*1024kB (UME) 2*2048kB (M) 0*4096kB = 11044kB [ 2756.463124] Node 0 DMA32: 14017*4kB (UME) 2386*8kB (UMEH) 1296*16kB (UMEH) 1069*32kB (UMEH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 130292kB [ 2756.508737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2756.557317] Node 1 Normal: 8678*4kB (UME) 13284*8kB (UME) 6557*16kB (UME) 2762*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 334280kB [ 2756.600850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2756.627498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2756.652145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2756.661744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2756.671845] 16343 total pagecache pages [ 2756.676402] 0 pages in swap cache [ 2756.681075] Swap cache stats: add 0, delete 0, find 0/0 [ 2756.687481] Free swap = 0kB [ 2756.690863] Total swap = 0kB [ 2756.694219] 2097051 pages RAM [ 2756.698869] 0 pages HighMem/MovableOnly [ 2756.703193] 363840 pages reserved [ 2756.708584] 0 pages cma reserved [ 2756.708926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2756.746958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2756.778091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2756.784853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2756.839413] device bridge_slave_1 left promiscuous mode [ 2756.845031] bridge0: port 2(bridge_slave_1) entered disabled state [ 2756.880556] device bridge_slave_0 left promiscuous mode [ 2756.901161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.934177] device veth1_macvtap left promiscuous mode [ 2756.945922] device veth0_macvtap left promiscuous mode [ 2756.959143] device veth1_vlan left promiscuous mode [ 2756.971580] device veth0_vlan left promiscuous mode [ 2757.258029] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2757.289714] device hsr_slave_1 left promiscuous mode [ 2757.310930] device hsr_slave_0 left promiscuous mode [ 2757.316802] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2757.321928] CPU: 1 PID: 30121 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2757.329800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.339188] Call Trace: [ 2757.341804] dump_stack+0x1b2/0x283 [ 2757.345439] warn_alloc.cold+0x96/0x1cc [ 2757.349398] ? zone_watermark_ok_safe+0x220/0x220 [ 2757.354335] __alloc_pages_nodemask+0x2127/0x2720 [ 2757.359164] ? lock_acquire+0x170/0x3f0 [ 2757.363124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2757.367952] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2757.373451] ? __mutex_unlock_slowpath+0x75/0x770 [ 2757.378299] alloc_pages_current+0x155/0x260 [ 2757.382699] ion_page_pool_alloc+0x118/0x1b0 [ 2757.387089] ion_system_heap_allocate+0x133/0x8c0 [ 2757.391913] ? ion_alloc+0x187/0x810 [ 2757.395607] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2757.401035] ? ion_system_contig_heap_create+0x130/0x130 [ 2757.406460] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2757.411452] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2757.416276] ion_alloc+0x204/0x810 [ 2757.419798] ? ion_dma_buf_release+0x40/0x40 [ 2757.424201] ? __might_fault+0x177/0x1b0 [ 2757.428241] ion_ioctl+0xea/0x1ee [ 2757.431671] ? ion_alloc.cold+0x3b/0x3b [ 2757.435624] ? lock_acquire+0x170/0x3f0 [ 2757.439575] ? lock_downgrade+0x740/0x740 [ 2757.443697] ? ion_alloc.cold+0x3b/0x3b [ 2757.447649] do_vfs_ioctl+0x75a/0xff0 [ 2757.451431] ? ioctl_preallocate+0x1a0/0x1a0 [ 2757.455816] ? lock_downgrade+0x740/0x740 [ 2757.459951] ? __fget+0x225/0x360 [ 2757.463380] ? do_vfs_ioctl+0xff0/0xff0 [ 2757.467333] ? security_file_ioctl+0x83/0xb0 [ 2757.471721] SyS_ioctl+0x7f/0xb0 [ 2757.475066] ? do_vfs_ioctl+0xff0/0xff0 [ 2757.479019] do_syscall_64+0x1d5/0x640 [ 2757.482906] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2757.488078] RIP: 0033:0x45e219 [ 2757.491253] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2757.498948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2757.506195] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2757.513453] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.520713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2757.527970] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2757.568330] team0 (unregistering): Port device team_slave_1 removed [ 2757.592328] team0 (unregistering): Port device team_slave_0 removed [ 2757.607724] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2757.623109] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2757.669918] bond0 (unregistering): Released all slaves [ 2757.688271] Mem-Info: [ 2757.690719] active_anon:333453 inactive_anon:8786 isolated_anon:44 [ 2757.690719] active_file:2457 inactive_file:3747 isolated_file:0 [ 2757.690719] unevictable:0 dirty:93 writeback:0 unstable:0 [ 2757.690719] slab_reclaimable:29457 slab_unreclaimable:167876 [ 2757.690719] mapped:53218 shmem:8979 pagetables:106158 bounce:0 [ 2757.690719] free:25021 free_pcp:305 free_cma:0 [ 2757.729245] Node 0 active_anon:1192152kB inactive_anon:35144kB active_file:9728kB inactive_file:14884kB unevictable:0kB isolated(anon):128kB isolated(file):0kB mapped:212772kB dirty:372kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2757.773766] Node 1 active_anon:141660kB inactive_anon:0kB active_file:100kB inactive_file:104kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2757.907727] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.005148] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2758.010209] Node 0 DMA32 free:19600kB min:36200kB low:45248kB high:54296kB active_anon:1192056kB inactive_anon:35144kB active_file:9796kB inactive_file:14700kB unevictable:0kB writepending:380kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47712kB pagetables:236648kB bounce:0kB free_pcp:1092kB local_pcp:636kB free_cma:0kB [ 2758.165352] lowmem_reserve[]: 0 0 0 0 0 [ 2758.169375] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.255127] lowmem_reserve[]: 0 0 0 0 0 [ 2758.259146] Node 1 Normal free:26776kB min:53696kB low:67120kB high:80544kB active_anon:141664kB inactive_anon:0kB active_file:120kB inactive_file:148kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187656kB bounce:0kB free_pcp:468kB local_pcp:228kB free_cma:0kB [ 2758.397797] lowmem_reserve[]: 0 0 0 0 0 [ 2758.401813] Node 0 DMA: 36*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2758.475099] Node 0 DMA32: 2147*4kB (ME) 500*8kB (UMEH) 191*16kB (UMEH) 90*32kB (UMH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18716kB [ 2758.515092] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2758.555096] Node 1 Normal: 1453*4kB (M) 1097*8kB (UM) 461*16kB (UM) 157*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26988kB [ 2758.625078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.633940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2758.642850] syz-executor.1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2758.665152] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2758.670562] CPU: 1 PID: 30125 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2758.678436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.687789] Call Trace: [ 2758.690375] dump_stack+0x1b2/0x283 [ 2758.693998] dump_header+0x178/0x82f [ 2758.697710] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2758.702809] ? ___ratelimit+0x2cd/0x522 [ 2758.706785] oom_kill_process.cold+0x10/0xb18 [ 2758.711284] out_of_memory+0xe3e/0x1190 [ 2758.715262] ? oom_killer_disable+0x1c0/0x1c0 [ 2758.719751] ? mutex_trylock+0x152/0x1a0 [ 2758.723810] __alloc_pages_nodemask+0x23e1/0x2720 [ 2758.728658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2758.733494] ? is_bpf_text_address+0xb8/0x150 [ 2758.737986] ? kernel_text_address+0xbd/0xf0 [ 2758.742395] ? __save_stack_trace+0xa0/0x160 [ 2758.746809] alloc_pages_current+0x155/0x260 [ 2758.751211] ? kmem_cache_alloc+0x124/0x3c0 [ 2758.755529] get_zeroed_page+0x19/0x50 [ 2758.759406] __pud_alloc+0x33/0x200 [ 2758.763029] __handle_mm_fault+0x1012/0x4620 [ 2758.767435] ? trace_hardirqs_on+0x10/0x10 [ 2758.771664] ? vm_insert_page+0x7c0/0x7c0 [ 2758.775821] handle_mm_fault+0x391/0x860 [ 2758.779883] __do_page_fault+0x549/0xad0 [ 2758.783941] ? spurious_fault+0x640/0x640 [ 2758.788086] ? do_page_fault+0x60/0x4f2 [ 2758.792056] page_fault+0x25/0x50 [ 2758.795508] RIP: 0010:__clear_user+0x3d/0x60 [ 2758.800021] RSP: 0018:ffff88820a6e7bd8 EFLAGS: 00010202 [ 2758.805378] RAX: 0000000000000000 RBX: 00000000000000b6 RCX: 00000000000000b6 [ 2758.812638] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000750a50 [ 2758.819898] RBP: 0000000000750a50 R08: ffffffff8b98eac0 R09: 0000000000000000 [ 2758.827159] R10: 0000000000000000 R11: ffff88804c20a2c0 R12: 0000000000750a50 [ 2758.834420] R13: 0000000000751000 R14: 0000000000750a50 R15: 1ffff110414dcf9f [ 2758.841705] ? __clear_user+0x1e/0x60 [ 2758.845502] clear_user+0x74/0xb0 [ 2758.848955] load_elf_binary+0x2bf0/0x4750 [ 2758.853200] ? elf_core_dump+0x4460/0x4460 [ 2758.857428] ? lock_downgrade+0x740/0x740 [ 2758.861576] search_binary_handler.part.0+0xd5/0x640 [ 2758.866674] do_execveat_common+0x1099/0x1f30 [ 2758.871165] ? copy_strings_kernel+0x110/0x110 [ 2758.875750] ? strncpy_from_user+0x210/0x2c0 [ 2758.880152] ? getname_flags+0x22e/0x550 [ 2758.884231] SyS_execve+0x3b/0x50 [ 2758.887679] ? setup_new_exec+0x770/0x770 [ 2758.891817] do_syscall_64+0x1d5/0x640 [ 2758.895709] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2758.900890] RIP: 0033:0x4b10b6 [ 2758.904070] RSP: 002b:000000c000b0ecf8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 2758.911769] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004b10b6 [ 2758.919033] RDX: 000000c003b9e460 RSI: 000000c002e840d0 RDI: 000000c001c72700 [ 2758.926294] RBP: 000000c000b0ee98 R08: 000000000000000a R09: 0000000000000000 [ 2758.933584] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000004a88e7 [ 2758.940844] R13: 000000000000001e R14: 000000000000001d R15: 00000000000000aa [ 2758.965063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.973922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2759.017010] 11647 total pagecache pages [ 2759.021014] 0 pages in swap cache [ 2759.024485] Swap cache stats: add 0, delete 0, find 0/0 [ 2759.045775] Free swap = 0kB [ 2759.048809] Total swap = 0kB [ 2759.051823] 2097051 pages RAM [ 2759.085040] 0 pages HighMem/MovableOnly [ 2759.089029] 363840 pages reserved [ 2759.092471] 0 pages cma reserved [ 2759.824979] Mem-Info: [ 2759.827438] active_anon:333513 inactive_anon:8786 isolated_anon:0 [ 2759.827438] active_file:572 inactive_file:589 isolated_file:101 [ 2759.827438] unevictable:0 dirty:55 writeback:0 unstable:0 [ 2759.827438] slab_reclaimable:29404 slab_unreclaimable:167439 [ 2759.827438] mapped:49488 shmem:8979 pagetables:106159 bounce:0 [ 2759.827438] free:14096 free_pcp:132 free_cma:0 [ 2759.954993] Node 0 active_anon:1192388kB inactive_anon:35144kB active_file:2148kB inactive_file:2276kB unevictable:0kB isolated(anon):0kB isolated(file):272kB mapped:197752kB dirty:200kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2760.095073] Node 1 active_anon:141664kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2760.234942] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2760.318126] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2760.323181] Node 0 DMA32 free:19340kB min:36200kB low:45248kB high:54296kB active_anon:1192228kB inactive_anon:35144kB active_file:1768kB inactive_file:1836kB unevictable:0kB writepending:200kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47680kB pagetables:236648kB bounce:0kB free_pcp:288kB local_pcp:136kB free_cma:0kB [ 2760.407964] lowmem_reserve[]: 0 0 0 0 0 [ 2760.411981] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2760.467816] lowmem_reserve[]: 0 0 0 0 0 [ 2760.477955] Node 1 Normal free:26472kB min:53696kB low:67120kB high:80544kB active_anon:141664kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2760.564917] lowmem_reserve[]: 0 0 0 0 0 [ 2760.579122] Node 0 DMA: 36*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2760.614902] Node 0 DMA32: 3397*4kB (UME) 547*8kB (UMEH) 5*16kB (EH) 10*32kB (H) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18556kB [ 2760.634912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2760.683574] Node 1 Normal: 1480*4kB (UM) 1074*8kB (UM) 457*16kB (UM) 149*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26592kB [ 2760.717594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2760.734902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2760.753661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2760.764913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2760.773521] 9704 total pagecache pages [ 2760.797376] 0 pages in swap cache [ 2760.800939] Swap cache stats: add 0, delete 0, find 0/0 [ 2760.806352] Free swap = 0kB [ 2760.809363] Total swap = 0kB [ 2760.812998] 2097051 pages RAM [ 2760.823045] 0 pages HighMem/MovableOnly [ 2760.827083] 363840 pages reserved [ 2760.830523] 0 pages cma reserved [ 2760.854146] Out of memory (oom_kill_allocating_task): Kill process 30125 (syz-executor.1) score 0 or sacrifice child [ 2760.875176] Killed process 30125 (syz-executor.1) total-vm:17272kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2760.897023] oom_reaper: reaped process 30125 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2760.985970] oom_reaper: reaped process 30121 (syz-executor.0), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 2761.217427] in:imklog invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2761.267806] in:imklog cpuset=/ mems_allowed=0-1 [ 2761.272512] CPU: 0 PID: 30123 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 2761.279953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.289299] Call Trace: [ 2761.291888] dump_stack+0x1b2/0x283 [ 2761.295513] dump_header+0x178/0x82f [ 2761.299222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2761.304316] ? ___ratelimit+0x2cd/0x522 [ 2761.308285] oom_kill_process.cold+0x10/0xb18 [ 2761.312776] out_of_memory+0xe3e/0x1190 [ 2761.316744] ? oom_killer_disable+0x1c0/0x1c0 [ 2761.321228] ? mutex_trylock+0x152/0x1a0 [ 2761.325280] __alloc_pages_nodemask+0x23e1/0x2720 [ 2761.330123] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2761.334954] ? lock_acquire+0x170/0x3f0 [ 2761.338923] ? __lock_acquire+0x5fc/0x3f20 [ 2761.343156] alloc_pages_vma+0xd2/0x6d0 [ 2761.347133] __handle_mm_fault+0x25fa/0x4620 [ 2761.351540] ? vm_insert_page+0x7c0/0x7c0 [ 2761.355684] ? lock_downgrade+0x740/0x740 [ 2761.359834] handle_mm_fault+0x391/0x860 [ 2761.363899] __do_page_fault+0x549/0xad0 [ 2761.367955] ? spurious_fault+0x640/0x640 [ 2761.372093] ? do_page_fault+0x60/0x4f2 [ 2761.376062] ? page_fault+0x2f/0x50 [ 2761.379679] page_fault+0x45/0x50 [ 2761.383131] RIP: 2ddd2e80:0x55792d040770 [ 2761.387178] RSP: 2ddd2d70:00007f36c2d91430 EFLAGS: 55792d26e520 [ 2761.417701] Mem-Info: [ 2761.435936] active_anon:333488 inactive_anon:8786 isolated_anon:0 [ 2761.435936] active_file:260 inactive_file:258 isolated_file:48 [ 2761.435936] unevictable:0 dirty:55 writeback:0 unstable:0 [ 2761.435936] slab_reclaimable:29382 slab_unreclaimable:167026 [ 2761.435936] mapped:48712 shmem:8979 pagetables:106159 bounce:0 [ 2761.435936] free:13879 free_pcp:2 free_cma:0 [ 2761.510898] Node 0 active_anon:1192288kB inactive_anon:35144kB active_file:832kB inactive_file:804kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:194648kB dirty:200kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2761.624816] Node 1 active_anon:141664kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2761.662534] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2761.714805] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2761.719885] Node 0 DMA32 free:17764kB min:36200kB low:45248kB high:54296kB active_anon:1192228kB inactive_anon:35144kB active_file:720kB inactive_file:796kB