB inactive_anon:32004kB active_file:1152kB inactive_file:1376kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2964kB bounce:0kB free_pcp:1464kB local_pcp:720kB free_cma:0kB [ 1258.260760] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1258.263981] lowmem_reserve[]: 0 0 0 0 0 [ 1258.283016] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.295436] 2*32kB [ 1258.320286] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1258.325450] (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10972kB [ 1258.338778] CPU: 0 PID: 12443 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1258.347012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.356364] Call Trace: [ 1258.358960] dump_stack+0x1b2/0x281 [ 1258.362600] warn_alloc.cold+0x96/0x1cc [ 1258.365429] Node 0 DMA32: [ 1258.366568] ? zone_watermark_ok_safe+0x220/0x220 [ 1258.366594] __alloc_pages_nodemask+0x2127/0x2720 [ 1258.369407] 2109*4kB [ 1258.374231] ? retint_kernel+0x2d/0x2d [ 1258.385326] ? lock_acquire+0x170/0x3f0 [ 1258.389387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1258.394232] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1258.395414] (UME) 899*8kB [ 1258.399676] ? __mutex_unlock_slowpath+0x75/0x770 [ 1258.399688] ? __list_del_entry_valid+0xb3/0xf0 [ 1258.402510] (UME) [ 1258.407341] alloc_pages_current+0x155/0x260 [ 1258.407357] ion_page_pool_alloc+0x118/0x1b0 [ 1258.407368] ion_system_heap_allocate+0x133/0x8c0 [ 1258.425402] 133*16kB (UME) [ 1258.427762] ? _raw_spin_unlock+0x29/0x40 [ 1258.427764] 815*32kB (U) [ 1258.430682] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1258.434807] 0*64kB [ 1258.437543] ? ion_system_contig_heap_create+0x130/0x130 [ 1258.437554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1258.437566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1258.448917] 0*128kB [ 1258.450126] ion_alloc+0x27a/0x810 [ 1258.455111] 0*256kB [ 1258.460052] ? ion_dma_buf_release+0x40/0x40 [ 1258.460065] ? __might_fault+0x177/0x1b0 [ 1258.460080] ion_ioctl+0xea/0x1f0 [ 1258.462378] 0*512kB [ 1258.465898] ? ion_query_heaps+0x360/0x360 [ 1258.465910] ? lock_acquire+0x170/0x3f0 [ 1258.465919] ? lock_downgrade+0x740/0x740 [ 1258.468217] 0*1024kB [ 1258.472604] ? ion_query_heaps+0x360/0x360 [ 1258.476652] 0*2048kB [ 1258.480072] do_vfs_ioctl+0x75a/0xff0 [ 1258.482369] 0*4096kB [ 1258.486590] ? ioctl_preallocate+0x1a0/0x1a0 [ 1258.486597] ? lock_downgrade+0x740/0x740 [ 1258.486609] ? __fget+0x225/0x360 [ 1258.490588] = 43836kB [ 1258.494714] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.497116] Node 0 [ 1258.501313] ? security_file_ioctl+0x83/0xb0 [ 1258.503693] Normal: [ 1258.507472] SyS_ioctl+0x7f/0xb0 [ 1258.507481] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.507491] do_syscall_64+0x1d5/0x640 [ 1258.509876] 0*4kB [ 1258.514269] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1258.518399] 0*8kB [ 1258.521815] RIP: 0033:0x45e219 [ 1258.524200] 0*16kB [ 1258.528149] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.528159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1258.528163] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1258.528170] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.530382] 0*32kB [ 1258.534763] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1258.534770] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1258.537088] 0*64kB [ 1258.550410] lowmem_reserve[]: [ 1258.589374] 0*128kB [ 1258.594342] 0 [ 1258.622677] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.650514] 0 0 0 0 [ 1258.652891] Node 1 Normal free:53100kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16240kB active_file:708kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 1258.666314] Node 1 Normal: 103*4kB (UM) 19*8kB (UM) 1*16kB (M) 1655*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53540kB [ 1258.757546] lowmem_reserve[]: 0 0 0 0 0 [ 1258.761558] Node 0 DMA: 45*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10972kB [ 1258.780534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.803030] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1258.823761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.847721] Node 0 DMA32: 2224*4kB (UME) 933*8kB (UME) 129*16kB (ME) 567*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36568kB [ 1258.853419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1258.883333] warn_alloc_show_mem: 1 callbacks suppressed [ 1258.883337] Mem-Info: [ 1258.897711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.908559] active_anon:18735 inactive_anon:12061 isolated_anon:12 [ 1258.908559] active_file:24 inactive_file:0 isolated_file:0 [ 1258.908559] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1258.908559] slab_reclaimable:15857 slab_unreclaimable:123456 [ 1258.908559] mapped:52712 shmem:13069 pagetables:799 bounce:0 [ 1258.908559] free:25020 free_pcp:169 free_cma:0 [ 1258.908576] Node 0 active_anon:73992kB inactive_anon:32004kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208988kB dirty:0kB writeback:0kB shmem:35972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1258.908592] Node 1 active_anon:948kB inactive_anon:16240kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:1860kB dirty:0kB writeback:0kB shmem:16304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1258.908595] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.908614] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1258.908650] Node 0 [ 1258.992747] Node 1 [ 1259.018197] 13105 total pagecache pages [ 1259.041718] Normal: 55*4kB (UM) 19*8kB (M) 10*16kB (UM) 1658*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53588kB [ 1259.064396] 0 pages in swap cache [ 1259.105747] Swap cache stats: add 0, delete 0, find 0/0 [ 1259.110090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.111163] Free swap = 0kB [ 1259.130472] Total swap = 0kB [ 1259.133524] 2097051 pages RAM [ 1259.136674] 0 pages HighMem/MovableOnly [ 1259.140638] 363840 pages reserved [ 1259.144077] 0 pages cma reserved [ 1259.153296] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1259.161942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.192270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1259.197549] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:74004kB inactive_anon:32004kB active_file:88kB inactive_file:40kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2964kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1259.221651] 13105 total pagecache pages [ 1259.248613] 0 pages in swap cache [ 1259.252080] Swap cache stats: add 0, delete 0, find 0/0 [ 1259.259427] lowmem_reserve[]: 0 0 0 0 0 [ 1259.263432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.274356] Free swap = 0kB [ 1259.298888] lowmem_reserve[]: 0 0 0 0 0 [ 1259.300883] Total swap = 0kB [ 1259.302895] Node 1 [ 1259.308028] 2097051 pages RAM [ 1259.311646] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16240kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 1259.313341] 0 pages HighMem/MovableOnly [ 1259.345289] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1259.346648] lowmem_reserve[]: [ 1259.361617] 363840 pages reserved [ 1259.368235] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1259.368252] 0 0 0 [ 1259.373340] CPU: 0 PID: 12443 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1259.373346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.384188] 0 [ 1259.392673] Call Trace: [ 1259.392691] dump_stack+0x1b2/0x281 [ 1259.392706] warn_alloc.cold+0x96/0x1cc [ 1259.395292] 0 [ 1259.397057] ? zone_watermark_ok_safe+0x220/0x220 [ 1259.404611] ? usleep_range+0x130/0x130 [ 1259.406402] Node 0 [ 1259.411227] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1259.411240] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1259.415208] DMA: [ 1259.417426] ? run_timer_softirq+0x5a0/0x5a0 [ 1259.422514] 45*4kB [ 1259.427517] __alloc_pages_nodemask+0x2127/0x2720 [ 1259.427534] ? lock_acquire+0x170/0x3f0 [ 1259.429568] (U) [ 1259.433970] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1259.436192] 11*8kB [ 1259.441004] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1259.444947] (U) [ 1259.446910] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1259.446927] ? __list_del_entry_valid+0xb3/0xf0 [ 1259.451737] 9*16kB [ 1259.453957] alloc_pages_current+0x155/0x260 [ 1259.458437] (U) [ 1259.460383] ion_page_pool_alloc+0x118/0x1b0 [ 1259.465819] 2*32kB [ 1259.470458] ion_system_heap_allocate+0x133/0x8c0 [ 1259.472664] (U) [ 1259.477054] ? _raw_spin_unlock+0x29/0x40 [ 1259.477063] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1259.477074] ? ion_system_contig_heap_create+0x130/0x130 [ 1259.479028] 0*64kB [ 1259.483414] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1259.483425] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1259.485654] 0*128kB [ 1259.490463] ion_alloc+0x27a/0x810 [ 1259.492411] 1*256kB [ 1259.496543] ? ion_dma_buf_release+0x40/0x40 [ 1259.496556] ? __might_fault+0x177/0x1b0 [ 1259.501456] (U) [ 1259.506887] ion_ioctl+0xea/0x1f0 [ 1259.506897] ? ion_query_heaps+0x360/0x360 [ 1259.506908] ? lock_acquire+0x170/0x3f0 [ 1259.509119] 0*512kB [ 1259.514114] ? lock_downgrade+0x740/0x740 [ 1259.518951] 0*1024kB [ 1259.521242] ? ion_query_heaps+0x360/0x360 [ 1259.524754] 1*2048kB [ 1259.527059] do_vfs_ioctl+0x75a/0xff0 [ 1259.527071] ? ioctl_preallocate+0x1a0/0x1a0 [ 1259.527081] ? lock_downgrade+0x740/0x740 [ 1259.531465] (M) [ 1259.535512] ? __fget+0x225/0x360 [ 1259.535521] ? do_vfs_ioctl+0xff0/0xff0 [ 1259.535531] ? security_file_ioctl+0x83/0xb0 [ 1259.537481] 2*4096kB [ 1259.540913] SyS_ioctl+0x7f/0xb0 [ 1259.545149] (UM) [ 1259.549092] ? do_vfs_ioctl+0xff0/0xff0 [ 1259.551395] = 10972kB [ 1259.555524] do_syscall_64+0x1d5/0x640 [ 1259.555542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1259.557934] Node 0 [ 1259.562145] RIP: 0033:0x45e219 [ 1259.564525] DMA32: 2195*4kB [ 1259.568305] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.568315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1259.568320] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1259.568327] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.572710] (UME) [ 1259.576831] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1259.576837] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1259.577700] 0 pages cma reserved [ 1259.582383] 920*8kB [ 1259.586231] Out of memory (oom_kill_allocating_task): Kill process 11618 (syz-executor.4) score 0 or sacrifice child [ 1259.586264] Killed process 12444 (syz-executor.4) total-vm:93480kB, anon-rss:164kB, file-rss:34816kB, shmem-rss:0kB [ 1259.588312] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1259.598889] syz-executor.1: [ 1259.602555] (null) [ 1259.604948] page allocation failure: order:0 [ 1259.608839] , order=0, oom_score_adj=0 [ 1259.608845] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1259.608864] CPU: 0 PID: 11618 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1259.608868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.608871] Call Trace: [ 1259.608886] dump_stack+0x1b2/0x281 [ 1259.608898] dump_header+0x178/0x82f [ 1259.608908] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1259.608918] ? ___ratelimit+0x2cd/0x530 [ 1259.608928] oom_kill_process.cold+0x10/0xb18 [ 1259.608949] out_of_memory+0xe3e/0x1190 [ 1259.633272] (UME) [ 1259.637469] ? oom_killer_disable+0x1c0/0x1c0 [ 1259.637477] ? mutex_trylock+0x152/0x1a0 [ 1259.637488] __alloc_pages_nodemask+0x23e1/0x2720 [ 1259.648932] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1259.652020] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1259.654161] (null) [ 1259.661458] alloc_pages_current+0x155/0x260 [ 1259.661471] filemap_fault+0xea3/0x1980 [ 1259.661492] ext4_filemap_fault+0x84/0xb0 [ 1259.676790] 129*16kB [ 1259.685059] __do_fault+0xfa/0x380 [ 1259.685073] __handle_mm_fault+0x2497/0x4620 [ 1259.707970] syz-executor.1 cpuset= [ 1259.708704] ? vm_insert_page+0x7c0/0x7c0 [ 1259.710831] / [ 1259.715237] ? free_object+0xe4/0x240 [ 1259.726688] (UME) [ 1259.732205] handle_mm_fault+0x391/0x860 [ 1259.742601] mems_allowed=0-1 [ 1259.744140] __do_page_fault+0x549/0xad0 [ 1259.755056] 0*32kB [ 1259.756524] ? spurious_fault+0x640/0x640 [ 1259.760470] 0*64kB [ 1259.764946] ? do_page_fault+0x60/0x500 [ 1259.785036] 0*128kB [ 1259.791476] ? page_fault+0x2f/0x50 [ 1259.805030] 0*256kB [ 1259.806748] page_fault+0x45/0x50 [ 1259.810868] 0*512kB [ 1259.813258] RIP: 0007:0x32 [ 1259.835044] 0*1024kB [ 1259.836430] RSP: 0bb8:00000000001328bb EFLAGS: 00000026 [ 1259.840487] 0*2048kB [ 1259.844293] Mem-Info: [ 1259.851419] syz-executor.4: [ 1259.854263] active_anon:18738 inactive_anon:12061 isolated_anon:0 [ 1259.854263] active_file:23 inactive_file:13 isolated_file:0 [ 1259.854263] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1259.854263] slab_reclaimable:15857 slab_unreclaimable:123484 [ 1259.854263] mapped:52666 shmem:13069 pagetables:799 bounce:0 [ 1259.854263] free:13955 free_pcp:89 free_cma:0 [ 1259.867150] page allocation failure: order:0 [ 1259.868741] Node 0 active_anon:74004kB inactive_anon:32004kB active_file:88kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208988kB dirty:40kB writeback:0kB shmem:35972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1259.872156] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1259.874471] Node 1 active_anon:948kB inactive_anon:16240kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1676kB dirty:4kB writeback:0kB shmem:16304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1259.886722] CPU: 1 PID: 12450 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1259.890336] Node 0 [ 1259.892946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.929198] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.930676] Call Trace: [ 1259.961335] syz-executor.4 cpuset= [ 1259.965981] dump_stack+0x1b2/0x281 [ 1259.965996] warn_alloc.cold+0x96/0x1cc [ 1259.966007] ? zone_watermark_ok_safe+0x220/0x220 [ 1259.966020] ? usleep_range+0x130/0x130 [ 1259.996259] lowmem_reserve[]: [ 1260.000780] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1260.002988] 0 [ 1260.012327] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1260.012337] ? run_timer_softirq+0x5a0/0x5a0 [ 1260.012354] __alloc_pages_nodemask+0x2127/0x2720 [ 1260.012371] ? lock_acquire+0x170/0x3f0 [ 1260.012387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.040786] warn_alloc_show_mem: 1 callbacks suppressed [ 1260.040789] Mem-Info: [ 1260.044037] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1260.047699] active_anon:18738 inactive_anon:12061 isolated_anon:0 [ 1260.047699] active_file:36 inactive_file:0 isolated_file:0 [ 1260.047699] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1260.047699] slab_reclaimable:15854 slab_unreclaimable:123477 [ 1260.047699] mapped:52666 shmem:13069 pagetables:799 bounce:0 [ 1260.047699] free:13955 free_pcp:89 free_cma:0 [ 1260.051598] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1260.059233] / [ 1260.060369] ? alloc_pages_current+0x73/0x260 [ 1260.063444] mems_allowed=0-1 [ 1260.068527] alloc_pages_current+0x155/0x260 [ 1260.068543] ion_page_pool_alloc+0x118/0x1b0 [ 1260.068554] ion_system_heap_allocate+0x133/0x8c0 [ 1260.068565] ? ion_alloc+0x187/0x810 [ 1260.070363] Node 0 active_anon:74004kB inactive_anon:32004kB active_file:92kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208988kB dirty:40kB writeback:0kB shmem:35972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1260.075341] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1260.075352] ? ion_system_contig_heap_create+0x130/0x130 [ 1260.075361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1260.075370] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1260.075382] ion_alloc+0x204/0x810 [ 1260.075396] ? ion_dma_buf_release+0x40/0x40 [ 1260.075408] ? __might_fault+0x177/0x1b0 [ 1260.095002] Node 1 active_anon:948kB inactive_anon:16240kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1676kB dirty:4kB writeback:0kB shmem:16304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1260.098715] ion_ioctl+0xea/0x1f0 [ 1260.101098] Node 0 [ 1260.105579] ? ion_query_heaps+0x360/0x360 [ 1260.105591] ? lock_acquire+0x170/0x3f0 [ 1260.105600] ? lock_downgrade+0x740/0x740 [ 1260.105609] ? ion_query_heaps+0x360/0x360 [ 1260.105630] do_vfs_ioctl+0x75a/0xff0 [ 1260.157819] 2717 [ 1260.162192] ? ioctl_preallocate+0x1a0/0x1a0 [ 1260.177782] 2718 [ 1260.198577] ? lock_downgrade+0x740/0x740 [ 1260.198592] ? __fget+0x225/0x360 [ 1260.198601] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.198611] ? security_file_ioctl+0x83/0xb0 [ 1260.198620] SyS_ioctl+0x7f/0xb0 [ 1260.198628] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.198640] do_syscall_64+0x1d5/0x640 [ 1260.198656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1260.198666] RIP: 0033:0x45e219 [ 1260.224947] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.227230] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 [ 1260.231269] lowmem_reserve[]: [ 1260.258145] ORIG_RAX: 0000000000000010 [ 1260.258152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1260.258157] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1260.258161] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1260.258165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1260.258170] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1260.274928] 0*4096kB [ 1260.284314] 2718 [ 1260.284397] = 18204kB [ 1260.284402] Node 0 [ 1260.286479] 2718 [ 1260.286485] Node 0 DMA32 free:18204kB min:36200kB low:45248kB high:54296kB active_anon:74004kB inactive_anon:32004kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2964kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1260.286529] CPU: 0 PID: 12444 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1260.286535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.286539] Call Trace: [ 1260.286558] dump_stack+0x1b2/0x281 [ 1260.286571] warn_alloc.cold+0x96/0x1cc [ 1260.286583] ? zone_watermark_ok_safe+0x220/0x220 [ 1260.286595] ? usleep_range+0x130/0x130 [ 1260.299928] Normal: [ 1260.300598] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1260.304545] 0*4kB [ 1260.308937] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1260.308947] ? run_timer_softirq+0x5a0/0x5a0 [ 1260.308965] __alloc_pages_nodemask+0x2127/0x2720 [ 1260.312303] 0*8kB [ 1260.316261] ? lock_acquire+0x170/0x3f0 [ 1260.316276] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.320137] 0*16kB [ 1260.325309] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1260.325328] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1260.328499] 0*32kB [ 1260.354001] alloc_pages_current+0x155/0x260 [ 1260.354015] ion_page_pool_alloc+0x118/0x1b0 [ 1260.359379] 0*64kB [ 1260.362454] ion_system_heap_allocate+0x133/0x8c0 [ 1260.366508] 0*128kB [ 1260.373751] ? ion_alloc+0x187/0x810 [ 1260.381012] 0*256kB [ 1260.388250] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1260.388259] ? ion_system_contig_heap_create+0x130/0x130 [ 1260.388271] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1260.395528] 0*512kB [ 1260.402773] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1260.405170] 0*1024kB [ 1260.407203] ion_alloc+0x204/0x810 [ 1260.409585] 0*2048kB [ 1260.411805] ? ion_dma_buf_release+0x40/0x40 [ 1260.413855] 0*4096kB [ 1260.442806] ? __might_fault+0x177/0x1b0 [ 1260.442819] ion_ioctl+0xea/0x1f0 [ 1260.442829] ? ion_query_heaps+0x360/0x360 [ 1260.450721] = 0kB [ 1260.460055] ? lock_acquire+0x170/0x3f0 [ 1260.460064] ? lock_downgrade+0x740/0x740 [ 1260.460075] ? ion_query_heaps+0x360/0x360 [ 1260.462635] Node 1 [ 1260.466239] do_vfs_ioctl+0x75a/0xff0 [ 1260.466251] ? ioctl_preallocate+0x1a0/0x1a0 [ 1260.466261] ? lock_downgrade+0x740/0x740 [ 1260.470229] Normal: [ 1260.475054] ? __fget+0x225/0x360 [ 1260.475062] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.475083] ? security_file_ioctl+0x83/0xb0 [ 1260.479028] 54*4kB [ 1260.481332] SyS_ioctl+0x7f/0xb0 [ 1260.486421] (M) [ 1260.488539] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.493526] 19*8kB [ 1260.497915] do_syscall_64+0x1d5/0x640 [ 1260.497933] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1260.502762] (M) [ 1260.504892] RIP: 0033:0x45e219 [ 1260.504897] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1260.504910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1260.508856] 8*16kB [ 1260.513670] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1260.513677] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.515905] (M) [ 1260.520366] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1260.525806] 822*32kB [ 1260.528006] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1260.540939] lowmem_reserve[]: [ 1260.547492] (UM) [ 1260.553605] 0 [ 1260.562943] 0*64kB [ 1260.569812] 0 [ 1260.572580] 0*128kB [ 1260.576290] 0 [ 1260.582999] 0*256kB [ 1260.583917] 0 [ 1260.590121] 0*512kB [ 1260.597923] 0 [ 1260.603411] 0*1024kB [ 1260.610325] 0*2048kB [ 1260.614515] Node 0 [ 1260.622030] 0*4096kB [ 1260.629535] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.633327] = 26800kB [ 1260.633862] lowmem_reserve[]: [ 1260.642444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.651762] 0 [ 1260.654666] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1260.661167] 2717 [ 1260.664572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.679885] 2718 [ 1260.682390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1260.694215] 0 [ 1260.700375] 13104 total pagecache pages [ 1260.718094] 2718 [ 1260.726570] 0 pages in swap cache [ 1260.736734] 0 [ 1260.754908] Swap cache stats: add 0, delete 0, find 0/0 [ 1260.759059] 2718 [ 1260.827153] Free swap = 0kB [ 1260.861050] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1260.866877] 0 0 0 [ 1260.874788] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1260.880161] CPU: 1 PID: 12450 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1260.882147] Node 1 [ 1260.888030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.888034] Call Trace: [ 1260.888053] dump_stack+0x1b2/0x281 [ 1260.888066] warn_alloc.cold+0x96/0x1cc [ 1260.888078] ? zone_watermark_ok_safe+0x220/0x220 [ 1260.888101] __alloc_pages_nodemask+0x2127/0x2720 [ 1260.888117] ? lock_acquire+0x170/0x3f0 [ 1260.902510] Normal free:37404kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16240kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:740kB local_pcp:120kB free_cma:0kB [ 1260.905856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.905873] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1260.905885] ? __mutex_unlock_slowpath+0x75/0x770 [ 1260.905895] ? alloc_pages_current+0x123/0x260 [ 1260.905906] alloc_pages_current+0x155/0x260 [ 1260.905922] ion_page_pool_alloc+0x118/0x1b0 [ 1260.911652] lowmem_reserve[]: [ 1260.914700] ion_system_heap_allocate+0x133/0x8c0 [ 1260.931797] 0 [ 1260.951359] ? _raw_spin_unlock+0x29/0x40 [ 1260.951372] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1260.951381] ? ion_system_contig_heap_create+0x130/0x130 [ 1260.951391] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1260.951403] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1260.951414] ion_alloc+0x27a/0x810 [ 1260.951428] ? ion_dma_buf_release+0x40/0x40 [ 1260.951441] ? __might_fault+0x177/0x1b0 [ 1260.951455] ion_ioctl+0xea/0x1f0 [ 1260.951465] ? ion_query_heaps+0x360/0x360 [ 1260.951478] ? lock_acquire+0x170/0x3f0 [ 1260.951486] ? lock_downgrade+0x740/0x740 [ 1260.951494] ? ion_query_heaps+0x360/0x360 [ 1260.951505] do_vfs_ioctl+0x75a/0xff0 [ 1260.968949] 0 [ 1260.971173] ? ioctl_preallocate+0x1a0/0x1a0 [ 1260.983041] ? lock_downgrade+0x740/0x740 [ 1260.994359] 0 [ 1260.998716] ? __fget+0x225/0x360 [ 1260.998727] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.998738] ? security_file_ioctl+0x83/0xb0 [ 1260.998747] SyS_ioctl+0x7f/0xb0 [ 1260.998755] ? do_vfs_ioctl+0xff0/0xff0 [ 1260.998767] do_syscall_64+0x1d5/0x640 [ 1260.998784] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1260.998793] RIP: 0033:0x45e219 [ 1260.998798] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1260.998807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1260.998812] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1260.998820] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1261.016518] Node 0 [ 1261.017594] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1261.021992] DMA32 free:18748kB min:36200kB low:45248kB high:54296kB active_anon:74004kB inactive_anon:32004kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2964kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 1261.026018] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1261.031866] Total swap = 0kB [ 1261.039335] 0 [ 1261.041935] 2097051 pages RAM [ 1261.049550] 0 [ 1261.055345] 0 pages HighMem/MovableOnly [ 1261.061507] lowmem_reserve[]: [ 1261.062105] 363840 pages reserved [ 1261.068963] 0 [ 1261.074854] 0 pages cma reserved [ 1261.149590] warn_alloc_show_mem: 1 callbacks suppressed [ 1261.149593] Mem-Info: [ 1261.170488] 0 0 0 0 [ 1261.211331] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.242136] lowmem_reserve[]: 0 0 0 0 0 [ 1261.242901] active_anon:18763 inactive_anon:12061 isolated_anon:0 [ 1261.242901] active_file:16 inactive_file:1044 isolated_file:0 [ 1261.242901] unevictable:0 dirty:36 writeback:0 unstable:0 [ 1261.242901] slab_reclaimable:15851 slab_unreclaimable:123204 [ 1261.242901] mapped:53441 shmem:13069 pagetables:799 bounce:0 [ 1261.242901] free:62932 free_pcp:371 free_cma:0 [ 1261.246734] Node 1 [ 1261.314763] Node 0 DMA: 45*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10972kB [ 1261.334698] Node 0 active_anon:74104kB inactive_anon:32004kB active_file:60kB inactive_file:2264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210388kB dirty:140kB writeback:0kB shmem:35972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.358067] Node 0 DMA32: 1796*4kB (UME) 759*8kB (UME) 127*16kB (ME) 1*32kB (U) 480*64kB (U) 30*128kB (U) 19*256kB (U) 0*512kB 21*1024kB (U) 1*2048kB (U) 0*4096kB = 78296kB [ 1261.394677] Node 1 active_anon:948kB inactive_anon:16240kB active_file:4kB inactive_file:2212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3676kB dirty:4kB writeback:0kB shmem:16304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.394725] Normal free:387132kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16240kB active_file:4kB inactive_file:2212kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:896kB local_pcp:164kB free_cma:0kB [ 1261.455508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1261.468760] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1149*32kB (UM) 3236*64kB (UM) 93*128kB (U) 56*256kB (U) 17*512kB (U) 110*1024kB (U) 9*2048kB (U) 3*4096kB (U) = 422204kB [ 1261.488838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.494639] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.497748] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1261.536262] lowmem_reserve[]: 0 0 0 0 0 [ 1261.540273] Node 0 DMA: 45*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10972kB [ 1261.558028] Node 0 DMA32: 1796*4kB (UME) 810*8kB (UME) 130*16kB (UME) 0*32kB 1831*64kB (UME) 56*128kB (U) 51*256kB (U) 18*512kB (U) 22*1024kB (U) 1*2048kB (U) 0*4096kB = 186944kB [ 1261.574265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.595303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1261.604586] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1261.611087] Node 0 DMA32 free:192400kB min:36200kB low:45248kB high:54296kB active_anon:74104kB inactive_anon:32004kB active_file:60kB inactive_file:2264kB unevictable:0kB writepending:188kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2964kB bounce:0kB free_pcp:848kB local_pcp:128kB free_cma:0kB [ 1261.615817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1261.653309] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1149*32kB (UM) 4604*64kB (UM) 469*128kB (U) 67*256kB (U) 25*512kB (U) 115*1024kB (U) 9*2048kB (U) 3*4096kB (U) = 569916kB [ 1261.694600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.703473] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1261.704593] lowmem_reserve[]: 0 0 0 0 0 [ 1261.734577] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.736569] 14214 total pagecache pages [ 1261.774592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.783459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1261.814590] lowmem_reserve[]: 0 0 0 0 0 [ 1261.816277] 14214 total pagecache pages [ 1261.818614] Node 1 Normal free:828476kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16240kB active_file:4kB inactive_file:2212kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:232kB bounce:0kB free_pcp:900kB local_pcp:736kB free_cma:0kB [ 1261.822585] 0 pages in swap cache [ 1261.822592] Swap cache stats: add 0, delete 0, find 0/0 [ 1261.864715] 0 pages in swap cache [ 1261.868185] Swap cache stats: add 0, delete 0, find 0/0 [ 1261.873537] Free swap = 0kB [ 1261.894524] Total swap = 0kB [ 1261.897563] 2097051 pages RAM [ 1261.900657] 0 pages HighMem/MovableOnly [ 1261.928124] 363840 pages reserved [ 1261.931607] 0 pages cma reserved [ 1261.934500] lowmem_reserve[]: 0 0 0 0 0 [ 1261.935305] Out of memory (oom_kill_allocating_task): Kill process 11618 (syz-executor.4) score 0 or sacrifice child [ 1261.939466] Node 0 DMA: 45*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11100kB [ 1261.970089] Free swap = 0kB [ 1261.994555] Node 0 DMA32: 1800*4kB (ME) 776*8kB (UME) 130*16kB (UME) 1*32kB (U) 347*64kB (UME) 130*128kB (U) 71*256kB (U) 28*512kB (U) 26*1024kB (U) 2*2048kB (U) 0*4096kB = 117600kB [ 1261.995062] Killed process 12444 (syz-executor.4) total-vm:93480kB, anon-rss:164kB, file-rss:34816kB, shmem-rss:0kB [ 1262.026117] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1262.032896] Total swap = 0kB [ 1262.042109] 2097051 pages RAM [ 1262.047928] 0 pages HighMem/MovableOnly [ 1262.051912] 363840 pages reserved [ 1262.054497] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 6*16kB (UM) 1153*32kB (UM) 6434*64kB (UM) 1467*128kB (U) 211*256kB (U) 80*512kB (U) 130*1024kB (U) 14*2048kB (U) 4*4096kB (U) = 909748kB [ 1262.059217] 0 pages cma reserved [ 1262.086207] oom_reaper: reaped process 12444 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1262.104329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.126261] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1262.138875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.157273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.177276] 14542 total pagecache pages [ 1262.182115] 0 pages in swap cache [ 1262.188479] Swap cache stats: add 0, delete 0, find 0/0 [ 1262.194138] Free swap = 0kB [ 1262.197848] Total swap = 0kB [ 1262.200877] 2097051 pages RAM [ 1262.203978] 0 pages HighMem/MovableOnly [ 1262.211265] 363840 pages reserved [ 1262.215570] 0 pages cma reserved 19:45:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:45:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) [ 1262.892950] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1262.913632] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1262.934400] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1262.944008] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1262.950400] CPU: 0 PID: 12475 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1262.958296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.967643] Call Trace: [ 1262.970234] dump_stack+0x1b2/0x281 [ 1262.973868] warn_alloc.cold+0x96/0x1cc [ 1262.977850] ? zone_watermark_ok_safe+0x220/0x220 [ 1262.982719] __alloc_pages_nodemask+0x2127/0x2720 [ 1262.987564] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1262.992042] ? finish_task_switch+0x178/0x610 [ 1262.996516] ? finish_task_switch+0x14d/0x610 [ 1263.000995] ? lock_acquire+0x170/0x3f0 [ 1263.004954] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1263.009781] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1263.015213] ? __mutex_unlock_slowpath+0x75/0x770 [ 1263.020056] alloc_pages_current+0x155/0x260 [ 1263.024449] ion_page_pool_alloc+0x118/0x1b0 [ 1263.028837] ion_system_heap_allocate+0x133/0x8c0 [ 1263.033660] ? ion_alloc+0x187/0x810 [ 1263.037352] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1263.042783] ? ion_system_contig_heap_create+0x130/0x130 [ 1263.048225] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1263.053222] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1263.058056] ion_alloc+0x204/0x810 [ 1263.061597] ? ion_dma_buf_release+0x40/0x40 [ 1263.065996] ? __might_fault+0x177/0x1b0 [ 1263.070055] ion_ioctl+0xea/0x1f0 [ 1263.073488] ? ion_query_heaps+0x360/0x360 [ 1263.077720] ? lock_acquire+0x170/0x3f0 [ 1263.081674] ? lock_downgrade+0x740/0x740 [ 1263.085799] ? ion_query_heaps+0x360/0x360 [ 1263.090013] do_vfs_ioctl+0x75a/0xff0 [ 1263.093794] ? ioctl_preallocate+0x1a0/0x1a0 [ 1263.098211] ? lock_downgrade+0x740/0x740 [ 1263.102357] ? __fget+0x225/0x360 [ 1263.105792] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.109749] ? security_file_ioctl+0x83/0xb0 [ 1263.114139] SyS_ioctl+0x7f/0xb0 [ 1263.117521] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.121475] do_syscall_64+0x1d5/0x640 [ 1263.125345] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1263.130516] RIP: 0033:0x45e219 [ 1263.133682] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.141384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1263.148635] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1263.155902] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1263.163152] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1263.170400] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1263.183695] CPU: 0 PID: 12468 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1263.191590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.200939] Call Trace: [ 1263.203521] dump_stack+0x1b2/0x281 [ 1263.207135] warn_alloc.cold+0x96/0x1cc [ 1263.211092] ? zone_watermark_ok_safe+0x220/0x220 [ 1263.215923] __alloc_pages_nodemask+0x2127/0x2720 [ 1263.220746] ? finish_task_switch+0x178/0x610 [ 1263.225222] ? switch_mm_irqs_off+0x601/0xeb0 [ 1263.229700] ? lock_acquire+0x170/0x3f0 [ 1263.233658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1263.238487] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1263.243936] ? __mutex_unlock_slowpath+0x75/0x770 [ 1263.248763] alloc_pages_current+0x155/0x260 [ 1263.253155] ion_page_pool_alloc+0x118/0x1b0 [ 1263.257544] ion_system_heap_allocate+0x133/0x8c0 [ 1263.262367] ? ion_alloc+0x187/0x810 [ 1263.266080] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1263.271510] ? ion_system_contig_heap_create+0x130/0x130 [ 1263.276941] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1263.281937] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1263.286762] ion_alloc+0x204/0x810 [ 1263.290286] ? ion_dma_buf_release+0x40/0x40 [ 1263.294676] ? __might_fault+0x177/0x1b0 [ 1263.298718] ion_ioctl+0xea/0x1f0 [ 1263.302150] ? ion_query_heaps+0x360/0x360 [ 1263.306370] ? lock_acquire+0x170/0x3f0 [ 1263.310323] ? lock_downgrade+0x740/0x740 [ 1263.314448] ? ion_query_heaps+0x360/0x360 [ 1263.318662] do_vfs_ioctl+0x75a/0xff0 [ 1263.322446] ? ioctl_preallocate+0x1a0/0x1a0 [ 1263.326847] ? lock_downgrade+0x740/0x740 [ 1263.330976] ? __fget+0x225/0x360 [ 1263.334425] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.338380] ? security_file_ioctl+0x83/0xb0 [ 1263.342767] SyS_ioctl+0x7f/0xb0 [ 1263.346114] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.350070] do_syscall_64+0x1d5/0x640 [ 1263.353948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1263.359123] RIP: 0033:0x45e219 [ 1263.362292] RSP: 002b:00007f53e7058c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.369980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1263.377230] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1263.384480] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1263.391727] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1263.398979] R13: 00007fff7b7a9f0f R14: 00007f53e70599c0 R15: 000000000119bf8c [ 1263.511729] warn_alloc_show_mem: 1 callbacks suppressed [ 1263.511734] Mem-Info: [ 1263.522138] active_anon:19797 inactive_anon:12061 isolated_anon:0 [ 1263.522138] active_file:250 inactive_file:224 isolated_file:29 [ 1263.522138] unevictable:0 dirty:35 writeback:0 unstable:0 [ 1263.522138] slab_reclaimable:15769 slab_unreclaimable:126280 [ 1263.522138] mapped:53168 shmem:13069 pagetables:827 bounce:0 [ 1263.522138] free:13869 free_pcp:347 free_cma:0 [ 1263.559982] Node 0 active_anon:77928kB inactive_anon:32000kB active_file:924kB inactive_file:784kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:210572kB dirty:80kB writeback:0kB shmem:35968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1263.591744] Node 1 active_anon:1260kB inactive_anon:16244kB active_file:76kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:2100kB dirty:60kB writeback:0kB shmem:16308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1263.623061] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.656410] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1263.661555] Node 0 DMA32 free:17744kB min:36200kB low:45248kB high:54296kB active_anon:77928kB inactive_anon:32000kB active_file:964kB inactive_file:1116kB unevictable:0kB writepending:52kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2964kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1263.695632] lowmem_reserve[]: 0 0 0 0 0 [ 1263.699670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.728973] lowmem_reserve[]: 0 0 0 0 0 [ 1263.733010] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:1260kB inactive_anon:16244kB active_file:252kB inactive_file:376kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:344kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1263.765525] lowmem_reserve[]: 0 0 0 0 0 [ 1263.769564] Node 0 DMA: 10*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10960kB [ 1263.792913] Node 0 DMA32: 2115*4kB (UME) 859*8kB (UME) 144*16kB (ME) 2*32kB (U) 6*64kB (UME) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18340kB [ 1263.816297] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1263.831814] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1263.858330] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1263.874089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1263.884870] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1263.884894] CPU: 1 PID: 12473 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1263.884899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.884902] Call Trace: [ 1263.884924] dump_stack+0x1b2/0x281 [ 1263.913403] warn_alloc.cold+0x96/0x1cc [ 1263.917483] ? zone_watermark_ok_safe+0x220/0x220 [ 1263.922346] __alloc_pages_nodemask+0x2127/0x2720 [ 1263.927201] ? lock_acquire+0x170/0x3f0 [ 1263.931162] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1263.936032] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1263.941464] ? __mutex_unlock_slowpath+0x75/0x770 [ 1263.946291] alloc_pages_current+0x155/0x260 [ 1263.950686] ion_page_pool_alloc+0x118/0x1b0 [ 1263.955079] ion_system_heap_allocate+0x133/0x8c0 [ 1263.959902] ? ion_alloc+0x187/0x810 [ 1263.963595] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1263.969027] ? ion_system_contig_heap_create+0x130/0x130 [ 1263.974459] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1263.979456] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1263.984282] ion_alloc+0x204/0x810 [ 1263.987807] ? ion_dma_buf_release+0x40/0x40 [ 1263.992200] ? __might_fault+0x177/0x1b0 [ 1263.996241] ion_ioctl+0xea/0x1f0 [ 1263.999676] ? ion_query_heaps+0x360/0x360 [ 1264.003912] ? lock_acquire+0x170/0x3f0 [ 1264.007868] ? lock_downgrade+0x740/0x740 [ 1264.011995] ? ion_query_heaps+0x360/0x360 [ 1264.016216] do_vfs_ioctl+0x75a/0xff0 [ 1264.020002] ? ioctl_preallocate+0x1a0/0x1a0 [ 1264.024397] ? lock_downgrade+0x740/0x740 [ 1264.028531] ? __fget+0x225/0x360 [ 1264.031963] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.035917] ? security_file_ioctl+0x83/0xb0 [ 1264.040321] SyS_ioctl+0x7f/0xb0 [ 1264.043667] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.047625] do_syscall_64+0x1d5/0x640 [ 1264.051500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1264.056756] RIP: 0033:0x45e219 [ 1264.059926] RSP: 002b:00007f53e7037c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.067629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1264.074878] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1264.082127] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1264.089377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1264.096629] R13: 00007fff7b7a9f0f R14: 00007f53e70389c0 R15: 000000000119c034 [ 1264.104279] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1264.110173] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1264.115615] CPU: 1 PID: 12472 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1264.123493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.128524] Node 1 [ 1264.132837] Call Trace: [ 1264.132842] Normal: 36*4kB [ 1264.135080] dump_stack+0x1b2/0x281 [ 1264.135093] warn_alloc.cold+0x96/0x1cc [ 1264.135105] ? zone_watermark_ok_safe+0x220/0x220 [ 1264.135129] __alloc_pages_nodemask+0x2127/0x2720 [ 1264.135140] ? retint_kernel+0x2d/0x2d [ 1264.135155] ? lock_acquire+0x170/0x3f0 [ 1264.135170] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1264.144267] syz-executor.1: [ 1264.148217] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1264.153026] page allocation failure: order:0 [ 1264.157849] ? __mutex_unlock_slowpath+0x75/0x770 [ 1264.157864] alloc_pages_current+0x155/0x260 [ 1264.157885] ion_page_pool_alloc+0x118/0x1b0 [ 1264.157898] ion_system_heap_allocate+0x133/0x8c0 [ 1264.173978] (UM) [ 1264.179025] ? ion_alloc+0x187/0x810 [ 1264.183402] 27*8kB [ 1264.188225] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1264.188235] ? ion_system_contig_heap_create+0x130/0x130 [ 1264.188245] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1264.188256] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1264.188268] ion_alloc+0x204/0x810 [ 1264.188282] ? ion_dma_buf_release+0x40/0x40 [ 1264.188294] ? __might_fault+0x177/0x1b0 [ 1264.188306] ion_ioctl+0xea/0x1f0 [ 1264.188317] ? ion_query_heaps+0x360/0x360 [ 1264.188329] ? lock_acquire+0x170/0x3f0 [ 1264.188339] ? lock_downgrade+0x740/0x740 [ 1264.188348] ? ion_query_heaps+0x360/0x360 [ 1264.188359] do_vfs_ioctl+0x75a/0xff0 [ 1264.188370] ? ioctl_preallocate+0x1a0/0x1a0 [ 1264.188380] ? lock_downgrade+0x740/0x740 [ 1264.206569] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1264.207723] ? __fget+0x225/0x360 [ 1264.209932] (null) [ 1264.215360] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.215369] ? security_file_ioctl+0x83/0xb0 [ 1264.215380] SyS_ioctl+0x7f/0xb0 [ 1264.215388] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.215400] do_syscall_64+0x1d5/0x640 [ 1264.215418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1264.215427] RIP: 0033:0x45e219 [ 1264.215432] RSP: 002b:00007f8fa5a54c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.215442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1264.215447] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1264.215452] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.215457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1264.215462] R13: 00007ffc9c2201af R14: 00007f8fa5a559c0 R15: 000000000119bf8c [ 1264.219041] syz-executor.4: [ 1264.236168] (M) [ 1264.242639] CPU: 1 PID: 12431 Comm: rs:main Q:Reg Not tainted 4.14.217-syzkaller #0 [ 1264.260660] syz-executor.1 cpuset= [ 1264.262758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.282335] 22*16kB [ 1264.285705] Call Trace: [ 1264.285725] dump_stack+0x1b2/0x281 [ 1264.285737] dump_header+0x178/0x82f [ 1264.285748] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1264.285758] ? ___ratelimit+0x2cd/0x530 [ 1264.285768] oom_kill_process.cold+0x10/0xb18 [ 1264.285783] out_of_memory+0xe3e/0x1190 [ 1264.285795] ? oom_killer_disable+0x1c0/0x1c0 [ 1264.285801] ? mutex_trylock+0x152/0x1a0 [ 1264.285812] __alloc_pages_nodemask+0x23e1/0x2720 [ 1264.303627] / mems_allowed=0-1 [ 1264.307510] ? trace_hardirqs_on+0x10/0x10 [ 1264.307525] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1264.307538] ? trace_hardirqs_on+0x10/0x10 [ 1264.307549] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1264.307573] alloc_pages_current+0x155/0x260 [ 1264.324643] page allocation failure: order:0 [ 1264.330881] pagecache_get_page+0x3f5/0xab0 [ 1264.348975] (UM) [ 1264.352644] grab_cache_page_write_begin+0x63/0x90 [ 1264.413164] 13*32kB [ 1264.415119] ext4_da_write_begin+0x249/0xe70 [ 1264.415131] ? __ext4_journal_stop+0xe7/0x1b0 [ 1264.415142] ? ext4_write_begin+0x1260/0x1260 [ 1264.415150] ? balance_dirty_pages_ratelimited+0x82a/0x1800 [ 1264.415164] generic_perform_write+0x1c9/0x420 [ 1264.415177] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1264.415188] ? current_time+0xb0/0xb0 [ 1264.415195] ? ext4_file_write_iter+0x1cc/0xd20 [ 1264.415204] __generic_file_write_iter+0x227/0x590 [ 1264.435085] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1264.435943] ext4_file_write_iter+0x276/0xd20 [ 1264.440759] (null) [ 1264.444981] ? aa_file_perm+0x304/0xab0 [ 1264.444989] ? ext4_file_read_iter+0x330/0x330 [ 1264.444999] ? trace_hardirqs_on+0x10/0x10 [ 1264.445008] ? iov_iter_init+0xa6/0x1c0 [ 1264.445018] __vfs_write+0x44c/0x630 [ 1264.445028] ? kernel_read+0x110/0x110 [ 1264.445048] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1264.445058] vfs_write+0x17f/0x4d0 [ 1264.445068] SyS_write+0xf2/0x210 [ 1264.445078] ? SyS_read+0x210/0x210 [ 1264.467376] (UM) [ 1264.469687] ? __do_page_fault+0x159/0xad0 [ 1264.471985] 9*64kB [ 1264.476372] ? do_syscall_64+0x4c/0x640 [ 1264.476380] ? SyS_read+0x210/0x210 [ 1264.476387] do_syscall_64+0x1d5/0x640 [ 1264.476402] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1264.476410] RIP: 0033:0x7f9f19d0d1cd [ 1264.476414] RSP: 002b:00007f9f172c8590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1264.476423] RAX: ffffffffffffffda RBX: 00007f9f0c0062a0 RCX: 00007f9f19d0d1cd [ 1264.476427] RDX: 0000000000000fa8 RSI: 00007f9f0c0062a0 RDI: 0000000000000008 [ 1264.476432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1264.476436] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9f0c005fe0 [ 1264.476440] R13: 00007f9f172c85b0 R14: 00005592b0883800 R15: 0000000000000fa8 [ 1264.491101] Mem-Info: [ 1264.496401] CPU: 0 PID: 12450 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1264.505523] active_anon:19797 inactive_anon:12061 isolated_anon:0 [ 1264.505523] active_file:4 inactive_file:27 isolated_file:1 [ 1264.505523] unevictable:0 dirty:24 writeback:15 unstable:0 [ 1264.505523] slab_reclaimable:15770 slab_unreclaimable:126276 [ 1264.505523] mapped:52763 shmem:13069 pagetables:827 bounce:0 [ 1264.505523] free:13774 free_pcp:30 free_cma:0 [ 1264.509032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.514176] Node 0 active_anon:77928kB inactive_anon:32000kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209012kB dirty:24kB writeback:40kB shmem:35968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1264.519885] Call Trace: [ 1264.524418] Node 1 active_anon:1260kB inactive_anon:16244kB active_file:16kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:2040kB dirty:72kB writeback:20kB shmem:16308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1264.526533] dump_stack+0x1b2/0x281 [ 1264.530485] Node 0 [ 1264.535073] warn_alloc.cold+0x96/0x1cc [ 1264.535085] ? zone_watermark_ok_safe+0x220/0x220 [ 1264.535097] ? usleep_range+0x130/0x130 [ 1264.539314] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1264.543275] ? try_to_free_pages+0x23f/0x6e0 [ 1264.546978] lowmem_reserve[]: [ 1264.550834] ? _find_next_bit+0xdb/0x100 [ 1264.555845] 0 [ 1264.559393] ? run_timer_softirq+0x5a0/0x5a0 [ 1264.562821] 2717 [ 1264.566439] __alloc_pages_nodemask+0x2127/0x2720 [ 1264.566455] ? lock_acquire+0x170/0x3f0 [ 1264.568484] 2718 [ 1264.572704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1264.574932] 2718 [ 1264.578879] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1264.582474] 2718 [ 1264.586370] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1264.586390] alloc_pages_current+0x155/0x260 [ 1264.595241] ion_page_pool_alloc+0x118/0x1b0 [ 1264.595251] ion_system_heap_allocate+0x133/0x8c0 [ 1264.595262] ? _raw_spin_unlock+0x29/0x40 [ 1264.602940] Node 0 [ 1264.610196] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1264.610207] ? ion_system_contig_heap_create+0x130/0x130 [ 1264.610218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1264.617487] DMA32 free:17720kB min:36200kB low:45248kB high:54296kB active_anon:77928kB inactive_anon:32000kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:64kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2964kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1264.624720] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1264.624731] ion_alloc+0x27a/0x810 [ 1264.624745] ? ion_dma_buf_release+0x40/0x40 [ 1264.632001] lowmem_reserve[]: [ 1264.639260] ? __might_fault+0x177/0x1b0 [ 1264.639272] ion_ioctl+0xea/0x1f0 [ 1264.641663] 0 [ 1264.649527] ? ion_query_heaps+0x360/0x360 [ 1264.649539] ? lock_acquire+0x170/0x3f0 [ 1264.649556] ? lock_downgrade+0x740/0x740 [ 1264.682769] 0 [ 1264.692226] ? ion_query_heaps+0x360/0x360 [ 1264.692239] do_vfs_ioctl+0x75a/0xff0 [ 1264.692251] ? ioctl_preallocate+0x1a0/0x1a0 [ 1264.692265] ? lock_downgrade+0x740/0x740 [ 1264.720059] 0 [ 1264.722605] ? __fget+0x225/0x360 [ 1264.749846] 0 [ 1264.753444] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.755680] 0 [ 1264.759623] ? security_file_ioctl+0x83/0xb0 [ 1264.768387] SyS_ioctl+0x7f/0xb0 [ 1264.793893] Node 0 [ 1264.798267] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.801354] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1264.805388] do_syscall_64+0x1d5/0x640 [ 1264.805409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1264.807178] lowmem_reserve[]: [ 1264.811566] RIP: 0033:0x45e219 [ 1264.813601] 0 [ 1264.818420] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.818430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1264.818435] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1264.818442] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1264.822390] 0 [ 1264.824434] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1264.824440] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1264.849944] (UM) [ 1264.866709] syz-executor.4 cpuset= [ 1264.877310] 6*128kB [ 1264.892259] / [ 1264.916080] (UM) [ 1264.933752] 0 [ 1264.945317] 2*256kB [ 1264.957103] 0 [ 1264.971711] (M) [ 1264.981615] 0 [ 1264.996145] 34*512kB [ 1265.039600] mems_allowed=0-1 [ 1265.048934] Node 1 [ 1265.065018] CPU: 0 PID: 12444 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1265.083500] Normal free:26536kB min:53696kB low:67120kB high:80544kB active_anon:1260kB inactive_anon:16244kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:344kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.084112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.084116] Call Trace: [ 1265.084136] dump_stack+0x1b2/0x281 [ 1265.084149] warn_alloc.cold+0x96/0x1cc [ 1265.086445] lowmem_reserve[]: [ 1265.088145] ? zone_watermark_ok_safe+0x220/0x220 [ 1265.090178] 0 [ 1265.091962] ? usleep_range+0x130/0x130 [ 1265.094307] 0 [ 1265.096074] ? try_to_free_pages+0x23f/0x6e0 [ 1265.098022] 0 [ 1265.099808] ? _find_next_bit+0xdb/0x100 [ 1265.102184] 0 0 [ 1265.105275] ? run_timer_softirq+0x5a0/0x5a0 [ 1265.105292] __alloc_pages_nodemask+0x2127/0x2720 [ 1265.115380] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1265.115400] ? ion_heap_sglist_zero+0x165/0x220 [ 1265.142971] Node 0 [ 1265.152296] ? mark_held_locks+0xa6/0xf0 [ 1265.152306] ? cache_grow_begin+0x41/0x630 [ 1265.152318] cache_grow_begin+0x91/0x630 [ 1265.154890] DMA: [ 1265.158498] ? cache_grow_begin+0x91/0x630 [ 1265.162456] 10*4kB [ 1265.165533] fallback_alloc+0x207/0x2c0 [ 1265.165552] kmem_cache_alloc_node_trace+0xed/0x400 [ 1265.170365] (U) [ 1265.172149] __get_vm_area_node+0xed/0x340 [ 1265.176112] 11*8kB [ 1265.177883] vmap+0xd5/0x290 [ 1265.182258] (U) [ 1265.184051] ? ion_heap_clear_pages+0x23/0x70 [ 1265.184059] ? vunmap+0x50/0x50 [ 1265.184067] ? __vunmap+0x21c/0x300 [ 1265.188100] 9*16kB [ 1265.190061] ion_heap_clear_pages+0x23/0x70 [ 1265.194453] (U) [ 1265.199264] ion_heap_sglist_zero+0x165/0x220 [ 1265.204093] 2*32kB [ 1265.208732] ? ion_heap_clear_pages+0x70/0x70 [ 1265.210938] (U) [ 1265.214987] ? try_to_wake_up+0x631/0x1100 [ 1265.215012] ? pagerange_is_ram_callback+0x100/0x100 [ 1265.219208] 2*64kB [ 1265.223249] ? _ion_heap_freelist_drain+0x28b/0x410 [ 1265.225301] (U) [ 1265.229506] ion_system_heap_free+0x1d0/0x240 [ 1265.231716] 0*128kB [ 1265.235676] ion_buffer_destroy+0x132/0x190 [ 1265.235689] _ion_heap_freelist_drain+0x293/0x410 [ 1265.240677] 1*256kB [ 1265.242638] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1265.246859] (U) [ 1265.249066] ion_alloc+0x244/0x810 [ 1265.252056] 0*512kB [ 1265.254020] ? ion_dma_buf_release+0x40/0x40 [ 1265.254033] ? __might_fault+0x177/0x1b0 [ 1265.258516] 0*1024kB [ 1265.261794] ion_ioctl+0xea/0x1f0 [ 1265.265409] 1*2048kB [ 1265.267620] ? ion_query_heaps+0x360/0x360 [ 1265.271909] (M) [ 1265.273867] ? lock_acquire+0x170/0x3f0 [ 1265.273876] ? lock_downgrade+0x740/0x740 [ 1265.273885] ? ion_query_heaps+0x360/0x360 [ 1265.278353] 2*4096kB [ 1265.280573] do_vfs_ioctl+0x75a/0xff0 [ 1265.285054] (UM) [ 1265.286998] ? ioctl_preallocate+0x1a0/0x1a0 [ 1265.291202] = 10960kB [ 1265.296284] ? lock_downgrade+0x740/0x740 [ 1265.296297] ? __fget+0x225/0x360 [ 1265.296306] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.298520] Node 0 [ 1265.303516] ? security_file_ioctl+0x83/0xb0 [ 1265.305501] warn_alloc_show_mem: 3 callbacks suppressed [ 1265.305503] Mem-Info: [ 1265.309940] SyS_ioctl+0x7f/0xb0 [ 1265.312248] active_anon:19797 inactive_anon:12061 isolated_anon:0 [ 1265.312248] active_file:11 inactive_file:12 isolated_file:0 [ 1265.312248] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1265.312248] slab_reclaimable:15770 slab_unreclaimable:126286 [ 1265.312248] mapped:52744 shmem:13069 pagetables:827 bounce:0 [ 1265.312248] free:13812 free_pcp:35 free_cma:0 [ 1265.316535] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.316547] do_syscall_64+0x1d5/0x640 [ 1265.316563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1265.321382] DMA32: [ 1265.323677] RIP: 0033:0x45e219 [ 1265.323683] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1265.323694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1265.328508] 2082*4kB [ 1265.330460] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1265.330468] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.334016] Node 0 active_anon:77928kB inactive_anon:32000kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208988kB dirty:0kB writeback:0kB shmem:35968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.336295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1265.340696] Node 1 active_anon:1260kB inactive_anon:16244kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1988kB dirty:0kB writeback:0kB shmem:16308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.344720] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1265.356633] (UM) [ 1265.369564] (UME) [ 1265.382934] 2*1024kB [ 1265.396420] 896*8kB [ 1265.408332] (M) [ 1265.418637] Node 0 [ 1265.459474] 2*2048kB [ 1265.472675] (UME) [ 1265.486559] (M) [ 1265.503332] 143*16kB [ 1265.538028] 0*4096kB [ 1265.574588] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.586623] = 26536kB [ 1265.597882] lowmem_reserve[]: [ 1265.631861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.636048] 0 [ 1265.655892] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1265.658373] (UME) [ 1265.678340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.680576] 2717 [ 1265.680627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.695275] 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 1265.710702] 13092 total pagecache pages [ 1265.716733] 0 pages in swap cache [ 1265.720180] Swap cache stats: add 0, delete 0, find 0/0 [ 1265.721655] 2718 2718 2718 [ 1265.736962] Free swap = 0kB [ 1265.739982] Total swap = 0kB [ 1265.742146] Node 0 Normal: [ 1265.742997] 2097051 pages RAM [ 1265.743002] 0 pages HighMem/MovableOnly [ 1265.751342] Node 0 DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:77928kB inactive_anon:32000kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2964kB bounce:0kB free_pcp:140kB local_pcp:20kB free_cma:0kB [ 1265.760502] 363840 pages reserved [ 1265.822287] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1265.848988] 0 pages cma reserved [ 1265.875817] Node 1 Normal: 0*4kB 1*8kB (U) 1*16kB (M) 0*32kB 351*64kB (UM) 68*128kB (U) 55*256kB (UM) 67*512kB (U) 84*1024kB (UM) 4*2048kB (UM) 0*4096kB = 173784kB [ 1265.934508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.948003] lowmem_reserve[]: 0 0 0 0 0 [ 1265.956467] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.983248] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1266.001552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.025124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.054499] lowmem_reserve[]: 0 0 0 0 0 [ 1266.061917] 14906 total pagecache pages [ 1266.071479] Node 1 Normal free:206488kB min:53696kB low:67120kB high:80544kB active_anon:1428kB inactive_anon:16244kB active_file:1752kB inactive_file:5084kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:344kB bounce:0kB free_pcp:320kB local_pcp:56kB free_cma:0kB [ 1266.103935] 0 pages in swap cache [ 1266.116182] Swap cache stats: add 0, delete 0, find 0/0 [ 1266.133653] Free swap = 0kB [ 1266.143314] Total swap = 0kB [ 1266.153342] 2097051 pages RAM [ 1266.163321] 0 pages HighMem/MovableOnly [ 1266.178221] 363840 pages reserved [ 1266.188261] 0 pages cma reserved [ 1266.196065] lowmem_reserve[]: 0 0 0 0 0 [ 1266.203690] Out of memory (oom_kill_allocating_task): Kill process 12431 (rs:main Q:Reg) score 0 or sacrifice child [ 1266.219937] Node 0 DMA: 10*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10960kB [ 1266.250914] Killed process 12428 (rsyslogd) total-vm:254332kB, anon-rss:956kB, file-rss:728kB, shmem-rss:0kB [ 1266.274602] Node 0 DMA32: 1942*4kB (UME) 954*8kB (UME) 131*16kB (UME) 1*32kB (U) 27*64kB (UE) 55*128kB (U) 20*256kB (U) 9*512kB (U) 7*1024kB (U) 0*2048kB 0*4096kB = 43192kB [ 1266.304050] oom_reaper: reaped process 12428 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1266.352269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1266.391617] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 13*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (U) 78*1024kB (U) 3*2048kB (UM) 0*4096kB = 87976kB [ 1266.463109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.507506] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1266.525692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.535016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.588838] 14170 total pagecache pages [ 1266.610354] 0 pages in swap cache [ 1266.621651] Swap cache stats: add 0, delete 0, find 0/0 [ 1266.638021] Free swap = 0kB [ 1266.647918] Total swap = 0kB [ 1266.657550] 2097051 pages RAM [ 1266.673783] 0 pages HighMem/MovableOnly [ 1266.693095] 363840 pages reserved [ 1266.697168] 0 pages cma reserved 19:45:22 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:45:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 1267.964175] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1267.983576] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1268.022371] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1268.029933] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1268.045914] CPU: 1 PID: 12444 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1268.051063] syz-executor.1: [ 1268.053813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.053817] Call Trace: [ 1268.053834] dump_stack+0x1b2/0x281 [ 1268.053847] warn_alloc.cold+0x96/0x1cc [ 1268.053859] ? zone_watermark_ok_safe+0x220/0x220 [ 1268.053883] __alloc_pages_nodemask+0x2127/0x2720 [ 1268.053893] ? retint_kernel+0x2d/0x2d [ 1268.053908] ? lock_acquire+0x170/0x3f0 [ 1268.071116] page allocation failure: order:4 [ 1268.072439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1268.072457] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1268.091438] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1268.093895] ? __mutex_unlock_slowpath+0x75/0x770 [ 1268.093910] alloc_pages_current+0x155/0x260 [ 1268.093925] ion_page_pool_alloc+0x118/0x1b0 [ 1268.093937] ion_system_heap_allocate+0x133/0x8c0 [ 1268.093948] ? _raw_spin_unlock+0x29/0x40 [ 1268.093956] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1268.093966] ? ion_system_contig_heap_create+0x130/0x130 [ 1268.108363] (null) [ 1268.108645] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1268.138142] syz-executor.1 cpuset= [ 1268.138292] ion_alloc+0x27a/0x810 [ 1268.157461] / [ 1268.159113] ? ion_dma_buf_release+0x40/0x40 [ 1268.168726] ? __might_fault+0x177/0x1b0 [ 1268.172791] ion_ioctl+0xea/0x1f0 [ 1268.176246] ? ion_query_heaps+0x360/0x360 [ 1268.177344] mems_allowed=0-1 [ 1268.180473] ? lock_acquire+0x170/0x3f0 [ 1268.180485] ? lock_downgrade+0x740/0x740 [ 1268.191668] ? ion_query_heaps+0x360/0x360 [ 1268.195895] do_vfs_ioctl+0x75a/0xff0 [ 1268.199698] ? ioctl_preallocate+0x1a0/0x1a0 [ 1268.204100] ? lock_downgrade+0x740/0x740 [ 1268.208236] ? __fget+0x225/0x360 [ 1268.211673] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.215638] ? security_file_ioctl+0x83/0xb0 [ 1268.220052] SyS_ioctl+0x7f/0xb0 [ 1268.223407] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.227371] do_syscall_64+0x1d5/0x640 [ 1268.231248] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1268.236423] RIP: 0033:0x45e219 [ 1268.239593] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.247288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1268.254549] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1268.261805] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.269056] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1268.276313] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1268.289816] CPU: 0 PID: 12483 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1268.297725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.307058] Call Trace: [ 1268.309629] dump_stack+0x1b2/0x281 [ 1268.313242] warn_alloc.cold+0x96/0x1cc [ 1268.317197] ? zone_watermark_ok_safe+0x220/0x220 [ 1268.322029] __alloc_pages_nodemask+0x2127/0x2720 [ 1268.326851] ? _raw_spin_unlock_irq+0x24/0x80 [ 1268.331328] ? lock_acquire+0x170/0x3f0 [ 1268.335285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1268.340135] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1268.345566] ? __mutex_unlock_slowpath+0x75/0x770 [ 1268.350391] alloc_pages_current+0x155/0x260 [ 1268.354782] ion_page_pool_alloc+0x118/0x1b0 [ 1268.359172] ion_system_heap_allocate+0x133/0x8c0 [ 1268.363994] ? ion_alloc+0x187/0x810 [ 1268.367738] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1268.373169] ? ion_system_contig_heap_create+0x130/0x130 [ 1268.378598] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1268.383594] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1268.388416] ion_alloc+0x204/0x810 [ 1268.391939] ? ion_dma_buf_release+0x40/0x40 [ 1268.396330] ? __might_fault+0x177/0x1b0 [ 1268.400373] ion_ioctl+0xea/0x1f0 [ 1268.403821] ? ion_query_heaps+0x360/0x360 [ 1268.408035] ? lock_acquire+0x170/0x3f0 [ 1268.411988] ? lock_downgrade+0x740/0x740 [ 1268.416115] ? ion_query_heaps+0x360/0x360 [ 1268.420332] do_vfs_ioctl+0x75a/0xff0 [ 1268.424113] ? ioctl_preallocate+0x1a0/0x1a0 [ 1268.428501] ? lock_downgrade+0x740/0x740 [ 1268.432631] ? __fget+0x225/0x360 [ 1268.436062] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.440018] ? security_file_ioctl+0x83/0xb0 [ 1268.444407] SyS_ioctl+0x7f/0xb0 [ 1268.447751] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.451710] do_syscall_64+0x1d5/0x640 [ 1268.455596] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1268.460766] RIP: 0033:0x45e219 [ 1268.463952] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.471639] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1268.478888] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1268.486136] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1268.493386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1268.500635] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1268.518353] CPU: 0 PID: 12487 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1268.526253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.535601] Call Trace: [ 1268.538196] dump_stack+0x1b2/0x281 [ 1268.541827] warn_alloc.cold+0x96/0x1cc [ 1268.545800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1268.550816] ? zone_watermark_ok_safe+0x220/0x220 [ 1268.555677] __alloc_pages_nodemask+0x2127/0x2720 [ 1268.560558] ? lock_acquire+0x170/0x3f0 [ 1268.564538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1268.569387] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1268.574841] ? __mutex_unlock_slowpath+0x75/0x770 [ 1268.579685] alloc_pages_current+0x155/0x260 [ 1268.584099] ion_page_pool_alloc+0x118/0x1b0 [ 1268.588510] ion_system_heap_allocate+0x133/0x8c0 [ 1268.593350] ? ion_alloc+0x187/0x810 [ 1268.597061] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1268.602515] ? ion_system_contig_heap_create+0x130/0x130 [ 1268.607967] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1268.612986] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1268.617836] ion_alloc+0x204/0x810 [ 1268.621390] ? ion_dma_buf_release+0x40/0x40 [ 1268.625807] ? __might_fault+0x177/0x1b0 [ 1268.629902] ion_ioctl+0xea/0x1f0 [ 1268.633355] ? ion_query_heaps+0x360/0x360 [ 1268.637587] ? lock_acquire+0x170/0x3f0 [ 1268.641562] ? lock_downgrade+0x740/0x740 [ 1268.645708] ? ion_query_heaps+0x360/0x360 [ 1268.649928] do_vfs_ioctl+0x75a/0xff0 [ 1268.653712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1268.658103] ? lock_downgrade+0x740/0x740 [ 1268.662232] ? __fget+0x225/0x360 [ 1268.665663] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.669619] ? security_file_ioctl+0x83/0xb0 [ 1268.674131] SyS_ioctl+0x7f/0xb0 [ 1268.677483] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.681443] do_syscall_64+0x1d5/0x640 [ 1268.685321] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1268.690514] RIP: 0033:0x45e219 [ 1268.693686] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.701386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1268.708659] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1268.715912] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1268.723165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1268.730416] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1268.737747] warn_alloc_show_mem: 1 callbacks suppressed [ 1268.737750] Mem-Info: [ 1268.769610] active_anon:19730 inactive_anon:12061 isolated_anon:24 [ 1268.769610] active_file:724 inactive_file:671 isolated_file:44 [ 1268.769610] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1268.769610] slab_reclaimable:15768 slab_unreclaimable:127218 [ 1268.769610] mapped:54024 shmem:13069 pagetables:826 bounce:0 [ 1268.769610] free:25217 free_pcp:270 free_cma:0 [ 1268.816725] Node 0 active_anon:77668kB inactive_anon:32000kB active_file:2428kB inactive_file:2556kB unevictable:0kB isolated(anon):48kB isolated(file):128kB mapped:213404kB dirty:88kB writeback:0kB shmem:35968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1268.845156] Node 1 active_anon:1252kB inactive_anon:16244kB active_file:188kB inactive_file:0kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:2392kB dirty:4kB writeback:0kB shmem:16308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1268.872475] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.903192] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1268.908249] Node 0 DMA32 free:36432kB min:36200kB low:45248kB high:54296kB active_anon:77668kB inactive_anon:32000kB active_file:852kB inactive_file:712kB unevictable:0kB writepending:128kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2980kB bounce:0kB free_pcp:536kB local_pcp:0kB free_cma:0kB [ 1268.937432] lowmem_reserve[]: 0 0 0 0 0 [ 1268.941443] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.967207] lowmem_reserve[]: 0 0 0 0 0 [ 1268.971212] Node 1 Normal free:53808kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:16244kB active_file:68kB inactive_file:272kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.000187] lowmem_reserve[]: 0 0 0 0 0 [ 1269.004231] Node 0 DMA: 78*4kB (U) 12*8kB (U) 9*16kB (U) 2*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10984kB [ 1269.010677] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1269.017805] Node 0 DMA32: 2763*4kB (ME) 1050*8kB (ME) 141*16kB (ME) 448*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36044kB [ 1269.041550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1269.054626] Node 1 Normal: 44*4kB (UM) 29*8kB (UM) 8*16kB (UM) 1656*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53592kB [ 1269.068305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.079480] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1269.088120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.101761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1269.111795] 13115 total pagecache pages [ 1269.111948] (null) [ 1269.120380] 0 pages in swap cache [ 1269.128147] Swap cache stats: add 0, delete 0, find 0/0 [ 1269.131277] , order=0, oom_score_adj=0 [ 1269.137410] Free swap = 0kB [ 1269.140598] Total swap = 0kB [ 1269.145799] 2097051 pages RAM [ 1269.148898] 0 pages HighMem/MovableOnly [ 1269.152424] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1269.157420] 363840 pages reserved [ 1269.161831] CPU: 0 PID: 8000 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 1269.165281] 0 pages cma reserved [ 1269.172682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.172686] Call Trace: [ 1269.172704] dump_stack+0x1b2/0x281 [ 1269.172717] dump_header+0x178/0x82f [ 1269.195287] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1269.200388] ? ___ratelimit+0x2cd/0x530 [ 1269.204361] oom_kill_process.cold+0x10/0xb18 [ 1269.208861] out_of_memory+0xe3e/0x1190 [ 1269.212834] ? oom_killer_disable+0x1c0/0x1c0 [ 1269.217323] ? mutex_trylock+0x152/0x1a0 [ 1269.221383] __alloc_pages_nodemask+0x23e1/0x2720 [ 1269.226233] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1269.231094] alloc_pages_current+0x155/0x260 [ 1269.235507] filemap_fault+0xea3/0x1980 [ 1269.239500] ext4_filemap_fault+0x84/0xb0 [ 1269.243638] __do_fault+0xfa/0x380 [ 1269.247155] __handle_mm_fault+0x2497/0x4620 [ 1269.251544] ? vm_insert_page+0x7c0/0x7c0 [ 1269.255670] ? lock_downgrade+0x740/0x740 [ 1269.259816] handle_mm_fault+0x391/0x860 [ 1269.263871] __do_page_fault+0x549/0xad0 [ 1269.267913] ? spurious_fault+0x640/0x640 [ 1269.272037] ? do_page_fault+0x60/0x500 [ 1269.276005] ? page_fault+0x2f/0x50 [ 1269.280041] page_fault+0x45/0x50 [ 1269.283471] RIP: 0000:0xb358f8 [ 1269.286636] RSP: 33013991:000000c00003df00 EFLAGS: 00438920 [ 1269.293855] Mem-Info: [ 1269.295265] syz-executor.4: [ 1269.299578] active_anon:19763 inactive_anon:12061 isolated_anon:0 [ 1269.299578] active_file:23 inactive_file:19 isolated_file:0 [ 1269.299578] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1269.299578] slab_reclaimable:15766 slab_unreclaimable:126951 [ 1269.299578] mapped:52817 shmem:13069 pagetables:827 bounce:0 [ 1269.299578] free:14261 free_pcp:92 free_cma:0 [ 1269.301959] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1269.308361] Node 0 active_anon:77680kB inactive_anon:32000kB active_file:96kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209020kB dirty:0kB writeback:0kB shmem:35968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1269.355842] (null) [ 1269.381562] Node 1 active_anon:1372kB inactive_anon:16244kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2248kB dirty:0kB writeback:0kB shmem:16308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1269.395049] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1269.414401] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.428643] CPU: 1 PID: 12444 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1269.445782] lowmem_reserve[]: [ 1269.448391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.448398] 0 [ 1269.451483] Call Trace: [ 1269.462532] 2717 [ 1269.462614] dump_stack+0x1b2/0x281 [ 1269.462628] warn_alloc.cold+0x96/0x1cc [ 1269.462639] ? zone_watermark_ok_safe+0x220/0x220 [ 1269.462647] ? usleep_range+0x130/0x130 [ 1269.462656] ? try_to_free_pages+0x23f/0x6e0 [ 1269.462665] ? _find_next_bit+0xdb/0x100 [ 1269.462675] ? run_timer_softirq+0x5a0/0x5a0 [ 1269.462693] __alloc_pages_nodemask+0x2127/0x2720 [ 1269.462710] ? lock_acquire+0x170/0x3f0 [ 1269.462722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1269.462734] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1269.462749] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1269.462768] alloc_pages_current+0x155/0x260 [ 1269.462780] ion_page_pool_alloc+0x118/0x1b0 [ 1269.462792] ion_system_heap_allocate+0x133/0x8c0 [ 1269.462803] ? _raw_spin_unlock+0x29/0x40 [ 1269.462812] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1269.462823] ? ion_system_contig_heap_create+0x130/0x130 [ 1269.468958] 2718 [ 1269.471070] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1269.476727] 2718 [ 1269.479859] ion_alloc+0x27a/0x810 [ 1269.487266] 2718 [ 1269.488202] ? ion_dma_buf_release+0x40/0x40 [ 1269.496618] ? __might_fault+0x177/0x1b0 [ 1269.496630] ion_ioctl+0xea/0x1f0 [ 1269.496640] ? ion_query_heaps+0x360/0x360 [ 1269.496653] ? lock_acquire+0x170/0x3f0 [ 1269.496662] ? lock_downgrade+0x740/0x740 [ 1269.496671] ? ion_query_heaps+0x360/0x360 [ 1269.506986] Node 0 [ 1269.510362] do_vfs_ioctl+0x75a/0xff0 [ 1269.515463] DMA32 free:19300kB min:36200kB low:45248kB high:54296kB active_anon:77680kB inactive_anon:32000kB active_file:112kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2984kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB [ 1269.520264] ? ioctl_preallocate+0x1a0/0x1a0 [ 1269.529271] lowmem_reserve[]: [ 1269.533861] ? lock_downgrade+0x740/0x740 [ 1269.533875] ? __fget+0x225/0x360 [ 1269.533884] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.533895] ? security_file_ioctl+0x83/0xb0 [ 1269.533905] SyS_ioctl+0x7f/0xb0 [ 1269.538588] 0 [ 1269.542943] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.542954] do_syscall_64+0x1d5/0x640 [ 1269.542970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1269.542979] RIP: 0033:0x45e219 [ 1269.542984] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.542994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1269.543000] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1269.543005] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1269.543010] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1269.543016] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1269.917706] 0 0 0 0 [ 1269.923111] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.949846] lowmem_reserve[]: 0 0 0 0 0 [ 1269.962249] Node 1 Normal free:641572kB min:53696kB low:67120kB high:80544kB active_anon:1372kB inactive_anon:16244kB active_file:716kB inactive_file:1004kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:324kB bounce:0kB free_pcp:152kB local_pcp:76kB free_cma:0kB [ 1270.032487] lowmem_reserve[]: 0 0 0 0 0 [ 1270.036518] Node 0 DMA: 71*4kB (U) 12*8kB (U) 9*16kB (U) 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11212kB [ 1270.078268] Node 0 DMA32: 1698*4kB (UME) 795*8kB (ME) 109*16kB (UME) 5*32kB (UM) 25*64kB (UME) 3*128kB (ME) 94*256kB (UM) 55*512kB (U) 19*1024kB (U) 0*2048kB 0*4096kB = 88720kB [ 1270.112490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1270.131760] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 1*32kB (U) 6173*64kB (UM) 840*128kB (U) 68*256kB (UM) 27*512kB (UM) 78*1024kB (U) 4*2048kB (U) 0*4096kB = 621948kB [ 1270.192470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.201341] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 1270.232431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.241304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1270.270783] 14090 total pagecache pages [ 1270.274857] 0 pages in swap cache [ 1270.278312] Swap cache stats: add 0, delete 0, find 0/0 [ 1270.292477] Free swap = 0kB [ 1270.295522] Total swap = 0kB [ 1270.298539] 2097051 pages RAM [ 1270.301631] 0 pages HighMem/MovableOnly [ 1270.310939] 363840 pages reserved [ 1270.332453] 0 pages cma reserved [ 1270.335856] Out of memory (oom_kill_allocating_task): Kill process 8000 (syz-fuzzer) score 0 or sacrifice child [ 1270.366057] Killed process 8018 (syz-executor.5) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 1270.384784] oom_reaper: reaped process 8018 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 19:45:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:45:24 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:45:24 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:24 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}}}}) 19:45:25 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 1270.980418] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1271.025006] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1271.030200] CPU: 1 PID: 11618 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1271.031847] syz-executor.4: [ 1271.038084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.038087] Call Trace: [ 1271.038104] dump_stack+0x1b2/0x281 [ 1271.038115] dump_header+0x178/0x82f [ 1271.038125] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1271.038134] ? ___ratelimit+0x2cd/0x530 [ 1271.038143] oom_kill_process.cold+0x10/0xb18 [ 1271.038160] out_of_memory+0xe3e/0x1190 [ 1271.038173] ? oom_killer_disable+0x1c0/0x1c0 [ 1271.038180] ? mutex_trylock+0x152/0x1a0 [ 1271.038189] __alloc_pages_nodemask+0x23e1/0x2720 [ 1271.038208] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1271.038229] alloc_pages_current+0x155/0x260 [ 1271.057261] page allocation failure: order:4 [ 1271.060457] filemap_fault+0xea3/0x1980 [ 1271.080968] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1271.082439] ext4_filemap_fault+0x84/0xb0 [ 1271.082451] __do_fault+0xfa/0x380 [ 1271.082461] __handle_mm_fault+0x2497/0x4620 [ 1271.082471] ? vm_insert_page+0x7c0/0x7c0 [ 1271.082481] ? lock_downgrade+0x740/0x740 [ 1271.106767] (null) [ 1271.108919] handle_mm_fault+0x391/0x860 [ 1271.131386] syz-executor.4 cpuset= [ 1271.132164] __do_page_fault+0x549/0xad0 [ 1271.140804] / [ 1271.142494] ? spurious_fault+0x640/0x640 [ 1271.155885] ? do_page_fault+0x60/0x500 [ 1271.159851] ? page_fault+0x2f/0x50 [ 1271.163470] page_fault+0x45/0x50 [ 1271.166914] RIP: 0006:0x32 [ 1271.167105] mems_allowed=0-1 [ 1271.169745] RSP: 0bb8:00000000001363f1 EFLAGS: 00000029 [ 1271.196372] Mem-Info: [ 1271.199662] CPU: 0 PID: 12494 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1271.203908] active_anon:19371 inactive_anon:12060 isolated_anon:0 [ 1271.203908] active_file:41 inactive_file:2 isolated_file:0 [ 1271.203908] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1271.203908] slab_reclaimable:15753 slab_unreclaimable:126064 [ 1271.203908] mapped:44154 shmem:13066 pagetables:778 bounce:0 [ 1271.203908] free:25050 free_pcp:0 free_cma:0 [ 1271.204181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.212060] Node 0 active_anon:76160kB inactive_anon:31988kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174256kB dirty:28kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.244993] Call Trace: [ 1271.245013] dump_stack+0x1b2/0x281 [ 1271.245026] warn_alloc.cold+0x96/0x1cc [ 1271.245040] ? zone_watermark_ok_safe+0x220/0x220 [ 1271.254395] Node 1 active_anon:1324kB inactive_anon:16252kB active_file:72kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2360kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.282128] __alloc_pages_nodemask+0x2127/0x2720 [ 1271.282137] ? io_schedule_timeout+0x140/0x140 [ 1271.282153] ? lock_acquire+0x170/0x3f0 [ 1271.284708] Node 0 [ 1271.288334] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1271.292302] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.297109] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1271.324156] lowmem_reserve[]: [ 1271.328969] ? __mutex_unlock_slowpath+0x75/0x770 [ 1271.333535] 0 [ 1271.337482] alloc_pages_current+0x155/0x260 [ 1271.339685] 2717 [ 1271.344514] ion_page_pool_alloc+0x118/0x1b0 [ 1271.344528] ion_system_heap_allocate+0x133/0x8c0 [ 1271.370016] 2718 [ 1271.375436] ? ion_alloc+0x187/0x810 [ 1271.375445] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1271.375456] ? ion_system_contig_heap_create+0x130/0x130 [ 1271.378531] 2718 [ 1271.383353] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1271.383364] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1271.383375] ion_alloc+0x204/0x810 [ 1271.385154] 2718 [ 1271.389548] ? ion_dma_buf_release+0x40/0x40 [ 1271.395966] ? __might_fault+0x177/0x1b0 [ 1271.395978] ion_ioctl+0xea/0x1f0 [ 1271.395989] ? ion_query_heaps+0x360/0x360 [ 1271.400888] Node 0 DMA32 free:35744kB min:36200kB low:45248kB high:54296kB active_anon:76160kB inactive_anon:31988kB active_file:436kB inactive_file:360kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.402960] ? lock_acquire+0x170/0x3f0 [ 1271.402970] ? lock_downgrade+0x740/0x740 [ 1271.402980] ? ion_query_heaps+0x360/0x360 [ 1271.406664] lowmem_reserve[]: [ 1271.412096] do_vfs_ioctl+0x75a/0xff0 [ 1271.412108] ? ioctl_preallocate+0x1a0/0x1a0 [ 1271.412117] ? lock_downgrade+0x740/0x740 [ 1271.417540] 0 [ 1271.419587] ? __fget+0x225/0x360 [ 1271.424584] 0 [ 1271.429410] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.432935] 0 [ 1271.434981] ? security_file_ioctl+0x83/0xb0 [ 1271.439356] 0 [ 1271.443397] SyS_ioctl+0x7f/0xb0 [ 1271.443404] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.443415] do_syscall_64+0x1d5/0x640 [ 1271.446839] 0 [ 1271.451075] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1271.483710] RIP: 0033:0x45e219 [ 1271.483715] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.487851] Node 0 [ 1271.492063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1271.495172] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.498926] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1271.498933] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.503332] lowmem_reserve[]: [ 1271.507445] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1271.507451] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1271.509246] 0 [ 1271.525913] warn_alloc_show_mem: 3 callbacks suppressed [ 1271.525916] Mem-Info: [ 1271.548363] 0 [ 1271.602167] active_anon:19371 inactive_anon:12060 isolated_anon:0 [ 1271.602167] active_file:41 inactive_file:2 isolated_file:0 [ 1271.602167] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1271.602167] slab_reclaimable:15753 slab_unreclaimable:126064 [ 1271.602167] mapped:44154 shmem:13066 pagetables:778 bounce:0 [ 1271.602167] free:25050 free_pcp:0 free_cma:0 [ 1271.615835] 0 [ 1271.633931] Node 0 active_anon:76160kB inactive_anon:31988kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174256kB dirty:28kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.645421] 0 [ 1271.680047] Node 1 active_anon:1324kB inactive_anon:16252kB