unevictable:0kB writepending:200kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47680kB pagetables:236648kB bounce:0kB free_pcp:296kB local_pcp:176kB free_cma:0kB [ 2761.818940] lowmem_reserve[]: 0 0 0 0 0 [ 2761.822957] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2761.909398] lowmem_reserve[]: 0 0 0 0 0 [ 2761.913550] Node 1 Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:141660kB inactive_anon:0kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88128kB pagetables:187652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2761.957947] lowmem_reserve[]: 0 0 0 0 0 [ 2761.962084] Node 0 DMA: 36*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2761.999586] Node 0 DMA32: 3586*4kB (UME) 446*8kB (UMH) 4*16kB (H) 10*32kB (H) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18488kB [ 2762.016941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2762.054814] Node 1 Normal: 1484*4kB (UM) 1074*8kB (UM) 457*16kB (UM) 150*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26640kB [ 2762.071498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.080447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.089096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.098010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.106794] 9077 total pagecache pages [ 2762.110683] 0 pages in swap cache [ 2762.114132] Swap cache stats: add 0, delete 0, find 0/0 [ 2762.122890] Free swap = 0kB [ 2762.125975] Total swap = 0kB [ 2762.128987] 2097051 pages RAM [ 2762.132083] 0 pages HighMem/MovableOnly [ 2762.136093] 363840 pages reserved [ 2762.139538] 0 pages cma reserved [ 2762.142926] Out of memory (oom_kill_allocating_task): Kill process 30123 (in:imklog) score 0 or sacrifice child [ 2762.153541] Killed process 30107 (rsyslogd) total-vm:254332kB, anon-rss:672kB, file-rss:0kB, shmem-rss:0kB [ 2762.166675] oom_reaper: reaped process 30107 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2762.318128] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2762.330373] systemd-journal cpuset=/ mems_allowed=0-1 [ 2762.370179] CPU: 1 PID: 4624 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2762.378084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.387438] Call Trace: [ 2762.390028] dump_stack+0x1b2/0x283 [ 2762.393655] dump_header+0x178/0x82f [ 2762.397367] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2762.402468] ? ___ratelimit+0x2cd/0x522 [ 2762.406442] oom_kill_process.cold+0x10/0xb18 [ 2762.410938] out_of_memory+0xe3e/0x1190 [ 2762.414916] ? oom_killer_disable+0x1c0/0x1c0 [ 2762.419404] ? mutex_trylock+0x152/0x1a0 [ 2762.423464] __alloc_pages_nodemask+0x23e1/0x2720 [ 2762.428312] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2762.433164] ? cache_grow_begin+0x41/0x630 [ 2762.437394] cache_grow_begin+0x91/0x630 [ 2762.441449] ? cache_grow_begin+0x91/0x630 [ 2762.445684] fallback_alloc+0x207/0x2c0 [ 2762.449655] kmem_cache_alloc+0x1e5/0x3c0 [ 2762.453797] getname_flags+0xc8/0x550 [ 2762.457594] do_sys_open+0x1ce/0x410 [ 2762.461309] ? filp_open+0x60/0x60 [ 2762.464844] ? do_syscall_64+0x4c/0x640 [ 2762.468814] ? do_sys_open+0x410/0x410 [ 2762.472698] do_syscall_64+0x1d5/0x640 [ 2762.476584] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2762.481763] RIP: 0033:0x7fbd31b83840 [ 2762.485460] RSP: 002b:00007fffd899cc58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2762.493161] RAX: ffffffffffffffda RBX: 00007fffd899cf60 RCX: 00007fbd31b83840 [ 2762.500422] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000560a8791cda0 [ 2762.507684] RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff [ 2762.514948] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 2762.522214] R13: 0000560a87911040 R14: 00007fffd899cf20 R15: 0000560a8791eff0 [ 2762.538312] Mem-Info: [ 2762.544739] active_anon:333261 inactive_anon:8786 isolated_anon:0 [ 2762.544739] active_file:29 inactive_file:32 isolated_file:27 [ 2762.544739] unevictable:0 dirty:43 writeback:2 unstable:0 [ 2762.544739] slab_reclaimable:29369 slab_unreclaimable:167023 [ 2762.544739] mapped:48357 shmem:8979 pagetables:106158 bounce:0 [ 2762.544739] free:13855 free_pcp:0 free_cma:0 [ 2762.593237] Node 0 active_anon:1191384kB inactive_anon:35144kB active_file:100kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:193428kB dirty:152kB writeback:8kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2762.621686] Node 1 active_anon:141660kB inactive_anon:0kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2762.650429] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.680161] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2762.685250] Node 0 DMA32 free:17820kB min:36200kB low:45248kB high:54296kB active_anon:1191620kB inactive_anon:35144kB active_file:276kB inactive_file:360kB unevictable:0kB writepending:160kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47680kB pagetables:236648kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.724708] lowmem_reserve[]: 0 0 0 0 0 [ 2762.728719] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.764482] lowmem_reserve[]: 0 0 0 0 0 [ 2762.770874] Node 1 Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:141660kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88128kB pagetables:187652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.802473] lowmem_reserve[]: 0 0 0 0 0 [ 2762.807109] Node 0 DMA: 36*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2762.822907] Node 0 DMA32: 3525*4kB (UME) 437*8kB (UMH) 4*16kB (H) 10*32kB (H) 3*64kB (H) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18428kB [ 2762.836915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2762.847664] Node 1 Normal: 1484*4kB (UM) 1074*8kB (UM) 457*16kB (UM) 150*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26640kB [ 2762.861427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.870304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.898116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.920214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.954216] 9046 total pagecache pages [ 2762.971037] 0 pages in swap cache [ 2762.974501] Swap cache stats: add 0, delete 0, find 0/0 [ 2762.979905] Free swap = 0kB [ 2762.982932] Total swap = 0kB [ 2762.989204] 2097051 pages RAM [ 2762.992308] 0 pages HighMem/MovableOnly [ 2763.002176] 363840 pages reserved [ 2763.008884] 0 pages cma reserved [ 2763.012252] Out of memory (oom_kill_allocating_task): Kill process 4624 (systemd-journal) score 0 or sacrifice child [ 2763.035770] Killed process 4624 (systemd-journal) total-vm:82964kB, anon-rss:504kB, file-rss:0kB, shmem-rss:31740kB [ 2763.057395] oom_reaper: reaped process 4624 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:31740kB [ 2763.200417] kworker/u4:5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2763.224214] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 2763.229446] CPU: 1 PID: 9884 Comm: kworker/u4:5 Not tainted 4.14.215-syzkaller #0 [ 2763.237062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2763.246419] Workqueue: events_unbound call_usermodehelper_exec_work [ 2763.252813] Call Trace: [ 2763.255392] dump_stack+0x1b2/0x283 [ 2763.259016] dump_header+0x178/0x82f [ 2763.262724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2763.267826] ? ___ratelimit+0x2cd/0x522 [ 2763.271796] oom_kill_process.cold+0x10/0xb18 [ 2763.276283] ? lock_downgrade+0x740/0x740 [ 2763.280426] out_of_memory+0x2dc/0x1190 [ 2763.284398] ? oom_killer_disable+0x1c0/0x1c0 [ 2763.288887] ? mutex_trylock+0x152/0x1a0 [ 2763.292946] __alloc_pages_nodemask+0x23e1/0x2720 [ 2763.297814] ? deref_stack_reg+0x124/0x1a0 [ 2763.302045] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2763.306880] ? fs_reclaim_release+0xd0/0x110 [ 2763.311290] ? kmem_cache_alloc_node+0x38b/0x410 [ 2763.316043] copy_process.part.0+0x265/0x71c0 [ 2763.320531] ? __lock_acquire+0x5fc/0x3f20 [ 2763.324764] ? debug_object_activate+0x292/0x490 [ 2763.329602] ? trace_hardirqs_on+0x10/0x10 [ 2763.333829] ? static_obj+0x50/0x50 [ 2763.337453] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2763.342896] ? __cleanup_sighand+0x40/0x40 [ 2763.347128] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2763.352579] _do_fork+0x184/0xc80 [ 2763.356028] ? fork_idle+0x270/0x270 [ 2763.359742] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2763.364838] ? process_one_work+0x6c4/0x14a0 [ 2763.369240] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2763.374685] kernel_thread+0x2f/0x40 [ 2763.378393] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2763.383666] ? call_usermodehelper+0x80/0x80 [ 2763.388079] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2763.393552] process_one_work+0x793/0x14a0 [ 2763.398046] ? work_busy+0x320/0x320 [ 2763.401751] ? worker_thread+0x158/0xff0 [ 2763.405809] ? _raw_spin_unlock_irq+0x24/0x80 [ 2763.410300] worker_thread+0x5cc/0xff0 [ 2763.414187] ? rescuer_thread+0xc80/0xc80 [ 2763.418330] kthread+0x30d/0x420 [ 2763.421691] ? kthread_create_on_node+0xd0/0xd0 [ 2763.426355] ret_from_fork+0x24/0x30 [ 2763.611086] Mem-Info: [ 2763.613539] active_anon:333114 inactive_anon:8786 isolated_anon:0 [ 2763.613539] active_file:34 inactive_file:15 isolated_file:30 [ 2763.613539] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2763.613539] slab_reclaimable:29369 slab_unreclaimable:166907 [ 2763.613539] mapped:48319 shmem:8979 pagetables:106127 bounce:0 [ 2763.613539] free:13908 free_pcp:176 free_cma:0 [ 2763.664798] Node 0 active_anon:1190796kB inactive_anon:35144kB active_file:120kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193276kB dirty:124kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2763.825915] Node 1 active_anon:141660kB inactive_anon:0kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2763.947234] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2764.119463] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2764.146985] Node 0 DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:1190632kB inactive_anon:35144kB active_file:216kB inactive_file:44kB unevictable:0kB writepending:124kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47552kB pagetables:236524kB bounce:0kB free_pcp:700kB local_pcp:588kB free_cma:0kB [ 2764.317391] lowmem_reserve[]: 0 0 0 0 0 [ 2764.321412] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2764.487230] lowmem_reserve[]: 0 0 0 0 0 [ 2764.491258] Node 1 Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:141660kB inactive_anon:0kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88128kB pagetables:187652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2764.657565] lowmem_reserve[]: 0 0 0 0 0 [ 2764.661592] Node 0 DMA: 36*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2764.759205] Node 0 DMA32: 3496*4kB (UME) 436*8kB (UMEH) 5*16kB (UH) 13*32kB (UMH) 4*64kB (UH) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18480kB [ 2764.815905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2764.896597] Node 1 Normal: 1484*4kB (UM) 1074*8kB (UM) 457*16kB (UM) 150*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26640kB [ 2764.964079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2764.989342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2765.026737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2765.086849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2765.136698] 9046 total pagecache pages [ 2765.142049] 0 pages in swap cache [ 2765.170110] Swap cache stats: add 0, delete 0, find 0/0 [ 2765.196050] Free swap = 0kB [ 2765.199091] Total swap = 0kB [ 2765.202153] 2097051 pages RAM [ 2765.214879] 0 pages HighMem/MovableOnly [ 2765.218862] 363840 pages reserved [ 2765.222301] 0 pages cma reserved [ 2765.225760] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2765.240909] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2765.258390] Out of memory: Kill process 17236 (syz-executor.0) score 1005 or sacrifice child [ 2765.267088] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2765.272215] CPU: 1 PID: 30092 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2765.280089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2765.289440] Call Trace: [ 2765.292029] dump_stack+0x1b2/0x283 [ 2765.295658] warn_alloc.cold+0x96/0x1cc [ 2765.299628] ? zone_watermark_ok_safe+0x220/0x220 [ 2765.304465] ? usleep_range+0x130/0x130 [ 2765.308434] ? try_to_free_pages+0x23f/0x6e0 [ 2765.312839] ? _find_next_bit+0xdb/0x100 [ 2765.316905] ? run_timer_softirq+0x5a0/0x5a0 [ 2765.321320] __alloc_pages_nodemask+0x2127/0x2720 [ 2765.326165] ? lock_acquire+0x170/0x3f0 [ 2765.330146] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2765.334982] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2765.339479] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2765.344935] alloc_pages_current+0x155/0x260 [ 2765.349346] ion_page_pool_alloc+0x118/0x1b0 [ 2765.353763] ion_system_heap_allocate+0x133/0x8c0 [ 2765.358606] ? _raw_spin_unlock+0x29/0x40 [ 2765.362749] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2765.367674] ? ion_system_contig_heap_create+0x130/0x130 [ 2765.373126] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2765.378148] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2765.382997] ion_alloc+0x27a/0x810 [ 2765.386547] ? ion_dma_buf_release+0x40/0x40 [ 2765.390958] ? __might_fault+0x177/0x1b0 [ 2765.395019] ion_ioctl+0xea/0x1ee [ 2765.398468] ? ion_alloc.cold+0x3b/0x3b [ 2765.402441] ? lock_acquire+0x170/0x3f0 [ 2765.406409] ? lock_downgrade+0x740/0x740 [ 2765.410547] ? ion_alloc.cold+0x3b/0x3b [ 2765.414791] do_vfs_ioctl+0x75a/0xff0 [ 2765.418599] ? ioctl_preallocate+0x1a0/0x1a0 [ 2765.423002] ? lock_downgrade+0x740/0x740 [ 2765.427160] ? __fget+0x225/0x360 [ 2765.430611] ? do_vfs_ioctl+0xff0/0xff0 [ 2765.434622] ? security_file_ioctl+0x83/0xb0 [ 2765.439029] SyS_ioctl+0x7f/0xb0 [ 2765.442396] ? do_vfs_ioctl+0xff0/0xff0 [ 2765.446373] do_syscall_64+0x1d5/0x640 [ 2765.450262] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2765.455442] RIP: 0033:0x45e219 [ 2765.458621] RSP: 002b:00007f3dd5745c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2765.466326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2765.473600] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2765.480864] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2765.488126] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2765.495398] R13: 00007ffdad9a4ccf R14: 00007f3dd57469c0 R15: 000000000119c0dc [ 2765.512504] Killed process 17236 (syz-executor.0) total-vm:93348kB, anon-rss:3852kB, file-rss:34816kB, shmem-rss:0kB [ 2765.514532] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2765.526054] Mem-Info: [ 2765.530895] active_anon:333113 inactive_anon:8786 isolated_anon:0 [ 2765.530895] active_file:41 inactive_file:20 isolated_file:0 [ 2765.530895] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2765.530895] slab_reclaimable:29302 slab_unreclaimable:166615 [ 2765.530895] mapped:48319 shmem:8979 pagetables:106127 bounce:0 [ 2765.530895] free:13785 free_pcp:58 free_cma:0 [ 2765.568966] CPU: 0 PID: 30121 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2765.576872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2765.586221] Call Trace: [ 2765.588813] dump_stack+0x1b2/0x283 [ 2765.592324] oom_reaper: reaped process 17236 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2765.592435] warn_alloc.cold+0x96/0x1cc [ 2765.606362] ? zone_watermark_ok_safe+0x220/0x220 [ 2765.611203] ? usleep_range+0x130/0x130 [ 2765.615175] ? try_to_free_pages+0x23f/0x6e0 [ 2765.619581] ? _find_next_bit+0xdb/0x100 [ 2765.623640] ? run_timer_softirq+0x5a0/0x5a0 [ 2765.625002] Node 0 active_anon:1199708kB inactive_anon:24044kB active_file:152kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174176kB dirty:124kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 933888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2765.628046] __alloc_pages_nodemask+0x2127/0x2720 [ 2765.660964] ? lock_acquire+0x170/0x3f0 [ 2765.664942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2765.669784] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2765.674281] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2765.679741] alloc_pages_current+0x155/0x260 [ 2765.684152] ion_page_pool_alloc+0x118/0x1b0 [ 2765.688561] ion_system_heap_allocate+0x133/0x8c0 [ 2765.693401] ? ion_alloc+0x187/0x810 [ 2765.697198] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2765.702646] ? ion_system_contig_heap_create+0x130/0x130 [ 2765.708078] kworker/u4:5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 2765.708091] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2765.708092] (null), order=3, oom_score_adj=0 [ 2765.717783] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2765.717797] ion_alloc+0x204/0x810 [ 2765.717810] ? ion_dma_buf_release+0x40/0x40 [ 2765.717824] ? __might_fault+0x177/0x1b0 [ 2765.717834] ion_ioctl+0xea/0x1ee [ 2765.717841] ? ion_alloc.cold+0x3b/0x3b [ 2765.717850] ? lock_acquire+0x170/0x3f0 [ 2765.717859] ? lock_downgrade+0x740/0x740 [ 2765.722895] Node 1 active_anon:141660kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2765.727323] ? ion_alloc.cold+0x3b/0x3b [ 2765.727333] do_vfs_ioctl+0x75a/0xff0 [ 2765.727346] ? ioctl_preallocate+0x1a0/0x1a0 [ 2765.727352] ? lock_downgrade+0x740/0x740 [ 2765.727365] ? __fget+0x225/0x360 [ 2765.732174] Node 0 [ 2765.735691] ? do_vfs_ioctl+0xff0/0xff0 [ 2765.735702] ? security_file_ioctl+0x83/0xb0 [ 2765.735713] SyS_ioctl+0x7f/0xb0 [ 2765.735721] ? do_vfs_ioctl+0xff0/0xff0 [ 2765.735731] do_syscall_64+0x1d5/0x640 [ 2765.735747] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2765.740150] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2765.744159] RIP: 0033:0x45e219 [ 2765.747624] kworker/u4:5 cpuset= [ 2765.751542] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2765.756092] lowmem_reserve[]: [ 2765.759648] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2765.759658] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2765.789530] / [ 2765.789968] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.789975] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2765.789981] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2765.793844] mems_allowed=0-1 [ 2766.064884] 0 2717 2718 2718 2718 [ 2766.071597] Node 0 DMA32 free:21448kB min:36200kB low:45248kB high:54296kB active_anon:1199576kB inactive_anon:24036kB active_file:128kB inactive_file:124kB unevictable:0kB writepending:124kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47520kB pagetables:236240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.082232] syz-executor.0: [ 2766.154402] lowmem_reserve[]: 0 0 0 0 0 [ 2766.161434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.227180] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2766.310137] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2766.361333] lowmem_reserve[]: 0 0 0 0 0 [ 2766.364372] CPU: 0 PID: 30121 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2766.373216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.382562] Call Trace: [ 2766.385152] dump_stack+0x1b2/0x283 [ 2766.388780] warn_alloc.cold+0x96/0x1cc [ 2766.392754] ? zone_watermark_ok_safe+0x220/0x220 [ 2766.397608] __alloc_pages_nodemask+0x2127/0x2720 [ 2766.402447] ? lock_acquire+0x170/0x3f0 [ 2766.404245] Node 1 [ 2766.406416] ? lock_acquire+0x170/0x3f0 [ 2766.406431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2766.406447] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2766.406458] ? __mutex_unlock_slowpath+0x75/0x770 [ 2766.406472] alloc_pages_current+0x155/0x260 [ 2766.406484] ion_page_pool_alloc+0x118/0x1b0 [ 2766.413859] Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:141660kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88128kB pagetables:187644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.417483] ion_system_heap_allocate+0x133/0x8c0 [ 2766.417495] ? _raw_spin_unlock+0x29/0x40 [ 2766.417503] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2766.417511] ? ion_system_contig_heap_create+0x130/0x130 [ 2766.417521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2766.450639] lowmem_reserve[]: [ 2766.464643] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2766.464658] ion_alloc+0x27a/0x810 [ 2766.464673] ? ion_dma_buf_release+0x40/0x40 [ 2766.464686] ? __might_fault+0x177/0x1b0 [ 2766.464697] ion_ioctl+0xea/0x1ee [ 2766.512334] ? ion_alloc.cold+0x3b/0x3b [ 2766.516305] ? lock_acquire+0x170/0x3f0 [ 2766.520276] ? lock_downgrade+0x740/0x740 [ 2766.524383] 0 [ 2766.524413] ? ion_alloc.cold+0x3b/0x3b [ 2766.524418] 0 [ 2766.526202] do_vfs_ioctl+0x75a/0xff0 [ 2766.530151] 0 [ 2766.531935] ? ioctl_preallocate+0x1a0/0x1a0 [ 2766.541866] ? lock_downgrade+0x740/0x740 [ 2766.546006] ? __fget+0x225/0x360 [ 2766.549452] ? do_vfs_ioctl+0xff0/0xff0 [ 2766.553424] ? security_file_ioctl+0x83/0xb0 [ 2766.557834] SyS_ioctl+0x7f/0xb0 [ 2766.561200] ? do_vfs_ioctl+0xff0/0xff0 [ 2766.565178] do_syscall_64+0x1d5/0x640 [ 2766.569073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2766.574258] RIP: 0033:0x45e219 [ 2766.577437] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2766.585143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2766.592406] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2766.599671] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.606927] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2766.611198] 0 [ 2766.614183] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2766.614189] 0 [ 2766.658670] Node 0 DMA: 36*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2766.684346] CPU: 1 PID: 9884 Comm: kworker/u4:5 Not tainted 4.14.215-syzkaller #0 [ 2766.691983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.701341] Workqueue: events_unbound call_usermodehelper_exec_work [ 2766.707738] Call Trace: [ 2766.710321] dump_stack+0x1b2/0x283 [ 2766.713962] dump_header+0x178/0x82f [ 2766.717677] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2766.722771] ? ___ratelimit+0x2cd/0x522 [ 2766.726741] oom_kill_process.cold+0x10/0xb18 [ 2766.731232] ? lock_downgrade+0x740/0x740 [ 2766.735381] out_of_memory+0x2dc/0x1190 [ 2766.739352] ? oom_killer_disable+0x1c0/0x1c0 [ 2766.743843] ? mutex_trylock+0x152/0x1a0 [ 2766.747899] __alloc_pages_nodemask+0x23e1/0x2720 [ 2766.752741] ? deref_stack_reg+0x124/0x1a0 [ 2766.756980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2766.761819] ? fs_reclaim_release+0xd0/0x110 [ 2766.766320] ? kmem_cache_alloc_node+0x38b/0x410 [ 2766.771076] copy_process.part.0+0x265/0x71c0 [ 2766.775567] ? __lock_acquire+0x5fc/0x3f20 [ 2766.779798] ? debug_object_activate+0x292/0x490 [ 2766.784556] ? trace_hardirqs_on+0x10/0x10 [ 2766.788784] ? static_obj+0x50/0x50 [ 2766.792411] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2766.797866] ? __cleanup_sighand+0x40/0x40 [ 2766.802099] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2766.807543] _do_fork+0x184/0xc80 [ 2766.810993] ? fork_idle+0x270/0x270 [ 2766.814705] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2766.819913] ? process_one_work+0x6c4/0x14a0 [ 2766.824314] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2766.829763] kernel_thread+0x2f/0x40 [ 2766.833474] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2766.838747] ? call_usermodehelper+0x80/0x80 [ 2766.843152] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2766.848598] process_one_work+0x793/0x14a0 [ 2766.852830] ? work_busy+0x320/0x320 [ 2766.856536] ? worker_thread+0x158/0xff0 [ 2766.860595] ? _raw_spin_unlock_irq+0x24/0x80 [ 2766.865084] worker_thread+0x5cc/0xff0 [ 2766.868983] ? rescuer_thread+0xc80/0xc80 [ 2766.873125] kthread+0x30d/0x420 [ 2766.876486] ? kthread_create_on_node+0xd0/0xd0 [ 2766.881152] ret_from_fork+0x24/0x30 [ 2766.899240] Node 0 DMA32: 4003*4kB (UME) 622*8kB (UMEH) 23*16kB (UMH) 13*32kB (UH) 4*64kB (UH) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22156kB [ 2766.954351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2767.004324] Node 1 Normal: 1487*4kB (UM) 1074*8kB (UM) 457*16kB (UM) 150*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26652kB [ 2767.079493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2767.194309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2767.202909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2767.289314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2767.348702] 9051 total pagecache pages [ 2767.352613] 0 pages in swap cache [ 2767.404887] Swap cache stats: add 0, delete 0, find 0/0 [ 2767.410271] Free swap = 0kB [ 2767.413284] Total swap = 0kB [ 2767.454277] 2097051 pages RAM [ 2767.457428] 0 pages HighMem/MovableOnly [ 2767.461399] 363840 pages reserved [ 2767.524285] 0 pages cma reserved [ 2767.611060] warn_alloc_show_mem: 1 callbacks suppressed [ 2767.611064] Mem-Info: [ 2767.664894] Mem-Info: [ 2767.672523] active_anon:335349 inactive_anon:6009 isolated_anon:0 [ 2767.672523] active_file:72 inactive_file:755 isolated_file:0 [ 2767.672523] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2767.672523] slab_reclaimable:29294 slab_unreclaimable:166557 [ 2767.672523] mapped:43896 shmem:8979 pagetables:106054 bounce:0 [ 2767.672523] free:170015 free_pcp:363 free_cma:0 [ 2767.706822] active_anon:335349 inactive_anon:6009 isolated_anon:0 [ 2767.706822] active_file:72 inactive_file:780 isolated_file:0 [ 2767.706822] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2767.706822] slab_reclaimable:29294 slab_unreclaimable:166557 [ 2767.706822] mapped:43921 shmem:8979 pagetables:106054 bounce:0 [ 2767.706822] free:176229 free_pcp:353 free_cma:0 [ 2767.744353] Node 0 active_anon:1199736kB inactive_anon:24036kB active_file:276kB inactive_file:4008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176284kB dirty:124kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2767.818202] Node 0 active_anon:1199340kB inactive_anon:24036kB active_file:196kB inactive_file:5868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176216kB dirty:140kB writeback:0kB shmem:35916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2767.874269] Node 1 active_anon:141660kB inactive_anon:0kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2767.902097] Node 1 active_anon:141660kB inactive_anon:0kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2767.989351] Node 0 DMA free:11792kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2767.994282] Node 0 [ 2768.028859] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2768.074284] DMA free:11872kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.079647] Node 0 DMA32 free:223116kB min:36200kB low:45248kB high:54296kB active_anon:1199280kB inactive_anon:24036kB active_file:4684kB inactive_file:6616kB unevictable:0kB writepending:140kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47520kB pagetables:236092kB bounce:0kB free_pcp:1224kB local_pcp:312kB free_cma:0kB [ 2768.197121] lowmem_reserve[]: [ 2768.225190] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2768.227090] lowmem_reserve[]: [ 2768.234030] 0 [ 2768.238656] 0 [ 2768.240013] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2768.240807] 0 [ 2768.249153] systemd[1]: rsyslog.service: Unit entered failed state. [ 2768.251320] 0 [ 2768.253151] 2717 [ 2768.263902] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2768.264482] 0 [ 2768.266823] 2718 [ 2768.278042] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2768.279246] 0 [ 2768.280327] 2718 [ 2768.297505] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2768.299381] Node 0 [ 2768.306418] 2718 [ 2768.307058] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.308645] Node 0 DMA32 free:221200kB min:36200kB low:45248kB high:54296kB active_anon:1199280kB inactive_anon:24036kB active_file:4552kB inactive_file:8396kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47456kB pagetables:236092kB bounce:0kB free_pcp:472kB local_pcp:272kB free_cma:0kB [ 2768.308664] lowmem_reserve[]: [ 2768.310724] lowmem_reserve[]: [ 2768.338232] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2768.365897] 0 [ 2768.376155] 0 [ 2768.379082] 0 [ 2768.381107] 0 [ 2768.382579] 0 0 0 [ 2768.388459] Node 1 Normal free:863496kB min:53696kB low:67120kB high:80544kB active_anon:141660kB inactive_anon:0kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88128kB pagetables:187644kB bounce:0kB free_pcp:1412kB local_pcp:684kB free_cma:0kB [ 2768.388824] 0 [ 2768.420150] systemd[1]: Stopped Journal Service. [ 2768.421905] lowmem_reserve[]: 0 0 0 0 0 [ 2768.432214] systemd[1]: Starting Journal Service... [ 2768.437615] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2768.445410] Node 0 DMA: 57*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11876kB [ 2768.454246] 0 0 [ 2768.468279] Node 0 DMA32: 16001*4kB (UME) 3152*8kB (UMEH) 1449*16kB (UMEH) 994*32kB (UMEH) 504*64kB (UMEH) 102*128kB (UME) 63*256kB (UM) 14*512kB (U) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 217940kB [ 2768.471759] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.496922] Node 0 [ 2768.517818] lowmem_reserve[]: 0 0 0 0 0 [ 2768.524890] Node 1 Normal free:863496kB min:53696kB low:67120kB high:80544kB active_anon:141660kB inactive_anon:0kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88128kB pagetables:187644kB bounce:0kB free_pcp:1412kB local_pcp:728kB free_cma:0kB [ 2768.557849] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2768.558301] lowmem_reserve[]: 0 0 0 0 0 [ 2768.568204] Node 1 Normal: 8582*4kB (UME) 13188*8kB (UME) 6524*16kB (UME) 2741*32kB (UME) 1034*64kB (UM) 66*128kB (UM) 61*256kB (UM) 29*512kB (U) 73*1024kB (U) 50*2048kB (U) 61*4096kB (U) = 864024kB [ 2768.573163] Node 0 [ 2768.599190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.601138] DMA: [ 2768.602170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.617478] 57*4kB (UME) 96*8kB (UME) 38*16kB (UME) 7*32kB (UME) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11876kB [ 2768.630764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.638299] Node 0 [ 2768.648797] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.650568] DMA32: [ 2768.651368] 14830 total pagecache pages [ 2768.669327] 0 pages in swap cache [ 2768.670554] 14659*4kB (UME) 2783*8kB (UMEH) 1449*16kB (UMEH) 993*32kB (UMEH) [ 2768.672837] Swap cache stats: add 0, delete 0, find 0/0 [ 2768.673136] 504*64kB [ 2768.683756] Free swap = 0kB [ 2768.687326] (UMEH) [ 2768.691335] Total swap = 0kB [ 2768.692308] 102*128kB [ 2768.693724] 2097051 pages RAM [ 2768.698472] (UME) [ 2768.699223] 0 pages HighMem/MovableOnly [ 2768.706600] 63*256kB (UM) 14*512kB (U) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 209588kB [ 2768.712009] 363840 pages reserved [ 2768.717788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 2768.720389] 0 pages cma reserved [ 2768.748636] 0*2048kB 0*4096kB = 0kB [ 2768.752281] Node 1 Normal: 8582*4kB (UME) 13188*8kB (UME) 6524*16kB (UME) 2741*32kB (UME) 1034*64kB (UM) 66*128kB (UM) 61*256kB (UM) 29*512kB (U) 73*1024kB (U) 50*2048kB (U) 61*4096kB (U) = 864024kB [ 2768.761065] systemd-journald[30129]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2768.774636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.795080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.804296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.813129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.822018] 16420 total pagecache pages [ 2768.826973] 0 pages in swap cache [ 2768.830980] Swap cache stats: add 0, delete 0, find 0/0 [ 2768.837198] Free swap = 0kB [ 2768.840425] Total swap = 0kB [ 2768.844524] 2097051 pages RAM [ 2768.847630] 0 pages HighMem/MovableOnly [ 2768.851590] 363840 pages reserved [ 2768.855807] 0 pages cma reserved [ 2768.860354] Out of memory: Kill process 17256 (syz-executor.0) score 