active_file:72kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2360kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.709738] 0 [ 1271.740702] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.740765] Node 1 Normal free:53384kB min:53696kB low:67120kB high:80544kB active_anon:1324kB inactive_anon:16252kB active_file:72kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.779194] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1271.813633] lowmem_reserve[]: 0 0 0 0 0 [ 1271.817029] Node 0 [ 1271.817631] Node 0 [ 1271.817644] DMA32 free:35744kB min:36200kB low:45248kB high:54296kB active_anon:76160kB inactive_anon:31988kB active_file:80kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.817648] lowmem_reserve[]: [ 1271.819866] DMA: [ 1271.827328] 0 0 0 0 0 [ 1271.868627] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.871366] 38*4kB [ 1271.904587] lowmem_reserve[]: 0 0 0 0 0 [ 1271.909907] (U) 11*8kB (U) 9*16kB (U) [ 1271.910843] Node 1 [ 1271.912782] 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11072kB [ 1271.919937] Normal free:53384kB min:53696kB low:67120kB high:80544kB active_anon:1324kB inactive_anon:16252kB active_file:72kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.937892] Node 0 DMA32: 2142*4kB (UME) 891*8kB (UME) 115*16kB (UME) 7*32kB (M) 73*64kB (UME) 13*128kB (UME) 6*256kB (UM) 2*512kB (UM) 3*1024kB (U) 3*2048kB (M) 0*4096kB = 35872kB [ 1271.969823] lowmem_reserve[]: 0 0 0 0 0 [ 1271.998800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 1272.001849] Node 0 [ 1272.010396] 0*256kB [ 1272.021899] DMA: [ 1272.025029] 0*512kB [ 1272.026416] 38*4kB [ 1272.027092] 0*1024kB [ 1272.029397] (U) [ 1272.031611] 0*2048kB [ 1272.048700] 11*8kB [ 1272.049176] 0*4096kB [ 1272.051137] (U) 9*16kB (U) 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11072kB [ 1272.062433] = 0kB [ 1272.074799] Node 1 Normal: 57*4kB (UM) 35*8kB (ME) 17*16kB (UME) 19*32kB (UME) 10*64kB (ME) 90*128kB (UME) 72*256kB (UME) 28*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 53484kB [ 1272.084733] Node 0 DMA32: 2142*4kB (UME) 891*8kB (UME) 115*16kB (UME) 7*32kB (M) 73*64kB (UME) 13*128kB (UME) 6*256kB (UM) 2*512kB (UM) 3*1024kB (U) 3*2048kB (M) 0*4096kB = 35872kB [ 1272.101744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.120801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1272.128269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.144224] Node 1 Normal: 57*4kB (UM) 35*8kB (ME) 17*16kB (UME) 19*32kB (UME) 10*64kB (ME) 90*128kB (UME) 72*256kB (UME) 28*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 53484kB [ 1272.152975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.173280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.181002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.194651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.205135] 13100 total pagecache pages [ 1272.209116] 0 pages in swap cache [ 1272.219155] Swap cache stats: add 0, delete 0, find 0/0 [ 1272.220202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.226928] Free swap = 0kB [ 1272.239728] Total swap = 0kB [ 1272.250814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.251400] 2097051 pages RAM [ 1272.273282] 0 pages HighMem/MovableOnly [ 1272.277262] 363840 pages reserved [ 1272.278381] 13100 total pagecache pages [ 1272.280702] 0 pages cma reserved [ 1272.296293] Out of memory (oom_kill_allocating_task): Kill process 11618 (syz-executor.4) score 0 or sacrifice child [ 1272.301555] 0 pages in swap cache [ 1272.318733] Killed process 12493 (syz-executor.4) total-vm:93480kB, anon-rss:108kB, file-rss:33628kB, shmem-rss:0kB [ 1272.330369] Swap cache stats: add 0, delete 0, find 0/0 [ 1272.346224] Free swap = 0kB [ 1272.349248] Total swap = 0kB [ 1272.356471] 2097051 pages RAM [ 1272.359578] 0 pages HighMem/MovableOnly [ 1272.369634] 363840 pages reserved [ 1272.377856] 0 pages cma reserved [ 1272.394380] oom_reaper: reaped process 12493 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1272.434016] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1272.476093] systemd-journal cpuset=/ mems_allowed=0-1 [ 1272.481336] CPU: 0 PID: 12433 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1272.489305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.498665] Call Trace: [ 1272.501372] dump_stack+0x1b2/0x281 [ 1272.504986] dump_header+0x178/0x82f [ 1272.508684] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1272.513768] ? ___ratelimit+0x2cd/0x530 [ 1272.517723] oom_kill_process.cold+0x10/0xb18 [ 1272.522210] out_of_memory+0xe3e/0x1190 [ 1272.526185] ? oom_killer_disable+0x1c0/0x1c0 [ 1272.530671] ? mutex_trylock+0x152/0x1a0 [ 1272.534744] __alloc_pages_nodemask+0x23e1/0x2720 [ 1272.539574] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1272.544406] alloc_pages_current+0x155/0x260 [ 1272.548817] filemap_fault+0xea3/0x1980 [ 1272.552778] ext4_filemap_fault+0x84/0xb0 [ 1272.556921] __do_fault+0xfa/0x380 [ 1272.560440] __handle_mm_fault+0x2497/0x4620 [ 1272.564845] ? ep_poll+0x1ab/0xa50 [ 1272.568364] ? vm_insert_page+0x7c0/0x7c0 [ 1272.572600] handle_mm_fault+0x391/0x860 [ 1272.576642] __do_page_fault+0x549/0xad0 [ 1272.580684] ? spurious_fault+0x640/0x640 [ 1272.584812] ? do_page_fault+0x60/0x500 [ 1272.588768] ? page_fault+0x2f/0x50 [ 1272.592374] page_fault+0x45/0x50 [ 1272.595808] RIP: 0001:0xffffffffffffffff [ 1272.599844] RSP: f72161e0:00007fffd4ded260 EFLAGS: 7fffd4ded070 [ 1272.648588] Mem-Info: [ 1272.657139] active_anon:19372 inactive_anon:12060 isolated_anon:0 [ 1272.657139] active_file:24 inactive_file:2 isolated_file:0 [ 1272.657139] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1272.657139] slab_reclaimable:15753 slab_unreclaimable:125702 [ 1272.657139] mapped:44124 shmem:13066 pagetables:778 bounce:0 [ 1272.657139] free:13918 free_pcp:115 free_cma:0 [ 1272.692667] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1272.706811] Node 0 active_anon:76148kB inactive_anon:31988kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174168kB dirty:0kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1272.712420] syz-executor.4 cpuset= [ 1272.739519] Node 1 active_anon:1232kB inactive_anon:16252kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2324kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1272.756063] / [ 1272.774465] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1272.789407] mems_allowed=0-1 [ 1272.805521] CPU: 1 PID: 12494 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1272.806088] lowmem_reserve[]: [ 1272.813388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.813392] Call Trace: [ 1272.813413] dump_stack+0x1b2/0x281 [ 1272.813427] warn_alloc.cold+0x96/0x1cc [ 1272.813438] ? zone_watermark_ok_safe+0x220/0x220 [ 1272.813449] ? usleep_range+0x130/0x130 [ 1272.816529] 0 [ 1272.825867] ? try_to_free_pages+0x23f/0x6e0 [ 1272.825877] ? _find_next_bit+0xdb/0x100 [ 1272.825888] ? run_timer_softirq+0x5a0/0x5a0 [ 1272.825903] __alloc_pages_nodemask+0x2127/0x2720 [ 1272.825920] ? lock_acquire+0x170/0x3f0 [ 1272.825936] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1272.825947] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1272.825962] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1272.832276] 2717 [ 1272.836084] ? check_preemption_disabled+0x35/0x240 [ 1272.840894] 2718 [ 1272.844856] alloc_pages_current+0x155/0x260 [ 1272.844872] ion_page_pool_alloc+0x118/0x1b0 [ 1272.844883] ion_system_heap_allocate+0x133/0x8c0 [ 1272.844894] ? ion_alloc+0x187/0x810 [ 1272.848572] 2718 [ 1272.851090] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1272.856981] 2718 [ 1272.859631] ? ion_system_contig_heap_create+0x130/0x130 [ 1272.868402] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1272.875187] Node 0 [ 1272.877714] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1272.885032] DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:76148kB inactive_anon:31988kB active_file:56kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2676kB bounce:0kB free_pcp:248kB local_pcp:120kB free_cma:0kB [ 1272.885188] ion_alloc+0x204/0x810 [ 1272.890205] lowmem_reserve[]: [ 1272.892279] ? ion_dma_buf_release+0x40/0x40 [ 1272.892292] ? __might_fault+0x177/0x1b0 [ 1272.892304] ion_ioctl+0xea/0x1f0 [ 1272.892313] ? ion_query_heaps+0x360/0x360 [ 1272.892325] ? lock_acquire+0x170/0x3f0 [ 1272.898466] 0 [ 1272.901361] ? lock_downgrade+0x740/0x740 [ 1272.908445] 0 [ 1272.909875] ? ion_query_heaps+0x360/0x360 [ 1272.911939] 0 [ 1272.917348] do_vfs_ioctl+0x75a/0xff0 [ 1272.919381] 0 [ 1272.924814] ? ioctl_preallocate+0x1a0/0x1a0 [ 1272.924824] ? lock_downgrade+0x740/0x740 [ 1272.924837] ? __fget+0x225/0x360 [ 1272.924847] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.924857] ? security_file_ioctl+0x83/0xb0 [ 1272.924866] SyS_ioctl+0x7f/0xb0 [ 1272.924876] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.932886] 0 [ 1272.936910] do_syscall_64+0x1d5/0x640 [ 1272.968828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.971968] Node 0 [ 1272.976314] RIP: 0033:0x45e219 [ 1272.980365] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1272.983785] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.983795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1272.983800] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1272.983805] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.983810] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1272.983814] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1273.012446] Mem-Info: [ 1273.018211] lowmem_reserve[]: [ 1273.020008] active_anon:19345 inactive_anon:12060 isolated_anon:0 [ 1273.020008] active_file:17 inactive_file:17 isolated_file:0 [ 1273.020008] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1273.020008] slab_reclaimable:15753 slab_unreclaimable:125679 [ 1273.020008] mapped:44124 shmem:13066 pagetables:778 bounce:0 [ 1273.020008] free:13919 free_pcp:122 free_cma:0 [ 1273.023462] 0 0 0 0 0 [ 1273.023480] Node 1 Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:1232kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:436kB bounce:0kB free_pcp:212kB local_pcp:120kB free_cma:0kB [ 1273.023498] lowmem_reserve[]: 0 0 0 0 0 [ 1273.023516] Node 0 DMA: 10*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10960kB [ 1273.023582] Node 0 DMA32: 2104*4kB (ME) 886*8kB (ME) 111*16kB (ME) 5*32kB (UM) [ 1273.048105] Node 0 active_anon:76148kB inactive_anon:31988kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174172kB dirty:0kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1273.052082] 8*64kB [ 1273.067627] Node 1 active_anon:1232kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2324kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1273.082869] (U) [ 1273.097493] Node 0 [ 1273.117004] 0*128kB [ 1273.126565] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.141428] 0*256kB [ 1273.172659] lowmem_reserve[]: [ 1273.197800] 0*512kB [ 1273.218725] 0 [ 1273.221706] 0*1024kB [ 1273.273997] 2717 [ 1273.278702] 0*2048kB [ 1273.279463] 2718 [ 1273.281717] 0*4096kB = 17952kB [ 1273.281725] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1273.281771] Node 1 Normal: 57*4kB (UM) 35*8kB (ME) 17*16kB (UME) 18*32kB (UME) 11*64kB (UME) 11*128kB (UME) 7*256kB (UME) 28*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 26764kB [ 1273.281846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.281851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.281857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.281861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.281864] 13100 total pagecache pages [ 1273.281873] 0 pages in swap cache [ 1273.281877] Swap cache stats: add 0, delete 0, find 0/0 [ 1273.281880] Free swap = 0kB [ 1273.281891] Total swap = 0kB [ 1273.304821] 2718 [ 1273.311593] 2097051 pages RAM [ 1273.334503] 2718 [ 1273.344322] 0 pages HighMem/MovableOnly [ 1273.386560] 363840 pages reserved [ 1273.413865] Node 0 [ 1273.416227] 0 pages cma reserved [ 1273.417445] DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:76148kB inactive_anon:31988kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2676kB bounce:0kB free_pcp:264kB local_pcp:144kB free_cma:0kB [ 1273.419475] Out of memory (oom_kill_allocating_task): Kill process 12433 (systemd-journal) score 0 or sacrifice child [ 1273.437057] lowmem_reserve[]: [ 1273.468108] Killed process 12433 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2408kB [ 1273.487098] 0 0 0 0 0 [ 1273.489621] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.495381] systemd-journal: [ 1273.515951] oom_reaper: reaped process 12433 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2408kB [ 1273.522550] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1273.548389] systemd-journal cpuset=/ mems_allowed=0-1 [ 1273.553864] CPU: 0 PID: 12433 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1273.554414] lowmem_reserve[]: [ 1273.561831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.561835] Call Trace: [ 1273.561853] dump_stack+0x1b2/0x281 [ 1273.561865] warn_alloc.cold+0x96/0x1cc [ 1273.561874] ? zone_watermark_ok_safe+0x220/0x220 [ 1273.561892] ? wait_for_completion_io+0x10/0x10 [ 1273.567210] kworker/u4:4 invoked oom-killer: gfp_mask=0x14142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask= [ 1273.574345] __alloc_pages_nodemask+0x2127/0x2720 [ 1273.574371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1273.574396] alloc_pages_current+0x155/0x260 [ 1273.574408] filemap_fault+0xea3/0x1980 [ 1273.577090] 0 [ 1273.580685] ext4_filemap_fault+0x84/0xb0 [ 1273.584647] 0 [ 1273.589454] __do_fault+0xfa/0x380 [ 1273.594113] (null) [ 1273.605688] __handle_mm_fault+0x2497/0x4620 [ 1273.605699] ? ep_poll+0x1ab/0xa50 [ 1273.605706] ? vm_insert_page+0x7c0/0x7c0 [ 1273.610527] 0 [ 1273.615360] handle_mm_fault+0x391/0x860 [ 1273.615372] __do_page_fault+0x549/0xad0 [ 1273.619755] 0 [ 1273.623713] ? spurious_fault+0x640/0x640 [ 1273.623722] ? do_page_fault+0x60/0x500 [ 1273.623731] ? page_fault+0x2f/0x50 [ 1273.625512] , order=1, oom_score_adj=0 [ 1273.629632] page_fault+0x45/0x50 [ 1273.631501] kworker/u4:4 cpuset= [ 1273.634975] RIP: 0001:0xffffffffffffffff [ 1273.634980] RSP: f72161e0:00007fffd4ded260 EFLAGS: 7fffd4ded070 [ 1273.688090] 0 [ 1273.696006] Node 1 Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:436kB bounce:0kB free_pcp:672kB local_pcp:552kB free_cma:0kB [ 1273.724661] lowmem_reserve[]: 0 0 0 0 0 [ 1273.728660] Node 0 DMA: 10*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10960kB [ 1273.742777] Node 0 DMA32: 2104*4kB (ME) 886*8kB (ME) 111*16kB (ME) 5*32kB (UM) 8*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17952kB [ 1273.756521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1273.767441] Node 1 Normal: 57*4kB (UM) 35*8kB (ME) 17*16kB (UME) 18*32kB (UME) 11*64kB (UME) 11*128kB (UME) 7*256kB (UME) 28*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 26764kB [ 1273.781433] / [ 1273.784415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.795027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.803642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.816586] mems_allowed=0-1 [ 1273.818475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.819708] CPU: 0 PID: 3061 Comm: kworker/u4:4 Not tainted 4.14.217-syzkaller #0 [ 1273.828293] 13100 total pagecache pages [ 1273.835859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.835875] Workqueue: netns cleanup_net [ 1273.839841] 0 pages in swap cache [ 1273.849162] Call Trace: [ 1273.849179] dump_stack+0x1b2/0x281 [ 1273.849191] dump_header+0x178/0x82f [ 1273.853331] Swap cache stats: add 0, delete 0, find 0/0 [ 1273.856751] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1273.859308] Free swap = 0kB [ 1273.862923] ? ___ratelimit+0x2cd/0x530 [ 1273.862934] oom_kill_process.cold+0x10/0xb18 [ 1273.862947] ? lock_downgrade+0x740/0x740 [ 1273.866634] Total swap = 0kB [ 1273.871980] out_of_memory+0x2dc/0x1190 [ 1273.871995] ? oom_killer_disable+0x1c0/0x1c0 [ 1273.878286] 2097051 pages RAM [ 1273.880105] ? mutex_trylock+0x152/0x1a0 [ 1273.884089] 0 pages HighMem/MovableOnly [ 1273.888536] __alloc_pages_nodemask+0x23e1/0x2720 [ 1273.892686] 363840 pages reserved [ 1273.895671] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1273.899608] 0 pages cma reserved [ 1273.904091] ? worker_thread+0x5cc/0xff0 [ 1273.904097] ? kthread+0x30d/0x420 [ 1273.904111] ? mark_held_locks+0xa6/0xf0 [ 1273.904119] ? cache_grow_begin+0x41/0x630 [ 1273.904131] cache_grow_begin+0x91/0x630 [ 1273.951995] ? cache_grow_begin+0x91/0x630 [ 1273.956253] fallback_alloc+0x207/0x2c0 [ 1273.960246] kmem_cache_alloc_node_trace+0xed/0x400 [ 1273.965270] __kmalloc_node_track_caller+0x38/0x70 [ 1273.966383] syz-executor.4: page allocation failure: order:4 [ 1273.970189] __alloc_skb+0x96/0x510 [ 1273.970200] rtmsg_ifinfo_build_skb+0x65/0x130 [ 1273.976029] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1273.979606] rtnetlink_event+0xee/0x1a0 [ 1273.984181] (null) [ 1273.991263] notifier_call_chain+0x108/0x1a0 [ 1273.995242] syz-executor.4 cpuset= [ 1273.997362] netdev_upper_dev_unlink+0x1a7/0x200 [ 1274.001762] / [ 1274.005263] ? netdev_notify_peers+0xd0/0xd0 [ 1274.009991] mems_allowed=0-1 [ 1274.011703] ? macvlan_dellink+0x138/0x200 [ 1274.011711] ? macvtap_count_rx_dropped+0x40/0x40 [ 1274.011721] default_device_exit_batch+0x204/0x380 [ 1274.033106] ? unregister_netdevice_many+0x50/0x50 [ 1274.038018] ? do_wait_intr_irq+0x270/0x270 [ 1274.042320] ? __local_bh_enable_ip+0xc1/0x170 [ 1274.046882] ? unregister_netdevice_many+0x50/0x50 [ 1274.052053] ? dev_change_net_namespace+0xc90/0xc90 [ 1274.057135] ops_exit_list+0xf9/0x150 [ 1274.060916] cleanup_net+0x3b3/0x840 [ 1274.064611] ? net_drop_ns+0x70/0x70 [ 1274.068320] ? lock_acquire+0x170/0x3f0 [ 1274.072274] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1274.077721] process_one_work+0x793/0x14a0 [ 1274.081944] ? work_busy+0x320/0x320 [ 1274.085639] ? worker_thread+0x158/0xff0 [ 1274.089684] ? _raw_spin_unlock_irq+0x24/0x80 [ 1274.094165] worker_thread+0x5cc/0xff0 [ 1274.098038] ? rescuer_thread+0xc80/0xc80 [ 1274.102164] kthread+0x30d/0x420 [ 1274.105511] ? kthread_create_on_node+0xd0/0xd0 [ 1274.110162] ret_from_fork+0x24/0x30 [ 1274.113878] CPU: 1 PID: 12494 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1274.121854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.131204] Call Trace: [ 1274.133792] dump_stack+0x1b2/0x281 [ 1274.136844] Mem-Info: [ 1274.137416] warn_alloc.cold+0x96/0x1cc [ 1274.139814] active_anon:19245 inactive_anon:12060 isolated_anon:0 [ 1274.139814] active_file:25 inactive_file:4 isolated_file:0 [ 1274.139814] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1274.139814] slab_reclaimable:15753 slab_unreclaimable:125568 [ 1274.139814] mapped:44124 shmem:13066 pagetables:778 bounce:0 [ 1274.139814] free:14140 free_pcp:430 free_cma:0 [ 1274.143758] ? zone_watermark_ok_safe+0x220/0x220 [ 1274.143779] __alloc_pages_nodemask+0x2127/0x2720 [ 1274.143791] ? lock_acquire+0x170/0x3f0 [ 1274.143803] ? lock_acquire+0x170/0x3f0 [ 1274.143818] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1274.143835] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1274.143847] ? __mutex_unlock_slowpath+0x75/0x770 [ 1274.143861] alloc_pages_current+0x155/0x260 [ 1274.143883] ion_page_pool_alloc+0x118/0x1b0 [ 1274.196496] Node 0 active_anon:76148kB inactive_anon:31988kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174172kB dirty:0kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.199540] ion_system_heap_allocate+0x133/0x8c0 [ 1274.220636] Node 1 active_anon:832kB inactive_anon:16252kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2324kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.246235] ? _raw_spin_unlock+0x29/0x40 [ 1274.246247] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1274.246257] ? ion_system_contig_heap_create+0x130/0x130 [ 1274.246268] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1274.246284] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1274.246299] ion_alloc+0x27a/0x810 [ 1274.246318] ? ion_dma_buf_release+0x40/0x40 [ 1274.246331] ? __might_fault+0x177/0x1b0 [ 1274.246344] ion_ioctl+0xea/0x1f0 [ 1274.246354] ? ion_query_heaps+0x360/0x360 [ 1274.246366] ? lock_acquire+0x170/0x3f0 [ 1274.246375] ? lock_downgrade+0x740/0x740 [ 1274.246382] ? ion_query_heaps+0x360/0x360 [ 1274.246395] do_vfs_ioctl+0x75a/0xff0 [ 1274.246406] ? ioctl_preallocate+0x1a0/0x1a0 [ 1274.267306] Node 0 [ 1274.278139] ? lock_downgrade+0x740/0x740 [ 1274.278154] ? __fget+0x225/0x360 [ 1274.278163] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.278173] ? security_file_ioctl+0x83/0xb0 [ 1274.278182] SyS_ioctl+0x7f/0xb0 [ 1274.278190] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.278200] do_syscall_64+0x1d5/0x640 [ 1274.278216] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.278224] RIP: 0033:0x45e219 [ 1274.278229] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1274.278238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1274.278244] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1274.278248] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.278253] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1274.278259] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1274.292980] warn_alloc_show_mem: 1 callbacks suppressed [ 1274.292983] Mem-Info: [ 1274.308609] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.332162] active_anon:19227 inactive_anon:12060 isolated_anon:0 [ 1274.332162] active_file:17 inactive_file:17 isolated_file:0 [ 1274.332162] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1274.332162] slab_reclaimable:15750 slab_unreclaimable:125565 [ 1274.332162] mapped:44124 shmem:13066 pagetables:778 bounce:0 [ 1274.332162] free:14524 free_pcp:0 free_cma:0 [ 1274.343663] lowmem_reserve[]: [ 1274.359779] Node 0 active_anon:76136kB inactive_anon:31988kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174172kB dirty:0kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.375451] 0 [ 1274.384864] Node 1 active_anon:772kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2324kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.405108] 2717 [ 1274.417712] Node 0 [ 1274.434070] 2718 [ 1274.460513] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.497117] 2718 [ 1274.530073] lowmem_reserve[]: [ 1274.566632] 2718 [ 1274.591644] 0 2717 2718 2718 2718 [ 1274.597254] Node 0 DMA32 free:19520kB min:36200kB low:45248kB high:54296kB active_anon:76136kB inactive_anon:31988kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.634475] lowmem_reserve[]: 0 0 0 0 0 [ 1274.638480] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.640542] Node 0 [ 1274.672454] lowmem_reserve[]: 0 0 0 0 0 [ 1274.678684] Node 1 Normal free:27568kB min:53696kB low:67120kB high:80544kB active_anon:772kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.679145] DMA32 free:19520kB min:36200kB low:45248kB high:54296kB active_anon:76136kB inactive_anon:31988kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.714112] lowmem_reserve[]: [ 1274.739738] lowmem_reserve[]: 0 0 0 0 0 [ 1274.747472] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.754366] 0 [ 1274.777254] lowmem_reserve[]: 0 0 0 0 0 [ 1274.783092] Node 1 Normal free:27568kB min:53696kB low:67120kB high:80544kB active_anon:772kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:436kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.790900] 0 [ 1274.815443] lowmem_reserve[]: 0 0 0 0 0 [ 1274.821225] Node 0 DMA: 38*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11008kB [ 1274.829555] 0 [ 1274.842708] Node 0 DMA32: 2160*4kB (UME) 919*8kB (UME) 130*16kB (UME) 18*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19416kB [ 1274.856340] 0 0 [ 1274.858793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1274.864977] Node 0 [ 1274.877931] Node 1 Normal: 67*4kB (UM) 33*8kB (UME) 26*16kB (UME) 23*32kB (UME) 14*64kB (UME) 10*128kB (UME) 9*256kB (UME) 28*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 27668kB [ 1274.888137] DMA: 38*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11008kB [ 1274.901692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1274.924758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1274.935413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1274.935802] Node 0 [ 1274.950282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1274.952119] DMA32: [ 1274.954270] 13100 total pagecache pages [ 1274.961112] 2160*4kB [ 1274.968553] 0 pages in swap cache [ 1274.976469] Swap cache stats: add 0, delete 0, find 0/0 [ 1274.982224] (UME) 927*8kB (UME) 130*16kB (UME) 18*32kB (UM) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19480kB [ 1274.987046] Free swap = 0kB [ 1274.999488] Total swap = 0kB [ 1275.008099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1275.009014] 2097051 pages RAM [ 1275.026933] Node 1 Normal: 67*4kB (UM) 33*8kB (UME) 26*16kB (UME) 23*32kB (UME) 14*64kB (UME) 10*128kB (UME) 9*256kB (UME) 28*512kB (UM) 1*1024kB (M) 3*2048kB (M) 0*4096kB = 27668kB [ 1275.031153] 0 pages HighMem/MovableOnly [ 1275.057377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.057399] 363840 pages reserved [ 1275.079707] 0 pages cma reserved [ 1275.080453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.083112] Out of memory: Kill process 12467 (syz-executor.3) score 1005 or sacrifice child [ 1275.083306] Killed process 12473 (syz-executor.3) total-vm:93612kB, anon-rss:3872kB, file-rss:34816kB, shmem-rss:0kB [ 1275.127404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.138663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.169831] 13100 total pagecache pages [ 1275.173884] 0 pages in swap cache [ 1275.177329] Swap cache stats: add 0, delete 0, find 0/0 [ 1275.188948] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1275.200340] oom_reaper: reaped process 12473 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1275.202151] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1275.210829] syz-executor.3: [ 1275.222124] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1275.225731] page allocation failure: order:0 [ 1275.256006] Free swap = 0kB [ 1275.260379] oom_reaper: reaped process 12483 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1275.260439] Total swap = 0kB [ 1275.269134] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1275.292513] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1275.296466] syz-executor.1 cpuset= [ 1275.309922] CPU: 1 PID: 12483 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1275.318283] syz-executor.3 cpuset= [ 1275.321331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.321336] Call Trace: [ 1275.321355] dump_stack+0x1b2/0x281 [ 1275.321370] warn_alloc.cold+0x96/0x1cc [ 1275.321382] ? zone_watermark_ok_safe+0x220/0x220 [ 1275.321393] ? usleep_range+0x130/0x130 [ 1275.328391] syz-executor.4 cpuset= [ 1275.334254] ? try_to_free_pages+0x23f/0x6e0 [ 1275.334264] ? _find_next_bit+0xdb/0x100 [ 1275.334274] ? run_timer_softirq+0x5a0/0x5a0 [ 1275.334290] __alloc_pages_nodemask+0x2127/0x2720 [ 1275.334308] ? lock_acquire+0x170/0x3f0 [ 1275.334325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.334336] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1275.334349] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1275.334364] ? alloc_pages_current+0x16/0x260 [ 1275.336933] syz-executor.2: [ 1275.340548] alloc_pages_current+0x155/0x260 [ 1275.354905] / [ 1275.356817] ion_page_pool_alloc+0x118/0x1b0 [ 1275.366325] page allocation failure: order:0 [ 1275.369635] ion_system_heap_allocate+0x133/0x8c0 [ 1275.379597] / [ 1275.383232] ? ion_alloc+0x187/0x810 [ 1275.398310] mems_allowed=0-1 [ 1275.400609] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1275.408436] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1275.411113] ? ion_system_contig_heap_create+0x130/0x130 [ 1275.425713] mems_allowed=0-1 [ 1275.428821] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1275.454828] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1275.456155] (null) [ 1275.459665] ion_alloc+0x204/0x810 [ 1275.465330] ? ion_dma_buf_release+0x40/0x40 [ 1275.469729] ? __might_fault+0x177/0x1b0 [ 1275.473786] ion_ioctl+0xea/0x1f0 [ 1275.477228] ? ion_query_heaps+0x360/0x360 [ 1275.481451] ? lock_acquire+0x170/0x3f0 [ 1275.485418] ? lock_downgrade+0x740/0x740 [ 1275.489560] ? ion_query_heaps+0x360/0x360 [ 1275.493781] do_vfs_ioctl+0x75a/0xff0 [ 1275.497455] syz-executor.2 cpuset=/ [ 1275.497572] ? ioctl_preallocate+0x1a0/0x1a0 [ 1275.497583] ? lock_downgrade+0x740/0x740 [ 1275.509716] ? __fget+0x225/0x360 [ 1275.513155] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.517120] ? security_file_ioctl+0x83/0xb0 [ 1275.517930] mems_allowed=0-1 [ 1275.521517] SyS_ioctl+0x7f/0xb0 [ 1275.521526] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.521538] do_syscall_64+0x1d5/0x640 [ 1275.521556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.521565] RIP: 0033:0x45e219 [ 1275.521570] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.521579] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1275.521584] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1275.521590] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.521594] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1275.521601] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1275.588149] CPU: 0 PID: 11618 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1275.596050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.597903] 2097051 pages RAM [ 1275.605388] Call Trace: [ 1275.605406] dump_stack+0x1b2/0x281 [ 1275.605417] dump_header+0x178/0x82f [ 1275.605428] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1275.608522] / [ 1275.611083] ? ___ratelimit+0x2cd/0x530 [ 1275.614701] mems_allowed=0-1 [ 1275.618378] oom_kill_process.cold+0x10/0xb18 [ 1275.623471] 0 pages HighMem/MovableOnly [ 1275.625155] out_of_memory+0xe3e/0x1190 [ 1275.629094] 363840 pages reserved [ 1275.632181] ? oom_killer_disable+0x1c0/0x1c0 [ 1275.632189] ? mutex_trylock+0x152/0x1a0 [ 1275.632199] __alloc_pages_nodemask+0x23e1/0x2720 [ 1275.651086] 0 pages cma reserved [ 1275.652895] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.669903] alloc_pages_current+0x155/0x260 [ 1275.674303] filemap_fault+0xea3/0x1980 [ 1275.678276] ext4_filemap_fault+0x84/0xb0 [ 1275.682413] __do_fault+0xfa/0x380 [ 1275.685938] __handle_mm_fault+0x2497/0x4620 [ 1275.690324] ? vm_insert_page+0x7c0/0x7c0 [ 1275.694454] ? lock_downgrade+0x740/0x740 [ 1275.698593] handle_mm_fault+0x391/0x860 [ 1275.702633] __do_page_fault+0x549/0xad0 [ 1275.706673] ? spurious_fault+0x640/0x640 [ 1275.710802] ? do_page_fault+0x60/0x500 [ 1275.714766] ? page_fault+0x2f/0x50 [ 1275.718381] page_fault+0x45/0x50 [ 1275.721818] RIP: 0006:0x32 [ 1275.724723] RSP: 0bb8:00000000001363f1 EFLAGS: 00000029 [ 1275.724743] CPU: 1 PID: 12487 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1275.737995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.747417] Call Trace: [ 1275.749991] dump_stack+0x1b2/0x281 [ 1275.753607] warn_alloc.cold+0x96/0x1cc [ 1275.757572] ? zone_watermark_ok_safe+0x220/0x220 [ 1275.762405] ? usleep_range+0x130/0x130 [ 1275.766389] ? try_to_free_pages+0x23f/0x6e0 [ 1275.770789] ? _find_next_bit+0xdb/0x100 [ 1275.774835] ? run_timer_softirq+0x5a0/0x5a0 [ 1275.779247] __alloc_pages_nodemask+0x2127/0x2720 [ 1275.784080] ? lock_acquire+0x170/0x3f0 [ 1275.788043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.792889] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1275.797394] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1275.802854] alloc_pages_current+0x155/0x260 [ 1275.807254] ion_page_pool_alloc+0x118/0x1b0 [ 1275.811653] ion_system_heap_allocate+0x133/0x8c0 [ 1275.816498] ? ion_alloc+0x187/0x810 [ 1275.820201] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1275.825642] ? ion_system_contig_heap_create+0x130/0x130 [ 1275.831086] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1275.836096] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1275.840930] ion_alloc+0x204/0x810 [ 1275.844467] ? ion_dma_buf_release+0x40/0x40 [ 1275.848863] ? __might_fault+0x177/0x1b0 [ 1275.853020] ion_ioctl+0xea/0x1f0 [ 1275.856467] ? ion_query_heaps+0x360/0x360 [ 1275.860688] ? lock_acquire+0x170/0x3f0 [ 1275.864650] ? lock_downgrade+0x740/0x740 [ 1275.868785] ? ion_query_heaps+0x360/0x360 [ 1275.873018] do_vfs_ioctl+0x75a/0xff0 [ 1275.876823] ? ioctl_preallocate+0x1a0/0x1a0 [ 1275.881228] ? lock_downgrade+0x740/0x740 [ 1275.885376] ? __fget+0x225/0x360 [ 1275.888819] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.892784] ? security_file_ioctl+0x83/0xb0 [ 1275.897187] SyS_ioctl+0x7f/0xb0 [ 1275.900542] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.904507] do_syscall_64+0x1d5/0x640 [ 1275.908494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.913671] RIP: 0033:0x45e219 [ 1275.916859] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.924560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1275.931819] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1275.939080] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1275.946330] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1275.953692] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1275.960966] CPU: 0 PID: 12473 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1275.968116] syz-executor.4: [ 1275.968849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.968858] page allocation failure: order:0 [ 1275.971848] Call Trace: [ 1275.971865] dump_stack+0x1b2/0x281 [ 1275.971878] warn_alloc.cold+0x96/0x1cc [ 1275.971889] ? zone_watermark_ok_safe+0x220/0x220 [ 1275.983275] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1275.985614] ? usleep_range+0x130/0x130 [ 1275.988167] (null) [ 1275.996560] ? try_to_free_pages+0x23f/0x6e0 [ 1275.996570] ? _find_next_bit+0xdb/0x100 [ 1275.996579] ? run_timer_softirq+0x5a0/0x5a0 [ 1275.996596] __alloc_pages_nodemask+0x2127/0x2720 [ 1276.000537] syz-executor.4 cpuset= [ 1276.005362] ? lock_acquire+0x170/0x3f0 [ 1276.005378] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.012467] / [ 1276.016423] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1276.018543] mems_allowed=0-1 [ 1276.022933] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1276.022946] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1276.067924] alloc_pages_current+0x155/0x260 [ 1276.072316] ion_page_pool_alloc+0x118/0x1b0 [ 1276.076704] ion_system_heap_allocate+0x133/0x8c0 [ 1276.081528] ? ion_alloc+0x187/0x810 [ 1276.085220] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1276.090648] ? ion_system_contig_heap_create+0x130/0x130 [ 1276.096078] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1276.101073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1276.105897] ion_alloc+0x204/0x810 [ 1276.109419] ? ion_dma_buf_release+0x40/0x40 [ 1276.113809] ? __might_fault+0x177/0x1b0 [ 1276.117862] ion_ioctl+0xea/0x1f0 [ 1276.121298] ? ion_query_heaps+0x360/0x360 [ 1276.125524] ? lock_acquire+0x170/0x3f0 [ 1276.129487] ? lock_downgrade+0x740/0x740 [ 1276.130986] Mem-Info: [ 1276.133613] ? ion_query_heaps+0x360/0x360 [ 1276.133623] do_vfs_ioctl+0x75a/0xff0 [ 1276.136024] active_anon:18655 inactive_anon:12059 isolated_anon:0 [ 1276.136024] active_file:17 inactive_file:17 isolated_file:0 [ 1276.136024] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1276.136024] slab_reclaimable:15742 slab_unreclaimable:125326 [ 1276.136024] mapped:43521 shmem:13066 pagetables:752 bounce:0 [ 1276.136024] free:13954 free_pcp:281 free_cma:0 [ 1276.140225] ? ioctl_preallocate+0x1a0/0x1a0 [ 1276.160976] Node 0 active_anon:73956kB inactive_anon:31984kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1276.177297] ? lock_downgrade+0x740/0x740 [ 1276.177313] ? __fget+0x225/0x360 [ 1276.210975] Node 1 active_anon:664kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1276.213481] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.216907] Node 0 [ 1276.243450] ? security_file_ioctl+0x83/0xb0 [ 1276.243460] SyS_ioctl+0x7f/0xb0 [ 1276.243470] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.261332] do_syscall_64+0x1d5/0x640 [ 1276.265205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1276.270372] RIP: 0033:0x45e219 [ 1276.273538] RSP: 002b:00007f53e7037c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.281236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1276.288505] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1276.295763] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1276.303019] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1276.310285] R13: 00007fff7b7a9f0f R14: 00007f53e70389c0 R15: 000000000119c034 [ 1276.310973] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.331549] CPU: 0 PID: 12475 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1276.350953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.360285] Call Trace: [ 1276.362860] dump_stack+0x1b2/0x281 [ 1276.366472] warn_alloc.cold+0x96/0x1cc [ 1276.370430] ? zone_watermark_ok_safe+0x220/0x220 [ 1276.375251] ? usleep_range+0x130/0x130 [ 1276.379203] ? try_to_free_pages+0x23f/0x6e0 [ 1276.380917] lowmem_reserve[]: [ 1276.383594] ? _find_next_bit+0xdb/0x100 [ 1276.383597] 0 2717 [ 1276.386685] ? run_timer_softirq+0x5a0/0x5a0 [ 1276.390724] 2718 [ 1276.392962] __alloc_pages_nodemask+0x2127/0x2720 [ 1276.392981] ? lock_acquire+0x170/0x3f0 [ 1276.408166] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.412990] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1276.417475] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1276.420906] 2718 2718 [ 1276.422916] alloc_pages_current+0x155/0x260 [ 1276.425390] Node 0 DMA32 free:30584kB min:36200kB low:45248kB high:54296kB active_anon:73956kB inactive_anon:31984kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2676kB bounce:0kB free_pcp:776kB local_pcp:144kB free_cma:0kB [ 1276.429790] ion_page_pool_alloc+0x118/0x1b0 [ 1276.429803] ion_system_heap_allocate+0x133/0x8c0 [ 1276.467885] ? ion_alloc+0x187/0x810 [ 1276.471580] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1276.477011] ? ion_system_contig_heap_create+0x130/0x130 [ 1276.482441] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1276.487438] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1276.490887] lowmem_reserve[]: 0 [ 1276.492261] ion_alloc+0x204/0x810 [ 1276.492275] ? ion_dma_buf_release+0x40/0x40 [ 1276.495526] 0 [ 1276.499048] ? __might_fault+0x177/0x1b0 [ 1276.509258] ion_ioctl+0xea/0x1f0 [ 1276.512692] ? ion_query_heaps+0x360/0x360 [ 1276.516906] ? lock_acquire+0x170/0x3f0 [ 1276.520861] ? lock_downgrade+0x740/0x740 [ 1276.520882] 0 [ 1276.524996] ? ion_query_heaps+0x360/0x360 [ 1276.525001] 0 [ 1276.526785] do_vfs_ioctl+0x75a/0xff0 [ 1276.536547] ? ioctl_preallocate+0x1a0/0x1a0 [ 1276.540876] 0 [ 1276.540933] ? lock_downgrade+0x740/0x740 [ 1276.542723] ? __fget+0x225/0x360 [ 1276.546843] Node 0 [ 1276.550272] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.550284] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.550288] lowmem_reserve[]: [ 1276.552504] ? security_file_ioctl+0x83/0xb0 [ 1276.552514] SyS_ioctl+0x7f/0xb0 [ 1276.552523] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.570869] 0 [ 1276.581346] do_syscall_64+0x1d5/0x640 [ 1276.581364] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1276.600860] 0 [ 1276.601736] RIP: 0033:0x45e219 [ 1276.606892] 0 [ 1276.608667] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.620857] 0 [ 1276.621319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1276.621324] 0 [ 1276.623101] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1276.623108] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1276.632129] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1276.632135] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1276.680887] CPU: 1 PID: 12494 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1276.688792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.698146] Call Trace: [ 1276.700738] dump_stack+0x1b2/0x281 [ 1276.704370] warn_alloc.cold+0x96/0x1cc [ 1276.708353] ? zone_watermark_ok_safe+0x220/0x220 [ 1276.713194] ? usleep_range+0x130/0x130 [ 1276.717163] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1276.722267] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1276.727277] ? run_timer_softirq+0x5a0/0x5a0 [ 1276.731688] __alloc_pages_nodemask+0x2127/0x2720 [ 1276.736533] ? lock_acquire+0x170/0x3f0 [ 1276.740507] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.745350] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1276.749849] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1276.755305] alloc_pages_current+0x155/0x260 [ 1276.759713] ion_page_pool_alloc+0x118/0x1b0 [ 1276.764123] ion_system_heap_allocate+0x133/0x8c0 [ 1276.768962] ? _raw_spin_unlock+0x29/0x40 [ 1276.773104] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1276.778035] ? ion_system_contig_heap_create+0x130/0x130 [ 1276.783477] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1276.788488] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1276.793328] ion_alloc+0x27a/0x810 [ 1276.796867] ? ion_dma_buf_release+0x40/0x40 [ 1276.801272] ? __might_fault+0x177/0x1b0 [ 1276.805328] ion_ioctl+0xea/0x1f0 [ 1276.808773] ? ion_query_heaps+0x360/0x360 [ 1276.813003] ? lock_acquire+0x170/0x3f0 [ 1276.816970] ? lock_downgrade+0x740/0x740 [ 1276.821112] ? ion_query_heaps+0x360/0x360 [ 1276.825339] do_vfs_ioctl+0x75a/0xff0 [ 1276.829136] ? ioctl_preallocate+0x1a0/0x1a0 [ 1276.833534] ? lock_downgrade+0x740/0x740 [ 1276.837680] ? __fget+0x225/0x360 [ 1276.841127] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.845092] ? security_file_ioctl+0x83/0xb0 [ 1276.849496] SyS_ioctl+0x7f/0xb0 [ 1276.852858] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.856921] do_syscall_64+0x1d5/0x640 [ 1276.860808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1276.864008] Mem-Info: [ 1276.865986] RIP: 0033:0x45e219 [ 1276.865991] RSP: 002b:00007febfb8d4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.866000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1276.866005] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1276.866010] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.866015] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1276.866020] R13: 00007ffeb68c5c4f R14: 00007febfb8d59c0 R15: 000000000119bf8c [ 1276.954799] Node 1 Normal free:196476kB min:53696kB low:67120kB high:80544kB active_anon:664kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:332kB bounce:0kB free_pcp:1396kB local_pcp:684kB free_cma:0kB [ 1276.991982] lowmem_reserve[]: 0 0 0 0 0 [ 1276.999134] active_anon:18655 inactive_anon:12059 isolated_anon:0 [ 1276.999134] active_file:88 inactive_file:342 isolated_file:0 [ 1276.999134] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1276.999134] slab_reclaimable:15738 slab_unreclaimable:125309 [ 1276.999134] mapped:43749 shmem:13066 pagetables:752 bounce:0 [ 1276.999134] free:59175 free_pcp:565 free_cma:0 [ 1277.000041] Node 0 DMA: 68*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11128kB [ 1277.074198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.092604] Node 0 active_anon:74556kB inactive_anon:31984kB active_file:1280kB inactive_file:3292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177196kB dirty:200kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1277.095290] Node 0 [ 1277.125071] Node 1 active_anon:664kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1277.130147] DMA32: [ 1277.160801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.162317] Node 0 [ 1277.172537] 2807*4kB (UME) 1955*8kB (UME) 567*16kB (UE) 994*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67748kB [ 1277.192944] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1277.209398] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.212321] Node 0 [ 1277.236068] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1277.240119] syz-executor.1 cpuset= [ 1277.245527] Node 0 [ 1277.245644] / [ 1277.249864] DMA32 free:64716kB min:36200kB low:45248kB high:54296kB active_anon:74256kB inactive_anon:31984kB active_file:2388kB inactive_file:4696kB unevictable:0kB writepending:296kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2676kB bounce:0kB free_pcp:540kB local_pcp:228kB free_cma:0kB [ 1277.251970] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1277.254098] lowmem_reserve[]: [ 1277.286453] mems_allowed=0-1 [ 1277.290369] warn_alloc_show_mem: 1 callbacks suppressed [ 1277.290379] Mem-Info: [ 1277.294067] CPU: 1 PID: 12487 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1277.298051] active_anon:18730 inactive_anon:12059 isolated_anon:0 [ 1277.298051] active_file:622 inactive_file:1432 isolated_file:12 [ 1277.298051] unevictable:0 dirty:50 writeback:0 unstable:0 [ 1277.298051] slab_reclaimable:15738 slab_unreclaimable:125592 [ 1277.298051] mapped:44824 shmem:13066 pagetables:752 bounce:0 [ 1277.298051] free:36508 free_pcp:122 free_cma:0 [ 1277.301175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.301178] Call Trace: [ 1277.301194] dump_stack+0x1b2/0x281 [ 1277.301207] warn_alloc.cold+0x96/0x1cc [ 1277.301218] ? zone_watermark_ok_safe+0x220/0x220 [ 1277.301248] __alloc_pages_nodemask+0x2127/0x2720 [ 1277.301265] ? lock_acquire+0x170/0x3f0 [ 1277.301293] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1277.301309] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1277.301322] ? __mutex_unlock_slowpath+0x75/0x770 [ 1277.304452] Node 0 active_anon:74256kB inactive_anon:31984kB active_file:2480kB inactive_file:5720kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:179396kB dirty:200kB writeback:0kB shmem:35948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1277.311584] ? alloc_pages_current+0x73/0x260 [ 1277.311595] alloc_pages_current+0x155/0x260 [ 1277.311609] ion_page_pool_alloc+0x118/0x1b0 [ 1277.311626] ion_system_heap_allocate+0x133/0x8c0 [ 1277.311639] ? _raw_spin_unlock+0x29/0x40 [ 1277.311650] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1277.311660] ? ion_system_contig_heap_create+0x130/0x130 [ 1277.311671] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1277.311681] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1277.311692] ion_alloc+0x27a/0x810 [ 1277.311705] ? ion_dma_buf_release+0x40/0x40 19:45:31 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 19:45:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) [ 1277.311726] ? __might_fault+0x177/0x1b0 [ 1277.347284] 0 [ 1277.354715] ion_ioctl+0xea/0x1f0 [ 1277.354725] ? ion_query_heaps+0x360/0x360 [ 1277.354738] ? lock_acquire+0x170/0x3f0 [ 1277.354746] ? lock_downgrade+0x740/0x740 [ 1277.354753] ? ion_query_heaps+0x360/0x360 [ 1277.354763] do_vfs_ioctl+0x75a/0xff0 [ 1277.354775] ? ioctl_preallocate+0x1a0/0x1a0 [ 1277.354783] ? lock_downgrade+0x740/0x740 [ 1277.354795] ? __fget+0x225/0x360 [ 1277.354803] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.354814] ? security_file_ioctl+0x83/0xb0 [ 1277.354823] SyS_ioctl+0x7f/0xb0 [ 1277.354832] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.358556] 0 [ 1277.361032] do_syscall_64+0x1d5/0x640 [ 1277.361052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1277.361059] RIP: 0033:0x45e219 [ 1277.361064] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.361074] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1277.361078] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1277.361084] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1277.361089] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1277.361095] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1277.367119] Normal: [ 1277.373326] 0 [ 1277.375445] 0*4kB [ 1277.379610] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1277.388645] 0*8kB [ 1277.392357] 0 [ 1277.395919] 0*16kB [ 1277.423933] systemd[1]: Stopped Journal Service. [ 1277.428827] 0*32kB [ 1277.440715] Node 1 active_anon:664kB inactive_anon:16252kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1277.457168] 0*64kB [ 1277.462054] systemd[1]: Starting Journal Service... [ 1277.477029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.493385] 0 [ 1277.506933] 0*128kB [ 1277.509853] Node 0 [ 1277.526585] 0*256kB [ 1277.568458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.584695] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.601423] 0*512kB [ 1277.608648] Node 0 [ 1277.611663] device bridge_slave_1 left promiscuous mode [ 1277.625874] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1277.655976] 0*1024kB [ 1277.670676] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.690632] 0*2048kB [ 1277.754035] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1277.766768] Node 0 DMA32 free:45048kB min:36200kB low:45248kB high:54296kB active_anon:75036kB inactive_anon:31984kB active_file:2884kB inactive_file:10212kB unevictable:0kB writepending:296kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2824kB bounce:0kB free_pcp:488kB local_pcp:216kB free_cma:0kB [ 1277.781216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.797738] lowmem_reserve[]: 0 0 0 0 0 [ 1277.806996] Node 1 Normal free:67228kB min:53696kB low:67120kB high:80544kB active_anon:664kB inactive_anon:16252kB active_file:108kB inactive_file:2508kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:332kB bounce:0kB free_pcp:376kB local_pcp:232kB free_cma:0kB [ 1277.811821] 0*4096kB [ 1277.848536] device bridge_slave_0 left promiscuous mode [ 1277.855907] lowmem_reserve[]: 0 0 0 0 0 [ 1277.860804] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.860924] = 0kB [ 1277.894248] lowmem_reserve[]: 0 0 0 0 0 [ 1277.896622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.899782] Node 0 DMA: 68*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11000kB [ 1277.931017] lowmem_reserve[]: 0 0 0 0 0 [ 1277.936186] device veth1_macvtap left promiscuous mode [ 1277.939951] Node 1 Normal free:87120kB min:53696kB low:67120kB high:80544kB active_anon:796kB inactive_anon:16252kB active_file:164kB inactive_file:3136kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:332kB bounce:0kB free_pcp:360kB local_pcp:232kB free_cma:0kB [ 1277.954248] device veth0_macvtap left promiscuous mode [ 1277.983589] Node 0 DMA32: 315*4kB (UME) 773*8kB (UE) 360*16kB (UE) 992*32kB (UME) 4*64kB (U) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45332kB [ 1278.009539] Node 1 Normal: 1*4kB (U) 623*8kB (UM) 620*16kB (UM) 1625*32kB (U) 0*64kB 1*128kB (M) 1*256kB (M) 0*512kB 69*1024kB (U) 0*2048kB 0*4096kB = 137948kB [ 1278.018333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1278.060568] lowmem_reserve[]: 0 0 0 0 0 [ 1278.061182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.071194] Node 0 DMA: 68*4kB (U) 11*8kB (U) 9*16kB (U) 2*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11000kB [ 1278.097859] Node 1 Normal: 1*4kB (U) 623*8kB (UM) 620*16kB (UM) 1625*32kB (U) 13*64kB (U) 70*128kB (UM) 1*256kB (M) 0*512kB 157*1024kB (U) 8*2048kB (U) 0*4096kB = 254108kB [ 1278.100571] device veth1_vlan left promiscuous mode [ 1278.124641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.130568] Node 0 [ 1278.142378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.154297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.160689] DMA32: 314*4kB (UE) 772*8kB (E) 100*16kB (UE) 973*32kB (UE) 552*64kB (UE) 67*128kB (UME) 9*256kB (U) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 88424kB [ 1278.180229] systemd-journald[12512]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1278.190557] device veth0_vlan left promiscuous mode [ 1278.200384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.205457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.237299] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1278.240502] 19717 total pagecache pages [ 1278.268596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.278690] Node 1 Normal: 1*4kB (U) 623*8kB (UM) 620*16kB (UM) 1625*32kB (U) 1088*64kB (U) 168*128kB (UM) 62*256kB (UM) 0*512kB 63*1024kB (U) 8*2048kB (U) 0*4096kB = 254812kB [ 1278.285162] 0 pages in swap cache [ 1278.320494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.354591] Swap cache stats: add 0, delete 0, find 0/0 [ 1278.359527] 21915 total pagecache pages [ 1278.359978] Free swap = 0kB [ 1278.379776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.388767] 0 pages in swap cache [ 1278.402527] Swap cache stats: add 0, delete 0, find 0/0 [ 1278.407922] Free swap = 0kB [ 1278.412602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.430475] Total swap = 0kB [ 1278.433555] 2097051 pages RAM [ 1278.436655] 0 pages HighMem/MovableOnly [ 1278.442226] Total swap = 0kB [ 1278.442375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.445249] 2097051 pages RAM [ 1278.445253] 0 pages HighMem/MovableOnly [ 1278.445256] 363840 pages reserved [ 1278.445259] 0 pages cma reserved [ 1278.468179] 363840 pages reserved [ 1278.471701] 0 pages cma reserved [ 1278.475070] Out of memory (oom_kill_allocating_task): Kill process 11618 (syz-executor.4) score 0 or sacrifice child [ 1278.485980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.494657] Killed process 11618 (syz-executor.4) total-vm:93216kB, anon-rss:108kB, file-rss:33820kB, shmem-rss:0kB [ 1278.505340] 21915 total pagecache pages [ 1278.509315] 0 pages in swap cache [ 1278.527387] oom_reaper: reaped process 12475 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1278.551216] Swap cache stats: add 0, delete 0, find 0/0 [ 1278.556602] Free swap = 0kB [ 1278.559610] Total swap = 0kB [ 1278.590425] 2097051 pages RAM [ 1278.593553] 0 pages HighMem/MovableOnly [ 1278.597515] 363840 pages reserved [ 1278.601140] oom_reaper: reaped process 11618 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1278.640419] 0 pages cma reserved [ 1278.732476] device hsr_slave_1 left promiscuous mode [ 1278.770633] device hsr_slave_0 left promiscuous mode [ 1278.836829] team0 (unregistering): Port device team_slave_1 removed [ 1278.892616] team0 (unregistering): Port device team_slave_0 removed [ 1278.923362] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1278.970367] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1279.036459] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1279.069278] bond0 (unregistering): Released all slaves [ 1279.070053] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1279.089170] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1279.097467] CPU: 0 PID: 12473 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1279.108857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.118208] Call Trace: [ 1279.120794] dump_stack+0x1b2/0x281 [ 1279.121601] syz-executor.2 cpuset=/ [ 1279.124417] warn_alloc.cold+0x96/0x1cc [ 1279.124429] ? zone_watermark_ok_safe+0x220/0x220 [ 1279.128037] mems_allowed=0-1 [ 1279.131999] __alloc_pages_nodemask+0x2127/0x2720 [ 1279.132008] ? io_schedule_timeout+0x140/0x140 [ 1279.132023] ? lock_acquire+0x170/0x3f0 [ 1279.132040] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1279.158107] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1279.163549] ? __mutex_unlock_slowpath+0x75/0x770 [ 1279.168394] alloc_pages_current+0x155/0x260 [ 1279.172795] ion_page_pool_alloc+0x118/0x1b0 [ 1279.177229] ion_system_heap_allocate+0x133/0x8c0 [ 1279.182062] ? _raw_spin_unlock+0x29/0x40 [ 1279.186207] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1279.191122] ? ion_system_contig_heap_create+0x130/0x130 [ 1279.196552] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1279.201564] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1279.206403] ion_alloc+0x27a/0x810 [ 1279.209947] ? ion_dma_buf_release+0x40/0x40 [ 1279.214345] ? __might_fault+0x177/0x1b0 [ 1279.218389] ion_ioctl+0xea/0x1f0 [ 1279.221829] ? ion_query_heaps+0x360/0x360 [ 1279.226055] ? lock_acquire+0x170/0x3f0 [ 1279.230022] ? lock_downgrade+0x740/0x740 [ 1279.234154] ? ion_query_heaps+0x360/0x360 [ 1279.239412] do_vfs_ioctl+0x75a/0xff0 [ 1279.243202] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.247605] ? lock_downgrade+0x740/0x740 [ 1279.251742] ? __fget+0x225/0x360 [ 1279.255174] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.259127] ? security_file_ioctl+0x83/0xb0 [ 1279.263523] SyS_ioctl+0x7f/0xb0 [ 1279.266882] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.270850] do_syscall_64+0x1d5/0x640 [ 1279.274722] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.279891] RIP: 0033:0x45e219 [ 1279.283059] RSP: 002b:00007f53e7037c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.290745] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1279.298099] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1279.305356] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1279.312606] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1279.319855] R13: 00007fff7b7a9f0f R14: 00007f53e70389c0 R15: 000000000119c034 [ 1279.327117] CPU: 1 PID: 12475 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1279.334998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.337556] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1279.344416] Call Trace: [ 1279.344436] dump_stack+0x1b2/0x281 [ 1279.344449] warn_alloc.cold+0x96/0x1cc [ 1279.344461] ? zone_watermark_ok_safe+0x220/0x220 [ 1279.344483] __alloc_pages_nodemask+0x2127/0x2720 [ 1279.354663] (null) [ 1279.357167] ? lock_acquire+0x170/0x3f0 [ 1279.360811] , order=0, oom_score_adj=0 [ 1279.365548] ? lock_acquire+0x170/0x3f0 [ 1279.370404] systemd-journal cpuset= [ 1279.375191] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1279.377306] / [ 1279.381264] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1279.385240] mems_allowed=0-1 [ 1279.389181] ? __mutex_unlock_slowpath+0x75/0x770 [ 1279.412608] alloc_pages_current+0x155/0x260 [ 1279.417009] ion_page_pool_alloc+0x118/0x1b0 [ 1279.421398] ion_system_heap_allocate+0x133/0x8c0 [ 1279.426220] ? _raw_spin_unlock+0x29/0x40 [ 1279.430351] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1279.435259] ? ion_system_contig_heap_create+0x130/0x130 [ 1279.440694] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1279.445690] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1279.450520] ion_alloc+0x27a/0x810 [ 1279.454047] ? ion_dma_buf_release+0x40/0x40 [ 1279.458436] ? __might_fault+0x177/0x1b0 [ 1279.462477] ion_ioctl+0xea/0x1f0 [ 1279.465911] ? ion_query_heaps+0x360/0x360 [ 1279.470125] ? lock_acquire+0x170/0x3f0 [ 1279.474080] ? lock_downgrade+0x740/0x740 [ 1279.478204] ? ion_query_heaps+0x360/0x360 [ 1279.482419] do_vfs_ioctl+0x75a/0xff0 [ 1279.486198] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.490600] ? lock_downgrade+0x740/0x740 [ 1279.494728] ? __fget+0x225/0x360 [ 1279.498161] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.502113] ? security_file_ioctl+0x83/0xb0 [ 1279.506500] SyS_ioctl+0x7f/0xb0 [ 1279.509844] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.513799] do_syscall_64+0x1d5/0x640 [ 1279.517669] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.522837] RIP: 0033:0x45e219 [ 1279.526005] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.533691] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1279.540939] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1279.548187] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1279.555444] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1279.562692] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1279.569954] CPU: 0 PID: 12512 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1279.577922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.582335] warn_alloc_show_mem: 3 callbacks suppressed [ 1279.582338] Mem-Info: [ 1279.587264] Call Trace: [ 1279.592656] active_anon:18147 inactive_anon:14088 isolated_anon:0 [ 1279.592656] active_file:69 inactive_file:0 isolated_file:0 [ 1279.592656] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1279.592656] slab_reclaimable:15804 slab_unreclaimable:124590 [ 1279.592656] mapped:43894 shmem:15110 pagetables:745 bounce:0 [ 1279.592656] free:13847 free_pcp:246 free_cma:0 [ 1279.595019] dump_stack+0x1b2/0x281 [ 1279.597593] Node 0 active_anon:72192kB inactive_anon:40104kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175488kB dirty:8kB writeback:0kB shmem:44124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1279.630764] dump_header+0x178/0x82f [ 1279.630776] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1279.630784] ? ___ratelimit+0x2cd/0x530 [ 1279.630792] oom_kill_process.cold+0x10/0xb18 [ 1279.630808] out_of_memory+0xe3e/0x1190 [ 1279.630825] ? oom_killer_disable+0x1c0/0x1c0 [ 1279.634455] Node 1 active_anon:396kB inactive_anon:16248kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1279.661926] ? mutex_trylock+0x152/0x1a0 [ 1279.661937] __alloc_pages_nodemask+0x23e1/0x2720 [ 1279.661959] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1279.665650] Node 0 [ 1279.670742] alloc_pages_current+0x155/0x260 [ 1279.670753] filemap_fault+0xea3/0x1980 [ 1279.674712] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1279.679183] ext4_filemap_fault+0x84/0xb0 [ 1279.683137] lowmem_reserve[]: [ 1279.687600] __do_fault+0xfa/0x380 [ 1279.714444] 0 [ 1279.718459] __handle_mm_fault+0x2497/0x4620 [ 1279.723280] 2717 [ 1279.728095] ? ____cache_alloc_node+0xf4/0x1d0 [ 1279.730317] 2718 [ 1279.734691] ? vm_insert_page+0x7c0/0x7c0 [ 1279.738646] 2718 [ 1279.764135] ? check_stack_object+0x86/0xa0 [ 1279.764156] handle_mm_fault+0x391/0x860 [ 1279.768279] 2718 [ 1279.771365] __do_page_fault+0x549/0xad0 [ 1279.771381] ? spurious_fault+0x640/0x640 [ 1279.776674] ? do_page_fault+0x60/0x500 [ 1279.781070] Node 0 [ 1279.783096] ? page_fault+0x2f/0x50 [ 1279.787659] DMA32 free:18072kB min:36200kB low:45248kB high:54296kB active_anon:72192kB inactive_anon:40104kB active_file:64kB inactive_file:56kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2760kB bounce:0kB free_pcp:328kB local_pcp:0kB free_cma:0kB [ 1279.789688] page_fault+0x45/0x50 [ 1279.793821] lowmem_reserve[]: [ 1279.795849] RIP: 8f8d2040:0x7fff41744dc0 [ 1279.800158] 0 [ 1279.804181] RSP: 41744e00:0000000000000001 EFLAGS: 7f20b864b3a0 [ 1279.806217] 0 [ 1279.819333] Mem-Info: [ 1279.825434] syz-executor.1: [ 1279.852492] syz-executor.3: [ 1279.855975] syz-executor.1: [ 1279.859027] page allocation failure: order:0 [ 1279.870123] page allocation failure: order:0 [ 1279.871577] active_anon:18147 inactive_anon:14088 isolated_anon:0 [ 1279.871577] active_file:69 inactive_file:0 isolated_file:0 [ 1279.871577] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1279.871577] slab_reclaimable:15804 slab_unreclaimable:124590 [ 1279.871577] mapped:43894 shmem:15110 pagetables:745 bounce:0 [ 1279.871577] free:13925 free_pcp:60 free_cma:0 [ 1279.872968] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1279.875200] Node 0 active_anon:72192kB inactive_anon:40104kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175488kB dirty:8kB writeback:0kB shmem:44124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1279.882916] (null) [ 1279.884376] Node 1 active_anon:396kB inactive_anon:16248kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:4kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1279.888774] syz-executor.1 cpuset= [ 1279.893690] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1279.931961] 0 [ 1279.934128] Node 0 [ 1279.961328] page allocation failure: order:4 [ 1279.969372] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1279.990376] 0 0 [ 1279.990387] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1279.990407] lowmem_reserve[]: [ 1279.997984] (null) [ 1280.001054] / [ 1280.002835] syz-executor.3 cpuset= [ 1280.005048] mems_allowed=0-1 [ 1280.009428] / [ 1280.034932] 0 [ 1280.043594] lowmem_reserve[]: [ 1280.066504] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1280.067681] 0 [ 1280.069380] (null) [ 1280.072960] CPU: 0 PID: 12487 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1280.072966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.072969] Call Trace: [ 1280.072986] dump_stack+0x1b2/0x281 [ 1280.072999] warn_alloc.cold+0x96/0x1cc [ 1280.079906] syz-executor.1 cpuset= [ 1280.082673] ? zone_watermark_ok_safe+0x220/0x220 [ 1280.082683] ? usleep_range+0x130/0x130 [ 1280.082691] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1280.082702] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1280.082712] ? run_timer_softirq+0x5a0/0x5a0 [ 1280.082728] __alloc_pages_nodemask+0x2127/0x2720 [ 1280.082742] ? lock_acquire+0x170/0x3f0 [ 1280.082758] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1280.082770] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1280.082785] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1280.082801] ? ion_page_pool_remove+0xc0/0x280 [ 1280.082814] alloc_pages_current+0x155/0x260 [ 1280.082827] ion_page_pool_alloc+0x118/0x1b0 [ 1280.082839] ion_system_heap_allocate+0x133/0x8c0 [ 1280.082850] ? _raw_spin_unlock+0x29/0x40 [ 1280.082860] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1280.082871] ? ion_system_contig_heap_create+0x130/0x130 [ 1280.082881] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1280.082893] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1280.082905] ion_alloc+0x27a/0x810 [ 1280.082920] ? ion_dma_buf_release+0x40/0x40 [ 1280.082932] ? __might_fault+0x177/0x1b0 [ 1280.082947] ion_ioctl+0xea/0x1f0 [ 1280.090050] / [ 1280.091815] ? ion_query_heaps+0x360/0x360 [ 1280.093952] mems_allowed=0-1 [ 1280.101822] ? lock_acquire+0x170/0x3f0 [ 1280.101831] ? lock_downgrade+0x740/0x740 [ 1280.101842] ? ion_query_heaps+0x360/0x360 [ 1280.111204] 0 [ 1280.113746] do_vfs_ioctl+0x75a/0xff0 [ 1280.117345] 0 [ 1280.121300] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.121308] ? lock_downgrade+0x740/0x740 [ 1280.121321] ? __fget+0x225/0x360 [ 1280.140027] 0 [ 1280.143652] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.148033] 0 [ 1280.152854] ? security_file_ioctl+0x83/0xb0 [ 1280.152863] SyS_ioctl+0x7f/0xb0 [ 1280.152872] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.171522] do_syscall_64+0x1d5/0x640 [ 1280.176071] Node 1 [ 1280.180466] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.180474] RIP: 0033:0x45e219 [ 1280.200026] Normal free:27040kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:16248kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1280.204113] RSP: 002b:00007fe088932c68 EFLAGS: 00000246 [ 1280.209100] lowmem_reserve[]: [ 1280.213913] ORIG_RAX: 0000000000000010 [ 1280.213920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1280.213925] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1280.213930] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1280.213937] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1280.230007] 0 [ 1280.231148] R13: 00007fffe4af335f R14: 00007fe0889339c0 R15: 000000000119c034 [ 1280.235620] 0 [ 1280.239351] mems_allowed=0-1 [ 1280.249637] CPU: 1 PID: 12483 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1280.251097] 2717 [ 1280.252826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.256609] 2718 [ 1280.258389] Call Trace: [ 1280.270012] 2718 [ 1280.270332] dump_stack+0x1b2/0x281 [ 1280.272097] 2718 [ 1280.276051] warn_alloc.cold+0x96/0x1cc [ 1280.282215] ? zone_watermark_ok_safe+0x220/0x220 [ 1280.282237] __alloc_pages_nodemask+0x2127/0x2720 [ 1280.282248] ? lock_acquire+0x170/0x3f0 [ 1280.282262] ? lock_acquire+0x170/0x3f0 [ 1280.299998] Node 0 [ 1280.300775] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1280.303945] DMA32 free:19592kB min:36200kB low:45248kB high:54296kB active_anon:72192kB inactive_anon:40104kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2760kB bounce:0kB free_pcp:388kB local_pcp:128kB free_cma:0kB [ 1280.331416] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1280.331429] ? __mutex_unlock_slowpath+0x75/0x770 [ 1280.331442] alloc_pages_current+0x155/0x260 [ 1280.331457] ion_page_pool_alloc+0x118/0x1b0 [ 1280.331468] ion_system_heap_allocate+0x133/0x8c0 [ 1280.379980] lowmem_reserve[]: [ 1280.381844] ? _raw_spin_unlock+0x29/0x40 [ 1280.383614] 0 [ 1280.386702] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1280.409969] 0 [ 1280.410509] ? ion_system_contig_heap_create+0x130/0x130 [ 1280.412540] 0 [ 1280.416150] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1280.418275] 0 [ 1280.422227] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1280.422239] ion_alloc+0x27a/0x810 [ 1280.422253] ? ion_dma_buf_release+0x40/0x40 [ 1280.422264] ? __might_fault+0x177/0x1b0 [ 1280.422276] ion_ioctl+0xea/0x1f0 [ 1280.422285] ? ion_query_heaps+0x360/0x360 [ 1280.422298] ? lock_acquire+0x170/0x3f0 [ 1280.422306] ? lock_downgrade+0x740/0x740 [ 1280.422314] ? ion_query_heaps+0x360/0x360 [ 1280.422325] do_vfs_ioctl+0x75a/0xff0 [ 1280.422335] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.422344] ? lock_downgrade+0x740/0x740 [ 1280.422357] ? __fget+0x225/0x360 [ 1280.422366] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.422377] ? security_file_ioctl+0x83/0xb0 [ 1280.422385] SyS_ioctl+0x7f/0xb0 [ 1280.422394] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.439967] 0 [ 1280.442152] do_syscall_64+0x1d5/0x640 [ 1280.446965] 0 [ 1280.475227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.475235] RIP: 0033:0x45e219 [ 1280.475239] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.475252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1280.480715] 0 [ 1280.485493] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1280.485500] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.494259] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1280.494265] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1280.503297] 0 [ 1280.506996] CPU: 0 PID: 12473 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1280.513137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.514913] Node 0 [ 1280.520333] Call Trace: [ 1280.520351] dump_stack+0x1b2/0x281 [ 1280.520365] warn_alloc.cold+0x96/0x1cc [ 1280.522138] DMA: [ 1280.527134] ? zone_watermark_ok_safe+0x220/0x220 [ 1280.528905] 60*4kB [ 1280.533722] ? usleep_range+0x130/0x130 [ 1280.533731] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1280.533742] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1280.533753] ? run_timer_softirq+0x5a0/0x5a0 [ 1280.537264] (U) [ 1280.541660] __alloc_pages_nodemask+0x2127/0x2720 [ 1280.541676] ? lock_acquire+0x170/0x3f0 [ 1280.545706] 3*8kB [ 1280.549143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1280.553359] (U) [ 1280.557301] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1280.561430] 11*16kB [ 1280.565636] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1280.569402] (U) [ 1280.573797] alloc_pages_current+0x155/0x260 [ 1280.573811] ion_page_pool_alloc+0x118/0x1b0 [ 1280.577926] 3*32kB [ 1280.581358] ion_system_heap_allocate+0x133/0x8c0 [ 1280.581373] ? _raw_spin_unlock+0x29/0x40 [ 1280.585318] (U) [ 1280.589707] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1280.593064] 1*64kB [ 1280.597001] ? ion_system_contig_heap_create+0x130/0x130 [ 1280.598771] (U) [ 1280.602636] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1280.602647] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1280.602659] ion_alloc+0x27a/0x810 [ 1280.604442] 1*128kB [ 1280.609615] ? ion_dma_buf_release+0x40/0x40 [ 1280.612790] (U) [ 1280.620478] ? __might_fault+0x177/0x1b0 [ 1280.620492] ion_ioctl+0xea/0x1f0 [ 1280.627749] 0*256kB [ 1280.629533] ? ion_query_heaps+0x360/0x360 [ 1280.636809] 0*512kB [ 1280.644136] ? lock_acquire+0x170/0x3f0 [ 1280.644144] ? lock_downgrade+0x740/0x740 [ 1280.644154] ? ion_query_heaps+0x360/0x360 [ 1280.651413] 0*1024kB [ 1280.658655] do_vfs_ioctl+0x75a/0xff0 [ 1280.660447] 1*2048kB [ 1280.668294] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.677633] (M) [ 1280.679837] ? lock_downgrade+0x740/0x740 [ 1280.682404] 2*4096kB [ 1280.686000] ? __fget+0x225/0x360 [ 1280.689957] (UM) [ 1280.691987] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.696799] = 10968kB [ 1280.699015] ? security_file_ioctl+0x83/0xb0 [ 1280.702972] Node 0 [ 1280.708037] SyS_ioctl+0x7f/0xb0 [ 1280.708046] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.713061] DMA32: [ 1280.717450] do_syscall_64+0x1d5/0x640 [ 1280.719407] 2032*4kB [ 1280.724235] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.724245] RIP: 0033:0x45e219 [ 1280.739912] (UME) [ 1280.741568] RSP: 002b:00007f53e7037c68 EFLAGS: 00000246 [ 1280.743872] 996*8kB [ 1280.749305] ORIG_RAX: 0000000000000010 [ 1280.769902] (UME) [ 1280.771208] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1280.773163] 150*16kB [ 1280.778068] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1280.789892] (UME) [ 1280.792653] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1280.797471] 16*32kB [ 1280.800986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1280.800991] R13: 00007fff7b7a9f0f R14: 00007f53e70389c0 R15: 000000000119c034 [ 1280.801656] Node 0 [ 1280.808258] (UM) [ 1280.809666] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1280.824784] 7*64kB [ 1280.826060] lowmem_reserve[]: [ 1280.834871] (U) [ 1280.839099] 0 [ 1280.844723] syz-executor.1: [ 1280.847093] 0 [ 1280.855481] page allocation failure: order:0 [ 1280.857612] 0 [ 1280.860024] 1*128kB [ 1280.863451] 0 [ 1280.865492] (U) [ 1280.869440] 0 [ 1280.875923] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1280.878526] (null) [ 1280.878532] syz-executor.1 cpuset= [ 1280.882164] Node 1 [ 1280.886982] / [ 1280.888119] Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:16248kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1280.895990] 0*256kB [ 1280.899561] lowmem_reserve[]: [ 1280.906625] mems_allowed=0-1 [ 1280.910286] 0 0 0 0 0 [ 1280.910305] Node 0 DMA: 60*4kB (U) 3*8kB (U) 11*16kB (U) 3*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB [ 1280.926118] CPU: 1 PID: 12483 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1280.928489] 1*2048kB [ 1280.935740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.935743] Call Trace: [ 1280.935760] dump_stack+0x1b2/0x281 [ 1280.935773] warn_alloc.cold+0x96/0x1cc [ 1280.935785] ? zone_watermark_ok_safe+0x220/0x220 [ 1280.935794] ? usleep_range+0x130/0x130 [ 1280.935801] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1280.935813] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1280.935823] ? run_timer_softirq+0x5a0/0x5a0 [ 1280.935840] __alloc_pages_nodemask+0x2127/0x2720 [ 1280.935855] ? lock_acquire+0x170/0x3f0 [ 1280.938446] (M) [ 1280.945232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1280.945243] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1280.945258] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1280.945278] alloc_pages_current+0x155/0x260 [ 1280.959846] 2*4096kB [ 1280.962098] ion_page_pool_alloc+0x118/0x1b0 [ 1280.964300] (UM) [ 1280.966346] ion_system_heap_allocate+0x133/0x8c0 [ 1281.019846] = 10968kB [ 1281.026115] ? _raw_spin_unlock+0x29/0x40 [ 1281.028239] Node 0 [ 1281.031766] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1281.031776] ? ion_system_contig_heap_create+0x130/0x130 [ 1281.031787] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1281.031800] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1281.049823] DMA32: [ 1281.063490] ion_alloc+0x27a/0x810 [ 1281.063506] ? ion_dma_buf_release+0x40/0x40 [ 1281.063517] ? __might_fault+0x177/0x1b0 [ 1281.063529] ion_ioctl+0xea/0x1f0 [ 1281.063538] ? ion_query_heaps+0x360/0x360 [ 1281.063551] ? lock_acquire+0x170/0x3f0 [ 1281.063559] ? lock_downgrade+0x740/0x740 [ 1281.063567] ? ion_query_heaps+0x360/0x360 [ 1281.063576] do_vfs_ioctl+0x75a/0xff0 [ 1281.063587] ? ioctl_preallocate+0x1a0/0x1a0 [ 1281.063597] ? lock_downgrade+0x740/0x740 [ 1281.079828] 2000*4kB [ 1281.085208] ? __fget+0x225/0x360 [ 1281.109818] (UME) [ 1281.110982] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.114926] 915*8kB [ 1281.119748] ? security_file_ioctl+0x83/0xb0 [ 1281.139823] (UME) [ 1281.142985] SyS_ioctl+0x7f/0xb0 [ 1281.146930] 131*16kB [ 1281.148887] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.169800] (UME) [ 1281.170389] do_syscall_64+0x1d5/0x640 [ 1281.174764] 10*32kB [ 1281.176814] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1281.190294] (UM) [ 1281.192107] RIP: 0033:0x45e219 [ 1281.197006] 5*64kB [ 1281.202431] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.202440] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1281.202446] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1281.202451] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.202456] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1281.202460] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1281.207240] 0*512kB [ 1281.219812] (U) [ 1281.226452] warn_alloc_show_mem: 2 callbacks suppressed [ 1281.226455] Mem-Info: [ 1281.226505] 1*128kB [ 1281.230145] 0*1024kB [ 1281.239808] (U) [ 1281.246258] active_anon:18148 inactive_anon:14088 isolated_anon:0 [ 1281.246258] active_file:15 inactive_file:15 isolated_file:0 [ 1281.246258] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1281.246258] slab_reclaimable:15779 slab_unreclaimable:124142 [ 1281.246258] mapped:43856 shmem:15110 pagetables:745 bounce:0 [ 1281.246258] free:13988 free_pcp:122 free_cma:0 [ 1281.246470] 0*256kB [ 1281.250289] Node 0 active_anon:72192kB inactive_anon:40104kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175424kB dirty:0kB writeback:0kB shmem:44124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1281.250302] Node 1 active_anon:400kB inactive_anon:16248kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1281.250305] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.250323] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1281.250342] Node 0 DMA32 free:18160kB min:36200kB low:45248kB high:54296kB active_anon:72192kB inactive_anon:40104kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2760kB bounce:0kB free_pcp:368kB local_pcp:240kB free_cma:0kB [ 1281.250365] lowmem_reserve[]: [ 1281.278462] 0*512kB [ 1281.283706] 0*2048kB [ 1281.285527] 0*1024kB [ 1281.289478] 0*4096kB [ 1281.299767] 0*2048kB [ 1281.309125] = 19584kB [ 1281.333680] 0*4096kB [ 1281.340330] 0 [ 1281.359759] = 18184kB [ 1281.364538] 0 [ 1281.366657] Node 0 [ 1281.368953] 0 0 [ 1281.393439] Normal: [ 1281.406886] Node 0 [ 1281.419759] 0*4kB [ 1281.436835] 0 [ 1281.469991] Normal: [ 1281.527204] 0*4kB [ 1281.529303] Node 0 [ 1281.539857] 0*8kB [ 1281.541244] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.543099] 0*16kB [ 1281.544876] lowmem_reserve[]: [ 1281.547261] 0*32kB [ 1281.549033] 0 0 [ 1281.554776] 0*8kB [ 1281.559710] 0 [ 1281.559946] 0*16kB [ 1281.561708] 0 [ 1281.563985] 0*32kB [ 1281.566106] 0 [ 1281.568318] 0*64kB [ 1281.599500] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1281.621041] Node 1 [ 1281.627835] Node 1 [ 1281.627849] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:400kB inactive_anon:16248kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:220kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1281.627853] lowmem_reserve[]: [ 1281.634434] Normal: [ 1281.667555] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1281.676447] Node 1 Normal: 112*4kB (UM) 27*8kB (UM) 13*16kB (UM) 811*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1281.694022] 112*4kB (UM) 27*8kB (UM) 13*16kB (UM) 811*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1281.700206] 0 0 0 0 0 [ 1281.708601] Node 0 DMA: 60*4kB (U) 3*8kB (U) 11*16kB (U) 3*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10968kB [ 1281.733857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.739671] Node 0 DMA32: 2001*4kB (UME) 915*8kB (UME) 131*16kB (UME) 10*32kB (UM) 5*64kB (U) 1*128kB (U) [ 1281.742758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.742766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.769671] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB [ 1281.770324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.776184] Node 0 [ 1281.799685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.809668] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1281.818381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.830402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.838979] 15140 total pagecache pages [ 1281.843087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.843284] Node 1 [ 1281.852578] 0 pages in swap cache [ 1281.855753] syz-executor.1: [ 1281.858237] Swap cache stats: add 0, delete 0, find 0/0 [ 1281.858245] page allocation failure: order:0 [ 1281.861284] 15140 total pagecache pages [ 1281.861292] 0 pages in swap cache [ 1281.867149] , mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 1281.871358] Free swap = 0kB [ 1281.874997] (null) [ 1281.878426] Total swap = 0kB [ 1281.893794] Normal: 112*4kB (UM) 27*8kB (UM) 13*16kB (UM) 811*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1281.906573] Swap cache stats: add 0, delete 0, find 0/0 [ 1281.912257] Free swap = 0kB [ 1281.913417] syz-executor.1 cpuset= [ 1281.915258] Total swap = 0kB [ 1281.915265] 2097051 pages RAM [ 1281.915268] 0 pages HighMem/MovableOnly [ 1281.915272] 363840 pages reserved [ 1281.915277] 0 pages cma reserved [ 1281.915284] Out of memory (oom_kill_allocating_task): Kill process 12512 (systemd-journal) score 0 or sacrifice child [ 1281.915310] Killed process 12512 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1300kB [ 1281.918953] / [ 1281.921962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.941126] 2097051 pages RAM [ 1281.968436] oom_reaper: reaped process 12512 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1300kB [ 1281.980579] mems_allowed=0-1 [ 1281.984428] CPU: 1 PID: 12483 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1281.992291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.001620] Call Trace: [ 1282.004192] dump_stack+0x1b2/0x281 [ 1282.007799] warn_alloc.cold+0x96/0x1cc [ 1282.011845] ? zone_watermark_ok_safe+0x220/0x220 [ 1282.016673] ? usleep_range+0x130/0x130 [ 1282.020623] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1282.025715] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1282.030709] ? run_timer_softirq+0x5a0/0x5a0 [ 1282.035107] __alloc_pages_nodemask+0x2127/0x2720 [ 1282.039955] ? format_decode+0x890/0x890 [ 1282.043994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.048812] ? widen_string+0x200/0x200 [ 1282.052766] ? __lock_acquire+0x5fc/0x3f20 [ 1282.056977] ? __lock_acquire+0x5fc/0x3f20 [ 1282.061192] alloc_pages_vma+0xd2/0x6d0 [ 1282.065149] __handle_mm_fault+0x25fa/0x4620 [ 1282.069538] ? vm_insert_page+0x7c0/0x7c0 [ 1282.073666] ? do_raw_spin_unlock+0x164/0x220 [ 1282.078145] handle_mm_fault+0x391/0x860 [ 1282.082183] __get_user_pages+0x445/0x11d0 [ 1282.086396] ? follow_page_mask+0x18a0/0x18a0 [ 1282.090867] ? lock_acquire+0x170/0x3f0 [ 1282.094816] ? get_user_pages_unlocked+0xb4/0x2e0 [ 1282.099646] get_user_pages_unlocked+0x1df/0x2e0 [ 1282.104385] ? get_user_pages_locked+0x3e0/0x3e0 [ 1282.109117] ? get_user_pages_fast+0x16e/0x2b0 [ 1282.113678] get_user_pages_fast+0x21b/0x2b0 [ 1282.118068] ? __get_user_pages_fast+0x2d0/0x2d0 [ 1282.122799] ? should_fail+0x327/0x3f0 [ 1282.126664] get_futex_key+0x1d2/0x1160 [ 1282.130620] ? futex_lock_pi_atomic+0x2e0/0x2e0 [ 1282.135263] ? refill_stock+0x260/0x260 [ 1282.139215] futex_wake+0xc6/0x3c0 [ 1282.142734] ? get_futex_key+0x1160/0x1160 [ 1282.146948] ? bsearch+0x84/0xa0 [ 1282.150290] ? cmp_ex_sort+0xb0/0xb0 [ 1282.153980] do_futex+0x287/0x1980 [ 1282.157506] ? ex_handler_default+0x14/0x90 [ 1282.161803] ? phys_mem_access_encrypted+0x10/0x10 [ 1282.166707] ? fixup_exception+0x93/0xd0 [ 1282.170743] ? no_context+0x9c/0x7c0 [ 