1005 or sacrifice child [ 2768.869959] Killed process 17256 (syz-executor.0) total-vm:93348kB, anon-rss:3852kB, file-rss:34816kB, shmem-rss:0kB 14:11:42 executing program 2: ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000000)=0xffff31d7) socket$l2tp6(0xa, 0x2, 0x73) 14:11:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0x20, 0x5b, @private1={0xfc, 0x1, [], 0x1}, @private1, 0x700, 0x8, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x801120}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1b0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "08585834b6b298e2512ada5a048dadfda8befc45c03dc215477ddf8ab7277c35e5dded7d6ed5abd1ce12aa3541f4860754506e68c7126a98d9dbb360c2e09c933fcaa838cb8967ce1d60e03e9fee7db80f3f2092bb3d8f0a53fb9714d2784588372b7b7cc7d0579e03577c943931921bb75f15256fbfab514271ddc60e2b9ec299c2e3290a7b140ef478c5822425e7ca55df65df6e1d83c5d8064dde1e16dcfbec6ac3675ed51ddad4ca150a8f64541bd7ed7e91cca09bf9334eb16d010efb22b4c0dbbd1eb0e649bd7a43854e843f03243f48c5c3f3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4044}, 0x20000040) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 14:11:42 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', r6, 0x4, 0x1f, 0x0, 0x1f, 0x4e, @empty, @empty, 0x7800, 0x7, 0x400, 0x5}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x2, 0x5}) 14:11:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000000c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5109046d, 0x2e}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40, 0x0) 14:11:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @in={0x2, 0x4e1c, @remote}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @hci={0x1f, 0x2, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x1bf6, &(0x7f0000000040)='macvtap0\x00', 0xcea3, 0x4, 0xffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x30, 0x1, 0x4}}, 0x14) 14:11:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x7f, 0x8, &(0x7f0000000080)=0x7}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:11:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfd3fc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x13}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}}, 0x8044) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:11:43 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x30040805) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0xfffffe6a}, 0x1004c840) 14:11:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x44}}, 0x80, 0x0}, 0x0) [ 2771.031643] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2771.032590] syz-executor.3: [ 2771.043796] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2771.073246] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2771.076700] syz-executor.5 cpuset= [ 2771.089035] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2771.105730] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2771.106812] / [ 2771.113602] CPU: 0 PID: 30154 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2771.123185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.132521] Call Trace: [ 2771.135092] dump_stack+0x1b2/0x283 [ 2771.138704] warn_alloc.cold+0x96/0x1cc [ 2771.142659] ? zone_watermark_ok_safe+0x220/0x220 [ 2771.147490] __alloc_pages_nodemask+0x2127/0x2720 [ 2771.152318] ? lock_acquire+0x170/0x3f0 [ 2771.156275] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.161101] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2771.166532] ? __mutex_unlock_slowpath+0x75/0x770 [ 2771.171355] alloc_pages_current+0x155/0x260 [ 2771.175747] ion_page_pool_alloc+0x118/0x1b0 [ 2771.180133] ion_system_heap_allocate+0x133/0x8c0 [ 2771.184963] ? ion_alloc+0x187/0x810 [ 2771.188653] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2771.194083] ? ion_system_contig_heap_create+0x130/0x130 [ 2771.199511] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2771.204526] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2771.209377] ion_alloc+0x204/0x810 [ 2771.212899] ? ion_dma_buf_release+0x40/0x40 [ 2771.217309] ? __might_fault+0x177/0x1b0 [ 2771.221352] ion_ioctl+0xea/0x1ee [ 2771.224785] ? ion_alloc.cold+0x3b/0x3b [ 2771.228752] ? lock_acquire+0x170/0x3f0 [ 2771.232814] ? lock_downgrade+0x740/0x740 [ 2771.236940] ? ion_alloc.cold+0x3b/0x3b [ 2771.240894] do_vfs_ioctl+0x75a/0xff0 [ 2771.244675] ? ioctl_preallocate+0x1a0/0x1a0 [ 2771.249062] ? lock_downgrade+0x740/0x740 [ 2771.253193] ? __fget+0x225/0x360 [ 2771.256624] ? do_vfs_ioctl+0xff0/0xff0 [ 2771.260578] ? security_file_ioctl+0x83/0xb0 [ 2771.264987] SyS_ioctl+0x7f/0xb0 [ 2771.268330] ? do_vfs_ioctl+0xff0/0xff0 [ 2771.272283] do_syscall_64+0x1d5/0x640 [ 2771.276157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2771.281335] RIP: 0033:0x45e219 [ 2771.284504] RSP: 002b:00007f3dd5766c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.292199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2771.299446] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2771.306701] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2771.313948] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2771.321196] R13: 00007ffdad9a4ccf R14: 00007f3dd57679c0 R15: 000000000119c034 [ 2771.336574] mems_allowed=0-1 [ 2771.341313] CPU: 0 PID: 30158 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2771.349196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.358542] Call Trace: [ 2771.361130] dump_stack+0x1b2/0x283 [ 2771.364764] warn_alloc.cold+0x96/0x1cc [ 2771.368739] ? zone_watermark_ok_safe+0x220/0x220 [ 2771.373607] __alloc_pages_nodemask+0x2127/0x2720 [ 2771.378446] ? __schedule+0x893/0x1de0 [ 2771.382420] ? lock_acquire+0x170/0x3f0 [ 2771.386396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.391243] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2771.396692] ? __mutex_unlock_slowpath+0x75/0x770 [ 2771.401532] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 2771.406375] alloc_pages_current+0x155/0x260 [ 2771.410782] ion_page_pool_alloc+0x118/0x1b0 [ 2771.415186] ion_system_heap_allocate+0x133/0x8c0 [ 2771.420030] ? ion_alloc+0x187/0x810 [ 2771.423740] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2771.429188] ? ion_system_contig_heap_create+0x130/0x130 [ 2771.434636] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2771.439650] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2771.444492] ion_alloc+0x204/0x810 [ 2771.448036] ? ion_dma_buf_release+0x40/0x40 [ 2771.452443] ? __might_fault+0x177/0x1b0 [ 2771.456505] ion_ioctl+0xea/0x1ee [ 2771.459959] ? ion_alloc.cold+0x3b/0x3b [ 2771.463936] ? lock_acquire+0x170/0x3f0 [ 2771.467902] ? lock_downgrade+0x740/0x740 [ 2771.472033] ? ion_alloc.cold+0x3b/0x3b [ 2771.476005] do_vfs_ioctl+0x75a/0xff0 [ 2771.479807] ? ioctl_preallocate+0x1a0/0x1a0 [ 2771.484210] ? lock_downgrade+0x740/0x740 [ 2771.488359] ? __fget+0x225/0x360 [ 2771.491806] ? do_vfs_ioctl+0xff0/0xff0 [ 2771.496037] ? security_file_ioctl+0x83/0xb0 [ 2771.500443] SyS_ioctl+0x7f/0xb0 [ 2771.503798] ? do_vfs_ioctl+0xff0/0xff0 [ 2771.507774] do_syscall_64+0x1d5/0x640 [ 2771.511667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2771.516849] RIP: 0033:0x45e219 [ 2771.520033] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.527737] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2771.535002] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2771.542265] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.549525] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2771.556791] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2771.569707] CPU: 1 PID: 30145 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2771.577600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.586943] Call Trace: [ 2771.589535] dump_stack+0x1b2/0x283 [ 2771.593163] warn_alloc.cold+0x96/0x1cc [ 2771.597135] ? zone_watermark_ok_safe+0x220/0x220 [ 2771.601992] __alloc_pages_nodemask+0x2127/0x2720 [ 2771.606838] ? lock_acquire+0x170/0x3f0 [ 2771.610819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.615672] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2771.621125] ? __mutex_unlock_slowpath+0x75/0x770 [ 2771.625971] alloc_pages_current+0x155/0x260 [ 2771.630375] ion_page_pool_alloc+0x118/0x1b0 [ 2771.634781] ion_system_heap_allocate+0x133/0x8c0 [ 2771.639626] ? ion_alloc+0x187/0x810 [ 2771.643340] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2771.648783] ? ion_system_contig_heap_create+0x130/0x130 [ 2771.654224] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2771.659239] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2771.664084] ion_alloc+0x204/0x810 [ 2771.667629] ? ion_dma_buf_release+0x40/0x40 [ 2771.672037] ? __might_fault+0x177/0x1b0 [ 2771.676090] ion_ioctl+0xea/0x1ee [ 2771.679540] ? ion_alloc.cold+0x3b/0x3b [ 2771.683509] ? lock_acquire+0x170/0x3f0 [ 2771.687475] ? lock_downgrade+0x740/0x740 [ 2771.691611] ? ion_alloc.cold+0x3b/0x3b [ 2771.695588] do_vfs_ioctl+0x75a/0xff0 [ 2771.699384] ? ioctl_preallocate+0x1a0/0x1a0 [ 2771.703784] ? lock_downgrade+0x740/0x740 [ 2771.707928] ? __fget+0x225/0x360 [ 2771.711374] ? do_vfs_ioctl+0xff0/0xff0 [ 2771.715341] ? security_file_ioctl+0x83/0xb0 [ 2771.719743] SyS_ioctl+0x7f/0xb0 [ 2771.723102] ? do_vfs_ioctl+0xff0/0xff0 [ 2771.727070] do_syscall_64+0x1d5/0x640 [ 2771.730957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2771.736140] RIP: 0033:0x45e219 [ 2771.739319] RSP: 002b:00007f3dd5787c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.747017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2771.754278] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2771.761537] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.768804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2771.776071] R13: 00007ffdad9a4ccf R14: 00007f3dd57889c0 R15: 000000000119bf8c [ 2771.783620] syz-executor.1 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2771.823881] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2771.829023] CPU: 1 PID: 30175 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2771.836895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.846240] Call Trace: [ 2771.848825] dump_stack+0x1b2/0x283 [ 2771.852445] dump_header+0x178/0x82f [ 2771.856152] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2771.861250] ? ___ratelimit+0x2cd/0x522 [ 2771.865222] oom_kill_process.cold+0x10/0xb18 [ 2771.869716] out_of_memory+0xe3e/0x1190 [ 2771.873689] ? oom_killer_disable+0x1c0/0x1c0 [ 2771.878290] ? mutex_trylock+0x152/0x1a0 [ 2771.882344] __alloc_pages_nodemask+0x23e1/0x2720 [ 2771.887188] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.892036] alloc_pages_vma+0xd2/0x6d0 [ 2771.896183] wp_page_copy+0x1f5/0x25c0 [ 2771.900070] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 2771.904554] ? __lock_acquire+0x5fc/0x3f20 [ 2771.908781] do_wp_page+0x245/0x1db0 [ 2771.912485] ? __handle_mm_fault+0x129c/0x4620 [ 2771.917062] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 2771.920416] Mem-Info: [ 2771.921741] __handle_mm_fault+0x234f/0x4620 [ 2771.928550] ? vm_insert_page+0x7c0/0x7c0 [ 2771.929452] active_anon:335105 inactive_anon:8042 isolated_anon:0 [ 2771.929452] active_file:2812 inactive_file:1812 isolated_file:35 [ 2771.929452] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2771.929452] slab_reclaimable:29016 slab_unreclaimable:169687 [ 2771.929452] mapped:56605 shmem:11026 pagetables:106136 bounce:0 [ 2771.929452] free:13734 free_pcp:303 free_cma:0 [ 2771.932686] ? lock_downgrade+0x740/0x740 [ 2771.932695] ? to_ratio+0x20/0x20 [ 2771.932719] handle_mm_fault+0x391/0x860 [ 2771.978327] __do_page_fault+0x549/0xad0 [ 2771.982384] ? spurious_fault+0x640/0x640 [ 2771.986524] ? do_page_fault+0x60/0x4f2 [ 2771.990505] ? page_fault+0x2f/0x50 [ 2771.994122] page_fault+0x45/0x50 [ 2771.997563] RIP: 75e2: (null) [ 2772.001436] RSP: 65bbc30:00007ffd065bbc70 EFLAGS: 000075df [ 2772.129345] Node 0 active_anon:1197716kB inactive_anon:32164kB active_file:9580kB inactive_file:6844kB unevictable:0kB isolated(anon):0kB isolated(file):232kB mapped:190096kB dirty:80kB writeback:0kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2772.353861] Node 1 active_anon:142704kB inactive_anon:4kB active_file:528kB inactive_file:504kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:35324kB dirty:20kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2772.513873] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2772.663837] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2772.668909] Node 0 DMA32 free:20204kB min:36200kB low:45248kB high:54296kB active_anon:1197556kB inactive_anon:32164kB active_file:5360kB inactive_file:5140kB unevictable:0kB writepending:80kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47552kB pagetables:236152kB bounce:0kB free_pcp:784kB local_pcp:120kB free_cma:0kB [ 2772.826474] lowmem_reserve[]: 0 0 0 0 0 [ 2772.830604] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2772.853798] warn_alloc_show_mem: 1 callbacks suppressed [ 2772.853801] Mem-Info: [ 2772.907335] active_anon:335196 inactive_anon:8042 isolated_anon:0 [ 2772.907335] active_file:1116 inactive_file:1074 isolated_file:69 [ 2772.907335] unevictable:0 dirty:15 writeback:10 unstable:0 [ 2772.907335] slab_reclaimable:29013 slab_unreclaimable:169267 [ 2772.907335] mapped:54851 shmem:11026 pagetables:106136 bounce:0 [ 2772.907335] free:14135 free_pcp:0 free_cma:0 [ 2772.981472] Mem-Info: [ 2772.993789] lowmem_reserve[]: 0 0 0 0 0 [ 2772.997810] Node 1 Normal free:26440kB min:53696kB low:67120kB high:80544kB active_anon:142704kB inactive_anon:4kB active_file:408kB inactive_file:404kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88288kB pagetables:188060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.026824] active_anon:335196 inactive_anon:8042 isolated_anon:0 [ 2773.026824] active_file:985 inactive_file:960 isolated_file:4 [ 2773.026824] unevictable:0 dirty:15 writeback:10 unstable:0 [ 2773.026824] slab_reclaimable:29013 slab_unreclaimable:169267 [ 2773.026824] mapped:54526 shmem:11026 pagetables:106136 bounce:0 [ 2773.026824] free:13975 free_pcp:177 free_cma:0 [ 2773.147162] Node 0 active_anon:1198080kB inactive_anon:32164kB active_file:2240kB inactive_file:1920kB unevictable:0kB isolated(anon):0kB isolated(file):252kB mapped:180156kB dirty:40kB writeback:40kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2773.203340] lowmem_reserve[]: 0 0 0 0 0 [ 2773.210036] Node 0 active_anon:1198080kB inactive_anon:32164kB active_file:1936kB inactive_file:2020kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:179956kB dirty:40kB writeback:40kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2773.243792] Node 0 DMA: 13*4kB (UME) 11*8kB (UME) 30*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10956kB [ 2773.338600] Node 1 active_anon:142704kB inactive_anon:4kB active_file:308kB inactive_file:276kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:35048kB dirty:20kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2773.383768] Node 0 DMA32: 4002*4kB (UME) 346*8kB (UMEH) 6*16kB (UMH) 11*32kB (MH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19416kB [ 2773.450159] Node 1 active_anon:142704kB inactive_anon:4kB active_file:308kB inactive_file:276kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:35048kB dirty:20kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2773.479652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2773.507243] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.547051] Node 1 Normal: 1573*4kB (ME) 970*8kB (ME) 410*16kB (UME) 129*32kB (ME) 5*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26724kB [ 2773.616237] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.639400] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2773.663771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2773.668311] Node 0 DMA32 free:19448kB min:36200kB low:45248kB high:54296kB active_anon:1197920kB inactive_anon:32164kB active_file:1600kB inactive_file:1600kB unevictable:0kB writepending:80kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47552kB pagetables:236152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.683720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2773.742779] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2773.752888] Node 0 DMA32 free:19448kB min:36200kB low:45248kB high:54296kB active_anon:1197920kB inactive_anon:32164kB active_file:1600kB inactive_file:1600kB unevictable:0kB writepending:80kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47552kB pagetables:236152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.785648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2773.805406] lowmem_reserve[]: 0 0 0 0 0 [ 2773.813734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2773.823632] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.843690] 11782 total pagecache pages [ 2773.881340] 0 pages in swap cache [ 2773.891442] lowmem_reserve[]: 0 0 0 0 0 [ 2773.901555] Swap cache stats: add 0, delete 0, find 0/0 [ 2773.909313] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.931834] lowmem_reserve[]: [ 2773.935593] lowmem_reserve[]: [ 2773.946905] 0 0 0 0 0 [ 2773.952596] 0 0 0 0 0 [ 2773.955138] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:142704kB inactive_anon:4kB active_file:112kB inactive_file:116kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88288kB pagetables:188060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.972798] Node 1 [ 2773.987062] Free swap = 0kB [ 2773.992299] Total swap = 0kB [ 2774.003700] 2097051 pages RAM [ 2774.013133] 0 pages HighMem/MovableOnly [ 2774.014675] Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:142704kB inactive_anon:4kB active_file:112kB inactive_file:116kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88288kB pagetables:188060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2774.021604] 363840 pages reserved [ 2774.060239] lowmem_reserve[]: 0 0 0 0 0 [ 2774.073699] Node 0 DMA: 13*4kB (UME) 11*8kB (UME) 30*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10956kB [ 2774.089567] 0 pages cma reserved [ 2774.123698] Node 0 DMA32: 3723*4kB (UME) 309*8kB (UMH) 4*16kB (H) 10*32kB (H) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17940kB [ 2774.142780] lowmem_reserve[]: 0 0 0 0 0 [ 2774.152884] Node 0 DMA: 13*4kB (UME) 11*8kB (UME) 30*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10956kB [ 2774.178991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2774.199114] Node 0 DMA32: 3766*4kB (UME) 308*8kB (UMH) 5*16kB (MH) 10*32kB (H) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 2774.213685] Node 1 Normal: 1601*4kB (ME) 990*8kB (ME) 416*16kB (UME) 131*32kB (ME) 5*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27156kB [ 2774.223058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2774.266388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2774.282516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.286617] Node 1 Normal: 1608*4kB (ME) 990*8kB (ME) 416*16kB (UME) 131*32kB (ME) 5*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 27184kB [ 2774.310370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2774.343677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.348620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2774.352289] 11607 total pagecache pages [ 2774.401635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.416649] 0 pages in swap cache [ 2774.416760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2774.423644] Swap cache stats: add 0, delete 0, find 0/0 [ 2774.463645] Free swap = 0kB [ 2774.466676] Total swap = 0kB [ 2774.468625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.469681] 2097051 pages RAM [ 2774.469684] 0 pages HighMem/MovableOnly [ 2774.469688] 363840 pages reserved [ 2774.469690] 0 pages cma reserved [ 2774.469697] Out of memory (oom_kill_allocating_task): Kill process 30175 (syz-executor.1) score 0 or sacrifice child [ 2774.469796] Killed process 30178 (syz-executor.1) total-vm:85024kB, anon-rss:80kB, file-rss:34816kB, shmem-rss:0kB [ 2774.518782] 11532 total pagecache pages [ 2774.522775] 0 pages in swap cache [ 2774.543691] Swap cache stats: add 0, delete 0, find 0/0 [ 2774.563675] Free swap = 0kB [ 2774.566709] Total swap = 0kB [ 2774.600139] 2097051 pages RAM [ 2774.603288] 0 pages HighMem/MovableOnly [ 2774.633375] oom_reaper: reaped process 30178 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2774.655542] 363840 pages reserved [ 2774.664945] 0 pages cma reserved [ 2774.709904] oom_reaper: reaped process 30158 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2774.817929] oom_reaper: reaped process 30154 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2775.658939] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 2775.692479] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 2775.700098] CPU: 1 PID: 30136 Comm: rs:main Q:Reg Not tainted 4.14.215-syzkaller #0 [ 2775.707906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.717255] Call Trace: [ 2775.719836] dump_stack+0x1b2/0x283 [ 2775.723462] dump_header+0x178/0x82f [ 2775.727171] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2775.732269] ? ___ratelimit+0x2cd/0x522 [ 2775.736239] oom_kill_process.cold+0x10/0xb18 [ 2775.740733] out_of_memory+0xe3e/0x1190 [ 2775.744700] ? oom_killer_disable+0x1c0/0x1c0 [ 2775.749185] ? mutex_trylock+0x152/0x1a0 [ 2775.753241] __alloc_pages_nodemask+0x23e1/0x2720 [ 2775.758078] ? trace_hardirqs_on+0x10/0x10 [ 2775.762310] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2775.767144] ? __radix_tree_lookup+0x1b5/0x2e0 [ 2775.771729] alloc_pages_current+0x155/0x260 [ 2775.776128] pagecache_get_page+0x3f5/0xab0 [ 2775.780442] grab_cache_page_write_begin+0x63/0x90 [ 2775.785362] ext4_da_write_begin+0x249/0xe70 [ 2775.789760] ? __ext4_journal_stop+0xe7/0x1b0 [ 2775.794250] ? ext4_write_begin+0x1260/0x1260 [ 2775.798736] ? balance_dirty_pages_ratelimited+0x83f/0x1800 [ 2775.804440] generic_perform_write+0x1c9/0x420 [ 2775.809021] ? __mnt_drop_write_file+0x5f/0x90 [ 2775.813608] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 2775.818268] ? current_time+0xb0/0xb0 [ 2775.822070] ? ext4_file_write_iter+0x1cc/0xd20 [ 2775.826732] __generic_file_write_iter+0x227/0x590 [ 2775.831641] ext4_file_write_iter+0x276/0xd20 [ 2775.836113] ? aa_file_perm+0x304/0xab0 [ 2775.840062] ? ext4_file_read_iter+0x330/0x330 [ 2775.844623] ? trace_hardirqs_on+0x10/0x10 [ 2775.848837] ? iov_iter_init+0xa6/0x1c0 [ 2775.852790] __vfs_write+0x44c/0x630 [ 2775.856479] ? kernel_read+0x110/0x110 [ 2775.860348] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2775.865948] vfs_write+0x17f/0x4d0 [ 2775.869465] SyS_write+0xf2/0x210 [ 2775.872897] ? SyS_read+0x210/0x210 [ 2775.876500] ? do_syscall_64+0x4c/0x640 [ 2775.880451] ? SyS_read+0x210/0x210 [ 2775.884054] do_syscall_64+0x1d5/0x640 [ 2775.887923] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2775.893089] RIP: 0033:0x7f96636f21cd [ 2775.896776] RSP: 002b:00007f9660cad590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2775.904460] RAX: ffffffffffffffda RBX: 00007f9658003d50 RCX: 00007f96636f21cd [ 2775.911704] RDX: 00000000000000a7 RSI: 00007f9658003d50 RDI: 0000000000000007 [ 2775.918961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2775.926206] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9658003a90 [ 2775.933452] R13: 00007f9660cad5b0 R14: 000055b11b680480 R15: 00000000000000a7 [ 2776.017247] Mem-Info: [ 2776.019695] active_anon:335141 inactive_anon:8042 isolated_anon:0 [ 2776.019695] active_file:98 inactive_file:123 isolated_file:21 [ 2776.019695] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2776.019695] slab_reclaimable:28982 slab_unreclaimable:169107 [ 2776.019695] mapped:52815 shmem:11026 pagetables:106136 bounce:0 [ 2776.019695] free:13947 free_pcp:51 free_cma:0 [ 2776.059638] Node 0 active_anon:1198064kB inactive_anon:32164kB active_file:380kB inactive_file:476kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:176832kB dirty:0kB writeback:0kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2776.093996] Node 1 active_anon:142500kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34428kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2776.177193] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.207067] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2776.212109] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:1197904kB inactive_anon:32164kB active_file:380kB inactive_file:476kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47552kB pagetables:236152kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 2776.248730] lowmem_reserve[]: 0 0 0 0 0 [ 2776.252730] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.281136] lowmem_reserve[]: 0 0 0 0 0 [ 2776.325997] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:142500kB inactive_anon:4kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88288kB pagetables:188060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.358567] lowmem_reserve[]: 0 0 0 0 0 [ 2776.362594] Node 0 DMA: 13*4kB (UME) 11*8kB (UME) 30*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10956kB [ 2776.381819] Node 0 DMA32: 3841*4kB (UME) 275*8kB (UMH) 8*16kB (UMH) 11*32kB (MH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18236kB [ 2776.398229] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2776.408967] Node 1 Normal: 1650*4kB (UME) 1002*8kB (ME) 416*16kB (UME) 133*32kB (UME) 5*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 27000kB [ 2776.426735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.438157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.462981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.484586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.493166] 11234 total pagecache pages [ 2776.525170] 0 pages in swap cache [ 2776.528638] Swap cache stats: add 0, delete 0, find 0/0 [ 2776.535650] Free swap = 0kB [ 2776.538668] Total swap = 0kB [ 2776.541719] 2097051 pages RAM [ 2776.545899] 0 pages HighMem/MovableOnly [ 2776.549883] 363840 pages reserved [ 2776.553321] 0 pages cma reserved [ 2776.558332] Out of memory (oom_kill_allocating_task): Kill process 30136 (rs:main Q:Reg) score 0 or sacrifice child [ 2776.570830] Killed process 30130 (rsyslogd) total-vm:254332kB, anon-rss:480kB, file-rss:248kB, shmem-rss:0kB [ 2776.603976] oom_reaper: reaped process 30130 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2777.376451] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2777.403411] syz-executor.0: [ 2777.403414] syz-executor.3: page allocation failure: order:0 [ 2777.406440] page allocation failure: order:0 [ 2777.406451] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2777.416768] rs:main Q:Reg: [ 2777.422422] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2777.433386] page allocation failure: order:0, mode:0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null) [ 2777.443386] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2777.445034] (null) [ 2777.450103] CPU: 1 PID: 30145 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2777.452222] syz-executor.3 cpuset= [ 2777.460076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.460079] Call Trace: [ 2777.460095] dump_stack+0x1b2/0x283 [ 2777.460110] dump_header+0x178/0x82f [ 2777.466370] rs:main Q:Reg cpuset= [ 2777.472967] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2777.472980] ? ___ratelimit+0x2cd/0x522 [ 2777.472994] oom_kill_process.cold+0x10/0xb18 [ 2777.475732] / [ 2777.479279] out_of_memory+0xe3e/0x1190 [ 2777.479294] ? oom_killer_disable+0x1c0/0x1c0 [ 2777.479303] ? mutex_trylock+0x152/0x1a0 [ 2777.483043] mems_allowed=0-1 [ 2777.486476] __alloc_pages_nodemask+0x23e1/0x2720 [ 2777.486496] ? lock_acquire+0x170/0x3f0 [ 2777.486510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2777.491596] / [ 2777.495534] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2777.500024] mems_allowed=0-1 [ 2777.501701] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2777.545477] alloc_pages_current+0x155/0x260 [ 2777.549883] ion_page_pool_alloc+0x118/0x1b0 [ 2777.554272] ion_system_heap_allocate+0x133/0x8c0 [ 2777.559113] ? ion_alloc+0x187/0x810 [ 2777.562813] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2777.568257] ? ion_system_contig_heap_create+0x130/0x130 [ 2777.573688] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2777.578691] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2777.583517] ion_alloc+0x204/0x810 [ 2777.587043] ? ion_dma_buf_release+0x40/0x40 [ 2777.591447] ? __might_fault+0x177/0x1b0 [ 2777.595487] ion_ioctl+0xea/0x1ee [ 2777.598919] ? ion_alloc.cold+0x3b/0x3b [ 2777.602872] ? lock_acquire+0x170/0x3f0 [ 2777.606836] ? lock_downgrade+0x740/0x740 [ 2777.610959] ? ion_alloc.cold+0x3b/0x3b [ 2777.614924] do_vfs_ioctl+0x75a/0xff0 [ 2777.618704] ? ioctl_preallocate+0x1a0/0x1a0 [ 2777.623089] ? lock_downgrade+0x740/0x740 [ 2777.627228] ? __fget+0x225/0x360 [ 2777.630660] ? do_vfs_ioctl+0xff0/0xff0 [ 2777.634613] ? security_file_ioctl+0x83/0xb0 [ 2777.639011] SyS_ioctl+0x7f/0xb0 [ 2777.642358] ? do_vfs_ioctl+0xff0/0xff0 [ 2777.646313] do_syscall_64+0x1d5/0x640 [ 2777.650183] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2777.655350] RIP: 0033:0x45e219 [ 2777.658524] RSP: 002b:00007f3dd5787c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.666218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2777.673467] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2777.680715] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.687965] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2777.695213] R13: 00007ffdad9a4ccf R14: 00007f3dd57889c0 R15: 000000000119bf8c [ 2777.702475] CPU: 0 PID: 30158 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2777.710357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.713261] syz-executor.0 cpuset= [ 2777.719701] Call Trace: [ 2777.719719] dump_stack+0x1b2/0x283 [ 2777.719731] warn_alloc.cold+0x96/0x1cc [ 2777.719739] ? zone_watermark_ok_safe+0x220/0x220 [ 2777.719749] ? usleep_range+0x130/0x130 [ 2777.719761] ? _find_next_bit+0xdb/0x100 [ 2777.733533] / [ 2777.738269] ? run_timer_softirq+0x5a0/0x5a0 [ 2777.742215] mems_allowed=0-1 [ 2777.746257] __alloc_pages_nodemask+0x2127/0x2720 [ 2777.746273] ? lock_acquire+0x170/0x3f0 [ 2777.746287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2777.746295] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2777.746311] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2777.746324] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 2777.746338] alloc_pages_current+0x155/0x260 [ 2777.788216] ion_page_pool_alloc+0x118/0x1b0 [ 2777.792606] ion_system_heap_allocate+0x133/0x8c0 [ 2777.797469] ? ion_alloc+0x187/0x810 [ 2777.801178] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2777.806615] ? ion_system_contig_heap_create+0x130/0x130 [ 2777.812061] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2777.817071] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2777.821909] ion_alloc+0x204/0x810 [ 2777.825456] ? ion_dma_buf_release+0x40/0x40 [ 2777.829873] ? __might_fault+0x177/0x1b0 [ 2777.834009] ion_ioctl+0xea/0x1ee [ 2777.837443] ? ion_alloc.cold+0x3b/0x3b [ 2777.841411] ? lock_acquire+0x170/0x3f0 [ 2777.845386] ? lock_downgrade+0x740/0x740 [ 2777.849518] ? ion_alloc.cold+0x3b/0x3b [ 2777.853477] do_vfs_ioctl+0x75a/0xff0 [ 2777.857275] ? ioctl_preallocate+0x1a0/0x1a0 [ 2777.861676] ? lock_downgrade+0x740/0x740 [ 2777.865815] ? __fget+0x225/0x360 [ 2777.869263] ? do_vfs_ioctl+0xff0/0xff0 [ 2777.873225] ? security_file_ioctl+0x83/0xb0 [ 2777.877612] SyS_ioctl+0x7f/0xb0 [ 2777.880965] ? do_vfs_ioctl+0xff0/0xff0 [ 2777.884951] do_syscall_64+0x1d5/0x640 [ 2777.888846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2777.894031] RIP: 0033:0x45e219 [ 