1282.174434] ? futex_exit_release+0x220/0x220 [ 1282.178905] ? force_sig_info_fault.constprop.0+0x260/0x260 [ 1282.184605] ? lock_downgrade+0x740/0x740 [ 1282.188728] ? mm_fault_error+0x25c/0x2c0 [ 1282.192854] ? __do_page_fault+0x159/0xad0 [ 1282.197065] ? retint_kernel+0x2d/0x2d [ 1282.200929] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1282.206026] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1282.210769] SyS_futex+0x1da/0x290 [ 1282.214288] ? do_futex+0x1980/0x1980 [ 1282.218068] mm_release+0x250/0x2d0 [ 1282.221674] do_exit+0x56f/0x2850 [ 1282.225107] ? mm_update_next_owner+0x5b0/0x5b0 [ 1282.229764] ? get_signal+0x323/0x1ca0 [ 1282.233631] ? lock_acquire+0x170/0x3f0 [ 1282.237581] ? lock_downgrade+0x740/0x740 [ 1282.241750] do_group_exit+0x100/0x2e0 [ 1282.245614] get_signal+0x38d/0x1ca0 [ 1282.249307] ? ion_dma_buf_release+0x40/0x40 [ 1282.253697] do_signal+0x7c/0x1550 [ 1282.257214] ? ion_ioctl+0x13a/0x1f0 [ 1282.260903] ? ion_query_heaps+0x360/0x360 [ 1282.265114] ? setup_sigcontext+0x820/0x820 [ 1282.269412] ? lock_downgrade+0x740/0x740 [ 1282.273537] ? ion_query_heaps+0x360/0x360 [ 1282.277748] ? do_vfs_ioctl+0xe2/0xff0 [ 1282.281614] ? ioctl_preallocate+0x1a0/0x1a0 [ 1282.286008] ? lock_downgrade+0x740/0x740 [ 1282.290135] ? __fget+0x225/0x360 [ 1282.293564] ? task_work_add+0x87/0xe0 [ 1282.297426] ? exit_to_usermode_loop+0x41/0x200 [ 1282.302071] exit_to_usermode_loop+0x160/0x200 [ 1282.306640] ? SyS_ioctl+0x5c/0xb0 [ 1282.310158] do_syscall_64+0x4a3/0x640 [ 1282.314025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1282.319195] RIP: 0033:0x45e219 [ 1282.322361] RSP: 002b:00007fe088953c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.330055] RAX: fffffffffffffff4 RBX: 0000000000000003 RCX: 000000000045e219 [ 1282.337301] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1282.344547] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1282.351805] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1282.359051] R13: 00007fffe4af335f R14: 00007fe0889549c0 R15: 000000000119bf8c [ 1282.367605] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1282.375055] 0 pages HighMem/MovableOnly [ 1282.386892] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1282.389688] systemd-journal cpuset= [ 1282.403681] 363840 pages reserved [ 1282.409792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1282.410829] syz-fuzzer cpuset= [ 1282.419302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1282.419304] / mems_allowed=0-1 [ 1282.422535] / mems_allowed=0-1 [ 1282.422606] CPU: 0 PID: 12512 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1282.422613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.435003] 0 pages cma reserved [ 1282.437786] Call Trace: [ 1282.460988] dump_stack+0x1b2/0x281 [ 1282.464597] warn_alloc.cold+0x96/0x1cc [ 1282.468548] ? zone_watermark_ok_safe+0x220/0x220 [ 1282.473366] ? usleep_range+0x130/0x130 [ 1282.477315] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1282.482396] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1282.487388] ? run_timer_softirq+0x5a0/0x5a0 [ 1282.491777] __alloc_pages_nodemask+0x2127/0x2720 [ 1282.496606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.501436] alloc_pages_current+0x155/0x260 [ 1282.505821] filemap_fault+0xea3/0x1980 [ 1282.509784] ext4_filemap_fault+0x84/0xb0 [ 1282.513907] __do_fault+0xfa/0x380 [ 1282.517438] __handle_mm_fault+0x2497/0x4620 [ 1282.521824] ? ____cache_alloc_node+0xf4/0x1d0 [ 1282.526380] ? vm_insert_page+0x7c0/0x7c0 [ 1282.530505] ? check_stack_object+0x86/0xa0 [ 1282.534809] handle_mm_fault+0x391/0x860 [ 1282.538860] __do_page_fault+0x549/0xad0 [ 1282.542902] ? spurious_fault+0x640/0x640 [ 1282.547026] ? do_page_fault+0x60/0x500 [ 1282.550979] ? page_fault+0x2f/0x50 [ 1282.554585] page_fault+0x45/0x50 [ 1282.558014] RIP: 8f8d2040:0x7fff41744dc0 [ 1282.562057] RSP: 41744e00:0000000000000001 EFLAGS: 7f20b864b3a0 [ 1282.562079] CPU: 1 PID: 11879 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 1282.575646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.579857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1282.584987] Call Trace: [ 1282.596294] dump_stack+0x1b2/0x281 [ 1282.599732] 15140 total pagecache pages [ 1282.599909] dump_header+0x178/0x82f [ 1282.603858] 0 pages in swap cache [ 1282.607546] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1282.616059] ? ___ratelimit+0x2cd/0x530 [ 1282.620030] oom_kill_process.cold+0x10/0xb18 [ 1282.624526] out_of_memory+0xe3e/0x1190 [ 1282.628513] ? oom_killer_disable+0x1c0/0x1c0 [ 1282.629494] Swap cache stats: add 0, delete 0, find 0/0 [ 1282.633004] ? mutex_trylock+0x152/0x1a0 [ 1282.638349] Free swap = 0kB [ 1282.642396] __alloc_pages_nodemask+0x23e1/0x2720 [ 1282.642415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.642437] alloc_pages_current+0x155/0x260 [ 1282.642448] filemap_fault+0xea3/0x1980 [ 1282.642467] ext4_filemap_fault+0x84/0xb0 [ 1282.659727] Total swap = 0kB [ 1282.663454] __do_fault+0xfa/0x380 [ 1282.667570] 2097051 pages RAM [ 1282.670565] __handle_mm_fault+0x2497/0x4620 [ 1282.670574] ? vm_insert_page+0x7c0/0x7c0 [ 1282.670593] handle_mm_fault+0x391/0x860 [ 1282.670606] __do_page_fault+0x549/0xad0 [ 1282.679789] 0 pages HighMem/MovableOnly [ 1282.681600] ? spurious_fault+0x640/0x640 [ 1282.685723] 363840 pages reserved [ 1282.689769] ? do_page_fault+0x60/0x500 [ 1282.689778] ? page_fault+0x2f/0x50 [ 1282.689785] page_fault+0x45/0x50 [ 1282.689793] RIP: 2fd380:0x129eb4e46a1 [ 1282.689797] RSP: 02a6:000000c000cf9e40 EFLAGS: 00000003 [ 1282.690011] syz-executor.2: [ 1282.700957] 0 pages cma reserved [ 1282.705749] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1282.746820] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1282.756132] CPU: 1 PID: 12475 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1282.764019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.773362] Call Trace: [ 1282.775948] dump_stack+0x1b2/0x281 [ 1282.779568] warn_alloc.cold+0x96/0x1cc [ 1282.783538] ? zone_watermark_ok_safe+0x220/0x220 [ 1282.788458] ? usleep_range+0x130/0x130 [ 1282.792418] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1282.797519] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1282.802652] ? run_timer_softirq+0x5a0/0x5a0 [ 1282.807064] __alloc_pages_nodemask+0x2127/0x2720 [ 1282.811916] ? lock_acquire+0x170/0x3f0 [ 1282.815175] warn_alloc_show_mem: 2 callbacks suppressed [ 1282.815178] Mem-Info: [ 1282.815889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.828451] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1282.829720] active_anon:18048 inactive_anon:14088 isolated_anon:0 [ 1282.829720] active_file:15 inactive_file:15 isolated_file:0 [ 1282.829720] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1282.829720] slab_reclaimable:15770 slab_unreclaimable:124131 [ 1282.829720] mapped:43856 shmem:15110 pagetables:745 bounce:0 [ 1282.829720] free:13958 free_pcp:250 free_cma:0 [ 1282.832947] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1282.871648] alloc_pages_current+0x155/0x260 [ 1282.876058] ion_page_pool_alloc+0x118/0x1b0 [ 1282.880639] ion_system_heap_allocate+0x133/0x8c0 [ 1282.885475] ? _raw_spin_unlock+0x29/0x40 [ 1282.889617] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1282.894537] ? ion_system_contig_heap_create+0x130/0x130 [ 1282.899983] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1282.904997] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1282.909430] Node 0 active_anon:71792kB inactive_anon:40104kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175424kB dirty:0kB writeback:0kB shmem:44124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.909835] ion_alloc+0x27a/0x810 [ 1282.940950] ? ion_dma_buf_release+0x40/0x40 [ 1282.945352] ? __might_fault+0x177/0x1b0 [ 1282.949406] ion_ioctl+0xea/0x1f0 [ 1282.952856] ? ion_query_heaps+0x360/0x360 [ 1282.957085] ? lock_acquire+0x170/0x3f0 [ 1282.961050] ? lock_downgrade+0x740/0x740 [ 1282.965187] ? ion_query_heaps+0x360/0x360 [ 1282.969426] do_vfs_ioctl+0x75a/0xff0 [ 1282.969922] Node 1 active_anon:400kB inactive_anon:16248kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.973214] ? ioctl_preallocate+0x1a0/0x1a0 [ 1283.004133] ? lock_downgrade+0x740/0x740 [ 1283.008276] ? __fget+0x225/0x360 [ 1283.011738] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.015702] ? security_file_ioctl+0x83/0xb0 [ 1283.020107] SyS_ioctl+0x7f/0xb0 [ 1283.023467] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.027431] do_syscall_64+0x1d5/0x640 [ 1283.029411] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.031327] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1283.031336] RIP: 0033:0x45e219 [ 1283.061062] lowmem_reserve[]: [ 1283.062600] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 [ 1283.065769] 0 [ 1283.068848] ORIG_RAX: 0000000000000010 [ 1283.074791] 2717 [ 1283.075964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1283.080674] 2718 [ 1283.081954] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1283.089197] 2718 [ 1283.091233] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1283.091238] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1283.091243] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1283.172713] Mem-Info: [ 1283.175163] active_anon:18032 inactive_anon:14088 isolated_anon:0 [ 1283.175163] active_file:40 inactive_file:640 isolated_file:0 [ 1283.175163] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1283.175163] slab_reclaimable:15742 slab_unreclaimable:124008 [ 1283.175163] mapped:44231 shmem:15110 pagetables:737 bounce:0 [ 1283.175163] free:78833 free_pcp:376 free_cma:0 [ 1283.178879] 2718 [ 1283.212212] Node 0 active_anon:71736kB inactive_anon:40104kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175424kB dirty:0kB writeback:0kB shmem:44124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1283.242395] Node 0 DMA32 free:41144kB min:36200kB low:45248kB high:54296kB active_anon:71736kB inactive_anon:40104kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2760kB bounce:0kB free_pcp:1184kB local_pcp:636kB free_cma:0kB [ 1283.253744] Node 1 active_anon:692kB inactive_anon:16248kB active_file:104kB inactive_file:5704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3600kB dirty:0kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1283.310001] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.343836] lowmem_reserve[]: 0 0 0 0 0 [ 1283.344820] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1283.355806] Node 0 DMA32 free:40652kB min:36200kB low:45248kB high:54296kB active_anon:71736kB inactive_anon:40104kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2760kB bounce:0kB free_pcp:1272kB local_pcp:556kB free_cma:0kB [ 1283.360605] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.393826] lowmem_reserve[]: 0 0 0 0 0 [ 1283.419058] lowmem_reserve[]: 0 0 0 0 0 [ 1283.425445] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.427270] Node 1 Normal free:256108kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:16248kB active_file:404kB inactive_file:10704kB unevictable:0kB writepending:296kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:188kB bounce:0kB free_pcp:180kB local_pcp:40kB free_cma:0kB [ 1283.453671] lowmem_reserve[]: [ 1283.483802] lowmem_reserve[]: 0 0 0 0 0 [ 1283.488361] 0 [ 1283.497079] Node 0 DMA: 60*4kB (U) 3*8kB (U) 11*16kB (U) 3*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10968kB [ 1283.509287] 0 0 0 0 [ 1283.517343] Node 0 DMA32: 1970*4kB (UME) 1088*8kB (UME) 152*16kB (UME) 16*32kB (UM) 74*64kB (UM) 20*128kB (U) 11*256kB (U) 0*512kB 12*1024kB (U) 0*2048kB 0*4096kB = 41928kB [ 1283.519479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1283.519520] Node 1 Normal: 1*4kB (M) 0*8kB 1*16kB (U) 607*32kB (U) 1118*64kB (U) 4*128kB (UM) 1*256kB (M) 1*512kB (M) 153*1024kB (U) 0*2048kB 0*4096kB = 248948kB [ 1283.549974] Node 1 Normal free:240236kB min:53696kB low:67120kB high:80544kB active_anon:692kB inactive_anon:16248kB active_file:404kB inactive_file:11304kB unevictable:0kB writepending:296kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:188kB bounce:0kB free_pcp:400kB local_pcp:128kB free_cma:0kB [ 1283.565131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.591474] lowmem_reserve[]: 0 0 0 0 0 [ 1283.604130] Node 0 DMA: 60*4kB (U) 3*8kB (U) 11*16kB (U) 3*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10968kB [ 1283.618454] Node 0 DMA32: 1970*4kB (UME) 1079*8kB (UME) 152*16kB (UME) 16*32kB (UM) 74*64kB (UM) 20*128kB (U) 11*256kB (U) 0*512kB 12*1024kB (U) 0*2048kB 0*4096kB = 41856kB [ 1283.632662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.634422] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1283.648070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.653779] Node 1 Normal: 1*4kB (M) 1*8kB (U) 0*16kB 1*32kB (U) 975*64kB (U) 4*128kB (UM) 1*256kB (M) 1*512kB (M) 153*1024kB (U) 0*2048kB 0*4096kB = 220396kB [ 1283.666297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.677288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.689185] 18137 total pagecache pages [ 1283.695552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.702669] 0 pages in swap cache [ 1283.708326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.712114] Swap cache stats: add 0, delete 0, find 0/0 [ 1283.721042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.728724] Free swap = 0kB [ 1283.734789] 18211 total pagecache pages [ 1283.738085] Total swap = 0kB [ 1283.741912] 0 pages in swap cache [ 1283.748241] Swap cache stats: add 0, delete 0, find 0/0 [ 1283.749295] 2097051 pages RAM [ 1283.753821] Free swap = 0kB [ 1283.757137] 0 pages HighMem/MovableOnly [ 1283.759950] Total swap = 0kB [ 1283.766863] 2097051 pages RAM [ 1283.767204] 363840 pages reserved [ 1283.770249] 0 pages HighMem/MovableOnly [ 1283.773426] 0 pages cma reserved [ 1283.777374] 363840 pages reserved [ 1283.784612] 0 pages cma reserved [ 1283.787976] Out of memory (oom_kill_allocating_task): Kill process 11879 (syz-fuzzer) score 0 or sacrifice child [ 1283.798830] Killed process 8019 (syz-executor.1) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1283.817102] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1283.823154] oom_reaper: reaped process 8019 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1283.868787] systemd[1]: Failed to start Journal Service. [ 1283.891483] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1283.899585] systemd[1]: systemd-journald.service: Failed with result 'signal'. 19:45:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) 19:45:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:38 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 1283.912535] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1283.925671] systemd[1]: Stopped Journal Service. 19:45:38 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', 0x0}) [ 1283.961745] systemd[1]: Starting Journal Service... 19:45:38 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', 0x0}) 19:45:38 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', 0x0}) [ 1284.119172] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1284.133156] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1284.151578] CPU: 0 PID: 12541 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1284.159479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.168813] Call Trace: [ 1284.171380] dump_stack+0x1b2/0x281 [ 1284.174989] warn_alloc.cold+0x96/0x1cc [ 1284.178941] ? zone_watermark_ok_safe+0x220/0x220 [ 1284.183771] __alloc_pages_nodemask+0x2127/0x2720 [ 1284.188590] ? lock_acquire+0x170/0x3f0 [ 1284.192544] ? lock_acquire+0x170/0x3f0 [ 1284.196499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1284.201323] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1284.206753] ? __mutex_unlock_slowpath+0x75/0x770 [ 1284.211574] alloc_pages_current+0x155/0x260 [ 1284.215965] ion_page_pool_alloc+0x118/0x1b0 [ 1284.220353] ion_system_heap_allocate+0x133/0x8c0 [ 1284.225173] ? ion_alloc+0x187/0x810 [ 1284.228866] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1284.234292] ? ion_system_contig_heap_create+0x130/0x130 [ 1284.239721] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1284.244714] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1284.249537] ion_alloc+0x204/0x810 [ 1284.253060] ? ion_dma_buf_release+0x40/0x40 [ 1284.257447] ? __might_fault+0x177/0x1b0 [ 1284.261497] ion_ioctl+0xea/0x1f0 [ 1284.264938] ? ion_query_heaps+0x360/0x360 [ 1284.269152] ? lock_acquire+0x170/0x3f0 [ 1284.273105] ? lock_downgrade+0x740/0x740 [ 1284.277232] ? ion_query_heaps+0x360/0x360 [ 1284.281447] do_vfs_ioctl+0x75a/0xff0 [ 1284.285230] ? ioctl_preallocate+0x1a0/0x1a0 [ 1284.289615] ? lock_downgrade+0x740/0x740 [ 1284.293743] ? __fget+0x225/0x360 [ 1284.297174] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.301126] ? security_file_ioctl+0x83/0xb0 [ 1284.305512] SyS_ioctl+0x7f/0xb0 [ 1284.308854] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.312806] do_syscall_64+0x1d5/0x640 [ 1284.316676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.321842] RIP: 0033:0x45e219 [ 1284.325115] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.332813] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1284.340059] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1284.347307] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1284.354553] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1284.361800] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1284.387233] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1284.387781] warn_alloc_show_mem: 2 callbacks suppressed [ 1284.387784] Mem-Info: [ 1284.403322] syz-executor.3 cpuset= [ 1284.405167] active_anon:17627 inactive_anon:14087 isolated_anon:0 [ 1284.405167] active_file:31 inactive_file:79 isolated_file:0 [ 1284.405167] unevictable:0 dirty:55 writeback:0 unstable:0 [ 1284.405167] slab_reclaimable:15742 slab_unreclaimable:123452 [ 1284.405167] mapped:43583 shmem:15110 pagetables:697 bounce:0 [ 1284.405167] free:25506 free_pcp:76 free_cma:0 [ 1284.409178] / [ 1284.443797] Node 0 active_anon:69508kB inactive_anon:40096kB active_file:204kB inactive_file:164kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:139384kB dirty:36kB writeback:0kB shmem:44120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1284.477600] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1284.486642] syz-executor.3: [ 1284.491112] Node 1 active_anon:1000kB inactive_anon:16252kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34948kB dirty:184kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1284.493916] page allocation failure: order:4 [ 1284.494458] Node 0 [ 1284.526869] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1284.545718] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1284.545783] mems_allowed=0-1 [ 1284.571519] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1284.572653] systemd-journal cpuset= [ 1284.576640] CPU: 1 PID: 12540 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1284.576641] / mems_allowed=0-1 [ 1284.580246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.580250] Call Trace: [ 1284.580268] dump_stack+0x1b2/0x281 [ 1284.580281] warn_alloc.cold+0x96/0x1cc [ 1284.580292] ? zone_watermark_ok_safe+0x220/0x220 [ 1284.580314] __alloc_pages_nodemask+0x2127/0x2720 [ 1284.580324] ? retint_kernel+0x2d/0x2d [ 1284.580341] ? lock_acquire+0x170/0x3f0 [ 1284.580356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1284.580369] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1284.580383] ? __mutex_unlock_slowpath+0x75/0x770 [ 1284.580397] alloc_pages_current+0x155/0x260 [ 1284.580411] ion_page_pool_alloc+0x118/0x1b0 [ 1284.580422] ion_system_heap_allocate+0x133/0x8c0 [ 1284.580433] ? ion_alloc+0x187/0x810 [ 1284.580443] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1284.580454] ? ion_system_contig_heap_create+0x130/0x130 [ 1284.604592] syz-executor.2 cpuset= [ 1284.607005] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1284.647773] / [ 1284.647879] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1284.686773] ion_alloc+0x204/0x810 [ 1284.690322] ? ion_dma_buf_release+0x40/0x40 [ 1284.694738] ? __might_fault+0x177/0x1b0 [ 1284.697376] mems_allowed=0-1 [ 1284.698895] ion_ioctl+0xea/0x1f0 [ 1284.705423] ? ion_query_heaps+0x360/0x360 [ 1284.709653] ? lock_acquire+0x170/0x3f0 [ 1284.713626] ? lock_downgrade+0x740/0x740 [ 1284.717789] ? ion_query_heaps+0x360/0x360 [ 1284.722028] do_vfs_ioctl+0x75a/0xff0 [ 1284.725821] ? ioctl_preallocate+0x1a0/0x1a0 [ 1284.730213] ? lock_downgrade+0x740/0x740 [ 1284.734358] ? __fget+0x225/0x360 [ 1284.737313] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1284.737801] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.767330] ? security_file_ioctl+0x83/0xb0 [ 1284.771735] SyS_ioctl+0x7f/0xb0 [ 1284.775092] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.779058] do_syscall_64+0x1d5/0x640 [ 1284.782955] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.788122] RIP: 0033:0x45e219 [ 1284.791293] RSP: 002b:00007f53e7037c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.798990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1284.806254] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1284.813506] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1284.820767] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1284.828022] R13: 00007fff7b7a9f0f R14: 00007f53e70389c0 R15: 000000000119c034 [ 1284.838042] CPU: 0 PID: 12538 Comm: systemd-journal Not tainted 4.14.217-syzkaller #0 [ 1284.846014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.855354] Call Trace: [ 1284.857931] dump_stack+0x1b2/0x281 [ 1284.861559] dump_header+0x178/0x82f [ 1284.865262] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1284.870348] ? ___ratelimit+0x2cd/0x530 [ 1284.874304] oom_kill_process.cold+0x10/0xb18 [ 1284.878802] out_of_memory+0xe3e/0x1190 [ 1284.882770] ? oom_killer_disable+0x1c0/0x1c0 [ 1284.887239] ? mutex_trylock+0x152/0x1a0 [ 1284.891279] __alloc_pages_nodemask+0x23e1/0x2720 [ 1284.896105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1284.900932] alloc_pages_current+0x155/0x260 [ 1284.905318] filemap_fault+0xea3/0x1980 [ 1284.909273] ext4_filemap_fault+0x84/0xb0 [ 1284.913397] __do_fault+0xfa/0x380 [ 1284.916915] __handle_mm_fault+0x2497/0x4620 [ 1284.921301] ? vm_insert_page+0x7c0/0x7c0 [ 1284.925428] ? vm_mmap_pgoff+0x168/0x1a0 [ 1284.929464] ? vm_mmap_pgoff+0xcb/0x1a0 [ 1284.933420] handle_mm_fault+0x391/0x860 [ 1284.937459] __do_page_fault+0x549/0xad0 [ 1284.941498] ? spurious_fault+0x640/0x640 [ 1284.945635] ? do_page_fault+0x60/0x500 [ 1284.949586] ? page_fault+0x2f/0x50 [ 1284.953188] page_fault+0x45/0x50 [ 1284.956617] RIP: 0002:0x801 [ 1284.959522] RSP: 9e29d500:00007ffe91b326b0 EFLAGS: 7ffe91b32798 [ 1284.959542] CPU: 1 PID: 12536 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1284.971885] lowmem_reserve[]: [ 1284.973457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1284.973464] 0 [ 1284.976541] Call Trace: [ 1284.990240] dump_stack+0x1b2/0x281 [ 1284.993861] warn_alloc.cold+0x96/0x1cc [ 1284.995253] 2717 [ 1284.997824] ? zone_watermark_ok_safe+0x220/0x220 [ 1284.997859] __alloc_pages_nodemask+0x2127/0x2720 [ 1284.997875] ? lock_acquire+0x170/0x3f0 [ 1284.997906] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1284.997923] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1284.997936] ? __mutex_unlock_slowpath+0x75/0x770 [ 1284.997945] ? __sanitizer_cov_trace_pc+0x46/0x50 [ 1284.997959] alloc_pages_current+0x155/0x260 [ 1285.001028] 2718 [ 1285.004829] ion_page_pool_alloc+0x118/0x1b0 [ 1285.004841] ion_system_heap_allocate+0x133/0x8c0 [ 1285.004852] ? ion_alloc+0x187/0x810 [ 1285.004862] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1285.004873] ? ion_system_contig_heap_create+0x130/0x130 [ 1285.004883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1285.004896] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1285.021312] 2718 [ 1285.023947] ion_alloc+0x204/0x810 [ 1285.028758] 2718 [ 1285.033587] ? ion_dma_buf_release+0x40/0x40 [ 1285.033600] ? __might_fault+0x177/0x1b0 [ 1285.033612] ion_ioctl+0xea/0x1f0 [ 1285.033622] ? ion_query_heaps+0x360/0x360 [ 1285.033635] ? lock_acquire+0x170/0x3f0 [ 1285.033649] ? lock_downgrade+0x740/0x740 [ 1285.049391] ? ion_query_heaps+0x360/0x360 [ 1285.049404] do_vfs_ioctl+0x75a/0xff0 [ 1285.049417] ? ioctl_preallocate+0x1a0/0x1a0 [ 1285.049425] ? lock_downgrade+0x740/0x740 [ 1285.049438] ? __fget+0x225/0x360 [ 1285.055320] Node 0 [ 1285.058569] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.072942] DMA32 free:36196kB min:36200kB low:45248kB high:54296kB active_anon:69696kB inactive_anon:40096kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2620kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 1285.073811] ? security_file_ioctl+0x83/0xb0 [ 1285.075844] lowmem_reserve[]: [ 1285.079367] SyS_ioctl+0x7f/0xb0 [ 1285.079376] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.079387] do_syscall_64+0x1d5/0x640 [ 1285.079406] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1285.085571] 0 [ 1285.085827] RIP: 0033:0x45e219 [ 1285.096544] 0 [ 1285.097504] RSP: 002b:00007f8fa5a54c68 EFLAGS: 00000246 [ 1285.104869] 0 [ 1285.105577] ORIG_RAX: 0000000000000010 [ 1285.115673] 0 [ 1285.117950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1285.125068] 0 [ 1285.125513] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1285.125520] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.127733] Node 0 [ 1285.131688] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1285.131694] R13: 00007ffc9c2201af R14: 00007f8fa5a559c0 R15: 000000000119bf8c [ 1285.136019] CPU: 1 PID: 12533 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1285.161171] Mem-Info: [ 1285.164359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.164363] Call Trace: [ 1285.164379] dump_stack+0x1b2/0x281 [ 1285.164393] warn_alloc.cold+0x96/0x1cc [ 1285.164406] ? zone_watermark_ok_safe+0x220/0x220 [ 1285.164431] __alloc_pages_nodemask+0x2127/0x2720 [ 1285.164444] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1285.164458] ? lock_acquire+0x170/0x3f0 [ 1285.164475] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1285.164493] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1285.164505] ? __mutex_unlock_slowpath+0x75/0x770 [ 1285.164520] alloc_pages_current+0x155/0x260 [ 1285.164533] ion_page_pool_alloc+0x118/0x1b0 [ 1285.164545] ion_system_heap_allocate+0x133/0x8c0 [ 1285.164557] ? ion_alloc+0x187/0x810 [ 1285.164567] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1285.164578] ? ion_system_contig_heap_create+0x130/0x130 [ 1285.171134] active_anon:17611 inactive_anon:14087 isolated_anon:0 [ 1285.171134] active_file:10 inactive_file:39 isolated_file:0 [ 1285.171134] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1285.171134] slab_reclaimable:15742 slab_unreclaimable:123467 [ 1285.171134] mapped:43546 shmem:15110 pagetables:675 bounce:0 [ 1285.171134] free:25061 free_pcp:104 free_cma:0 [ 1285.174974] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1285.174987] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1285.175000] ion_alloc+0x204/0x810 [ 1285.175016] ? ion_dma_buf_release+0x40/0x40 [ 1285.175028] ? __might_fault+0x177/0x1b0 [ 1285.175039] ion_ioctl+0xea/0x1f0 [ 1285.179965] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.184079] ? ion_query_heaps+0x360/0x360 [ 1285.185849] lowmem_reserve[]: [ 1285.189038] ? lock_acquire+0x170/0x3f0 [ 1285.189047] ? lock_downgrade+0x740/0x740 [ 1285.189055] ? ion_query_heaps+0x360/0x360 [ 1285.189064] do_vfs_ioctl+0x75a/0xff0 [ 1285.189075] ? ioctl_preallocate+0x1a0/0x1a0 [ 1285.189085] ? lock_downgrade+0x740/0x740 [ 1285.190903] Node 0 active_anon:69496kB inactive_anon:40096kB active_file:8kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139368kB dirty:0kB writeback:0kB shmem:44120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1285.196231] ? __fget+0x225/0x360 [ 1285.198014] Node 1 active_anon:948kB inactive_anon:16252kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1285.201956] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.201965] ? security_file_ioctl+0x83/0xb0 [ 1285.201976] SyS_ioctl+0x7f/0xb0 [ 1285.201983] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.201994] do_syscall_64+0x1d5/0x640 [ 1285.202011] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1285.204027] 0 [ 1285.211038] RIP: 0033:0x45e219 [ 1285.211043] RSP: 002b:00007f53e7058c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.211053] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1285.211058] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1285.211063] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.211070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1285.212953] Node 0 [ 1285.220195] R13: 00007fff7b7a9f0f R14: 00007f53e70599c0 R15: 000000000119bf8c [ 1285.504762] warn_alloc_show_mem: 2 callbacks suppressed [ 1285.504766] Mem-Info: [ 1285.516047] 0 [ 1285.529125] active_anon:17611 inactive_anon:14087 isolated_anon:0 [ 1285.529125] active_file:41 inactive_file:146 isolated_file:0 [ 1285.529125] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1285.529125] slab_reclaimable:15742 slab_unreclaimable:123544 [ 1285.529125] mapped:43621 shmem:15110 pagetables:675 bounce:0 [ 1285.529125] free:25670 free_pcp:359 free_cma:0 [ 1285.551847] 0 [ 1285.559467] Node 0 active_anon:69496kB inactive_anon:40096kB active_file:48kB inactive_file:160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139368kB dirty:100kB writeback:0kB shmem:44120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1285.567589] 0 [ 1285.576994] Node 1 active_anon:948kB inactive_anon:16252kB active_file:416kB inactive_file:1924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36116kB dirty:0kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1285.584139] 0 [ 1285.667110] Node 0 [ 1285.700907] Node 1 Normal free:56088kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16252kB active_file:336kB inactive_file:1112kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 1285.729612] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.729617] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1285.729634] Node 0 DMA32 free:35784kB min:36200kB low:45248kB high:54296kB active_anon:69496kB inactive_anon:40096kB active_file:8kB inactive_file:504kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2492kB bounce:0kB free_pcp:624kB local_pcp:0kB free_cma:0kB [ 1285.729652] lowmem_reserve[]: 0 0 0 0 0 [ 1285.729670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.729689] lowmem_reserve[]: 0 0 0 0 0 [ 1285.729706] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16252kB active_file:0kB inactive_file:608kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:520kB local_pcp:520kB free_cma:0kB [ 1285.729725] lowmem_reserve[]: 0 0 0 0 0 [ 1285.729744] Node 0 DMA: 60*4kB (U) 3*8kB (U) 11*16kB (U) 3*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11032kB [ 1285.729815] Node 0 DMA32: 1778*4kB (ME) 949*8kB (ME) 137*16kB (ME) 11*32kB (UM) 174*64kB (UM) 25*128kB [ 1285.756375] lowmem_reserve[]: [ 1285.881592] (UM) 12*256kB (U) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36192kB [ 1285.893677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1285.896367] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.904548] Node 1 Normal: 64*4kB (UM) 32*8kB (M) 54*16kB (UM) 39*32kB (UM) 167*64kB (UM) 167*128kB (UM) 47*256kB (UM) 7*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 54400kB [ 1285.933941] 0 [ 1285.946079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1285.946086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1285.946092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1285.946098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1285.946101] 15322 total pagecache pages [ 1285.946109] 0 pages in swap cache [ 1285.946115] Swap cache stats: add 0, delete 0, find 0/0 [ 1285.946119] Free swap = 0kB [ 1285.946122] Total swap = 0kB [ 1285.946128] 2097051 pages RAM [ 1285.946131] 0 pages HighMem/MovableOnly [ 1285.946134] 363840 pages reserved [ 1285.946137] 0 pages cma reserved [ 1286.021288] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1286.028015] Node 0 DMA32 free:35904kB min:36200kB low:45248kB high:54296kB active_anon:69500kB inactive_anon:40096kB active_file:0kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.057116] lowmem_reserve[]: 0 0 0 0 0 [ 1286.061286] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.088432] lowmem_reserve[]: 0 0 0 0 0 [ 1286.093119] Node 1 Normal free:55308kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:16252kB active_file:188kB inactive_file:500kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:208kB bounce:0kB free_pcp:184kB local_pcp:116kB free_cma:0kB [ 1286.125129] 0 0 0 0 [ 1286.127480] Node 0 DMA: 60*4kB (U) 3*8kB (U) 11*16kB (U) 3*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11032kB [ 1286.145337] Node 0 DMA32: 2097*4kB (ME) 949*8kB (ME) 138*16kB (UME) 10*32kB (M) 145*64kB (UM) 25*128kB (UM) 11*256kB (U) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 35852kB [ 1286.164506] lowmem_reserve[]: 0 0 0 0 0 [ 1286.168517] Node 0 DMA: 60*4kB (U) 3*8kB (U) 11*16kB (U) 3*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 11032kB [ 1286.185807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1286.196755] Node 0 DMA32: 2097*4kB (ME) 950*8kB (UME) 137*16kB (ME) 10*32kB (M) 147*64kB (UM) 25*128kB (UM) 11*256kB (U) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 35972kB [ 1286.216016] Node 1 Normal: 75*4kB (M) 65*8kB (M) 50*16kB (UM) 39*32kB (M) 128*64kB (UM) 182*128kB (UM) 47*256kB (UM) 7*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 54068kB [ 1286.235237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1286.246027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.258130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1286.266740] Node 1 Normal: 75*4kB (M) 65*8kB (M) 50*16kB (UM) 39*32kB (M) 128*64kB (UM) 182*128kB (UM) 47*256kB (UM) 7*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 54068kB [ 1286.286553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.297450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.309582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1286.318157] 15169 total pagecache pages [ 1286.322168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1286.334097] 0 pages in swap cache [ 1286.337550] Swap cache stats: add 0, delete 0, find 0/0 [ 1286.353032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.365210] Free swap = 0kB [ 1286.368233] Total swap = 0kB [ 1286.377852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1286.395811] 2097051 pages RAM [ 1286.398984] 0 pages HighMem/MovableOnly [ 1286.402945] 363840 pages reserved [ 1286.406384] 0 pages cma reserved [ 1286.420760] 15169 total pagecache pages [ 1286.424750] 0 pages in swap cache [ 1286.428189] Swap cache stats: add 0, delete 0, find 0/0 [ 1286.443431] Free swap = 0kB [ 1286.446453] Total swap = 0kB [ 1286.452799] 2097051 pages RAM [ 1286.455897] 0 pages HighMem/MovableOnly [ 1286.478721] 363840 pages reserved [ 1286.482184] 0 pages cma reserved [ 1286.485539] Out of memory (oom_kill_allocating_task): Kill process 12538 (systemd-journal) score 0 or sacrifice child [ 1286.506302] Killed process 12538 (systemd-journal) total-vm:4828kB, anon-rss:40kB, file-rss:0kB, shmem-rss:0kB [ 1286.516778] oom_reaper: reaped process 12538 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1286.602115] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1286.628578] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1286.633381] CPU: 0 PID: 8000 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 1286.640816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.650162] Call Trace: [ 1286.652755] dump_stack+0x1b2/0x281 [ 1286.656391] dump_header+0x178/0x82f [ 1286.660099] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1286.665200] ? ___ratelimit+0x2cd/0x530 [ 1286.669167] oom_kill_process.cold+0x10/0xb18 [ 1286.673667] out_of_memory+0xe3e/0x1190 [ 1286.677643] ? oom_killer_disable+0x1c0/0x1c0 [ 1286.682132] ? mutex_trylock+0x152/0x1a0 [ 1286.686188] __alloc_pages_nodemask+0x23e1/0x2720 [ 1286.691054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1286.695909] alloc_pages_current+0x155/0x260 [ 1286.700315] filemap_fault+0xea3/0x1980 [ 1286.704289] ext4_filemap_fault+0x84/0xb0 [ 1286.708432] __do_fault+0xfa/0x380 [ 1286.711966] __handle_mm_fault+0x2497/0x4620 [ 1286.716368] ? vm_insert_page+0x7c0/0x7c0 [ 1286.720510] ? free_object+0xe4/0x240 [ 1286.724311] handle_mm_fault+0x391/0x860 [ 1286.728367] __do_page_fault+0x549/0xad0 [ 1286.732422] ? spurious_fault+0x640/0x640 [ 1286.736561] ? do_page_fault+0x60/0x500 [ 1286.740528] ? page_fault+0x2f/0x50 [ 1286.744145] page_fault+0x45/0x50 [ 1286.747584] RIP: 0000:0xb358f8 [ 1286.750758] RSP: 4e20:000000c00003df28 EFLAGS: 00438920 [ 1286.759647] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1286.799380] Mem-Info: [ 1286.802217] active_anon:17612 inactive_anon:14087 isolated_anon:0 [ 1286.802217] active_file:124 inactive_file:791 isolated_file:0 [ 1286.802217] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1286.802217] slab_reclaimable:15744 slab_unreclaimable:123282 [ 1286.802217] mapped:44122 shmem:15110 pagetables:675 bounce:0 [ 1286.802217] free:76227 free_pcp:158 free_cma:0 [ 1286.856790] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1286.864252] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1286.888626] systemd[1]: Failed to start Journal Service. [ 1286.902354] Node 0 active_anon:69500kB inactive_anon:40096kB active_file:444kB inactive_file:532kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:140340kB dirty:0kB writeback:8kB shmem:44120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1286.934697] CPU: 0 PID: 12536 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1286.942607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.951959] Call Trace: [ 1286.954555] dump_stack+0x1b2/0x281 [ 1286.958182] warn_alloc.cold+0x96/0x1cc [ 1286.962157] ? zone_watermark_ok_safe+0x220/0x220 [ 1286.963909] Node 1 active_anon:1244kB inactive_anon:16252kB active_file:148kB inactive_file:6780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39044kB dirty:0kB writeback:32kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1286.966992] ? usleep_range+0x130/0x130 [ 1286.967001] ? try_to_free_pages+0x23f/0x6e0 [ 1286.967013] ? _find_next_bit+0xdb/0x100 [ 1287.006891] ? run_timer_softirq+0x5a0/0x5a0 [ 1287.011310] __alloc_pages_nodemask+0x2127/0x2720 [ 1287.016159] ? lock_acquire+0x170/0x3f0 [ 1287.020140] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1287.024983] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1287.026967] Node 0 [ 1287.029471] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1287.029490] alloc_pages_current+0x155/0x260 [ 1287.029502] ion_page_pool_alloc+0x118/0x1b0 [ 1287.033910] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.037156] ion_system_heap_allocate+0x133/0x8c0 [ 1287.037167] ? ion_alloc+0x187/0x810 [ 1287.050256] lowmem_reserve[]: [ 1287.071459] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1287.071472] ? ion_system_contig_heap_create+0x130/0x130 [ 1287.071483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1287.098217] 0 [ 1287.099003] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1287.099020] ion_alloc+0x204/0x810 [ 1287.103005] 2717 [ 1287.105639] ? ion_dma_buf_release+0x40/0x40 [ 1287.105652] ? __might_fault+0x177/0x1b0 [ 1287.119666] ion_ioctl+0xea/0x1f0 [ 1287.123115] ? ion_query_heaps+0x360/0x360 [ 1287.127348] ? lock_acquire+0x170/0x3f0 [ 1287.128452] 2718 [ 1287.131330] ? lock_downgrade+0x740/0x740 [ 1287.131335] 2718 [ 1287.133375] ? ion_query_heaps+0x360/0x360 [ 1287.133385] do_vfs_ioctl+0x75a/0xff0 [ 1287.137511] 2718 [ 1287.139556] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.139563] ? lock_downgrade+0x740/0x740 [ 1287.139577] ? __fget+0x225/0x360 [ 1287.139585] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.139596] ? security_file_ioctl+0x83/0xb0 [ 1287.147582] SyS_ioctl+0x7f/0xb0 [ 1287.149652] Node 0 [ 1287.154107] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.158234] DMA32 free:45120kB min:36200kB low:45248kB high:54296kB active_anon:69500kB inactive_anon:40096kB active_file:444kB inactive_file:764kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2492kB bounce:0kB free_pcp:1068kB local_pcp:240kB free_cma:0kB [ 1287.161655] do_syscall_64+0x1d5/0x640 [ 1287.161674] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.202644] lowmem_reserve[]: [ 1287.208092] RIP: 0033:0x45e219 [ 1287.223397] RSP: 002b:00007f8fa5a54c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.231100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1287.232021] 0 [ 1287.238356] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1287.238363] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.245237] 0 [ 1287.247400] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1287.247407] R13: 00007ffc9c2201af R14: 00007f8fa5a559c0 R15: 000000000119bf8c [ 1287.267392] 0 0 0 [ 1287.292533] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.324820] lowmem_reserve[]: 0 0 0 0 0 [ 1287.328891] Node 1 Normal free:32552kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:16252kB active_file:516kB inactive_file:440kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:268kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 1287.336593] Mem-Info: [ 1287.360026] active_anon:17688 inactive_anon:14087 isolated_anon:0 [ 1287.360026] active_file:57 inactive_file:21 isolated_file:15 [ 1287.360026] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1287.360026] slab_reclaimable:15741 slab_unreclaimable:123108 [ 1287.360026] mapped:43556 shmem:15110 pagetables:691 bounce:0 [ 1287.360026] free:13717 free_pcp:195 free_cma:0 [ 1287.360416] lowmem_reserve[]: [ 1287.394177] Node 0 active_anon:69504kB inactive_anon:40096kB active_file:168kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:139364kB dirty:28kB writeback:0kB shmem:44120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1287.398182] 0 [ 1287.427038] Node 1 active_anon:1248kB inactive_anon:16252kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34860kB dirty:4kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1287.428633] 0 [ 1287.428912] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.459659] 0 [ 1287.485578] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1287.485600] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:69504kB inactive_anon:40096kB active_file:508kB inactive_file:524kB unevictable:0kB writepending:28kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2496kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1287.485623] lowmem_reserve[]: [ 1287.490437] 0 [ 1287.492440] 0 0 0 0 0 [ 1287.528349] 0 [ 1287.528807] Node 0 [ 1287.530573] Node 0 [ 1287.530585] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.530589] lowmem_reserve[]: [ 1287.532802] DMA: [ 1287.535010] 0 0 [ 1287.563102] 0*4kB [ 1287.565630] 0 [ 1287.567054] 1*8kB (U) 12*16kB (U) 4*32kB (U) 4*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10952kB [ 1287.578874] 0 0 [ 1287.584903] Node 1 Normal free:27580kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:16252kB active_file:44kB inactive_file:72kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:268kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.585802] Node 0 [ 1287.613427] lowmem_reserve[]: 0 0 0 0 0 [ 1287.616327] DMA32: [ 1287.619669] Node 0 DMA: 0*4kB 1*8kB (U) 12*16kB (U) 4*32kB (U) 4*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 10952kB [ 1287.619741] Node 0 [ 1287.626420] 2032*4kB [ 1287.636339] DMA32: 2032*4kB (ME) 920*8kB (ME) 123*16kB (ME) 2*32kB (M) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18416kB [ 1287.640617] (ME) [ 1287.653748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1287.658044] 920*8kB [ 1287.666527] Node 1 Normal: 107*4kB (UME) 97*8kB (UME) 78*16kB (UME) 56*32kB (UME) 37*64kB (UME) 14*128kB (ME) 17*256kB (UME) 21*512kB (UME) 4*1024kB (UME) 0*2048kB 0*4096kB = 27604kB [ 1287.671711] (ME) [ 1287.685599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.685737] 123*16kB [ 1287.687659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1287.699420] (ME) 2*32kB (M) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18416kB [ 1287.710182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.720043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1287.726425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1287.740218] Node 1 Normal: 98*4kB (ME) 89*8kB (ME) 72*16kB (ME) 51*32kB (ME) 29*64kB (UME) 14*128kB (ME) 17*256kB (UME) 21*512kB (UME) 4*1024kB (UME) 0*2048kB 0*4096kB = 26736kB [ 1287.745821] 15199 total pagecache pages [ 1287.764621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.766863] 0 pages in swap cache [ 1287.774541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1287.777969] Swap cache stats: add 0, delete 0, find 0/0 [ 1287.789505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.792009] Free swap = 0kB [ 1287.803816] Total swap = 0kB [ 1287.804529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1287.806940] 2097051 pages RAM [ 1287.815423] 15199 total pagecache pages [ 1287.815432] 0 pages in swap cache [ 1287.815439] Swap cache stats: add 0, delete 0, find 0/0 [ 1287.818549] 0 pages HighMem/MovableOnly [ 1287.818552] 363840 pages reserved [ 1287.818555] 0 pages cma reserved [ 1287.845505] Free swap = 0kB [ 1287.848684] Total swap = 0kB [ 1287.851719] 2097051 pages RAM [ 1287.854816] 0 pages HighMem/MovableOnly [ 1287.862130] 363840 pages reserved [ 1287.865605] 0 pages cma reserved [ 1287.868991] Out of memory (oom_kill_allocating_task): Kill process 8000 (syz-fuzzer) score 0 or sacrifice child [ 1287.882227] Killed process 8022 (syz-executor.3) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 1287.902256] oom_reaper: reaped process 12536 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1287.919584] oom_reaper: reaped process 8022 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1288.132297] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1288.176861] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1288.215697] systemd cpuset=/ mems_allowed=0-1 [ 1288.231177] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.217-syzkaller #0 [ 1288.238127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.247479] Call Trace: [ 1288.250062] dump_stack+0x1b2/0x281 [ 1288.253690] dump_header+0x178/0x82f [ 1288.257417] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1288.262518] ? ___ratelimit+0x2cd/0x530 [ 1288.266489] oom_kill_process.cold+0x10/0xb18 [ 1288.271008] ? lock_downgrade+0x740/0x740 [ 1288.275155] out_of_memory+0x2dc/0x1190 [ 1288.279137] ? oom_killer_disable+0x1c0/0x1c0 [ 1288.283643] ? mutex_trylock+0x152/0x1a0 [ 1288.287697] __alloc_pages_nodemask+0x23e1/0x2720 [ 1288.292524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1288.297344] ? __lock_acquire+0x5fc/0x3f20 [ 1288.301559] ? trace_hardirqs_on+0x10/0x10 [ 1288.305775] ? cache_grow_begin+0x41/0x630 [ 1288.309986] cache_grow_begin+0x91/0x630 [ 1288.314022] ? cache_grow_begin+0x91/0x630 [ 1288.318234] fallback_alloc+0x207/0x2c0 [ 1288.322187] kmem_cache_alloc+0x1e5/0x3c0 [ 1288.326312] getname_flags+0xc8/0x550 [ 1288.330090] ? _raw_spin_unlock_irq+0x24/0x80 [ 1288.334561] do_sys_open+0x1ce/0x410 [ 1288.338250] ? filp_open+0x60/0x60 [ 1288.341769] ? do_syscall_64+0x4c/0x640 [ 1288.345715] ? do_sys_open+0x410/0x410 [ 1288.349579] do_syscall_64+0x1d5/0x640 [ 1288.353470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.358638] RIP: 0033:0x7f00106039b1 [ 1288.362325] RSP: 002b:00007fffe16fe168 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 1288.370020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f00106039b1 [ 1288.377264] RDX: 0000561d91821d4f RSI: 0000000000090800 RDI: 0000561d91821d10 [ 1288.384511] RBP: 00007fffe16fe1a8 R08: 0000000000000000 R09: 0000000000000050 [ 1288.391759] R10: 00007f0012061500 R11: 0000000000000202 R12: 0000561d903cf53c [ 1288.399015] R13: 0000561d9178ef00 R14: 00007fffe16fe210 R15: 00007f0011d63941 [ 1288.418625] Mem-Info: [ 1288.421067] active_anon:17594 inactive_anon:14087 isolated_anon:0 [ 1288.421067] active_file:55 inactive_file:34 isolated_file:8 [ 1288.421067] unevictable:0 dirty:8 writeback:9 unstable:0 [ 1288.421067] slab_reclaimable:15741 slab_unreclaimable:122879 [ 1288.421067] mapped:43557 shmem:15110 pagetables:667 bounce:0 [ 1288.421067] free:18949 free_pcp:0 free_cma:0 [ 1288.457437] Node 0 active_anon:69404kB inactive_anon:40096kB active_file:88kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:139312kB dirty:20kB writeback:20kB shmem:44120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1288.488770] Node 1 active_anon:972kB inactive_anon:16252kB active_file:132kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34916kB dirty:12kB writeback:16kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1288.520875] Node 0 DMA free:11512kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1288.552051] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1288.557570] Node 0 DMA32 free:30576kB min:36200kB low:45248kB high:54296kB active_anon:69504kB inactive_anon:40096kB active_file:88kB inactive_file:92kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2400kB bounce:0kB free_pcp:624kB local_pcp:0kB free_cma:0kB 19:45:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:43 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) [ 1288.739964] lowmem_reserve[]: 0 0 0 0 0 [ 1288.758422] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 19:45:43 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) 19:45:43 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}) [ 1288.851879] lowmem_reserve[]: 0 0 0 0 0 [ 1288.866707] Node 1 Normal free:147460kB min:53696kB low:67120kB high:80544kB active_anon:1020kB inactive_anon:16252kB active_file:1240kB inactive_file:3992kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:268kB bounce:0kB free_pcp:204kB local_pcp:140kB free_cma:0kB [ 1288.958079] lowmem_reserve[]: 0 0 0 0 0 [ 1288.962106] Node 0 DMA: 188*4kB (UM) 2*8kB (UM) 12*16kB (UM) 4*32kB (U) 4*64kB (U) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11072kB [ 1289.008064] Node 0 DMA32: 1664*4kB (UME) 631*8kB (UE) 79*16kB (UME) 0*32kB 287*64kB (U) 38*128kB (U) 17*256kB (U) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45160kB [ 1289.058039] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1289.108026] Node 1 Normal: 16*4kB (UME) 23*8kB (UME) 18*16kB (UME) 7*32kB (UME) 4*64kB (UME) 4*128kB (UME) 2*256kB (UE) 2*512kB (ME) 56*1024kB (UME) 3*2048kB (U) 0*4096kB = 66552kB [ 1289.163774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1289.188502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1289.198535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1289.199167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.207377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1289.238023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.251653] 16503 total pagecache pages [ 1289.255645] 0 pages in swap cache [ 1289.260906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.267595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.287995] Swap cache stats: add 0, delete 0, find 0/0 [ 1289.293547] Free swap = 0kB [ 1289.297267] Total swap = 0kB [ 1289.320519] 2097051 pages RAM [ 1289.323651] 0 pages HighMem/MovableOnly [ 1289.327796] 363840 pages reserved [ 1289.335873] device bridge_slave_1 left promiscuous mode [ 1289.348379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.414192] 0 pages cma reserved [ 1289.417598] Out of memory: Kill process 12532 (syz-executor.3) score 1005 or sacrifice child [ 1289.426250] Killed process 12533 (syz-executor.3) total-vm:93612kB, anon-rss:1828kB, file-rss:34816kB, shmem-rss:0kB [ 1289.458048] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1289.470965] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1289.484782] syz-executor.2: page allocation failure: order:0, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1289.490173] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1289.498448] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1289.517708] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1289.519550] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1289.523097] CPU: 1 PID: 12536 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1289.531004] oom_reaper: reaped process 12533 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1289.535789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.555061] Call Trace: [ 1289.557637] dump_stack+0x1b2/0x281 [ 1289.559476] syz-executor.3 cpuset= [ 1289.561246] warn_alloc.cold+0x96/0x1cc [ 1289.561248] / mems_allowed=0-1 [ 1289.564770] ? zone_watermark_ok_safe+0x220/0x220 [ 1289.576708] ? usleep_range+0x130/0x130 [ 1289.580667] ? try_to_free_pages+0x23f/0x6e0 [ 1289.585053] ? _find_next_bit+0xdb/0x100 [ 1289.589099] ? run_timer_softirq+0x5a0/0x5a0 [ 1289.593499] __alloc_pages_nodemask+0x2127/0x2720 [ 1289.598340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1289.599650] systemd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1289.603176] ? ion_heap_sglist_zero+0x165/0x220 [ 1289.603190] ? mark_held_locks+0xa6/0xf0 [ 1289.623279] ? cache_grow_begin+0x41/0x630 [ 1289.627494] cache_grow_begin+0x91/0x630 [ 1289.631537] ? cache_grow_begin+0x91/0x630 [ 1289.635792] fallback_alloc+0x207/0x2c0 [ 1289.637881] systemd cpuset=/ [ 1289.639751] kmem_cache_alloc_node_trace+0xed/0x400 [ 1289.639763] __get_vm_area_node+0xed/0x340 [ 1289.642758] mems_allowed=0-1 [ 1289.647752] vmap+0xd5/0x290 [ 1289.658031] ? ion_heap_clear_pages+0x23/0x70 [ 1289.662502] ? vunmap+0x50/0x50 [ 1289.665786] ? __vunmap+0x21c/0x300 [ 1289.669402] ion_heap_clear_pages+0x23/0x70 [ 1289.673712] ion_heap_sglist_zero+0x165/0x220 [ 1289.678191] ? ion_heap_clear_pages+0x70/0x70 [ 1289.682667] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1289.687670] ? pagerange_is_ram_callback+0x100/0x100 [ 1289.692849] ? _ion_heap_freelist_drain+0x28b/0x410 [ 1289.697868] ion_system_heap_free+0x1d0/0x240 [ 1289.702376] ion_buffer_destroy+0x132/0x190 [ 1289.706678] _ion_heap_freelist_drain+0x293/0x410 [ 1289.711510] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1289.716339] ion_alloc+0x244/0x810 [ 1289.719867] ? ion_dma_buf_release+0x40/0x40 [ 1289.724258] ? __might_fault+0x177/0x1b0 [ 1289.728307] ion_ioctl+0xea/0x1f0 [ 1289.731746] ? ion_query_heaps+0x360/0x360 [ 1289.735962] ? lock_acquire+0x170/0x3f0 [ 1289.739922] ? lock_downgrade+0x740/0x740 [ 1289.744059] ? ion_query_heaps+0x360/0x360 [ 1289.748285] do_vfs_ioctl+0x75a/0xff0 [ 1289.752071] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.756458] ? lock_downgrade+0x740/0x740 [ 1289.760594] ? __fget+0x225/0x360 [ 1289.764032] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.767991] ? security_file_ioctl+0x83/0xb0 [ 1289.772383] SyS_ioctl+0x7f/0xb0 [ 1289.775731] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.779689] do_syscall_64+0x1d5/0x640 [ 1289.783566] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.788737] RIP: 0033:0x45e219 [ 1289.791910] RSP: 002b:00007f8fa5a54c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.799599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1289.806856] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1289.814103] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.821353] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1289.828607] R13: 00007ffc9c2201af R14: 00007f8fa5a559c0 R15: 000000000119bf8c [ 1289.835874] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.217-syzkaller #0 [ 1289.842801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.852140] Call Trace: [ 1289.854714] dump_stack+0x1b2/0x281 [ 1289.858322] dump_header+0x178/0x82f [ 1289.862030] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1289.867112] ? ___ratelimit+0x2cd/0x530 [ 1289.871069] oom_kill_process.cold+0x10/0xb18 [ 1289.875552] ? lock_downgrade+0x740/0x740 [ 1289.879686] out_of_memory+0x2dc/0x1190 [ 1289.883645] ? oom_killer_disable+0x1c0/0x1c0 [ 1289.888119] ? mutex_trylock+0x152/0x1a0 [ 1289.892160] __alloc_pages_nodemask+0x23e1/0x2720 [ 1289.896989] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1289.901808] ? __lock_acquire+0x5fc/0x3f20 [ 1289.906021] ? trace_hardirqs_on+0x10/0x10 [ 1289.910234] ? cache_grow_begin+0x41/0x630 [ 1289.914447] cache_grow_begin+0x91/0x630 [ 1289.918487] ? cache_grow_begin+0x91/0x630 [ 1289.922697] fallback_alloc+0x207/0x2c0 [ 1289.926651] kmem_cache_alloc+0x1e5/0x3c0 [ 1289.930786] getname_flags+0xc8/0x550 [ 1289.934564] ? _raw_spin_unlock_irq+0x24/0x80 [ 1289.939036] do_sys_open+0x1ce/0x410 [ 1289.942725] ? filp_open+0x60/0x60 [ 1289.946244] ? do_syscall_64+0x4c/0x640 [ 1289.950190] ? do_sys_open+0x410/0x410 [ 1289.954054] do_syscall_64+0x1d5/0x640 [ 1289.957924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.963090] RIP: 0033:0x7f00106039b1 [ 1289.966777] RSP: 002b:00007fffe16fe168 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 1289.974464] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f00106039b1 [ 1289.981713] RDX: 0000561d91821d4f RSI: 0000000000090800 RDI: 0000561d91821d10 [ 1289.988958] RBP: 00007fffe16fe1a8 R08: 0000000000000000 R09: 0000000000000050 [ 1289.996207] R10: 00007f0012061500 R11: 0000000000000202 R12: 0000561d903cf53c [ 1290.003452] R13: 0000561d9178ef00 R14: 00007fffe16fe210 R15: 00007f0011d63941 [ 1290.010711] CPU: 1 PID: 12540 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1290.018590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.027926] Call Trace: [ 1290.030508] dump_stack+0x1b2/0x281 [ 1290.034123] warn_alloc.cold+0x96/0x1cc [ 1290.038077] ? zone_watermark_ok_safe+0x220/0x220 [ 1290.042896] ? usleep_range+0x130/0x130 [ 1290.046846] ? try_to_free_pages+0x23f/0x6e0 [ 1290.051240] ? _find_next_bit+0xdb/0x100 [ 1290.055287] ? run_timer_softirq+0x5a0/0x5a0 [ 1290.059679] __alloc_pages_nodemask+0x2127/0x2720 [ 1290.064504] ? lock_acquire+0x170/0x3f0 [ 1290.068468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1290.073297] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1290.077781] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1290.083220] alloc_pages_current+0x155/0x260 [ 1290.087608] ion_page_pool_alloc+0x118/0x1b0 [ 1290.092004] ion_system_heap_allocate+0x133/0x8c0 [ 1290.096835] ? ion_alloc+0x187/0x810 [ 1290.100527] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1290.105957] ? ion_system_contig_heap_create+0x130/0x130 [ 1290.111391] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1290.116396] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1290.121219] ion_alloc+0x204/0x810 [ 1290.124740] ? ion_dma_buf_release+0x40/0x40 [ 1290.129135] ? __might_fault+0x177/0x1b0 [ 1290.133183] ion_ioctl+0xea/0x1f0 [ 1290.136618] ? ion_query_heaps+0x360/0x360 [ 1290.140835] ? lock_acquire+0x170/0x3f0 [ 1290.144789] ? lock_downgrade+0x740/0x740 [ 1290.148918] ? ion_query_heaps+0x360/0x360 [ 1290.153137] do_vfs_ioctl+0x75a/0xff0 [ 1290.156918] ? ioctl_preallocate+0x1a0/0x1a0 [ 1290.161305] ? lock_downgrade+0x740/0x740 [ 1290.165436] ? __fget+0x225/0x360 [ 1290.168872] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.172832] ? security_file_ioctl+0x83/0xb0 [ 1290.177221] SyS_ioctl+0x7f/0xb0 [ 1290.180565] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.184517] do_syscall_64+0x1d5/0x640 [ 1290.188398] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.193573] RIP: 0033:0x45e219 [ 1290.196739] RSP: 002b:00007f53e7037c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.204425] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1290.211677] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1290.218930] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1290.226176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1290.233428] R13: 00007fff7b7a9f0f R14: 00007f53e70389c0 R15: 000000000119c034 [ 1290.240707] CPU: 0 PID: 12533 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1290.248591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.250228] Mem-Info: [ 1290.257934] Call Trace: [ 1290.257953] dump_stack+0x1b2/0x281 [ 1290.257968] warn_alloc.cold+0x96/0x1cc [ 1290.260375] active_anon:17057 inactive_anon:14085 isolated_anon:0 [ 1290.260375] active_file:11 inactive_file:14 isolated_file:0 [ 1290.260375] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1290.260375] slab_reclaimable:15668 slab_unreclaimable:120800 [ 1290.260375] mapped:26113 shmem:15106 pagetables:599 bounce:0 [ 1290.260375] free:14048 free_pcp:269 free_cma:0 [ 1290.262933] ? zone_watermark_ok_safe+0x220/0x220 [ 1290.266540] Node 0 active_anon:67372kB inactive_anon:40088kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69636kB dirty:0kB writeback:0kB shmem:44104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1290.270478] ? usleep_range+0x130/0x130 [ 1290.270487] ? try_to_free_pages+0x23f/0x6e0 [ 1290.270510] ? _find_next_bit+0xdb/0x100 [ 1290.303733] Node 1 active_anon:856kB inactive_anon:16252kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1290.308531] ? run_timer_softirq+0x5a0/0x5a0 [ 1290.308548] __alloc_pages_nodemask+0x2127/0x2720 [ 1290.347733] Node 0 [ 1290.348524] ? lock_acquire+0x170/0x3f0 [ 1290.391204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1290.396041] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1290.397736] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1290.400527] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1290.431659] alloc_pages_current+0x155/0x260 [ 1290.436071] ion_page_pool_alloc+0x118/0x1b0 [ 1290.440481] ion_system_heap_allocate+0x133/0x8c0 [ 1290.445408] ? ion_alloc+0x187/0x810 [ 1290.449117] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1290.454579] ? ion_system_contig_heap_create+0x130/0x130 [ 1290.457715] lowmem_reserve[]: [ 1290.460016] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1290.460021] 0 [ 1290.463104] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1290.474721] ion_alloc+0x204/0x810 [ 1290.477700] 2717 2718 2718 [ 1290.478274] ? ion_dma_buf_release+0x40/0x40 [ 1290.478286] ? __might_fault+0x177/0x1b0 [ 1290.481194] 2718 [ 1290.485672] ion_ioctl+0xea/0x1f0 [ 1290.495183] ? ion_query_heaps+0x360/0x360 [ 1290.499406] ? lock_acquire+0x170/0x3f0 [ 1290.499408] Node 0 DMA32 free:18968kB min:36200kB low:45248kB high:54296kB active_anon:67344kB inactive_anon:40088kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7168kB pagetables:2204kB bounce:0kB free_pcp:836kB local_pcp:164kB free_cma:0kB [ 1290.503368] ? lock_downgrade+0x740/0x740 [ 1290.536361] ? ion_query_heaps+0x360/0x360 [ 1290.540585] do_vfs_ioctl+0x75a/0xff0 [ 1290.544377] ? ioctl_preallocate+0x1a0/0x1a0 [ 1290.548775] ? lock_downgrade+0x740/0x740 [ 1290.552920] ? __fget+0x225/0x360 [ 1290.556364] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.560331] ? security_file_ioctl+0x83/0xb0 [ 1290.564732] SyS_ioctl+0x7f/0xb0 [ 1290.567680] lowmem_reserve[]: 0 [ 1290.568083] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.568094] do_syscall_64+0x1d5/0x640 [ 1290.571353] 0 [ 1290.575323] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.586664] RIP: 0033:0x45e219 [ 1290.587667] 0 [ 1290.589837] RSP: 002b:00007f53e7058c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.591628] 0 [ 1290.599312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1290.599317] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1290.599323] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.599327] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1290.599335] R13: 00007fff7b7a9f0f R14: 00007f53e70599c0 R15: 000000000119bf8c [ 1290.617667] 0 [ 1290.640850] CPU: 0 PID: 12541 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1290.650635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.659988] Call Trace: [ 1290.662579] dump_stack+0x1b2/0x281 [ 1290.666201] warn_alloc.cold+0x96/0x1cc [ 1290.670174] ? zone_watermark_ok_safe+0x220/0x220 [ 1290.675011] ? usleep_range+0x130/0x130 [ 1290.678979] ? try_to_free_pages+0x23f/0x6e0 [ 1290.683386] ? _find_next_bit+0xdb/0x100 [ 1290.687439] ? run_timer_softirq+0x5a0/0x5a0 [ 1290.691831] Node 0 [ 1290.691842] __alloc_pages_nodemask+0x2127/0x2720 [ 1290.691854] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1290.691858] lowmem_reserve[]: [ 1290.694081] ? lock_acquire+0x170/0x3f0 [ 1290.717654] 0 [ 1290.723786] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1290.726860] 0 [ 1290.730815] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1290.730834] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1290.749140] alloc_pages_current+0x155/0x260 [ 1290.753563] ion_page_pool_alloc+0x118/0x1b0 [ 1290.757971] ion_system_heap_allocate+0x133/0x8c0 [ 1290.762810] ? ion_alloc+0x187/0x810 [ 1290.766604] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1290.767641] 0 [ 1290.772039] ? ion_system_contig_heap_create+0x130/0x130 [ 1290.772041] 0 0 [ 1290.773826] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1290.786213] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1290.791052] ion_alloc+0x204/0x810 [ 1290.794588] ? ion_dma_buf_release+0x40/0x40 [ 1290.798989] ? __might_fault+0x177/0x1b0 [ 1290.803044] ion_ioctl+0xea/0x1f0 [ 1290.806492] ? ion_query_heaps+0x360/0x360 [ 1290.810718] ? lock_acquire+0x170/0x3f0 [ 1290.810721] Node 1 Normal free:330196kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:16252kB active_file:20kB inactive_file:232kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:188kB bounce:0kB free_pcp:352kB local_pcp:204kB free_cma:0kB [ 1290.814680] ? lock_downgrade+0x740/0x740 [ 1290.847725] ? ion_query_heaps+0x360/0x360 [ 1290.851988] do_vfs_ioctl+0x75a/0xff0 [ 1290.855786] ? ioctl_preallocate+0x1a0/0x1a0 [ 1290.860193] ? lock_downgrade+0x740/0x740 [ 1290.864348] ? __fget+0x225/0x360 [ 1290.867800] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.871768] ? security_file_ioctl+0x83/0xb0 [ 1290.876169] SyS_ioctl+0x7f/0xb0 [ 1290.879534] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.883521] do_syscall_64+0x1d5/0x640 [ 1290.887436] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.892636] RIP: 0033:0x45e219 [ 1290.895814] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.903622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1290.907628] lowmem_reserve[]: [ 1290.910896] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1290.910904] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1290.913992] 0 [ 1290.921239] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1290.921244] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1290.957608] Mem-Info: [ 1290.960049] active_anon:17082 inactive_anon:14085 isolated_anon:0 [ 1290.960049] active_file:11 inactive_file:689 isolated_file:0 [ 1290.960049] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1290.960049] slab_reclaimable:15668 slab_unreclaimable:120591 [ 1290.960049] mapped:26613 shmem:15106 pagetables:599 bounce:0 [ 1290.960049] free:137939 free_pcp:253 free_cma:0 [ 1291.064717] 0 0 0 0 [ 1291.067087] Node 0 DMA: 18*4kB (UM) 3*8kB (UM) 12*16kB (UM) 4*32kB (U) 6*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11040kB [ 1291.107583] Node 0 active_anon:67588kB inactive_anon:40092kB active_file:1524kB inactive_file:4208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73588kB dirty:0kB writeback:0kB shmem:44112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1291.136634] Node 0 DMA32: 2859*4kB (UME) 2352*8kB (UMEH) 923*16kB (UME) 1000*32kB (UMEH) 921*64kB (UH) 28*128kB (UM) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 142108kB [ 1291.197566] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1291.208379] Node 1 active_anon:856kB inactive_anon:16252kB active_file:124kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35064kB dirty:0kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1291.235981] device bridge_slave_0 left promiscuous mode [ 1291.241599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.271280] Node 1 Normal: 1542*4kB (UM) 1480*8kB (UM) 2365*16kB (UM) 2731*32kB (UM) 5296*64kB (UM) 512*128kB (UM) 97*256kB (UM) 18*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 581768kB [ 1291.300744] device veth1_macvtap left promiscuous mode [ 1291.306065] device veth0_macvtap left promiscuous mode [ 1291.337542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1291.337625] device veth1_vlan left promiscuous mode [ 1291.346396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1291.377567] device veth0_vlan left promiscuous mode [ 1291.380557] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1291.438389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1291.457500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1291.477518] 17063 total pagecache pages [ 1291.481660] 0 pages in swap cache [ 1291.485103] Swap cache stats: add 0, delete 0, find 0/0 [ 1291.493934] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1291.507504] warn_alloc_show_mem: 1 callbacks suppressed [ 1291.507508] Mem-Info: [ 1291.510419] Node 0 [ 1291.512918] active_anon:17111 inactive_anon:14086 isolated_anon:0 [ 1291.512918] active_file:512 inactive_file:1385 isolated_file:0 [ 1291.512918] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1291.512918] slab_reclaimable:15660 slab_unreclaimable:120217 [ 1291.512918] mapped:36188 shmem:15108 pagetables:659 bounce:0 [ 1291.512918] free:208005 free_pcp:710 free_cma:0 [ 1291.515314] DMA32 free:121996kB min:36200kB low:45248kB high:54296kB active_anon:67560kB inactive_anon:40092kB active_file:1924kB inactive_file:5356kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2444kB bounce:0kB free_pcp:1392kB local_pcp:672kB free_cma:0kB [ 1291.518579] Node 0 active_anon:67588kB inactive_anon:40092kB active_file:1924kB inactive_file:5356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109688kB dirty:0kB writeback:0kB shmem:44112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1291.554032] Free swap = 0kB [ 1291.583143] Node 1 active_anon:856kB inactive_anon:16252kB active_file:124kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35064kB dirty:0kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1291.707467] lowmem_reserve[]: 0 0 0 0 0 [ 1291.711525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1291.739642] device hsr_slave_1 left promiscuous mode [ 1291.750953] Node 0 DMA free:11144kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1291.767419] Total swap = 0kB [ 1291.797535] 2097051 pages RAM [ 1291.800693] 0 pages HighMem/MovableOnly [ 1291.807425] lowmem_reserve[]: 0 0 0 0 0 [ 1291.811428] Node 1 Normal free:802040kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:16252kB active_file:124kB inactive_file:184kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:188kB bounce:0kB free_pcp:1364kB local_pcp:652kB free_cma:0kB [ 1291.817536] device hsr_slave_0 left promiscuous mode [ 1291.840664] 363840 pages reserved [ 1291.867443] 0 pages cma reserved [ 1291.879885] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1291.884967] Node 0 DMA32 free:137604kB min:36200kB low:45248kB high:54296kB active_anon:67560kB inactive_anon:40092kB active_file:1924kB inactive_file:5356kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2444kB bounce:0kB free_pcp:1368kB local_pcp:652kB free_cma:0kB [ 1291.907386] lowmem_reserve[]: 0 0 0 0 0 [ 1291.947403] Node 0 DMA: 28*4kB (UM) 3*8kB (UM) 12*16kB (UM) 4*32kB (U) 5*64kB (UM) 3*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11144kB [ 1291.962990] team0 (unregistering): Port device team_slave_1 removed [ 1292.002618] lowmem_reserve[]: 0 0 0 0 0 [ 1292.006656] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.007369] Node 0 [ 1292.036816] team0 (unregistering): Port device team_slave_0 removed [ 1292.059781] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1292.097742] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1292.119707] DMA32: 2106*4kB (UMEH) 1702*8kB (UMEH) 1663*16kB (UME) 2777*32kB (UMEH) 4*64kB (H) 3*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 138408kB [ 1292.137449] lowmem_reserve[]: 0 0 0 0 0 [ 1292.141469] Node 1 Normal free:1012344kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:16252kB active_file:160kB inactive_file:152kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:188kB bounce:0kB free_pcp:1364kB local_pcp:712kB free_cma:0kB [ 1292.179798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1292.221517] bond0 (unregistering): Released all slaves [ 1292.229985] Node 1 Normal: 1962*4kB (UM) 2556*8kB (UM) 3268*16kB (UM) 3220*32kB (UM) 5569*64kB (UM) 1807*128kB (UM) 344*256kB (UM) 68*512kB (UM) 42*1024kB (UM) 7*2048kB (U) 0*4096kB = 951560kB [ 1292.241816] lowmem_reserve[]: [ 1292.280971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.289335] 0 0 0 0 0 [ 1292.317346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.347322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.356181] Node 0 DMA: 28*4kB (UM) 3*8kB (UM) 12*16kB (UM) 4*32kB (U) 1*64kB (M) 3*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (UM) = 11144kB [ 1292.356829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.407369] Node 0 DMA32: 2344*4kB (UMEH) 2138*8kB (UMEH) 1691*16kB (UME) 2803*32kB (UMEH) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 143488kB [ 1292.469863] 17058 total pagecache pages [ 1292.473867] 0 pages in swap cache [ 1292.487265] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1292.489640] Swap cache stats: add 0, delete 0, find 0/0 [ 1292.529860] Free swap = 0kB [ 1292.532909] Total swap = 0kB [ 1292.535923] 2097051 pages RAM [ 1292.547261] Node 1 Normal: 2438*4kB (UM) 2795*8kB (UM) 3479*16kB (UM) 3532*32kB (UM) 1319*64kB (UM) 1952*128kB (UM) 426*256kB (UM) 76*512kB (UM) 6*1024kB (U) 0*2048kB 0*4096kB = 689184kB [ 1292.569829] 0 pages HighMem/MovableOnly [ 1292.573820] 363840 pages reserved [ 1292.607262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.609541] 0 pages cma reserved [ 1292.616214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.659828] Out of memory: Kill process 7999 (syz-fuzzer) score 7 or sacrifice child [ 1292.687284] Killed process 8020 (syz-executor.2) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 1292.697247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.706477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.766563] oom_reaper: reaped process 8020 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1292.777201] 17095 total pagecache pages [ 1292.781313] 0 pages in swap cache [ 1292.784756] Swap cache stats: add 0, delete 0, find 0/0 [ 1292.827279] Free swap = 0kB [ 1292.830427] Total swap = 0kB [ 1292.833529] 2097051 pages RAM [ 1292.836682] 0 pages HighMem/MovableOnly [ 1292.868071] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1292.897751] 363840 pages reserved [ 1292.901231] 0 pages cma reserved [ 1292.977230] Bluetooth: hci0 command 0x0409 tx timeout [ 1293.097292] syz-executor.2: [ 1293.097300] syz-executor.3: [ 1293.097304] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1293.100354] page allocation failure: order:4 [ 1293.103350] (null) [ 1293.103356] syz-executor.2 cpuset= [ 1293.124704] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1293.159917] systemd[1]: Stopped Journal Service. [ 1293.177428] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1293.185083] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1293.211693] / mems_allowed=0-1 [ 1293.214952] CPU: 1 PID: 12536 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1293.222824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.232169] Call Trace: [ 1293.234754] dump_stack+0x1b2/0x281 [ 1293.238376] warn_alloc.cold+0x96/0x1cc [ 1293.242341] ? zone_watermark_ok_safe+0x220/0x220 [ 1293.247189] __alloc_pages_nodemask+0x2127/0x2720 [ 1293.252024] ? lock_acquire+0x170/0x3f0 [ 1293.255982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1293.260822] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1293.266266] ? __mutex_unlock_slowpath+0x75/0x770 [ 1293.271107] alloc_pages_current+0x155/0x260 [ 1293.275516] ion_page_pool_alloc+0x118/0x1b0 [ 1293.279923] ion_system_heap_allocate+0x133/0x8c0 [ 1293.284757] ? _raw_spin_unlock+0x29/0x40 [ 1293.288892] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1293.293806] ? ion_system_contig_heap_create+0x130/0x130 [ 1293.299246] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1293.304095] ion_alloc+0x27a/0x810 [ 1293.307705] ? ion_dma_buf_release+0x40/0x40 [ 1293.312092] ? __might_fault+0x177/0x1b0 [ 1293.316146] ion_ioctl+0xea/0x1f0 [ 1293.319677] ? ion_query_heaps+0x360/0x360 [ 1293.323890] ? lock_acquire+0x170/0x3f0 [ 1293.327853] ? lock_downgrade+0x740/0x740 [ 1293.331978] ? ion_query_heaps+0x360/0x360 [ 1293.336191] do_vfs_ioctl+0x75a/0xff0 [ 1293.339984] ? ioctl_preallocate+0x1a0/0x1a0 [ 1293.344369] ? lock_downgrade+0x740/0x740 [ 1293.348501] ? __fget+0x225/0x360 [ 1293.351943] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.355896] ? security_file_ioctl+0x83/0xb0 [ 1293.360283] SyS_ioctl+0x7f/0xb0 [ 1293.363625] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.367578] do_syscall_64+0x1d5/0x640 [ 1293.371445] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1293.376612] RIP: 0033:0x45e219 [ 1293.379777] RSP: 002b:00007f8fa5a54c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.387462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1293.394708] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1293.401953] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.409200] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1293.416547] R13: 00007ffc9c2201af R14: 00007f8fa5a559c0 R15: 000000000119bf8c [ 1293.424397] CPU: 0 PID: 12533 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1293.432370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.441732] Call Trace: [ 1293.444341] dump_stack+0x1b2/0x281 [ 1293.447675] systemd[1]: Starting Journal Service... [ 1293.447974] warn_alloc.cold+0x96/0x1cc [ 1293.456948] ? zone_watermark_ok_safe+0x220/0x220 [ 1293.461809] __alloc_pages_nodemask+0x2127/0x2720 [ 1293.466660] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1293.471154] ? finish_task_switch+0x178/0x610 [ 1293.475647] ? finish_task_switch+0x14d/0x610 [ 1293.480141] ? lock_acquire+0x170/0x3f0 [ 1293.482406] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1293.484112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1293.484129] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1293.495421] (null) [ 1293.500194] ? __mutex_unlock_slowpath+0x75/0x770 [ 1293.500204] ? alloc_pages_current+0x16/0x260 [ 1293.500216] alloc_pages_current+0x155/0x260 [ 1293.505634] syz-executor.2 cpuset= [ 1293.507777] ion_page_pool_alloc+0x118/0x1b0 [ 1293.507787] ion_system_heap_allocate+0x133/0x8c0 [ 1293.507798] ? _raw_spin_unlock+0x29/0x40 [ 1293.512614] / [ 1293.517085] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1293.521499] mems_allowed=0-1 [ 1293.524986] ? ion_system_contig_heap_create+0x130/0x130 [ 1293.553407] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1293.558399] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1293.563221] ion_alloc+0x27a/0x810 [ 1293.566756] ? ion_dma_buf_release+0x40/0x40 [ 1293.571146] ? __might_fault+0x177/0x1b0 [ 1293.575187] ion_ioctl+0xea/0x1f0 [ 1293.578617] ? ion_query_heaps+0x360/0x360 [ 1293.582831] ? lock_acquire+0x170/0x3f0 [ 1293.586781] ? lock_downgrade+0x740/0x740 [ 1293.590907] ? ion_query_heaps+0x360/0x360 [ 1293.595119] do_vfs_ioctl+0x75a/0xff0 [ 1293.598899] ? ioctl_preallocate+0x1a0/0x1a0 [ 1293.603283] ? lock_downgrade+0x740/0x740 [ 1293.607412] ? __fget+0x225/0x360 [ 1293.610867] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.614818] ? security_file_ioctl+0x83/0xb0 [ 1293.619220] SyS_ioctl+0x7f/0xb0 [ 1293.622561] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.626514] do_syscall_64+0x1d5/0x640 [ 1293.630407] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1293.635573] RIP: 0033:0x45e219 [ 1293.638741] RSP: 002b:00007f53e7058c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.646424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1293.653671] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1293.660926] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.668189] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1293.675445] R13: 00007fff7b7a9f0f R14: 00007f53e70599c0 R15: 000000000119bf8c [ 1293.682835] CPU: 1 PID: 12541 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1293.690724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.700079] Call Trace: [ 1293.702669] dump_stack+0x1b2/0x281 [ 1293.706291] warn_alloc.cold+0x96/0x1cc [ 1293.710266] ? zone_watermark_ok_safe+0x220/0x220 [ 1293.715119] __alloc_pages_nodemask+0x2127/0x2720 [ 1293.719956] ? lock_acquire+0x170/0x3f0 [ 1293.723926] ? lock_acquire+0x170/0x3f0 [ 1293.727909] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1293.732750] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1293.738197] ? __mutex_unlock_slowpath+0x75/0x770 [ 1293.743039] alloc_pages_current+0x155/0x260 [ 1293.747447] ion_page_pool_alloc+0x118/0x1b0 [ 1293.751850] ion_system_heap_allocate+0x133/0x8c0 [ 1293.756688] ? _raw_spin_unlock+0x29/0x40 [ 1293.760831] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1293.765754] ? ion_system_contig_heap_create+0x130/0x130 [ 1293.771197] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1293.776209] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1293.781048] ion_alloc+0x27a/0x810 [ 1293.788239] ? ion_dma_buf_release+0x40/0x40 [ 1293.792645] ? __might_fault+0x177/0x1b0 [ 1293.796715] ion_ioctl+0xea/0x1f0 [ 1293.800260] ? ion_query_heaps+0x360/0x360 [ 1293.804501] ? lock_acquire+0x170/0x3f0 [ 1293.808467] ? lock_downgrade+0x740/0x740 [ 1293.812611] ? ion_query_heaps+0x360/0x360 [ 1293.816835] do_vfs_ioctl+0x75a/0xff0 [ 1293.820638] ? ioctl_preallocate+0x1a0/0x1a0 [ 1293.825035] ? lock_downgrade+0x740/0x740 [ 1293.829176] ? __fget+0x225/0x360 [ 1293.832621] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.836585] ? security_file_ioctl+0x83/0xb0 [ 1293.840986] SyS_ioctl+0x7f/0xb0 [ 1293.844351] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.848323] do_syscall_64+0x1d5/0x640 [ 1293.852211] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1293.857393] RIP: 0033:0x45e219 [ 1293.860574] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.868282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1293.875542] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1293.882800] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1293.890150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1293.897409] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1293.924858] warn_alloc_show_mem: 1 callbacks suppressed [ 1293.924862] Mem-Info: [ 1293.933446] active_anon:16709 inactive_anon:14088 isolated_anon:12 [ 1293.933446] active_file:1269 inactive_file:1033 isolated_file:12 [ 1293.933446] unevictable:0 dirty:12 writeback:0 unstable:0 [ 1293.933446] slab_reclaimable:15621 slab_unreclaimable:118828 [ 1293.933446] mapped:28157 shmem:15110 pagetables:658 bounce:0 [ 1293.933446] free:164527 free_pcp:432 free_cma:0 [ 1294.023932] Node 0 active_anon:66408kB inactive_anon:40100kB active_file:5012kB inactive_file:4856kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:77908kB dirty:32kB writeback:0kB shmem:44120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1294.066994] Node 1 active_anon:632kB