2777.897213] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.904913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2777.912177] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2777.919445] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.926704] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2777.933952] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2777.944580] CPU: 0 PID: 30136 Comm: rs:main Q:Reg Not tainted 4.14.215-syzkaller #0 [ 2777.952380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.961724] Call Trace: [ 2777.964300] dump_stack+0x1b2/0x283 [ 2777.967927] warn_alloc.cold+0x96/0x1cc [ 2777.971884] ? zone_watermark_ok_safe+0x220/0x220 [ 2777.976707] ? usleep_range+0x130/0x130 [ 2777.980666] ? _find_next_bit+0xdb/0x100 [ 2777.984723] ? run_timer_softirq+0x5a0/0x5a0 [ 2777.989132] __alloc_pages_nodemask+0x2127/0x2720 [ 2777.993972] ? trace_hardirqs_on+0x10/0x10 [ 2777.998197] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.003028] ? __radix_tree_lookup+0x1b5/0x2e0 [ 2778.007627] alloc_pages_current+0x155/0x260 [ 2778.012024] pagecache_get_page+0x3f5/0xab0 [ 2778.016341] grab_cache_page_write_begin+0x63/0x90 [ 2778.021258] ext4_da_write_begin+0x249/0xe70 [ 2778.025655] ? __ext4_journal_stop+0xe7/0x1b0 [ 2778.030132] ? ext4_write_begin+0x1260/0x1260 [ 2778.034616] ? balance_dirty_pages_ratelimited+0x83f/0x1800 [ 2778.040315] generic_perform_write+0x1c9/0x420 [ 2778.044897] ? __mnt_drop_write_file+0x5f/0x90 [ 2778.049474] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 2778.054134] ? current_time+0xb0/0xb0 [ 2778.057917] ? ext4_file_write_iter+0x1cc/0xd20 [ 2778.062581] __generic_file_write_iter+0x227/0x590 [ 2778.067510] ext4_file_write_iter+0x276/0xd20 [ 2778.072017] ? aa_file_perm+0x304/0xab0 [ 2778.075972] ? ext4_file_read_iter+0x330/0x330 [ 2778.080534] ? trace_hardirqs_on+0x10/0x10 [ 2778.084766] ? iov_iter_init+0xa6/0x1c0 [ 2778.088737] __vfs_write+0x44c/0x630 [ 2778.092456] ? kernel_read+0x110/0x110 [ 2778.096344] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2778.101343] vfs_write+0x17f/0x4d0 [ 2778.104877] SyS_write+0xf2/0x210 [ 2778.108323] ? SyS_read+0x210/0x210 [ 2778.111940] ? do_syscall_64+0x4c/0x640 [ 2778.115897] ? SyS_read+0x210/0x210 [ 2778.119503] do_syscall_64+0x1d5/0x640 [ 2778.123391] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2778.128573] RIP: 0033:0x7f96636f21cd [ 2778.132275] RSP: 002b:00007f9660cad590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2778.139964] RAX: ffffffffffffffda RBX: 00007f9658003d50 RCX: 00007f96636f21cd [ 2778.147221] RDX: 00000000000000a7 RSI: 00007f9658003d50 RDI: 0000000000000007 [ 2778.154479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2778.161737] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f9658003a90 [ 2778.168989] R13: 00007f9660cad5b0 R14: 000055b11b680480 R15: 00000000000000a7 [ 2778.176535] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2778.182485] CPU: 1 PID: 30121 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2778.188452] syz-executor.5 cpuset= [ 2778.196206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.196210] Call Trace: [ 2778.196227] dump_stack+0x1b2/0x283 [ 2778.196240] warn_alloc.cold+0x96/0x1cc [ 2778.199751] / [ 2778.209084] ? zone_watermark_ok_safe+0x220/0x220 [ 2778.211660] mems_allowed=0-1 [ 2778.215246] ? usleep_range+0x130/0x130 [ 2778.215257] ? _find_next_bit+0xdb/0x100 [ 2778.215268] ? run_timer_softirq+0x5a0/0x5a0 [ 2778.241196] __alloc_pages_nodemask+0x2127/0x2720 [ 2778.246032] ? lock_acquire+0x170/0x3f0 [ 2778.250006] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.254829] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2778.259310] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2778.264742] ? alloc_pages_current+0x84/0x260 [ 2778.269215] alloc_pages_current+0x155/0x260 [ 2778.273603] ion_page_pool_alloc+0x118/0x1b0 [ 2778.277988] ion_system_heap_allocate+0x133/0x8c0 [ 2778.282808] ? _raw_spin_unlock+0x29/0x40 [ 2778.286943] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2778.291849] ? ion_system_contig_heap_create+0x130/0x130 [ 2778.297277] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2778.302281] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2778.307106] ion_alloc+0x27a/0x810 [ 2778.310626] ? ion_dma_buf_release+0x40/0x40 [ 2778.315014] ? __might_fault+0x177/0x1b0 [ 2778.319053] ion_ioctl+0xea/0x1ee [ 2778.322483] ? ion_alloc.cold+0x3b/0x3b [ 2778.326437] ? lock_acquire+0x170/0x3f0 [ 2778.330388] ? lock_downgrade+0x740/0x740 [ 2778.334514] ? ion_alloc.cold+0x3b/0x3b [ 2778.338466] do_vfs_ioctl+0x75a/0xff0 [ 2778.342246] ? ioctl_preallocate+0x1a0/0x1a0 [ 2778.346639] ? lock_downgrade+0x740/0x740 [ 2778.350766] ? __fget+0x225/0x360 [ 2778.354197] ? do_vfs_ioctl+0xff0/0xff0 [ 2778.358152] ? security_file_ioctl+0x83/0xb0 [ 2778.362540] SyS_ioctl+0x7f/0xb0 [ 2778.365892] ? do_vfs_ioctl+0xff0/0xff0 [ 2778.369848] do_syscall_64+0x1d5/0x640 [ 2778.373718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2778.378898] RIP: 0033:0x45e219 [ 2778.382063] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2778.389759] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2778.397013] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2778.404262] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.411513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2778.418782] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2778.423278] Mem-Info: [ 2778.432720] CPU: 0 PID: 30154 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2778.440624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.449973] Call Trace: [ 2778.452560] dump_stack+0x1b2/0x283 [ 2778.456190] warn_alloc.cold+0x96/0x1cc [ 2778.460162] ? zone_watermark_ok_safe+0x220/0x220 [ 2778.464999] ? usleep_range+0x130/0x130 [ 2778.468965] ? queue_work_on+0x10d/0x1d0 [ 2778.473025] ? _find_next_bit+0xdb/0x100 [ 2778.477086] ? run_timer_softirq+0x5a0/0x5a0 [ 2778.481504] __alloc_pages_nodemask+0x2127/0x2720 [ 2778.486352] ? lock_acquire+0x170/0x3f0 [ 2778.487408] Mem-Info: [ 2778.490325] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.492721] active_anon:334931 inactive_anon:8042 isolated_anon:0 [ 2778.492721] active_file:19 inactive_file:15 isolated_file:0 [ 2778.492721] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2778.492721] slab_reclaimable:28967 slab_unreclaimable:168660 [ 2778.492721] mapped:52625 shmem:11026 pagetables:106113 bounce:0 [ 2778.492721] free:13889 free_pcp:29 free_cma:0 [ 2778.497530] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2778.497545] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2778.497564] alloc_pages_current+0x155/0x260 [ 2778.497574] ion_page_pool_alloc+0x118/0x1b0 [ 2778.497594] ion_system_heap_allocate+0x133/0x8c0 [ 2778.554519] ? ion_alloc+0x187/0x810 [ 2778.558237] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2778.563685] ? ion_system_contig_heap_create+0x130/0x130 [ 2778.569218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2778.574234] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2778.579081] ion_alloc+0x204/0x810 [ 2778.582631] ? ion_dma_buf_release+0x40/0x40 [ 2778.587045] ? __might_fault+0x177/0x1b0 [ 2778.591109] ion_ioctl+0xea/0x1ee [ 2778.594566] ? ion_alloc.cold+0x3b/0x3b [ 2778.598543] ? lock_acquire+0x170/0x3f0 [ 2778.602520] ? lock_downgrade+0x740/0x740 [ 2778.606665] ? ion_alloc.cold+0x3b/0x3b [ 2778.610640] do_vfs_ioctl+0x75a/0xff0 [ 2778.614458] ? ioctl_preallocate+0x1a0/0x1a0 [ 2778.618869] ? lock_downgrade+0x740/0x740 [ 2778.623020] ? __fget+0x225/0x360 [ 2778.626469] ? do_vfs_ioctl+0xff0/0xff0 [ 2778.630443] ? security_file_ioctl+0x83/0xb0 [ 2778.634849] SyS_ioctl+0x7f/0xb0 [ 2778.638211] ? do_vfs_ioctl+0xff0/0xff0 [ 2778.642191] do_syscall_64+0x1d5/0x640 [ 2778.646083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2778.651276] RIP: 0033:0x45e219 [ 2778.651629] Node 0 active_anon:1197248kB inactive_anon:32164kB active_file:64kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176072kB dirty:0kB writeback:0kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2778.654453] RSP: 002b:00007f3dd5766c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2778.654463] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2778.654467] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2778.654472] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2778.654476] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2778.654480] R13: 00007ffdad9a4ccf R14: 00007f3dd57679c0 R15: 000000000119c034 [ 2778.663346] active_anon:334931 inactive_anon:8042 isolated_anon:0 [ 2778.663346] active_file:19 inactive_file:15 isolated_file:0 [ 2778.663346] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2778.663346] slab_reclaimable:28967 slab_unreclaimable:168660 [ 2778.663346] mapped:52625 shmem:11026 pagetables:106113 bounce:0 [ 2778.663346] free:13889 free_pcp:29 free_cma:0 [ 2778.767933] Node 1 active_anon:142476kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34428kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2778.842341] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2778.843303] Node 0 [ 2778.854227] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2778.861561] CPU: 0 PID: 30158 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2778.869440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.876120] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2778.878786] Call Trace: [ 2778.907386] dump_stack+0x1b2/0x283 [ 2778.911014] warn_alloc.cold+0x96/0x1cc [ 2778.914989] ? zone_watermark_ok_safe+0x220/0x220 [ 2778.919849] __alloc_pages_nodemask+0x2127/0x2720 [ 2778.924689] ? ___preempt_schedule+0x16/0x18 [ 2778.929099] ? lock_acquire+0x170/0x3f0 [ 2778.933078] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.937929] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2778.940882] lowmem_reserve[]: [ 2778.943375] ? __mutex_unlock_slowpath+0x75/0x770 [ 2778.943389] alloc_pages_current+0x155/0x260 [ 2778.943401] ion_page_pool_alloc+0x118/0x1b0 [ 2778.943410] ion_system_heap_allocate+0x133/0x8c0 [ 2778.943421] ? _raw_spin_unlock+0x29/0x40 [ 2778.943428] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2778.943437] ? ion_system_contig_heap_create+0x130/0x130 [ 2778.943446] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2778.943455] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2778.943467] ion_alloc+0x27a/0x810 [ 2778.943480] ? ion_dma_buf_release+0x40/0x40 [ 2778.949819] 0 [ 2778.951392] ? __might_fault+0x177/0x1b0 [ 2778.966300] 2717 [ 2778.969118] ion_ioctl+0xea/0x1ee [ 2778.980128] 2718 [ 2778.984450] ? ion_alloc.cold+0x3b/0x3b [ 2778.984461] ? lock_acquire+0x170/0x3f0 [ 2778.984469] ? lock_downgrade+0x740/0x740 [ 2778.984474] ? ion_alloc.cold+0x3b/0x3b [ 2778.984483] do_vfs_ioctl+0x75a/0xff0 [ 2778.984494] ? ioctl_preallocate+0x1a0/0x1a0 [ 2778.984501] ? lock_downgrade+0x740/0x740 [ 2778.984515] ? __fget+0x225/0x360 [ 2778.984523] ? do_vfs_ioctl+0xff0/0xff0 [ 2778.984533] ? security_file_ioctl+0x83/0xb0 [ 2778.984542] SyS_ioctl+0x7f/0xb0 [ 2779.009229] 2718 [ 2779.010619] ? do_vfs_ioctl+0xff0/0xff0 [ 2779.014605] 2718 [ 2779.018523] do_syscall_64+0x1d5/0x640 [ 2779.026593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2779.026601] RIP: 0033:0x45e219 [ 2779.026606] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2779.026614] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2779.026618] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2779.026623] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.026628] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2779.026634] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2779.029742] Node 0 active_anon:1197248kB inactive_anon:32164kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176032kB dirty:0kB writeback:0kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2779.043241] Node 0 [ 2779.049192] Node 1 active_anon:142476kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34428kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2779.050787] DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:1197088kB inactive_anon:32164kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47456kB pagetables:236152kB bounce:0kB free_pcp:744kB local_pcp:732kB free_cma:0kB [ 2779.054141] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2779.054156] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2779.066633] lowmem_reserve[]: [ 2779.093222] 0 [ 2779.144812] Node 0 [ 2779.283273] 0 0 0 0 [ 2779.315569] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2779.315980] warn_alloc_show_mem: 2 callbacks suppressed [ 2779.315984] Mem-Info: [ 2779.396294] DMA32 free:174608kB min:36200kB low:45248kB high:54296kB active_anon:1197088kB inactive_anon:32164kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47456kB pagetables:236152kB bounce:0kB free_pcp:1312kB local_pcp:624kB free_cma:0kB [ 2779.413272] lowmem_reserve[]: 0 0 0 0 0 [ 2779.487164] active_anon:334931 inactive_anon:8042 isolated_anon:0 [ 2779.487164] active_file:12 inactive_file:12 isolated_file:0 [ 2779.487164] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2779.487164] slab_reclaimable:28942 slab_unreclaimable:168577 [ 2779.487164] mapped:52615 shmem:11026 pagetables:106113 bounce:0 [ 2779.487164] free:114318 free_pcp:645 free_cma:0 [ 2779.489892] Node 1 [ 2779.523597] lowmem_reserve[]: 0 0 0 0 0 [ 2779.529819] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2779.705902] lowmem_reserve[]: 0 0 0 0 0 [ 2779.709944] Node 1 Normal free:327416kB min:53696kB low:67120kB high:80544kB active_anon:142476kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88256kB pagetables:187968kB bounce:0kB free_pcp:1324kB local_pcp:636kB free_cma:0kB [ 2779.713631] Normal free:315640kB min:53696kB low:67120kB high:80544kB active_anon:142476kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88256kB pagetables:187968kB bounce:0kB free_pcp:1308kB local_pcp:688kB free_cma:0kB [ 2779.742052] Node 0 active_anon:1197248kB inactive_anon:32164kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176032kB dirty:0kB writeback:0kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2779.772692] lowmem_reserve[]: 0 0 0 0 0 [ 2779.799748] Node 0 DMA: 49*4kB (UME) 11*8kB (UME) 30*16kB (UME) 7*32kB (UME) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11036kB [ 2779.817385] Node 0 DMA32: 17732*4kB (UME) 2560*8kB (UMEH) 1355*16kB (UMH) 961*32kB (UMH) 5*64kB (UH) 5*128kB (U) 10*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 149408kB [ 2779.853169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2779.883187] lowmem_reserve[]: 0 0 0 0 0 [ 2779.896313] Node 0 DMA: 58*4kB (UME) 11*8kB (UME) 33*16kB (UME) 7*32kB (UME) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11120kB [ 2779.926653] Node 0 DMA32: 20225*4kB (UME) 3171*8kB (UMEH) 1468*16kB (UMEH) 1058*32kB (UMEH) 46*64kB (UMEH) 31*128kB (UME) 15*256kB (UM) 1*512kB (U) 2*1024kB (U) 2*2048kB (U) 0*4096kB = 181020kB [ 2779.951957] Node 1 Normal: 8665*4kB (UME) 12683*8kB (UME) 6374*16kB (UME) 1937*32kB (UME) 401*64kB (U) 139*128kB (U) 88*256kB (U) 29*512kB (U) 12*1024kB (U) 2*2048kB (U) 4*4096kB (U) = 413692kB [ 2779.959037] Node 1 active_anon:142476kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34428kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2780.003592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.016139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2780.031487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2780.046163] Node 1 Normal: 8665*4kB (UME) 12683*8kB (UME) 6374*16kB (UME) 1937*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 16*512kB (U) 12*1024kB (U) 2*2048kB (U) 4*4096kB (U) = 341116kB [ 2780.063166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.072281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2780.086988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.096312] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2780.096785] 