inactive_anon:16252kB active_file:160kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35064kB dirty:16kB writeback:0kB shmem:16320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.136928] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.163766] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1294.172554] systemd-journald[12576]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1294.229433] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1294.234511] Node 0 DMA32 free:372324kB min:36200kB low:45248kB high:54296kB active_anon:66880kB inactive_anon:43500kB active_file:5912kB inactive_file:5556kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2352kB bounce:0kB free_pcp:1068kB local_pcp:348kB free_cma:0kB [ 1294.337197] lowmem_reserve[]: 0 0 0 0 0 [ 1294.346872] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.427448] lowmem_reserve[]: 0 0 0 0 0 [ 1294.431475] Node 1 Normal free:647160kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:16252kB active_file:160kB inactive_file:152kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:188kB bounce:0kB free_pcp:1316kB local_pcp:624kB free_cma:0kB [ 1294.536892] lowmem_reserve[]: 0 0 0 0 0 [ 1294.541010] Node 0 DMA: 261*4kB (UM) 50*8kB (UM) 13*16kB (UM) 6*32kB (U) 1*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11508kB [ 1294.626802] Node 0 DMA32: 3431*4kB (UMEH) 4628*8kB (UMEH) 8867*16kB (UMEH) 4908*32kB (UMEH) 1005*64kB (UEH) 110*128kB (UM) 7*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 430380kB [ 1294.679522] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1294.719499] Node 1 Normal: 14059*4kB (UM) 4330*8kB (UM) 3537*16kB (UM) 4284*32kB (UM) 5162*64kB (U) 1024*128kB (U) 105*256kB (U) 40*512kB (U) 14*1024kB (U) 5*2048kB (U) 0*4096kB = 817932kB [ 1294.765562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1294.826853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1294.835551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1294.869192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1294.889130] 20109 total pagecache pages [ 1294.893130] 0 pages in swap cache [ 1294.896575] Swap cache stats: add 0, delete 0, find 0/0 [ 1294.921843] Free swap = 0kB [ 1294.925406] Total swap = 0kB [ 1294.928483] 2097051 pages RAM [ 1294.933641] 0 pages HighMem/MovableOnly [ 1294.948726] 363840 pages reserved [ 1294.952201] 0 pages cma reserved [ 1295.056745] Bluetooth: hci0 command 0x041b tx timeout [ 1295.086814] IPVS: ftp: loaded support on port[0] = 21 [ 1295.463647] chnl_net:caif_netlink_parms(): no params data found [ 1295.759295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.766032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.784024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.806680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.838134] device bridge_slave_1 left promiscuous mode [ 1295.843683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.877811] device bridge_slave_0 left promiscuous mode [ 1295.883362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.919274] device veth1_macvtap left promiscuous mode [ 1295.924616] device veth0_macvtap left promiscuous mode [ 1295.946612] device veth1_vlan left promiscuous mode [ 1295.951699] device veth0_vlan left promiscuous mode [ 1296.207351] device hsr_slave_1 left promiscuous mode [ 1296.229822] device hsr_slave_0 left promiscuous mode [ 1296.300077] team0 (unregistering): Port device team_slave_1 removed [ 1296.329827] team0 (unregistering): Port device team_slave_0 removed [ 1296.331006] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1296.360022] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1296.384322] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1296.397424] CPU: 0 PID: 12488 Comm: rs:main Q:Reg Not tainted 4.14.217-syzkaller #0 [ 1296.401310] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1296.405230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1296.421564] Call Trace: [ 1296.424168] dump_stack+0x1b2/0x281 [ 1296.427805] dump_header+0x178/0x82f [ 1296.431513] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1296.436614] ? ___ratelimit+0x2cd/0x530 [ 1296.440582] oom_kill_process.cold+0x10/0xb18 [ 1296.445083] out_of_memory+0xe3e/0x1190 [ 1296.449042] ? oom_killer_disable+0x1c0/0x1c0 [ 1296.453514] ? mutex_trylock+0x152/0x1a0 [ 1296.457553] __alloc_pages_nodemask+0x23e1/0x2720 [ 1296.462377] ? trace_hardirqs_on+0x10/0x10 [ 1296.466593] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1296.471424] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1296.475992] alloc_pages_current+0x155/0x260 [ 1296.480380] pagecache_get_page+0x3f5/0xab0 [ 1296.484682] grab_cache_page_write_begin+0x63/0x90 [ 1296.489591] ext4_da_write_begin+0x249/0xe70 [ 1296.494081] ? ext4_write_begin+0x1260/0x1260 [ 1296.498566] generic_perform_write+0x1c9/0x420 [ 1296.503131] ? __mnt_drop_write_file+0x5f/0x90 [ 1296.507801] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1296.512446] ? current_time+0xb0/0xb0 [ 1296.516222] ? ext4_file_write_iter+0x1cc/0xd20 [ 1296.520870] __generic_file_write_iter+0x227/0x590 [ 1296.525776] ext4_file_write_iter+0x276/0xd20 [ 1296.530249] ? aa_file_perm+0x304/0xab0 [ 1296.534202] ? ext4_file_read_iter+0x330/0x330 [ 1296.538764] ? trace_hardirqs_on+0x10/0x10 [ 1296.542974] ? iov_iter_init+0xa6/0x1c0 [ 1296.546928] __vfs_write+0x44c/0x630 [ 1296.550621] ? kernel_read+0x110/0x110 [ 1296.554493] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1296.559483] vfs_write+0x17f/0x4d0 [ 1296.562998] SyS_write+0xf2/0x210 [ 1296.566428] ? SyS_read+0x210/0x210 [ 1296.570030] ? __do_page_fault+0x159/0xad0 [ 1296.574239] ? do_syscall_64+0x4c/0x640 [ 1296.578186] ? SyS_read+0x210/0x210 [ 1296.581791] do_syscall_64+0x1d5/0x640 [ 1296.585671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1296.590849] RIP: 0033:0x7f4aae2de1cd [ 1296.594537] RSP: 002b:00007f4aab899590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1296.602220] RAX: ffffffffffffffda RBX: 00007f4aa00035b0 RCX: 00007f4aae2de1cd [ 1296.609465] RDX: 0000000000000069 RSI: 00007f4aa00035b0 RDI: 0000000000000006 [ 1296.616706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1296.623953] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f4aa00032f0 [ 1296.631198] R13: 00007f4aab8995b0 R14: 0000565432c1a3a0 R15: 0000000000000069 [ 1296.648633] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1296.652220] syz-executor.2: [ 1296.664449] syz-executor.3 cpuset= [ 1296.664461] Mem-Info: [ 1296.676419] / mems_allowed=0-1 [ 1296.676478] syz-executor.2: page allocation failure: order:0 [ 1296.679631] CPU: 0 PID: 12533 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1296.679638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1296.685414] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1296.693263] Call Trace: [ 1296.693280] dump_stack+0x1b2/0x281 [ 1296.693297] warn_alloc.cold+0x96/0x1cc [ 1296.703863] page allocation failure: order:0 [ 1296.709704] ? zone_watermark_ok_safe+0x220/0x220 [ 1296.709714] ? usleep_range+0x130/0x130 [ 1296.709724] ? try_to_free_pages+0x23f/0x6e0 [ 1296.712978] active_anon:16928 inactive_anon:16120 isolated_anon:0 [ 1296.712978] active_file:40 inactive_file:16 isolated_file:0 [ 1296.712978] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1296.712978] slab_reclaimable:15147 slab_unreclaimable:120456 [ 1296.712978] mapped:26672 shmem:17157 pagetables:681 bounce:0 [ 1296.712978] free:13767 free_pcp:22 free_cma:0 [ 1296.715892] ? _find_next_bit+0xdb/0x100 [ 1296.728195] Node 0 active_anon:67080kB inactive_anon:48228kB active_file:60kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71824kB dirty:16kB writeback:0kB shmem:52312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1296.729057] ? run_timer_softirq+0x5a0/0x5a0 [ 1296.733012] Node 1 active_anon:632kB inactive_anon:16252kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34864kB dirty:24kB writeback:0kB shmem:16316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1296.737398] __alloc_pages_nodemask+0x2127/0x2720 [ 1296.737414] ? lock_acquire+0x170/0x3f0 [ 1296.737434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1296.770675] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1296.774688] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1296.807467] bond0 (unregistering): Released all slaves [ 1296.834068] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1296.834086] alloc_pages_current+0x155/0x260 [ 1296.834105] ion_page_pool_alloc+0x118/0x1b0 [ 1296.838946] (null) [ 1296.842880] ion_system_heap_allocate+0x133/0x8c0 [ 1296.847708] syz-executor.2 cpuset= [ 1296.854783] ? _raw_spin_unlock+0x29/0x40 [ 1296.859304] (null) [ 1296.864528] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1296.869965] / [ 1296.874332] ? ion_system_contig_heap_create+0x130/0x130 [ 1296.882753] mems_allowed=0-1 [ 1296.885668] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1296.889251] Node 0 [ 1296.893308] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1296.895451] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.900471] ion_alloc+0x27a/0x810 [ 1296.900487] ? ion_dma_buf_release+0x40/0x40 [ 1296.900499] ? __might_fault+0x177/0x1b0 [ 1296.902195] syz-executor.2 cpuset= [ 1296.907616] ion_ioctl+0xea/0x1f0 [ 1296.907626] ? ion_query_heaps+0x360/0x360 [ 1296.907638] ? lock_acquire+0x170/0x3f0 [ 1296.916279] / [ 1296.917915] ? lock_downgrade+0x740/0x740 [ 1296.922731] mems_allowed=0-1 [ 1296.948303] ? ion_query_heaps+0x360/0x360 [ 1296.948314] do_vfs_ioctl+0x75a/0xff0 [ 1296.948326] ? ioctl_preallocate+0x1a0/0x1a0 [ 1296.956272] lowmem_reserve[]: [ 1296.960247] ? lock_downgrade+0x740/0x740 [ 1296.960260] ? __fget+0x225/0x360 [ 1296.963770] 0 [ 1296.967201] ? do_vfs_ioctl+0xff0/0xff0 [ 1296.967212] ? security_file_ioctl+0x83/0xb0 [ 1296.967222] SyS_ioctl+0x7f/0xb0 [ 1296.986263] 2717 [ 1296.988472] ? do_vfs_ioctl+0xff0/0xff0 [ 1296.992242] 2718 [ 1296.996631] do_syscall_64+0x1d5/0x640 [ 1296.996652] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.016257] 2718 [ 1297.017382] RIP: 0033:0x45e219 [ 1297.020718] 2718 [ 1297.022754] RSP: 002b:00007f53e7058c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.052701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1297.052708] Node 0 [ 1297.060297] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1297.060303] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.060308] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1297.060314] R13: 00007fff7b7a9f0f R14: 00007f53e70599c0 R15: 000000000119bf8c [ 1297.067378] CPU: 0 PID: 12541 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1297.099434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.106251] DMA32 free:17572kB min:36200kB low:45248kB high:54296kB active_anon:67044kB inactive_anon:48228kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2380kB bounce:0kB free_pcp:88kB local_pcp:88kB free_cma:0kB [ 1297.108764] Call Trace: [ 1297.108783] dump_stack+0x1b2/0x281 [ 1297.143071] warn_alloc.cold+0x96/0x1cc [ 1297.147032] ? zone_watermark_ok_safe+0x220/0x220 [ 1297.151859] ? usleep_range+0x130/0x130 [ 1297.155811] ? queue_work_on+0x10d/0x1d0 [ 1297.159851] ? _find_next_bit+0xdb/0x100 [ 1297.163890] ? run_timer_softirq+0x5a0/0x5a0 [ 1297.166226] lowmem_reserve[]: 0 0 [ 1297.168373] __alloc_pages_nodemask+0x2127/0x2720 [ 1297.168389] ? lock_acquire+0x170/0x3f0 [ 1297.171812] 0 [ 1297.176639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1297.176649] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1297.176664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1297.196217] 0 0 [ 1297.197110] alloc_pages_current+0x155/0x260 [ 1297.199056] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1297.203454] ion_page_pool_alloc+0x118/0x1b0 [ 1297.203466] ion_system_heap_allocate+0x133/0x8c0 [ 1297.238470] ? _raw_spin_unlock+0x29/0x40 [ 1297.242611] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1297.247542] ? ion_system_contig_heap_create+0x130/0x130 [ 1297.252976] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1297.256214] lowmem_reserve[]: [ 1297.257987] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1297.257989] 0 0 [ 1297.261083] ion_alloc+0x27a/0x810 [ 1297.265905] 0 [ 1297.267877] ? ion_dma_buf_release+0x40/0x40 [ 1297.267892] ? __might_fault+0x177/0x1b0 [ 1297.281609] ion_ioctl+0xea/0x1f0 [ 1297.285041] ? ion_query_heaps+0x360/0x360 [ 1297.286197] 0 0 [ 1297.289256] ? lock_acquire+0x170/0x3f0 [ 1297.289266] ? lock_downgrade+0x740/0x740 [ 1297.295161] ? ion_query_heaps+0x360/0x360 [ 1297.295171] do_vfs_ioctl+0x75a/0xff0 [ 1297.307284] ? ioctl_preallocate+0x1a0/0x1a0 [ 1297.311668] ? lock_downgrade+0x740/0x740 [ 1297.315804] ? __fget+0x225/0x360 [ 1297.316192] Node 1 [ 1297.319255] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.319266] Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:576kB inactive_anon:16264kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1297.319270] lowmem_reserve[]: [ 1297.321486] ? security_file_ioctl+0x83/0xb0 [ 1297.325430] 0 [ 1297.353183] SyS_ioctl+0x7f/0xb0 [ 1297.353191] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.353202] do_syscall_64+0x1d5/0x640 [ 1297.353219] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.378743] RIP: 0033:0x45e219 [ 1297.381909] RSP: 002b:00007f8fa5a33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.389594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1297.396175] 0 [ 1297.396845] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1297.396851] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1297.398627] 0 0 [ 1297.405876] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1297.405883] R13: 00007ffc9c2201af R14: 00007f8fa5a349c0 R15: 000000000119c034 [ 1297.426166] 0 [ 1297.437919] warn_alloc_show_mem: 2 callbacks suppressed [ 1297.437923] Mem-Info: [ 1297.439842] Bluetooth: hci0 command 0x040f tx timeout [ 1297.443297] active_anon:16912 inactive_anon:16123 isolated_anon:0 [ 1297.443297] active_file:15 inactive_file:14 isolated_file:0 [ 1297.443297] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1297.443297] slab_reclaimable:15115 slab_unreclaimable:120444 [ 1297.443297] mapped:26645 shmem:17161 pagetables:644 bounce:0 [ 1297.443297] free:13825 free_pcp:22 free_cma:0 [ 1297.467790] CPU: 1 PID: 12536 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1297.487540] Node 0 active_anon:67072kB inactive_anon:48228kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71764kB dirty:0kB writeback:0kB shmem:52312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1297.491961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.522851] Node 1 active_anon:576kB inactive_anon:16264kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:16332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1297.528786] Call Trace: [ 1297.528806] dump_stack+0x1b2/0x281 [ 1297.528819] warn_alloc.cold+0x96/0x1cc [ 1297.528832] ? zone_watermark_ok_safe+0x220/0x220 [ 1297.559244] Node 0 [ 1297.561976] ? usleep_range+0x130/0x130 [ 1297.565928] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1297.576899] ? try_to_free_pages+0x23f/0x6e0 [ 1297.576908] ? _find_next_bit+0xdb/0x100 [ 1297.576919] ? run_timer_softirq+0x5a0/0x5a0 [ 1297.576936] __alloc_pages_nodemask+0x2127/0x2720 [ 1297.576953] ? lock_acquire+0x170/0x3f0 [ 1297.576968] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1297.587364] lowmem_reserve[]: [ 1297.608710] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1297.608726] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1297.608745] alloc_pages_current+0x155/0x260 [ 1297.608759] ion_page_pool_alloc+0x118/0x1b0 [ 1297.608770] ion_system_heap_allocate+0x133/0x8c0 [ 1297.608781] ? _raw_spin_unlock+0x29/0x40 [ 1297.608790] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1297.608801] ? ion_system_contig_heap_create+0x130/0x130 [ 1297.608814] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1297.619362] 0 [ 1297.621637] ion_alloc+0x27a/0x810 [ 1297.629302] 2717 [ 1297.630409] ? ion_dma_buf_release+0x40/0x40 [ 1297.635215] 2718 [ 1297.638302] ? __might_fault+0x177/0x1b0 [ 1297.638314] ion_ioctl+0xea/0x1f0 [ 1297.638323] ? ion_query_heaps+0x360/0x360 [ 1297.638336] ? lock_acquire+0x170/0x3f0 [ 1297.638348] ? lock_downgrade+0x740/0x740 [ 1297.649272] Node 0 [ 1297.652632] ? ion_query_heaps+0x360/0x360 [ 1297.658750] 2718 [ 1297.661847] do_vfs_ioctl+0x75a/0xff0 [ 1297.665965] 2718 [ 1297.670877] ? ioctl_preallocate+0x1a0/0x1a0 [ 1297.670887] ? lock_downgrade+0x740/0x740 [ 1297.670899] ? __fget+0x225/0x360 [ 1297.670908] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.670918] ? security_file_ioctl+0x83/0xb0 [ 1297.670926] SyS_ioctl+0x7f/0xb0 [ 1297.670933] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.670944] do_syscall_64+0x1d5/0x640 [ 1297.670961] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.670969] RIP: 0033:0x45e219 [ 1297.670976] RSP: 002b:00007f8fa5a54c68 EFLAGS: 00000246 [ 1297.682646] DMA: [ 1297.683097] ORIG_RAX: 0000000000000010 [ 1297.689439] 47*4kB [ 1297.691433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1297.695824] (UM) [ 1297.697867] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1297.697873] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.697877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1297.697882] R13: 00007ffc9c2201af R14: 00007f8fa5a559c0 R15: 000000000119bf8c [ 1297.826751] Node 0 DMA32 free:50116kB min:36200kB low:45248kB high:54296kB active_anon:67044kB inactive_anon:48228kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7232kB pagetables:2380kB bounce:0kB free_pcp:168kB local_pcp:120kB free_cma:0kB [ 1297.856425] lowmem_reserve[]: 0 0 0 0 0 [ 1297.860967] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1297.887286] lowmem_reserve[]: 0 0 0 0 0 [ 1297.891871] Node 1 Normal free:222852kB min:53696kB low:67120kB high:80544kB active_anon:576kB inactive_anon:16264kB active_file:12kB inactive_file:1412kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:192kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1297.928274] lowmem_reserve[]: 0 0 0 0 0 [ 1297.940186] Node 0 DMA: 47*4kB (UM) 58*8kB (UM) 28*16kB (UM) 6*32kB (U) 3*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 11724kB [ 1297.977232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.983874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.997297] device bridge_slave_0 entered promiscuous mode [ 1298.004157] Node 0 DMA32: 1865*4kB (UEH) 1158*8kB (UMEH) 1578*16kB (UME) 6*32kB (UH) 397*64kB (UMH) 52*128kB (UH) 41*256kB (U) 30*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 106228kB [ 1298.026136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.032544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.046082] 58*8kB (UM) 28*16kB (UM) 6*32kB (U) 1*64kB (M) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10956kB [ 1298.060827] device bridge_slave_1 entered promiscuous mode [ 1298.076078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1298.091054] Node 0 DMA32: 2129*4kB (UEH) 1747*8kB (UMEH) 2126*16kB (UME) 1636*32kB (UH) 400*64kB (UMH) 52*128kB (UH) 41*256kB (U) 30*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 173116kB [ 1298.116150] Bluetooth: hci3 command 0x0409 tx timeout [ 1298.126061] Node 1 Normal: 9*4kB (UM) 10*8kB (U) 3*16kB (UM) 1*32kB (U) 3211*64kB (U) 561*128kB (U) 68*256kB (UM) 31*512kB (UM) 15*1024kB (U) 4*2048kB (U) 0*4096kB = 334340kB [ 1298.158922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1298.167719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1298.180111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1298.196051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1298.205197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1298.213941] Node 1 Normal: 6378*4kB (UM) 1560*8kB (UM) 1191*16kB (UM) 2*32kB (U) 3211*64kB (U) 561*128kB (U) 68*256kB (UM) 31*512kB (UM) 15*1024kB (U) 4*2048kB (U) 0*4096kB = 391256kB [ 1298.239008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1298.278614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1298.291916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1298.306742] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1298.318662] 18268 total pagecache pages [ 1298.322645] 0 pages in swap cache [ 1298.338698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1298.347866] team0: Port device team_slave_0 added [ 1298.353459] Swap cache stats: add 0, delete 0, find 0/0 [ 1298.366081] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1298.366682] team0: Port device team_slave_1 added [ 1298.380314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1298.389306] Free swap = 0kB [ 1298.392313] Total swap = 0kB [ 1298.395316] 2097051 pages RAM [ 1298.418700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1298.430165] 0 pages HighMem/MovableOnly [ 1298.434142] 363840 pages reserved [ 1298.458680] 18268 total pagecache pages [ 1298.462686] 0 pages in swap cache [ 1298.466413] 0 pages cma reserved [ 1298.479272] Swap cache stats: add 0, delete 0, find 0/0 [ 1298.492359] Free swap = 0kB [ 1298.495435] Total swap = 0kB [ 1298.516699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.522955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.565968] 2097051 pages RAM [ 1298.569095] 0 pages HighMem/MovableOnly [ 1298.573057] 363840 pages reserved [ 1298.605959] 0 pages cma reserved [ 1298.609349] Out of memory (oom_kill_allocating_task): Kill process 12488 (rs:main Q:Reg) score 0 or sacrifice child [ 1298.620052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.646303] Killed process 12480 (rsyslogd) total-vm:254332kB, anon-rss:860kB, file-rss:0kB, shmem-rss:0kB [ 1298.677458] oom_reaper: reaped process 12480 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1298.689943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.708623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.740297] warn_alloc_show_mem: 1 callbacks suppressed [ 1298.740301] Mem-Info: [ 1298.752581] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1298.786059] active_anon:16687 inactive_anon:16123 isolated_anon:0 [ 1298.786059] active_file:315 inactive_file:1214 isolated_file:0 [ 1298.786059] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1298.786059] slab_reclaimable:15103 slab_unreclaimable:119693 [ 1298.786059] mapped:27854 shmem:17161 pagetables:607 bounce:0 [ 1298.786059] free:239304 free_pcp:538 free_cma:0 [ 1298.838602] systemd[1]: rsyslog.service: Unit entered failed state. [ 1298.845425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.856726] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1298.876967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1298.896364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1298.917578] Node 0 active_anon:66460kB inactive_anon:48228kB active_file:1260kB inactive_file:6020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76632kB dirty:0kB writeback:0kB shmem:52312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1298.988312] device hsr_slave_0 entered promiscuous mode [ 1298.996426] device hsr_slave_1 entered promiscuous mode [ 1299.018414] Node 1 active_anon:560kB inactive_anon:16264kB active_file:300kB inactive_file:1136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35992kB dirty:0kB writeback:0kB shmem:16332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1299.026481] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1299.061068] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1299.078689] Node 0 DMA free:12400kB min:204kB low:252kB high:300kB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.107961] systemd[1]: Stopped System Logging Service. [ 1299.135344] systemd[1]: Starting System Logging Service... [ 1299.159303] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1299.185466] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1299.198549] Node 0 DMA32 free:270184kB min:36200kB low:45248kB high:54296kB active_anon:66088kB inactive_anon:48228kB active_file:2600kB inactive_file:4876kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7136kB pagetables:2260kB bounce:0kB free_pcp:928kB local_pcp:216kB free_cma:0kB [ 1299.228538] systemd[1]: Started Journal Service. [ 1299.275843] lowmem_reserve[]: 0 0 0 0 0 [ 1299.279873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.366146] lowmem_reserve[]: 0 0 0 0 0 [ 1299.370178] Node 1 Normal free:972580kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:16264kB active_file:300kB inactive_file:1136kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:192kB bounce:0kB free_pcp:1308kB local_pcp:660kB free_cma:0kB [ 1299.455813] Bluetooth: hci0 command 0x0419 tx timeout [ 1299.481266] lowmem_reserve[]: 0 0 0 0 0 [ 1299.485293] Node 0 DMA: 153*4kB (UM) 47*8kB (UM) 45*16kB (UM) 17*32kB (U) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 13004kB [ 1299.521741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1299.576909] Node 0 DMA32: 9606*4kB (UMEH) 6589*8kB (UEH) 5920*16kB (UME) 3022*32kB (UEH) 852*64kB (UEH) 155*128kB (UMH) 52*256kB (UM) 36*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 391744kB [ 1299.652269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.665298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1299.680208] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1299.686449] Node 1 Normal: 8704*4kB (UM) 7089*8kB (UM) 4301*16kB (UM) 3732*32kB (UM) 7003*64kB (U) 1548*128kB (U) 167*256kB (UM) 69*512kB (UM) 36*1024kB (U) 5*2048kB (U) 0*4096kB = 1051288kB [ 1299.709712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1299.716332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1299.724242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1299.733011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1299.747489] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1299.753569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.759981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1299.774394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1299.781550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1299.790779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1299.800010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1299.808059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1299.820263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.826687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.834591] 20918 total pagecache pages [ 1299.841242] 0 pages in swap cache [ 1299.844692] Swap cache stats: add 0, delete 0, find 0/0 [ 1299.853456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1299.865485] Free swap = 0kB [ 1299.869997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1299.879877] Total swap = 0kB [ 1299.882902] 2097051 pages RAM [ 1299.887228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1299.894623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1299.906005] 0 pages HighMem/MovableOnly [ 1299.910078] 363840 pages reserved [ 1299.913518] 0 pages cma reserved [ 1299.921326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1299.938350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.944943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.953498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1299.966245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1299.975281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1299.984876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1299.993584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1300.016298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1300.026225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1300.035339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1300.055726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1300.064950] IPVS: ftp: loaded support on port[0] = 21 [ 1300.071032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1300.081963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1300.092173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1300.101653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1300.113990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1300.124462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1300.134150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1300.146436] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1300.154238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1300.180219] Bluetooth: hci3 command 0x041b tx timeout [ 1300.234609] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1300.253612] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1300.264233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1300.272220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1300.290812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.441425] chnl_net:caif_netlink_parms(): no params data found [ 1300.480801] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1300.499032] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1300.506293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1300.514137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1300.564481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.582357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.590197] device bridge_slave_0 entered promiscuous mode [ 1300.603523] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1300.611058] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1300.617971] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1300.624412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.630998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.638819] device bridge_slave_1 entered promiscuous mode [ 1300.663431] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1300.678204] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1300.685866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1300.694680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1300.702281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1300.712718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1300.720289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1300.740815] device veth0_vlan entered promiscuous mode [ 1300.752318] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1300.760545] team0: Port device team_slave_0 added [ 1300.769101] device veth1_vlan entered promiscuous mode [ 1300.777010] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1300.783946] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1300.792056] team0: Port device team_slave_1 added [ 1300.810133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.817589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.843468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.856207] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1300.867037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.873433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.899885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.910850] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1300.918739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1300.928857] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1300.949531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.956630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.964554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.976414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.984383] device bridge_slave_1 left promiscuous mode [ 1300.990962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.998601] device bridge_slave_0 left promiscuous mode [ 1301.004127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.016570] device veth1_macvtap left promiscuous mode [ 1301.021881] device veth0_macvtap left promiscuous mode [ 1301.028071] device veth1_vlan left promiscuous mode [ 1301.033266] device veth0_vlan left promiscuous mode [ 1301.128349] device hsr_slave_1 left promiscuous mode [ 1301.139718] device hsr_slave_0 left promiscuous mode [ 1301.158059] team0 (unregistering): Port device team_slave_1 removed [ 1301.168430] team0 (unregistering): Port device team_slave_0 removed [ 1301.178623] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1301.190699] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1301.224236] bond0 (unregistering): Released all slaves [ 1301.241624] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1301.260239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1301.268269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1301.277239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1301.284928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1301.300382] device veth0_macvtap entered promiscuous mode [ 1301.307548] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1301.317580] device hsr_slave_0 entered promiscuous mode [ 1301.323493] device hsr_slave_1 entered promiscuous mode [ 1301.330402] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1301.341772] device veth1_macvtap entered promiscuous mode [ 1301.348651] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1301.355214] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1301.369086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1301.388733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1301.408270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1301.418604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.431048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1301.440856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.453797] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1301.461119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.474901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1301.483410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1301.491514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1301.500310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1301.516264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1301.526925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.537077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1301.551786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.562667] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1301.572999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.592942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1301.601337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1301.682284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1301.731156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.741037] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1301.754850] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1301.761617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1301.770101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1301.780180] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1301.795140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.808712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1301.816275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1301.824108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1301.833655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.840054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.851163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1301.860013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1301.870885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1301.887308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1301.898103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.904453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.916905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1301.929011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1301.942245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1301.954404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1301.966021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1301.974928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1301.986981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1301.994714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1302.006559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1302.014274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1302.035616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1302.044754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1302.060687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1302.071341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1302.079851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1302.090908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1302.100183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1302.113062] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1302.120631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1302.148895] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1302.157216] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1302.163536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1302.175290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1302.199887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.259646] Bluetooth: hci3 command 0x040f tx timeout 19:45:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:45:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$alg(r0, 0x0, 0x0) [ 1302.386161] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1302.404907] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1302.423786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 19:45:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) [ 1302.432495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 19:45:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa0401, 0x0) 19:45:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) [ 1302.480877] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1302.490789] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1302.504477] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready 19:45:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, 0x0, 0xa0401, 0x0) [ 1302.531037] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1302.537992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1302.549065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1302.570377] device veth0_vlan entered promiscuous mode 19:45:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, 0x0, 0xa0401, 0x0) [ 1302.583788] device veth1_vlan entered promiscuous mode [ 1302.592948] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1302.605472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1302.612570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1302.624204] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1302.643707] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1302.671644] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready 19:45:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, 0x0, 0xa0401, 0x0) [ 1302.689255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1302.703158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1302.726013] device veth0_macvtap entered promiscuous mode [ 1302.758727] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1302.778648] device veth1_macvtap entered promiscuous mode [ 1302.799237] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1302.822922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1302.851229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1302.872649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1302.890219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.908452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1302.928100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.947241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1302.959715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.972220] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1302.979551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1302.986666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1302.994500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1303.004088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1303.012072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1303.029181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1303.041027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.050646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1303.061396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.070725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1303.080680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.091369] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1303.098664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.105979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1303.114705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1303.302777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.311253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.319878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.327147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.338871] device bridge_slave_1 left promiscuous mode [ 1303.344806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.352281] device bridge_slave_0 left promiscuous mode [ 1303.358051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.370178] device veth1_macvtap left promiscuous mode [ 1303.376302] device veth0_macvtap left promiscuous mode [ 1303.381733] device veth1_vlan left promiscuous mode [ 1303.390930] device veth0_vlan left promiscuous mode [ 1303.518578] device hsr_slave_1 left promiscuous mode [ 1303.531453] device hsr_slave_0 left promiscuous mode [ 1303.552446] team0 (unregistering): Port device team_slave_1 removed [ 1303.572142] team0 (unregistering): Port device team_slave_0 removed [ 1303.599602] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1303.628523] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1303.722584] bond0 (unregistering): Released all slaves [ 1304.344820] Bluetooth: hci3 command 0x0419 tx timeout 19:45:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 19:45:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x40000045, 0xe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0xe, 0x1}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x3, 0xe030}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 19:45:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 19:45:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x80000000040, 0x33}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) [ 1306.590897] IPVS: ftp: loaded support on port[0] = 21 [ 1306.700579] IPVS: ftp: loaded support on port[0] = 21 [ 1306.709520] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1306.714812] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1306.729957] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1306.758422] CPU: 0 PID: 13109 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1306.766301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.775650] Call Trace: [ 1306.778228] dump_stack+0x1b2/0x281 [ 1306.781838] warn_alloc.cold+0x96/0x1cc [ 1306.785793] ? zone_watermark_ok_safe+0x220/0x220 [ 1306.790625] __alloc_pages_nodemask+0x2127/0x2720 [ 1306.795464] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1306.800475] ? lock_acquire+0x170/0x3f0 [ 1306.804434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1306.809262] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1306.814693] ? __mutex_unlock_slowpath+0x75/0x770 [ 1306.819521] alloc_pages_current+0x155/0x260 [ 1306.823911] ion_page_pool_alloc+0x118/0x1b0 [ 1306.828313] ion_system_heap_allocate+0x133/0x8c0 [ 1306.833136] ? ion_alloc+0x187/0x810 [ 1306.836830] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1306.842259] ? ion_system_contig_heap_create+0x130/0x130 [ 1306.847688] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1306.852684] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1306.857574] ion_alloc+0x204/0x810 [ 1306.861127] ? ion_dma_buf_release+0x40/0x40 [ 1306.865536] ? __might_fault+0x177/0x1b0 [ 1306.869584] ion_ioctl+0xea/0x1f0 [ 1306.873042] ? ion_query_heaps+0x360/0x360 [ 1306.877260] ? lock_acquire+0x170/0x3f0 [ 1306.881220] ? lock_downgrade+0x740/0x740 [ 1306.885348] ? ion_query_heaps+0x360/0x360 [ 1306.889563] do_vfs_ioctl+0x75a/0xff0 [ 1306.893365] ? ioctl_preallocate+0x1a0/0x1a0 [ 1306.897751] ? lock_downgrade+0x740/0x740 [ 1306.901880] ? __fget+0x225/0x360 [ 1306.905312] ? do_vfs_ioctl+0xff0/0xff0 [ 1306.909264] ? security_file_ioctl+0x83/0xb0 [ 1306.913653] SyS_ioctl+0x7f/0xb0 [ 1306.917015] ? do_vfs_ioctl+0xff0/0xff0 [ 1306.920971] do_syscall_64+0x1d5/0x640 [ 1306.924841] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1306.930009] RIP: 0033:0x45e219 [ 1306.933178] RSP: 002b:00007f3b4f7f2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1306.940864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1306.948116] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1306.955384] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1306.962912] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1306.970161] R13: 00007ffe26fe325f R14: 00007f3b4f7f39c0 R15: 000000000119bf8c [ 1306.977588] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1306.983360] CPU: 1 PID: 13117 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1306.990629] Mem-Info: [ 1306.991268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.997592] active_anon:16988 inactive_anon:16123 isolated_anon:0 [ 1306.997592] active_file:2106 inactive_file:5570 isolated_file:0 [ 1306.997592] unevictable:0 dirty:84 writeback:0 unstable:0 [ 1306.997592] slab_reclaimable:14426 slab_unreclaimable:113649 [ 1306.997592] mapped:57804 shmem:17159 pagetables:880 bounce:0 [ 1306.997592] free:111964 free_pcp:238 free_cma:0 [ 1307.003006] Call Trace: [ 1307.003024] dump_stack+0x1b2/0x281 [ 1307.003046] warn_alloc.cold+0x96/0x1cc [ 1307.042840] Node 0 active_anon:67584kB inactive_anon:48236kB active_file:8292kB inactive_file:22352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196332kB dirty:328kB writeback:0kB shmem:52312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1307.042965] ? zone_watermark_ok_safe+0x220/0x220 [ 1307.047978] Node 1 active_anon:368kB inactive_anon:16256kB active_file:132kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34884kB dirty:8kB writeback:0kB shmem:16324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1307.075069] __alloc_pages_nodemask+0x2127/0x2720 [ 1307.075081] ? _raw_spin_unlock_irq+0x24/0x80 [ 1307.075096] ? lock_acquire+0x170/0x3f0 [ 1307.075110] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1307.075125] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1307.075134] ? __mutex_unlock_slowpath+0x75/0x770 [ 1307.075148] alloc_pages_current+0x155/0x260 [ 1307.075162] ion_page_pool_alloc+0x118/0x1b0 [ 1307.075174] ion_system_heap_allocate+0x133/0x8c0 [ 1307.075185] ? ion_alloc+0x187/0x810 [ 1307.075195] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1307.075207] ? ion_system_contig_heap_create+0x130/0x130 [ 1307.075215] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1307.075225] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1307.075237] ion_alloc+0x204/0x810 [ 1307.075249] ? ion_dma_buf_release+0x40/0x40 [ 1307.075260] ? __might_fault+0x177/0x1b0 [ 1307.075271] ion_ioctl+0xea/0x1f0 [ 1307.075280] ? ion_query_heaps+0x360/0x360 [ 1307.075289] ? lock_acquire+0x170/0x3f0 [ 1307.075297] ? lock_downgrade+0x740/0x740 [ 1307.075305] ? ion_query_heaps+0x360/0x360 [ 1307.075314] do_vfs_ioctl+0x75a/0xff0 [ 1307.075324] ? ioctl_preallocate+0x1a0/0x1a0 [ 1307.075333] ? lock_downgrade+0x740/0x740 [ 1307.075344] ? __fget+0x225/0x360 [ 1307.075354] ? do_vfs_ioctl+0xff0/0xff0 [ 1307.075365] ? security_file_ioctl+0x83/0xb0 [ 1307.075375] SyS_ioctl+0x7f/0xb0 [ 1307.075383] ? do_vfs_ioctl+0xff0/0xff0 [ 1307.075394] do_syscall_64+0x1d5/0x640 [ 1307.075410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1307.075417] RIP: 0033:0x45e219 [ 1307.075422] RSP: 002b:00007f2279f02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.075432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1307.075436] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1307.075441] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1307.075446] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1307.075450] R13: 00007ffca0c46f9f R14: 00007f2279f039c0 R15: 000000000119c034 [ 1307.296305] Node 0 DMA free:11128kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1307.325447] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1307.331795] Node 0 DMA32 free:158636kB min:36200kB low:45248kB high:54296kB active_anon:67580kB inactive_anon:48248kB active_file:8368kB inactive_file:22524kB unevictable:0kB writepending:340kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2960kB bounce:0kB free_pcp:352kB local_pcp:104kB free_cma:0kB [ 1307.370995] lowmem_reserve[]: 0 0 0 0 0 [ 1307.379325] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1307.415884] lowmem_reserve[]: 0 0 0 0 0 [ 1307.422297] Node 1 Normal free:69528kB min:53696kB low:67120kB high:80544kB active_anon:356kB inactive_anon:16256kB active_file:44kB inactive_file:16kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:192kB bounce:0kB free_pcp:700kB local_pcp:0kB free_cma:0kB [ 1307.467458] lowmem_reserve[]: 0 0 0 0 0 [ 1307.474943] Node 0 DMA: 34*4kB (UM) 26*8kB (UM) 20*16kB (UM) 13*32kB (U) 3*64kB (UM) 1*128kB (M) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 11128kB [ 1307.519707] Node 0 DMA32: 1835*4kB (MEH) 852*8kB (UMEH) 151*16kB (E) 1636*32kB (UEH) 10*64kB (UH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69692kB [ 1307.537099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1307.550723] chnl_net:caif_netlink_parms(): no params data found [ 1307.557480] IPVS: ftp: loaded support on port[0] = 21 [ 1307.558594] Node 1 Normal: 312*4kB (UM) 1011*8kB (UM) 920*16kB (UM) 1420*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69624kB [ 1307.588613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1307.605638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1307.615940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1307.625641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1307.637319] 24346 total pagecache pages [ 1307.641722] 0 pages in swap cache [ 1307.646274] Swap cache stats: add 0, delete 0, find 0/0 [ 1307.653101] Free swap = 0kB [ 1307.660502] Total swap = 0kB [ 1307.663811] 2097051 pages RAM [ 1307.668148] 0 pages HighMem/MovableOnly [ 1307.672237] 363840 pages reserved [ 1307.677956] 0 pages cma reserved [ 1307.990365] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1308.042158] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1308.058552] CPU: 0 PID: 11617 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1308.066496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.075885] Call Trace: [ 1308.078463] dump_stack+0x1b2/0x281 [ 1308.082074] dump_header+0x178/0x82f [ 1308.085768] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1308.090871] ? ___ratelimit+0x2cd/0x530 [ 1308.094825] oom_kill_process.cold+0x10/0xb18 [ 1308.099306] out_of_memory+0xe3e/0x1190 [ 1308.103263] ? oom_killer_disable+0x1c0/0x1c0 [ 1308.107736] ? mutex_trylock+0x152/0x1a0 [ 1308.111777] __alloc_pages_nodemask+0x23e1/0x2720 [ 1308.116622] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1308.121454] alloc_pages_current+0x155/0x260 [ 1308.125845] filemap_fault+0xea3/0x1980 [ 1308.129820] ext4_filemap_fault+0x84/0xb0 [ 1308.133950] __do_fault+0xfa/0x380 [ 1308.137487] __handle_mm_fault+0x2497/0x4620 [ 1308.141876] ? vm_insert_page+0x7c0/0x7c0 [ 1308.146021] ? lock_downgrade+0x740/0x740 [ 1308.150157] handle_mm_fault+0x391/0x860 [ 1308.154204] __do_page_fault+0x549/0xad0 [ 1308.158256] ? spurious_fault+0x640/0x640 [ 1308.162384] ? do_page_fault+0x60/0x500 [ 1308.166349] ? page_fault+0x2f/0x50 [ 1308.169956] page_fault+0x45/0x50 [ 1308.173403] RIP: 0007:0x32 [ 1308.176225] RSP: 0bb8:000000000013ef64 EFLAGS: 0000004d [ 1308.188868] Mem-Info: [ 1308.198365] active_anon:16996 inactive_anon:16126 isolated_anon:0 [ 1308.198365] active_file:40 inactive_file:31 isolated_file:0 [ 1308.198365] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1308.198365] slab_reclaimable:14292 slab_unreclaimable:114114 [ 1308.198365] mapped:52958 shmem:17166 pagetables:789 bounce:0 [ 1308.198365] free:25072 free_pcp:0 free_cma:0 [ 1308.237694] Node 0 active_anon:67628kB inactive_anon:48248kB active_file:92kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177016kB dirty:0kB writeback:0kB shmem:52340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1308.265442] Bluetooth: hci4 command 0x0409 tx timeout [ 1308.275162] Bluetooth: hci2 command 0x0409 tx timeout [ 1308.280454] Node 1 active_anon:356kB inactive_anon:16256kB active_file:68kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:16324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1308.311783] Bluetooth: hci1 command 0x0409 tx timeout [ 1308.317188] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1308.348015] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1308.353078] Node 0 DMA32 free:36068kB min:36200kB low:45248kB high:54296kB active_anon:67612kB inactive_anon:48248kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2960kB bounce:0kB free_pcp:164kB local_pcp:0kB free_cma:0kB [ 1308.386107] lowmem_reserve[]: 0 0 0 0 0 [ 1308.390124] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1308.428880] lowmem_reserve[]: 0 0 0 0 0 [ 1308.432912] Node 1 Normal free:53156kB min:53696kB low:67120kB high:80544kB active_anon:356kB inactive_anon:16256kB active_file:68kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1308.477066] lowmem_reserve[]: 0 0 0 0 0 [ 1308.481103] Node 0 DMA: 2*4kB (M) 25*8kB (UM) 17*16kB (UM) 12*32kB (U) 5*64kB (UM) 1*128kB (M) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 11040kB [ 1308.510223] Node 0 DMA32: 2745*4kB (UMEH) 1444*8kB (MEH) 289*16kB (MEH) 84*32kB (UMEH) 26*64kB (MH) 13*128kB (MH) 6*256kB (M) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36244kB [ 1308.539391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1308.563621] Node 1 Normal: 36*4kB (UM) 23*8kB (UM) 380*16kB (UM) 1404*32kB (UM) 25*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52936kB [ 1308.590564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1308.601735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1308.621790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1308.633073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1308.653228] 17238 total pagecache pages [ 1308.659561] 0 pages in swap cache [ 1308.663014] Swap cache stats: add 0, delete 0, find 0/0 [ 1308.677091] Free swap = 0kB [ 1308.680121] Total swap = 0kB [ 1308.683129] 2097051 pages RAM [ 1308.690706] 0 pages HighMem/MovableOnly [ 1308.699157] 363840 pages reserved [ 1308.702747] 0 pages cma reserved [ 1308.710666] Out of memory (oom_kill_allocating_task): Kill process 11617 (syz-executor.0) score 0 or sacrifice child [ 1308.725740] Killed process 13117 (syz-executor.0) total-vm:93612kB, anon-rss:172kB, file-rss:34816kB, shmem-rss:0kB [ 1308.768853] oom_reaper: reaped process 13117 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1308.796081] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1308.842826] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1308.870854] CPU: 0 PID: 8000 Comm: syz-fuzzer Not tainted 4.14.217-syzkaller #0 [ 1308.878328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.887672] Call Trace: [ 1308.890265] dump_stack+0x1b2/0x281 [ 1308.893911] dump_header+0x178/0x82f [ 1308.897618] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1308.902714] ? ___ratelimit+0x2cd/0x530 [ 1308.906684] oom_kill_process.cold+0x10/0xb18 [ 1308.911210] out_of_memory+0xe3e/0x1190 [ 1308.915186] ? oom_killer_disable+0x1c0/0x1c0 [ 1308.919703] ? mutex_trylock+0x152/0x1a0 [ 1308.923745] __alloc_pages_nodemask+0x23e1/0x2720 [ 1308.928601] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1308.933444] alloc_pages_current+0x155/0x260 [ 1308.937847] filemap_fault+0xea3/0x1980 [ 1308.941839] ext4_filemap_fault+0x84/0xb0 [ 1308.945976] __do_fault+0xfa/0x380 [ 1308.949496] __handle_mm_fault+0x2497/0x4620 [ 1308.953902] ? vm_insert_page+0x7c0/0x7c0 [ 1308.958033] ? lock_downgrade+0x740/0x740 [ 1308.962167] handle_mm_fault+0x391/0x860 [ 1308.966230] __do_page_fault+0x549/0xad0 [ 1308.970273] ? spurious_fault+0x640/0x640 [ 1308.974401] ? do_page_fault+0x60/0x500 [ 1308.978354] ? page_fault+0x2f/0x50 [ 1308.981962] page_fault+0x45/0x50 [ 1308.985394] RIP: 0000:0xb358f8 [ 1308.988561] RSP: 32ed4657:000000c00003dec8 EFLAGS: 00438920 [ 1308.995687] Mem-Info: [ 1308.997724] syz-executor.4: [ 1309.001443] active_anon:16971 inactive_anon:16126 isolated_anon:0 [ 1309.001443] active_file:17 inactive_file:8 isolated_file:0 [ 1309.001443] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1309.001443] slab_reclaimable:14277 slab_unreclaimable:114057 [ 1309.001443] mapped:52938 shmem:17166 pagetables:789 bounce:0 [ 1309.001443] free:13935 free_pcp:82 free_cma:0 [ 1309.003898] syz-executor.0: [ 1309.010517] Node 0 active_anon:67528kB inactive_anon:48248kB active_file:68kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176936kB dirty:0kB writeback:0kB shmem:52340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1309.050130] page allocation failure: order:0 [ 1309.077115] Node 1 active_anon:356kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:16324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1309.083679] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1309.114899] page allocation failure: order:0 [ 1309.118985] Node 0 [ 1309.122012] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1309.131033] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.132823] (null) [ 1309.147709] lowmem_reserve[]: [ 1309.170161] (null) [ 1309.175444] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1309.180569] CPU: 1 PID: 13109 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1309.188452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.189694] 0 [ 1309.197792] Call Trace: [ 1309.197812] dump_stack+0x1b2/0x281 [ 1309.197824] warn_alloc.cold+0x96/0x1cc [ 1309.197836] ? zone_watermark_ok_safe+0x220/0x220 [ 1309.197868] ? usleep_range+0x130/0x130 [ 1309.197878] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1309.203402] 2717 [ 1309.205847] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1309.205857] ? run_timer_softirq+0x5a0/0x5a0 [ 1309.205873] __alloc_pages_nodemask+0x2127/0x2720 [ 1309.205890] ? lock_acquire+0x170/0x3f0 [ 1309.205905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1309.205917] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1309.205936] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1309.219469] 2718 [ 1309.223759] alloc_pages_current+0x155/0x260 [ 1309.223775] ion_page_pool_alloc+0x118/0x1b0 [ 1309.223785] ion_system_heap_allocate+0x133/0x8c0 [ 1309.223795] ? ion_alloc+0x187/0x810 [ 1309.230929] syz-executor.0 cpuset= [ 1309.230999] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1309.242758] 2718 [ 1309.244175] ? ion_system_contig_heap_create+0x130/0x130 [ 1309.244186] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1309.244197] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1309.244208] ion_alloc+0x204/0x810 [ 1309.244222] ? ion_dma_buf_release+0x40/0x40 [ 1309.244234] ? __might_fault+0x177/0x1b0 [ 1309.244245] ion_ioctl+0xea/0x1f0 [ 1309.251359] / [ 1309.253570] ? ion_query_heaps+0x360/0x360 [ 1309.266786] 2718 [ 1309.269836] ? lock_acquire+0x170/0x3f0 [ 1309.269845] ? lock_downgrade+0x740/0x740 [ 1309.269855] ? ion_query_heaps+0x360/0x360 [ 1309.269865] do_vfs_ioctl+0x75a/0xff0 [ 1309.269877] ? ioctl_preallocate+0x1a0/0x1a0 [ 1309.269887] ? lock_downgrade+0x740/0x740 [ 1309.280801] mems_allowed=0-1 [ 1309.281954] ? __fget+0x225/0x360 [ 1309.294857] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.294868] ? security_file_ioctl+0x83/0xb0 [ 1309.294877] SyS_ioctl+0x7f/0xb0 [ 1309.294886] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.294897] do_syscall_64+0x1d5/0x640 [ 1309.294915] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1309.294924] RIP: 0033:0x45e219 [ 1309.294928] RSP: 002b:00007f3b4f7f2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.294938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1309.294943] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1309.294949] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.294954] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1309.294959] R13: 00007ffe26fe325f R14: 00007f3b4f7f39c0 R15: 000000000119bf8c [ 1309.303928] warn_alloc_show_mem: 1 callbacks suppressed [ 1309.303931] Mem-Info: [ 1309.311849] CPU: 0 PID: 13117 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1309.312726] active_anon:16966 inactive_anon:16126 isolated_anon:0 [ 1309.312726] active_file:15 inactive_file:14 isolated_file:0 [ 1309.312726] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1309.312726] slab_reclaimable:14277 slab_unreclaimable:114059 [ 1309.312726] mapped:52924 shmem:17166 pagetables:789 bounce:0 [ 1309.312726] free:13935 free_pcp:85 free_cma:0 [ 1309.316757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.316760] Call Trace: [ 1309.316780] dump_stack+0x1b2/0x281 [ 1309.316793] warn_alloc.cold+0x96/0x1cc [ 1309.316807] ? zone_watermark_ok_safe+0x220/0x220 [ 1309.320249] Node 0 active_anon:67508kB inactive_anon:48248kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176880kB dirty:0kB writeback:0kB shmem:52340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1309.321942] ? usleep_range+0x130/0x130 [ 1309.326178] Node 1 active_anon:356kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:16324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1309.328193] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1309.332168] Node 0 [ 1309.336491] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1309.336506] ? run_timer_softirq+0x5a0/0x5a0 [ 1309.336525] __alloc_pages_nodemask+0x2127/0x2720 [ 1309.340754] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.344549] ? lock_acquire+0x170/0x3f0 [ 1309.344565] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1309.348942] lowmem_reserve[]: [ 1309.353075] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1309.356169] 0 [ 1309.359590] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1309.363548] 2717 [ 1309.367966] alloc_pages_current+0x155/0x260 [ 1309.367980] ion_page_pool_alloc+0x118/0x1b0 [ 1309.371317] 2718 [ 1309.375272] ion_system_heap_allocate+0x133/0x8c0 [ 1309.375282] ? ion_alloc+0x187/0x810 [ 1309.375293] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1309.379152] 2718 [ 1309.384322] ? ion_system_contig_heap_create+0x130/0x130 [ 1309.384331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1309.384342] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1309.387505] 2718 [ 1309.395194] ion_alloc+0x204/0x810 [ 1309.395210] ? ion_dma_buf_release+0x40/0x40 [ 1309.409710] ? __might_fault+0x177/0x1b0 [ 1309.409726] ion_ioctl+0xea/0x1f0 [ 1309.416989] Node 0 [ 1309.424227] ? ion_query_heaps+0x360/0x360 [ 1309.424237] ? lock_acquire+0x170/0x3f0 [ 1309.424247] ? lock_downgrade+0x740/0x740 [ 1309.431508] DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:67492kB inactive_anon:48248kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2960kB bounce:0kB free_pcp:168kB local_pcp:164kB free_cma:0kB [ 1309.436837] ? ion_query_heaps+0x360/0x360 [ 1309.436848] do_vfs_ioctl+0x75a/0xff0 [ 1309.436859] ? ioctl_preallocate+0x1a0/0x1a0 [ 1309.439242] lowmem_reserve[]: [ 1309.447098] ? lock_downgrade+0x740/0x740 [ 1309.447110] ? __fget+0x225/0x360 [ 1309.447128] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.480258] 0 [ 1309.489581] ? security_file_ioctl+0x83/0xb0 [ 1309.489591] SyS_ioctl+0x7f/0xb0 [ 1309.489600] ? do_vfs_ioctl+0xff0/0xff0 [ 1309.492161] 0 [ 1309.495769] do_syscall_64+0x1d5/0x640 [ 1309.495786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1309.499728] 0 [ 1309.504547] RIP: 0033:0x45e219 [ 1309.504552] RSP: 002b:00007f2279f02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.504565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1309.532315] 0 [ 1309.536250] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1309.536255] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1309.536260] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1309.536265] R13: 00007ffca0c46f9f R14: 00007f2279f039c0 R15: 000000000119c034 [ 1309.543019] Node 0 [ 1309.578674] 0 [ 1309.580182] DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:67492kB inactive_anon:48248kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2960kB bounce:0kB free_pcp:168kB local_pcp:4kB free_cma:0kB [ 1309.610667] lowmem_reserve[]: [ 1309.629484] Node 0 [ 1309.634316] 0 0 0 0 0 [ 1309.634333] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.634350] lowmem_reserve[]: 0 0 0 0 0 [ 1309.634370] Node 1 Normal free:26772kB min:53696kB low:67120kB high:80544kB active_anon:356kB inactive_anon:16256kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:192kB bounce:0kB free_pcp:172kB local_pcp:52kB free_cma:0kB [ 1309.634387] lowmem_reserve[]: 0 0 0 0 0 [ 1309.634403] Node 0 DMA: 2*4kB (M) 15*8kB [ 1309.647503] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.652142] (UM) [ 1309.666931] lowmem_reserve[]: [ 1309.669309] 17*16kB [ 1309.688825] 0 [ 1309.692676] (UM) [ 1309.706088] 0 [ 1309.706654] 12*32kB [ 1309.710711] 0 [ 1309.739097] (U) 5*64kB (UM) 1*128kB (M) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 10960kB [ 1309.739147] Node 0 DMA32: [ 1309.758497] 0 [ 1309.758865] 1742*4kB [ 1309.762300] 0 [ 1309.773633] (UME) [ 1309.823616] 937*8kB [ 1309.913364] Node 1 Normal free:257256kB min:53696kB low:67120kB high:80544kB active_anon:356kB inactive_anon:16256kB active_file:8kB inactive_file:524kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:192kB bounce:0kB free_pcp:276kB local_pcp:224kB free_cma:0kB [ 1310.113307] lowmem_reserve[]: 0 0 0 0 0 [ 1310.119791] Node 0 DMA: 2*4kB (M) 15*8kB (UM) 17*16kB (UM) 12*32kB (U) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 1*4096kB (M) = 11408kB [ 1310.143664] (UME) 150*16kB (UME) 23*32kB (UME) 5*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 1310.176699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1310.188135] Node 0 DMA32: 5090*4kB (UE) 1730*8kB (UME) 5087*16kB (UME) 23*32kB (UME) 255*64kB (U) 750*128kB (U) 184*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 282408kB [ 1310.213588] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 766*32kB (UM) 3596*64kB (U) 395*128kB (U) 40*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 315496kB [ 1310.223541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1310.256603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.273553] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 766*32kB (UM) 3596*64kB (U) 395*128kB (U) 40*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 315496kB [ 1310.273807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.313525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.322387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.323535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.343556] Bluetooth: hci1 command 0x041b tx timeout [ 1310.348830] Bluetooth: hci2 command 0x041b tx timeout [ 1310.363608] Bluetooth: hci4 command 0x041b tx timeout [ 1310.364100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.379572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.395509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.404729] 18620 total pagecache pages [ 1310.408722] 0 pages in swap cache [ 1310.412183] Swap cache stats: add 0, delete 0, find 0/0 [ 1310.433497] 18657 total pagecache pages [ 1310.437494] 0 pages in swap cache [ 1310.440936] Swap cache stats: add 0, delete 0, find 0/0 [ 1310.446655] Free swap = 0kB [ 1310.449686] Total swap = 0kB [ 1310.452721] 2097051 pages RAM [ 1310.463505] Free swap = 0kB [ 1310.466547] Total swap = 0kB [ 1310.469561] 2097051 pages RAM [ 1310.472656] 0 pages HighMem/MovableOnly [ 1310.483532] 0 pages HighMem/MovableOnly [ 1310.487515] 363840 pages reserved [ 1310.491067] 0 pages cma reserved [ 1310.498436] 363840 pages reserved [ 1310.501919] 0 pages cma reserved [ 1310.505682] Out of memory (oom_kill_allocating_task): Kill process 8000 (syz-fuzzer) score 0 or sacrifice child [ 1310.523588] Killed process 13095 (syz-executor.2) total-vm:85024kB, anon-rss:68kB, file-rss:4kB, shmem-rss:0kB [ 1310.556033] oom_reaper: reaped process 13109 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1310.598859] oom_reaper: reaped process 13095 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1310.672953] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1310.676672] chnl_net:caif_netlink_parms(): no params data found [ 1310.694962] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1310.714414] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1310.718770] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1310.727742] syz-executor.1: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1310.730519] CPU: 0 PID: 13109 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1310.738418] syz-executor.1 cpuset= [ 1310.746306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.746503] / [ 1310.749827] Call Trace: [ 1310.749846] dump_stack+0x1b2/0x281 [ 1310.749860] warn_alloc.cold+0x96/0x1cc [ 1310.749872] ? zone_watermark_ok_safe+0x220/0x220 [ 1310.759356] mems_allowed=0-1 [ 1310.761074] __alloc_pages_nodemask+0x2127/0x2720 [ 1310.783958] ? retint_kernel+0x2d/0x2d [ 1310.787835] ? lock_acquire+0x170/0x3f0 [ 1310.791817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1310.796648] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1310.802083] ? __mutex_unlock_slowpath+0x75/0x770 [ 1310.806927] ? __list_del_entry_valid+0xb3/0xf0 [ 1310.811579] alloc_pages_current+0x155/0x260 [ 1310.815989] ion_page_pool_alloc+0x118/0x1b0 [ 1310.820398] ion_system_heap_allocate+0x133/0x8c0 [ 1310.825223] ? _raw_spin_unlock+0x29/0x40 [ 1310.829368] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1310.834285] ? ion_system_contig_heap_create+0x130/0x130 [ 1310.839718] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1310.844715] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1310.849541] ion_alloc+0x27a/0x810 [ 1310.853066] ? ion_dma_buf_release+0x40/0x40 [ 1310.857458] ? __might_fault+0x177/0x1b0 [ 1310.861517] ion_ioctl+0xea/0x1f0 [ 1310.864953] ? ion_query_heaps+0x360/0x360 [ 1310.869171] ? lock_acquire+0x170/0x3f0 [ 1310.873161] ? lock_downgrade+0x740/0x740 [ 1310.877296] ? ion_query_heaps+0x360/0x360 [ 1310.881530] do_vfs_ioctl+0x75a/0xff0 [ 1310.885318] ? ioctl_preallocate+0x1a0/0x1a0 [ 1310.889710] ? lock_downgrade+0x740/0x740 [ 1310.893844] ? __fget+0x225/0x360 [ 1310.897286] ? do_vfs_ioctl+0xff0/0xff0 [ 1310.901255] ? security_file_ioctl+0x83/0xb0 [ 1310.905645] SyS_ioctl+0x7f/0xb0 [ 1310.908992] ? do_vfs_ioctl+0xff0/0xff0 [ 1310.912947] do_syscall_64+0x1d5/0x640 [ 1310.916836] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1310.922007] RIP: 0033:0x45e219 [ 1310.925176] RSP: 002b:00007f3b4f7f2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1310.932867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1310.940134] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1310.947384] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.954633] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1310.961882] R13: 00007ffe26fe325f R14: 00007f3b4f7f39c0 R15: 000000000119bf8c [ 1310.969146] CPU: 1 PID: 13101 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1310.977031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.986381] Call Trace: [ 1310.988969] dump_stack+0x1b2/0x281 [ 1310.992599] warn_alloc.cold+0x96/0x1cc [ 1310.996570] ? zone_watermark_ok_safe+0x220/0x220 [ 1311.001420] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1311.006877] ? wake_all_kswapds+0x175/0x360 [ 1311.011199] __alloc_pages_nodemask+0x2127/0x2720 [ 1311.016037] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1311.021051] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1311.026072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.030911] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.035757] ? cache_alloc_refill+0x2fa/0x350 [ 1311.040251] ? ____cache_alloc_node+0x156/0x1d0 [ 1311.044925] cache_grow_begin+0x91/0x630 [ 1311.048982] ? cache_grow_begin+0x91/0x630 [ 1311.053219] fallback_alloc+0x207/0x2c0 [ 1311.057194] __kmalloc+0x213/0x400 [ 1311.060727] ? batadv_hash_new+0xaa/0x270 [ 1311.064803] warn_alloc_show_mem: 1 callbacks suppressed [ 1311.064806] Mem-Info: [ 1311.064867] batadv_hash_new+0xaa/0x270 [ 1311.070250] active_anon:16985 inactive_anon:16126 isolated_anon:12 [ 1311.070250] active_file:864 inactive_file:1042 isolated_file:0 [ 1311.070250] unevictable:0 dirty:32 writeback:0 unstable:0 [ 1311.070250] slab_reclaimable:13954 slab_unreclaimable:117055 [ 1311.070250] mapped:45798 shmem:17166 pagetables:741 bounce:0 [ 1311.070250] free:109923 free_pcp:292 free_cma:0 [ 1311.072632] ? queue_delayed_work_on+0xfc/0x1d0 [ 1311.078518] Node 0 active_anon:67584kB inactive_anon:48248kB active_file:3336kB inactive_file:3756kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:147928kB dirty:128kB writeback:0kB shmem:52340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1311.110328] batadv_tt_init+0x260/0x390 [ 1311.110340] batadv_mesh_init+0x478/0x630 [ 1311.110348] batadv_softif_init_late+0xa26/0xc90 [ 1311.110356] ? batadv_get_strings+0x40/0x40 [ 1311.110364] ? dev_valid_name+0x1a0/0x1a0 [ 1311.110372] ? batadv_get_strings+0x40/0x40 [ 1311.110379] register_netdevice+0x291/0xe40 [ 1311.110389] ? netdev_change_features+0xa0/0xa0 [ 1311.110397] ? rtnl_create_link+0x129/0x890 [ 1311.110406] rtnl_newlink+0x14dc/0x1830 [ 1311.110412] ? rtnl_newlink+0x43d/0x1830 [ 1311.110427] ? mark_held_locks+0xa6/0xf0 [ 1311.110434] ? rtnl_dellink+0x6a0/0x6a0 [ 1311.110444] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1311.123416] Node 1 active_anon:356kB inactive_anon:16256kB active_file:120kB inactive_file:412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35264kB dirty:0kB writeback:0kB shmem:16324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1311.143211] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1311.143253] ? rtnl_dellink+0x6a0/0x6a0 [ 1311.143261] rtnetlink_rcv_msg+0x3be/0xb10 [ 1311.143272] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1311.143281] ? __netlink_lookup+0x345/0x5d0 [ 1311.143295] netlink_rcv_skb+0x125/0x390 [ 1311.173345] Node 0 [ 1311.177766] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1311.182067] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1311.186012] ? netlink_ack+0x9a0/0x9a0 [ 1311.186028] netlink_unicast+0x437/0x610 [ 1311.186038] ? netlink_sendskb+0xd0/0xd0 [ 1311.186047] ? __check_object_size+0x179/0x230 [ 1311.186057] netlink_sendmsg+0x62e/0xb80 [ 1311.203395] lowmem_reserve[]: [ 1311.230439] ? nlmsg_notify+0x170/0x170 [ 1311.230453] ? security_socket_sendmsg+0x83/0xb0 [ 1311.230461] ? nlmsg_notify+0x170/0x170 [ 1311.230472] sock_sendmsg+0xb5/0x100 [ 1311.273383] 0 [ 1311.288154] SyS_sendto+0x1c7/0x2c0 [ 1311.288167] ? SyS_getpeername+0x220/0x220 [ 1311.313356] 2717 [ 1311.315757] ? up_read+0x17/0x30 [ 1311.320465] 2718 [ 1311.324446] ? __do_page_fault+0x159/0xad0 [ 1311.324455] ? do_syscall_64+0x4c/0x640 [ 1311.324464] ? SyS_getpeername+0x220/0x220 [ 1311.324473] do_syscall_64+0x1d5/0x640 [ 1311.343316] 2718 [ 1311.345196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.349400] 2718 [ 1311.353353] RIP: 0033:0x417c97 [ 1311.353357] RSP: 002b:00007ffd6703c120 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1311.353366] RAX: ffffffffffffffda RBX: 00000000016b4300 RCX: 0000000000417c97 [ 1311.353370] RDX: 000000000000003c RSI: 00000000016b4350 RDI: 0000000000000003 [ 1311.353374] RBP: 0000000000000000 R08: 00007ffd6703c130 R09: 000000000000000c [ 1311.353378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1311.353381] R13: 0000000000000000 R14: 00000000016b4350 R15: 0000000000000003 [ 1311.373683] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1311.375177] CPU: 0 PID: 13117 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1311.381853] ------------[ cut here ]------------ [ 1311.388928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.396188] WARNING: CPU: 1 PID: 13101 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1311.403423] Call Trace: [ 1311.410670] Kernel panic - not syncing: panic_on_warn set ... [ 1311.410670] [ 1311.417945] dump_stack+0x1b2/0x281 [ 1311.472422] warn_alloc.cold+0x96/0x1cc [ 1311.476393] ? zone_watermark_ok_safe+0x220/0x220 [ 1311.481238] __alloc_pages_nodemask+0x2127/0x2720 [ 1311.486080] ? lock_acquire+0x170/0x3f0 [ 1311.490041] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.494882] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1311.500315] ? __mutex_unlock_slowpath+0x75/0x770 [ 1311.505135] ? retint_kernel+0x2d/0x2d [ 1311.509004] alloc_pages_current+0x155/0x260 [ 1311.513409] ion_page_pool_alloc+0x118/0x1b0 [ 1311.517813] ion_system_heap_allocate+0x133/0x8c0 [ 1311.522635] ? _raw_spin_unlock+0x29/0x40 [ 1311.526764] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1311.531689] ? ion_system_contig_heap_create+0x130/0x130 [ 1311.537118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1311.542131] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1311.546955] ion_alloc+0x27a/0x810 [ 1311.550487] ? ion_dma_buf_release+0x40/0x40 [ 1311.554876] ? __might_fault+0x177/0x1b0 [ 1311.558921] ion_ioctl+0xea/0x1f0 [ 1311.562353] ? ion_query_heaps+0x360/0x360 [ 1311.566585] ? lock_acquire+0x170/0x3f0 [ 1311.570541] ? lock_downgrade+0x740/0x740 [ 1311.574668] ? ion_query_heaps+0x360/0x360 [ 1311.578883] do_vfs_ioctl+0x75a/0xff0 [ 1311.582666] ? ioctl_preallocate+0x1a0/0x1a0 [ 1311.587064] ? lock_downgrade+0x740/0x740 [ 1311.591199] ? __fget+0x225/0x360 [ 1311.594637] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.598606] ? security_file_ioctl+0x83/0xb0 [ 1311.602995] SyS_ioctl+0x7f/0xb0 [ 1311.606427] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.610382] do_syscall_64+0x1d5/0x640 [ 1311.614266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.619434] RIP: 0033:0x45e219 [ 1311.622601] RSP: 002b:00007f2279f02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.630303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1311.637568] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1311.644817] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 1311.652066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1311.659315] R13: 00007ffca0c46f9f R14: 00007f2279f039c0 R15: 000000000119c034 [ 1311.666577] CPU: 1 PID: 13101 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1311.674450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.674454] Call Trace: [ 1311.674469] dump_stack+0x1b2/0x281 [ 1311.674480] panic+0x1f9/0x42d [ 1311.674488] ? add_taint.cold+0x16/0x16 [ 1311.674500] ? debug_print_object.cold+0xa7/0xdb [ 1311.686892] Node 0 [ 1311.690036] ? debug_print_object.cold+0xa7/0xdb [ 1311.690046] __warn.cold+0x20/0x44 [ 1311.690057] ? ist_end_non_atomic+0x10/0x10 [ 1311.690065] ? debug_print_object.cold+0xa7/0xdb [ 1311.690076] report_bug+0x208/0x250 [ 1311.690087] do_error_trap+0x195/0x2d0 [ 1311.690096] ? math_error+0x2d0/0x2d0 [ 1311.690112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1311.690125] invalid_op+0x1b/0x40 [ 1311.690135] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1311.690139] RSP: 0018:ffff88809e3bf248 EFLAGS: 00010086 [ 1311.690147] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1311.690152] RDX: 0000000000000000 RSI: ffffffff878bbb40 RDI: ffffed1013c77e3f [ 1311.690157] RBP: ffffffff878b6e00 R08: 0000000000000061 R09: 0000000000000001 [ 1311.690161] R10: 0000000000000000 R11: ffff88809bc20580 R12: 0000000000000000 [ 1311.690166] R13: 0000000000000000 R14: ffff8880831edbb0 R15: 1ffff11013c77e52 [ 1311.690184] ? debug_print_object.cold+0xa7/0xdb [ 1311.690197] debug_object_assert_init+0x1d3/0x2d0 [ 1311.690208] ? debug_object_active_state+0x330/0x330 [ 1311.690216] ? rtnl_newlink+0x14dc/0x1830 [ 1311.690222] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1311.690231] ? netlink_rcv_skb+0x125/0x390 [ 1311.690242] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.690254] del_timer+0x5d/0xe0 [ 1311.690261] ? process_timeout+0x20/0x20 [ 1311.690274] try_to_grab_pending+0x243/0x610 [ 1311.690285] __cancel_work_timer+0x90/0x460 [ 1311.690294] ? work_on_cpu_safe+0x70/0x70 [ 1311.690307] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1311.690320] batadv_nc_mesh_free+0x41/0x120 [ 1311.690330] batadv_mesh_free+0x70/0x150 [ 1311.690341] batadv_mesh_init+0x561/0x630 [ 1311.703313] DMA32 free:364440kB min:36200kB low:45248kB high:54296kB active_anon:67516kB inactive_anon:48248kB active_file:3492kB inactive_file:3776kB unevictable:0kB writepending:128kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2768kB bounce:0kB free_pcp:788kB local_pcp:680kB free_cma:0kB [ 1311.704410] batadv_softif_init_late+0xa26/0xc90 [ 1311.709136] lowmem_reserve[]: [ 1311.712657] ? batadv_get_strings+0x40/0x40 [ 1311.712665] ? dev_valid_name+0x1a0/0x1a0 [ 1311.712673] ? batadv_get_strings+0x40/0x40 [ 1311.712681] register_netdevice+0x291/0xe40 [ 1311.712690] ? netdev_change_features+0xa0/0xa0 [ 1311.712700] ? rtnl_create_link+0x129/0x890 [ 1311.717167] 0 [ 1311.721746] rtnl_newlink+0x14dc/0x1830 [ 1311.721752] ? rtnl_newlink+0x43d/0x1830 [ 1311.721769] ? mark_held_locks+0xa6/0xf0 [ 1311.721775] ? rtnl_dellink+0x6a0/0x6a0 [ 1311.721784] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1311.721796] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1311.728189] 0 [ 1311.729331] ? rtnl_dellink+0x6a0/0x6a0 [ 1311.733088] 0 0 [ 1311.737917] rtnetlink_rcv_msg+0x3be/0xb10 [ 1311.737927] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1311.737935] ? __netlink_lookup+0x345/0x5d0 [ 1311.737948] netlink_rcv_skb+0x125/0x390 [ 1311.737957] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1311.737966] ? netlink_ack+0x9a0/0x9a0 [ 1311.737980] netlink_unicast+0x437/0x610 [ 1311.737989] ? netlink_sendskb+0xd0/0xd0 [ 1311.737996] ? __check_object_size+0x179/0x230 [ 1311.738005] netlink_sendmsg+0x62e/0xb80 [ 1311.738015] ? nlmsg_notify+0x170/0x170 [ 1311.738027] ? security_socket_sendmsg+0x83/0xb0 [ 1311.738034] ? nlmsg_notify+0x170/0x170 [ 1311.738044] sock_sendmsg+0xb5/0x100 [ 1311.743625] 0 [ 1311.747193] SyS_sendto+0x1c7/0x2c0 [ 1311.752559] Node 0 [ 1311.759813] ? SyS_getpeername+0x220/0x220 [ 1311.759838] ? up_read+0x17/0x30 [ 1311.759850] ? __do_page_fault+0x159/0xad0 [ 1311.767185] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1311.774344] ? do_syscall_64+0x4c/0x640 [ 1311.774352] ? SyS_getpeername+0x220/0x220 [ 1311.774360] do_syscall_64+0x1d5/0x640 [ 1311.774373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.774382] RIP: 0033:0x417c97 [ 1311.781749] lowmem_reserve[]: [ 1311.788877] RSP: 002b:00007ffd6703c120 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1311.788886] RAX: ffffffffffffffda RBX: 00000000016b4300 RCX: 0000000000417c97 [ 1311.788891] RDX: 000000000000003c RSI: 00000000016b4350 RDI: 0000000000000003 [ 1311.788895] RBP: 0000000000000000 R08: 00007ffd6703c130 R09: 000000000000000c [ 1311.788899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1311.788904] R13: 0000000000000000 R14: 00000000016b4350 R15: 0000000000000003 [ 1311.794285] Kernel Offset: disabled [ 1312.130833] Rebooting in 86400 seconds..