11679 total pagecache pages [ 2780.145871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2780.171501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.173156] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2780.216585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2780.225397] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2780.230435] Node 0 DMA32 free:159800kB min:36200kB low:45248kB high:54296kB active_anon:1197088kB inactive_anon:32164kB active_file:540kB inactive_file:2992kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47456kB pagetables:236152kB bounce:0kB free_pcp:668kB local_pcp:524kB free_cma:0kB [ 2780.233151] syz-executor.5 cpuset= [ 2780.280710] 12134 total pagecache pages [ 2780.283137] 0 pages in swap cache [ 2780.287582] 0 pages in swap cache [ 2780.288250] Swap cache stats: add 0, delete 0, find 0/0 [ 2780.301848] Swap cache stats: add 0, delete 0, find 0/0 [ 2780.309698] Free swap = 0kB [ 2780.322906] Total swap = 0kB [ 2780.323156] Free swap = 0kB [ 2780.328945] Total swap = 0kB [ 2780.329563] 2097051 pages RAM [ 2780.331949] 2097051 pages RAM [ 2780.331953] 0 pages HighMem/MovableOnly [ 2780.331957] 363840 pages reserved [ 2780.331960] 0 pages cma reserved [ 2780.331968] Out of memory (oom_kill_allocating_task): Kill process 30145 (syz-executor.5) score 0 or sacrifice child [ 2780.332054] Killed process 30145 (syz-executor.5) total-vm:93612kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2780.337528] 0 pages HighMem/MovableOnly [ 2780.363147] / [ 2780.376078] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2780.383148] lowmem_reserve[]: 0 0 0 0 0 [ 2780.397678] mems_allowed=0-1 [ 2780.399687] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2780.411754] CPU: 1 PID: 30154 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2780.436091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.445438] Call Trace: [ 2780.448029] dump_stack+0x1b2/0x283 [ 2780.451658] warn_alloc.cold+0x96/0x1cc [ 2780.453114] 363840 pages reserved [ 2780.455624] ? zone_watermark_ok_safe+0x220/0x220 [ 2780.463902] __alloc_pages_nodemask+0x2127/0x2720 [ 2780.468748] ? lock_acquire+0x170/0x3f0 [ 2780.472725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2780.473118] 0 pages cma reserved [ 2780.477561] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2780.483105] lowmem_reserve[]: 0 [ 2780.486340] ? __mutex_unlock_slowpath+0x75/0x770 [ 2780.486355] alloc_pages_current+0x155/0x260 [ 2780.489603] 0 [ 2780.494426] ion_page_pool_alloc+0x118/0x1b0 [ 2780.494435] ion_system_heap_allocate+0x133/0x8c0 [ 2780.494445] ? _raw_spin_unlock+0x29/0x40 [ 2780.494451] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2780.494458] ? ion_system_contig_heap_create+0x130/0x130 [ 2780.494466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2780.494474] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2780.494486] ion_alloc+0x27a/0x810 [ 2780.494499] ? ion_dma_buf_release+0x40/0x40 [ 2780.494512] ? __might_fault+0x177/0x1b0 [ 2780.494523] ion_ioctl+0xea/0x1ee [ 2780.494530] ? ion_alloc.cold+0x3b/0x3b [ 2780.494539] ? lock_acquire+0x170/0x3f0 [ 2780.494547] ? lock_downgrade+0x740/0x740 [ 2780.494556] ? ion_alloc.cold+0x3b/0x3b [ 2780.508478] 0 [ 2780.509954] do_vfs_ioctl+0x75a/0xff0 [ 2780.509966] ? ioctl_preallocate+0x1a0/0x1a0 [ 2780.509974] ? lock_downgrade+0x740/0x740 [ 2780.509987] ? __fget+0x225/0x360 [ 2780.509997] ? do_vfs_ioctl+0xff0/0xff0 [ 2780.510008] ? security_file_ioctl+0x83/0xb0 [ 2780.510018] SyS_ioctl+0x7f/0xb0 [ 2780.510025] ? do_vfs_ioctl+0xff0/0xff0 [ 2780.510036] do_syscall_64+0x1d5/0x640 [ 2780.520902] 0 [ 2780.524554] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2780.524563] RIP: 0033:0x45e219 [ 2780.524567] RSP: 002b:00007f3dd5766c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2780.524576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2780.524581] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2780.524586] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2780.524591] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2780.524596] R13: 00007ffdad9a4ccf R14: 00007f3dd57679c0 R15: 000000000119c034 [ 2780.535697] syz-executor.5 cpuset= [ 2780.597711] 0 [ 2780.663373] / mems_allowed=0-1 [ 2780.668415] CPU: 1 PID: 30145 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2780.676288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.685638] Call Trace: [ 2780.688224] dump_stack+0x1b2/0x283 [ 2780.691852] warn_alloc.cold+0x96/0x1cc [ 2780.695820] ? lock_downgrade+0x740/0x740 [ 2780.699963] ? zone_watermark_ok_safe+0x220/0x220 [ 2780.704805] ? wake_up_q+0x82/0xd0 [ 2780.708351] ? wait_for_completion_io+0x10/0x10 [ 2780.713027] __alloc_pages_nodemask+0x2127/0x2720 [ 2780.717871] ? lock_acquire+0x170/0x3f0 [ 2780.721846] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2780.726682] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2780.731179] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2780.736627] alloc_pages_current+0x155/0x260 [ 2780.741031] ion_page_pool_alloc+0x118/0x1b0 [ 2780.745437] ion_system_heap_allocate+0x133/0x8c0 [ 2780.750280] ? ion_alloc+0x187/0x810 [ 2780.753996] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2780.759443] ? ion_system_contig_heap_create+0x130/0x130 [ 2780.764886] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2780.769900] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2780.774744] ion_alloc+0x204/0x810 [ 2780.778290] ? ion_dma_buf_release+0x40/0x40 [ 2780.782700] ? __might_fault+0x177/0x1b0 [ 2780.786760] ion_ioctl+0xea/0x1ee [ 2780.790207] ? ion_alloc.cold+0x3b/0x3b [ 2780.794176] ? lock_acquire+0x170/0x3f0 [ 2780.798147] ? lock_downgrade+0x740/0x740 [ 2780.802290] ? ion_alloc.cold+0x3b/0x3b [ 2780.806260] do_vfs_ioctl+0x75a/0xff0 [ 2780.810054] ? ioctl_preallocate+0x1a0/0x1a0 [ 2780.814452] ? lock_downgrade+0x740/0x740 [ 2780.814459] Node 1 Normal free:325664kB min:53696kB low:67120kB high:80544kB active_anon:142476kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88224kB pagetables:187968kB bounce:0kB free_pcp:632kB local_pcp:624kB free_cma:0kB [ 2780.818595] ? __fget+0x225/0x360 [ 2780.818606] ? do_vfs_ioctl+0xff0/0xff0 [ 2780.855048] ? security_file_ioctl+0x83/0xb0 [ 2780.859457] SyS_ioctl+0x7f/0xb0 [ 2780.862818] ? do_vfs_ioctl+0xff0/0xff0 [ 2780.866789] do_syscall_64+0x1d5/0x640 [ 2780.870681] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2780.875862] RIP: 0033:0x45e219 [ 2780.879039] RSP: 002b:00007f3dd5787c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2780.886744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2780.894008] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2780.901269] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.908550] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2780.913067] lowmem_reserve[]: [ 2780.915896] R13: 00007ffdad9a4ccf R14: 00007f3dd57889c0 R15: 000000000119bf8c [ 2780.915902] 0 [ 2780.924436] warn_alloc_show_mem: 1 callbacks suppressed [ 2780.924439] Mem-Info: [ 2780.941976] active_anon:334929 inactive_anon:8042 isolated_anon:0 [ 2780.941976] active_file:616 inactive_file:1853 isolated_file:0 [ 2780.941976] unevictable:0 dirty:10 writeback:0 unstable:0 [ 2780.941976] slab_reclaimable:28487 slab_unreclaimable:171905 [ 2780.941976] mapped:45763 shmem:11026 pagetables:106038 bounce:0 [ 2780.941976] free:119976 free_pcp:408 free_cma:0 [ 2780.953069] 0 [ 2780.980628] Node 0 active_anon:1197340kB inactive_anon:32164kB active_file:2452kB inactive_file:7500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183352kB dirty:40kB writeback:0kB shmem:44100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2781.012976] 0 0 0 [ 2781.015374] Node 1 active_anon:142376kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2781.015381] Node 0 [ 2781.045367] Node 0 [ 2781.046063] DMA free:11048kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2781.047609] DMA: [ 2781.049857] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2781.049876] Node 0 DMA32 free:142020kB min:36200kB low:45248kB high:54296kB active_anon:1197180kB inactive_anon:32164kB active_file:2552kB inactive_file:7800kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47424kB pagetables:235948kB bounce:0kB free_pcp:1128kB local_pcp:332kB free_cma:0kB [ 2781.049895] lowmem_reserve[]: 0 0 0 0 0 [ 2781.049911] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2781.049929] lowmem_reserve[]: 0 0 [ 2781.106120] 58*4kB [ 2781.123091] 0 [ 2781.175209] (UME) 19*8kB (UME) 33*16kB (UME) 7*32kB (UME) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11056kB [ 2781.192774] Node 0 DMA32: 17476*4kB (UME) 865*8kB (UMEH) 1430*16kB (UMEH) 1093*32kB (UMEH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 134872kB [ 2781.204233] 0 0 [ 2781.210912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2781.222298] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2781.222856] Node 1 Normal: 8454*4kB (UME) 12667*8kB (UME) 6372*16kB (UME) 2726*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 324336kB [ 2781.243641] Node 1 [ 2781.257719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2781.263092] Normal free:324156kB min:53696kB low:67120kB high:80544kB active_anon:142376kB inactive_anon:4kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88224kB pagetables:187872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2781.269500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2781.297169] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2781.297194] CPU: 1 PID: 30145 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2781.297199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.297203] Call Trace: [ 2781.297217] dump_stack+0x1b2/0x283 [ 2781.297231] warn_alloc.cold+0x96/0x1cc [ 2781.297240] ? zone_watermark_ok_safe+0x220/0x220 [ 2781.297261] __alloc_pages_nodemask+0x2127/0x2720 [ 2781.297275] ? lock_acquire+0x170/0x3f0 [ 2781.297290] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2781.297308] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2781.323365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2781.328248] ? __mutex_unlock_slowpath+0x75/0x770 [ 2781.330805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2781.334408] alloc_pages_current+0x155/0x260 [ 2781.334420] ion_page_pool_alloc+0x118/0x1b0 [ 2781.334429] ion_system_heap_allocate+0x133/0x8c0 [ 2781.334440] ? _raw_spin_unlock+0x29/0x40 [ 2781.334446] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2781.334454] ? ion_system_contig_heap_create+0x130/0x130 [ 2781.334461] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2781.334469] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2781.334481] ion_alloc+0x27a/0x810 [ 2781.334494] ? ion_dma_buf_release+0x40/0x40 [ 2781.334508] ? __might_fault+0x177/0x1b0 [ 2781.334519] ion_ioctl+0xea/0x1ee [ 2781.334526] ? ion_alloc.cold+0x3b/0x3b [ 2781.334536] ? lock_acquire+0x170/0x3f0 [ 2781.334543] ? lock_downgrade+0x740/0x740 [ 2781.334549] ? ion_alloc.cold+0x3b/0x3b [ 2781.334557] do_vfs_ioctl+0x75a/0xff0 [ 2781.334568] ? ioctl_preallocate+0x1a0/0x1a0 [ 2781.346585] 15051 total pagecache pages [ 2781.348176] ? lock_downgrade+0x740/0x740 [ 2781.348192] ? __fget+0x225/0x360 [ 2781.348201] ? do_vfs_ioctl+0xff0/0xff0 [ 2781.348212] ? security_file_ioctl+0x83/0xb0 [ 2781.348222] SyS_ioctl+0x7f/0xb0 [ 2781.348231] ? do_vfs_ioctl+0xff0/0xff0 [ 2781.362872] 0 pages in swap cache [ 2781.371291] do_syscall_64+0x1d5/0x640 [ 2781.371308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2781.371315] RIP: 0033:0x45e219 [ 2781.371319] RSP: 002b:00007f3dd5787c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2781.371328] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2781.371333] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2781.371338] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.371343] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2781.371348] R13: 00007ffdad9a4ccf R14: 00007f3dd57889c0 R15: 000000000119bf8c [ 2781.412027] lowmem_reserve[]: [ 2781.435237] Swap cache stats: add 0, delete 0, find 0/0 [ 2781.455829] 0 [ 2781.486676] Free swap = 0kB [ 2781.497288] 0 [ 2781.515915] Total swap = 0kB [ 2781.523202] 0 [ 2781.554215] 2097051 pages RAM [ 2781.560904] 0 [ 2781.561469] 0 pages HighMem/MovableOnly [ 2781.565675] 0 [ 2781.576509] 363840 pages reserved [ 2781.585844] Node 0 DMA: 58*4kB (UME) 19*8kB (UME) 33*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10992kB [ 2781.590410] 0 pages cma reserved [ 2781.602539] Node 0 DMA32: 4795*4kB (UME) 414*8kB (UMEH) 1353*16kB (UMEH) 1096*32kB (UMEH) 4*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 79468kB [ 2781.622868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2781.634749] Node 1 Normal: 8454*4kB (UME) 12667*8kB (UME) 6372*16kB (UME) 2726*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 324336kB [ 2781.654020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2781.663823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2781.673871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2781.682717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2781.693357] 17382 total pagecache pages [ 2781.697660] 0 pages in swap cache [ 2781.701505] Swap cache stats: add 0, delete 0, find 0/0 [ 2781.713049] Free swap = 0kB [ 2781.716077] Total swap = 0kB [ 2781.733918] 2097051 pages RAM [ 2781.739825] 0 pages HighMem/MovableOnly [ 2781.753034] 363840 pages reserved [ 2781.757223] 0 pages cma reserved [ 2782.183081] in:imklog invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2782.232976] in:imklog cpuset=/ mems_allowed=0-1 [ 2782.237719] CPU: 0 PID: 30182 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 2782.245158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.254506] Call Trace: [ 2782.257099] dump_stack+0x1b2/0x283 [ 2782.260730] dump_header+0x178/0x82f [ 2782.264447] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2782.269548] ? ___ratelimit+0x2cd/0x522 [ 2782.273546] oom_kill_process.cold+0x10/0xb18 [ 2782.278045] out_of_memory+0xe3e/0x1190 [ 2782.282017] ? oom_killer_disable+0x1c0/0x1c0 [ 2782.286504] ? mutex_trylock+0x152/0x1a0 [ 2782.290582] __alloc_pages_nodemask+0x23e1/0x2720 [ 2782.295433] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2782.300300] alloc_pages_current+0x155/0x260 [ 2782.304705] pte_alloc_one+0x15/0x100 [ 2782.308501] __pte_alloc+0x25/0x2c0 [ 2782.312144] __handle_mm_fault+0x3259/0x4620 [ 2782.316546] ? vm_insert_page+0x7c0/0x7c0 [ 2782.320695] handle_mm_fault+0x391/0x860 [ 2782.324749] __do_page_fault+0x549/0xad0 [ 2782.328807] ? spurious_fault+0x640/0x640 [ 2782.332948] ? do_page_fault+0x60/0x4f2 [ 2782.336919] ? page_fault+0x2f/0x50 [ 2782.340537] page_fault+0x45/0x50 [ 2782.343984] RIP: a31ccd2f:0x7f11f240b000 [ 2782.348029] RSP: ec000000:0000000000023000 EFLAGS: 01bf5000 [ 2782.672930] Mem-Info: [ 2782.681079] active_anon:334819 inactive_anon:8042 isolated_anon:0 [ 2782.681079] active_file:1682 inactive_file:1600 isolated_file:49 [ 2782.681079] unevictable:0 dirty:14 writeback:0 unstable:0 [ 2782.681079] slab_reclaimable:28412 slab_unreclaimable:173018 [ 2782.681079] mapped:46924 shmem:11026 pagetables:106047 bounce:0 [ 2782.681079] free:13825 free_pcp:113 free_cma:0 [ 2782.842934] Node 0 active_anon:1197304kB inactive_anon:32160kB active_file:5800kB inactive_file:5780kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:186148kB dirty:52kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2782.943597] Node 1 active_anon:142084kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2783.052911] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2783.142894] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2783.147958] Node 0 DMA32 free:17884kB min:36200kB low:45248kB high:54296kB active_anon:1197144kB inactive_anon:32160kB active_file:5064kB inactive_file:5248kB unevictable:0kB writepending:52kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47488kB pagetables:235984kB bounce:0kB free_pcp:704kB local_pcp:296kB free_cma:0kB [ 2783.280082] lowmem_reserve[]: 0 0 0 0 0 [ 2783.300272] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2783.376504] lowmem_reserve[]: 0 0 0 0 0 [ 2783.380520] Node 1 Normal free:26644kB min:53696kB low:67120kB high:80544kB active_anon:142084kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88224kB pagetables:187904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2783.500390] lowmem_reserve[]: 0 0 0 0 0 [ 2783.510509] Node 0 DMA: 45*4kB (UME) 22*8kB (UME) 33*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10964kB [ 2783.566885] Node 0 DMA32: 3423*4kB (UME) 451*8kB (UMEH) 4*16kB (H) 10*32kB (H) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17876kB [ 2783.613486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2783.652842] Node 1 Normal: 1907*4kB (UM) 951*8kB (UM) 441*16kB (UM) 136*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26644kB [ 2783.690196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2783.729569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2783.759905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2783.782151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2783.814009] 12096 total pagecache pages [ 2783.818120] 0 pages in swap cache [ 2783.821571] Swap cache stats: add 0, delete 0, find 0/0 [ 2783.848386] Free swap = 0kB [ 2783.851458] Total swap = 0kB [ 2783.864524] 2097051 pages RAM [ 2783.867647] 0 pages HighMem/MovableOnly [ 2783.871608] 363840 pages reserved [ 2783.893856] 0 pages cma reserved [ 2783.897259] Out of memory (oom_kill_allocating_task): Kill process 30182 (in:imklog) score 0 or sacrifice child [ 2783.922836] Killed process 30180 (rsyslogd) total-vm:115064kB, anon-rss:416kB, file-rss:1804kB, shmem-rss:0kB [ 2783.945506] oom_reaper: reaped process 30180 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2784.422828] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2784.475589] systemd-journal cpuset=/ mems_allowed=0-1 [ 2784.480822] CPU: 0 PID: 30129 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2784.488783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.498133] Call Trace: [ 2784.500721] dump_stack+0x1b2/0x283 [ 2784.504347] dump_header+0x178/0x82f [ 2784.508092] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2784.513193] ? ___ratelimit+0x2cd/0x522 [ 2784.517165] oom_kill_process.cold+0x10/0xb18 [ 2784.521677] out_of_memory+0xe3e/0x1190 [ 2784.525652] ? oom_killer_disable+0x1c0/0x1c0 [ 2784.530142] ? mutex_trylock+0x152/0x1a0 [ 2784.534201] __alloc_pages_nodemask+0x23e1/0x2720 [ 2784.539050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2784.543892] ? cache_grow_begin+0x41/0x630 [ 2784.548108] cache_grow_begin+0x91/0x630 [ 2784.552150] ? cache_grow_begin+0x91/0x630 [ 2784.556473] fallback_alloc+0x207/0x2c0 [ 2784.560430] kmem_cache_alloc+0x1e5/0x3c0 [ 2784.564559] getname_flags+0xc8/0x550 [ 2784.568351] user_path_at_empty+0x2a/0x50 [ 2784.572486] SyS_faccessat+0x21b/0x680 [ 2784.576352] ? SyS_fallocate+0x80/0x80 [ 2784.580215] ? do_syscall_64+0x4c/0x640 [ 2784.584178] ? SyS_faccessat+0x680/0x680 [ 2784.588243] do_syscall_64+0x1d5/0x640 [ 2784.592119] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2784.597286] RIP: 0033:0x7f020c7319c7 [ 2784.600973] RSP: 002b:00007ffe3cbed878 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2784.608675] RAX: ffffffffffffffda RBX: 00007ffe3cbf0790 RCX: 00007f020c7319c7 [ 2784.615920] RDX: 00007f020d1a2a00 RSI: 0000000000000000 RDI: 000055bdc31949a3 [ 2784.623166] RBP: 00007ffe3cbed8b0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.630412] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 2784.637660] R13: 0000000000000000 R14: 00007ffe3cbf0790 R15: 00007ffe3cbedda0 [ 2784.992748] Mem-Info: [ 2784.995203] active_anon:334726 inactive_anon:8042 isolated_anon:0 [ 2784.995203] active_file:34 inactive_file:3 isolated_file:0 [ 2784.995203] unevictable:0 dirty:9 writeback:1 unstable:0 [ 2784.995203] slab_reclaimable:28388 slab_unreclaimable:172718 [ 2784.995203] mapped:44036 shmem:11026 pagetables:106055 bounce:0 [ 2784.995203] free:13893 free_pcp:0 free_cma:0 [ 2785.112726] Node 0 active_anon:1196992kB inactive_anon:32160kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176144kB dirty:32kB writeback:4kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2785.232401] Node 1 active_anon:141912kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2785.342671] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2785.439709] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2785.453345] Node 0 DMA32 free:17804kB min:36200kB low:45248kB high:54296kB active_anon:1196832kB inactive_anon:32160kB active_file:52kB inactive_file:136kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47424kB pagetables:235984kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2785.595012] lowmem_reserve[]: 0 0 0 0 0 [ 2785.599064] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2785.712641] lowmem_reserve[]: 0 0 0 0 0 [ 2785.716689] Node 1 Normal free:26816kB min:53696kB low:67120kB high:80544kB active_anon:141912kB inactive_anon:8kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88224kB pagetables:187904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2785.832647] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2785.852630] lowmem_reserve[]: 0 0 0 0 0 [ 2785.856644] Node 0 DMA: 12*4kB (UME) 21*8kB (UME) 33*16kB (UME) 7*32kB (UME) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10952kB [ 2785.876058] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2785.878126] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2785.916200] Node 0 DMA32: 3762*4kB (UME) 285*8kB (UMH) 4*16kB (H) 10*32kB (H) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17904kB [ 2785.925412] in:imklog: page allocation failure: order:0, mode:0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 2785.929907] syz-executor.3: [ 2785.943186] CPU: 1 PID: 30154 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2785.943797] syz-executor.5 cpuset= [ 2785.946208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.966927] Call Trace: [ 2785.967701] in:imklog cpuset= [ 2785.969513] dump_stack+0x1b2/0x283 [ 2785.969527] warn_alloc.cold+0x96/0x1cc [ 2785.969537] ? zone_watermark_ok_safe+0x220/0x220 [ 2785.972751] / [ 2785.976344] ? usleep_range+0x130/0x130 [ 2785.980284] mems_allowed=0-1 [ 2785.985103] ? try_to_free_pages+0x23f/0x6e0 [ 2785.985111] ? _find_next_bit+0xdb/0x100 [ 2785.985122] ? run_timer_softirq+0x5a0/0x5a0 [ 2785.985137] __alloc_pages_nodemask+0x2127/0x2720 [ 2785.990743] / [ 2785.993870] ? lock_acquire+0x170/0x3f0 [ 2785.993887] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2785.993896] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2786.012670] mems_allowed=0-1 [ 2786.013356] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2786.035114] alloc_pages_current+0x155/0x260 [ 2786.039507] ion_page_pool_alloc+0x118/0x1b0 [ 2786.043894] ion_system_heap_allocate+0x133/0x8c0 [ 2786.048725] ? _raw_spin_unlock+0x29/0x40 [ 2786.052852] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2786.057758] ? ion_system_contig_heap_create+0x130/0x130 [ 2786.063184] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2786.068177] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2786.073002] ion_alloc+0x27a/0x810 [ 2786.076526] ? ion_dma_buf_release+0x40/0x40 [ 2786.080915] ? __might_fault+0x177/0x1b0 [ 2786.084971] ion_ioctl+0xea/0x1ee [ 2786.088405] ? ion_alloc.cold+0x3b/0x3b [ 2786.092358] ? lock_acquire+0x170/0x3f0 [ 2786.096308] ? lock_downgrade+0x740/0x740 [ 2786.100435] ? ion_alloc.cold+0x3b/0x3b [ 2786.104391] do_vfs_ioctl+0x75a/0xff0 [ 2786.108171] ? ioctl_preallocate+0x1a0/0x1a0 [ 2786.112559] ? lock_downgrade+0x740/0x740 [ 2786.116689] ? __fget+0x225/0x360 [ 2786.120117] ? do_vfs_ioctl+0xff0/0xff0 [ 2786.124071] ? security_file_ioctl+0x83/0xb0 [ 2786.128457] SyS_ioctl+0x7f/0xb0 [ 2786.131814] ? do_vfs_ioctl+0xff0/0xff0 [ 2786.135768] do_syscall_64+0x1d5/0x640 [ 2786.139638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2786.144810] RIP: 0033:0x45e219 [ 2786.147977] RSP: 002b:00007f3dd5766c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.155665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2786.162917] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2786.170162] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2786.177409] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2786.184655] R13: 00007ffdad9a4ccf R14: 00007f3dd57679c0 R15: 000000000119c034 [ 2786.191915] CPU: 0 PID: 30182 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 2786.199362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.199853] page allocation failure: order:0 [ 2786.208703] Call Trace: [ 2786.208719] dump_stack+0x1b2/0x283 [ 2786.208729] warn_alloc.cold+0x96/0x1cc [ 2786.208737] ? zone_watermark_ok_safe+0x220/0x220 [ 2786.208745] ? usleep_range+0x130/0x130 [ 2786.208752] ? try_to_free_pages+0x23f/0x6e0 [ 2786.208760] ? _find_next_bit+0xdb/0x100 [ 2786.208770] ? run_timer_softirq+0x5a0/0x5a0 [ 2786.216130] Node 0 [ 2786.219381] __alloc_pages_nodemask+0x2127/0x2720 [ 2786.223376] Normal: [ 2786.228153] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2786.232084] 0*4kB [ 2786.236489] alloc_pages_current+0x155/0x260 [ 2786.236500] pte_alloc_one+0x15/0x100 [ 2786.236511] __pte_alloc+0x25/0x2c0 [ 2786.242600] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2786.244945] __handle_mm_fault+0x3259/0x4620 [ 2786.247153] (null) [ 2786.251977] ? vm_insert_page+0x7c0/0x7c0 [ 2786.272660] syz-executor.3 cpuset= [ 2786.273289] handle_mm_fault+0x391/0x860 [ 2786.280353] / [ 2786.284752] __do_page_fault+0x549/0xad0 [ 2786.286926] 0*8kB [ 2786.290999] ? spurious_fault+0x640/0x640 [ 2786.298029] 0*16kB [ 2786.298552] ? do_page_fault+0x60/0x4f2 [ 2786.300237] 0*32kB 0*64kB [ 2786.304297] ? page_fault+0x2f/0x50 [ 2786.304304] page_fault+0x45/0x50 [ 2786.304311] RIP: a31ccd2f:0x7f11f240b000 [ 2786.304315] RSP: ec000000:0000000000023000 EFLAGS: 01bf5000 [ 2786.322603] CPU: 0 PID: 30145 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2786.333067] mems_allowed=0-1 [ 2786.336427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.356734] Call Trace: [ 2786.359310] dump_stack+0x1b2/0x283 [ 2786.362946] warn_alloc.cold+0x96/0x1cc [ 2786.366922] ? zone_watermark_ok_safe+0x220/0x220 [ 2786.371617] 0*128kB [ 2786.371802] ? usleep_range+0x130/0x130 [ 2786.371804] 0*256kB 0*512kB [ 2786.374113] ? try_to_free_pages+0x23f/0x6e0 [ 2786.374124] ? _find_next_bit+0xdb/0x100 [ 2786.374134] ? run_timer_softirq+0x5a0/0x5a0 [ 2786.374148] __alloc_pages_nodemask+0x2127/0x2720 [ 2786.374165] ? lock_acquire+0x170/0x3f0 [ 2786.378810] 0*1024kB [ 2786.381812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2786.410620] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2786.415112] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2786.420552] ? alloc_pages_current+0x16/0x260 [ 2786.422571] 0*2048kB 0*4096kB [ 2786.425030] alloc_pages_current+0x155/0x260 [ 2786.425043] ion_page_pool_alloc+0x118/0x1b0 [ 2786.428211] = 0kB [ 2786.432601] ion_system_heap_allocate+0x133/0x8c0 [ 2786.432611] ? _raw_spin_unlock+0x29/0x40 [ 2786.432622] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2786.432631] ? ion_system_contig_heap_create+0x130/0x130 [ 2786.432641] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2786.454792] Node 1 [ 2786.458358] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2786.470376] ion_alloc+0x27a/0x810 [ 2786.473914] ? ion_dma_buf_release+0x40/0x40 [ 2786.478326] ? __might_fault+0x177/0x1b0 [ 2786.479930] Normal: 1920*4kB [ 2786.482394] ion_ioctl+0xea/0x1ee [ 2786.482403] ? ion_alloc.cold+0x3b/0x3b [ 2786.492871] ? lock_acquire+0x170/0x3f0 [ 2786.496869] ? lock_downgrade+0x740/0x740 [ 2786.501011] ? ion_alloc.cold+0x3b/0x3b [ 2786.502597] (UM) 931*8kB (M) [ 2786.504984] do_vfs_ioctl+0x75a/0xff0 [ 2786.504996] ? ioctl_preallocate+0x1a0/0x1a0 [ 2786.508075] 428*16kB [ 2786.511853] ? lock_downgrade+0x740/0x740 [ 2786.522919] ? __fget+0x225/0x360 [ 2786.526364] ? do_vfs_ioctl+0xff0/0xff0 [ 2786.530336] ? security_file_ioctl+0x83/0xb0 [ 2786.534841] SyS_ioctl+0x7f/0xb0 [ 2786.538185] ? do_vfs_ioctl+0xff0/0xff0 [ 2786.542156] do_syscall_64+0x1d5/0x640 [ 2786.542552] (UM) 133*32kB [ 2786.546027] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2786.546032] (UM) [ 2786.548855] RIP: 0033:0x45e219 [ 2786.559355] RSP: 002b:00007f3dd5787c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.567061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2786.574318] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2786.574938] 0*64kB [ 2786.581590] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.581596] 0*128kB [ 2786.583805] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2786.583811] R13: 00007ffdad9a4ccf R14: 00007f3dd57889c0 R15: 000000000119bf8c [ 2786.622575] CPU: 1 PID: 30158 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2786.630491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.639851] Call Trace: [ 2786.642447] dump_stack+0x1b2/0x283 [ 2786.646083] warn_alloc.cold+0x96/0x1cc [ 2786.647148] warn_alloc_show_mem: 2 callbacks suppressed [ 2786.647151] Mem-Info: [ 2786.650054] ? zone_watermark_ok_safe+0x220/0x220 [ 2786.655440] active_anon:334726 inactive_anon:8042 isolated_anon:0 [ 2786.655440] active_file:30 inactive_file:2 isolated_file:0 [ 2786.655440] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2786.655440] slab_reclaimable:28378 slab_unreclaimable:172718 [ 2786.655440] mapped:44015 shmem:11026 pagetables:106055 bounce:0 [ 2786.655440] free:13741 free_pcp:89 free_cma:0 [ 2786.657787] ? usleep_range+0x130/0x130 [ 2786.662643] Node 0 active_anon:1196992kB inactive_anon:32160kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176060kB dirty:0kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2786.695924] ? try_to_free_pages+0x23f/0x6e0 [ 2786.695935] ? _find_next_bit+0xdb/0x100 [ 2786.695948] ? run_timer_softirq+0x5a0/0x5a0 [ 2786.699924] Node 1 active_anon:141912kB inactive_anon:8kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2786.727830] __alloc_pages_nodemask+0x2127/0x2720 [ 2786.727847] ? lock_acquire+0x170/0x3f0 [ 2786.732224] Node 0 [ 2786.736280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2786.736289] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2786.736305] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2786.740703] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2786.766877] alloc_pages_current+0x155/0x260 [ 2786.766890] ion_page_pool_alloc+0x118/0x1b0 [ 2786.771703] lowmem_reserve[]: [ 2786.775655] ion_system_heap_allocate+0x133/0x8c0 [ 2786.775665] ? _raw_spin_unlock+0x29/0x40 [ 2786.775674] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2786.777882] 0 [ 2786.782703] ? ion_system_contig_heap_create+0x130/0x130 [ 2786.782712] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2786.782724] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2786.787187] 2717 [ 2786.792620] ion_alloc+0x27a/0x810 [ 2786.792636] ? ion_dma_buf_release+0x40/0x40 [ 2786.842539] 2718 [ 2786.844466] ? __might_fault+0x177/0x1b0 [ 2786.846231] 2718 [ 2786.851672] ion_ioctl+0xea/0x1ee [ 2786.872571] 2718 [ 2786.873471] ? ion_alloc.cold+0x3b/0x3b [ 2786.879545] ? lock_acquire+0x170/0x3f0 [ 2786.892525] Node 0 DMA32 free:17780kB min:36200kB low:45248kB high:54296kB active_anon:1196832kB inactive_anon:32160kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47424kB pagetables:235984kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 2786.892941] ? lock_downgrade+0x740/0x740 [ 2786.892954] ? ion_alloc.cold+0x3b/0x3b [ 2786.930345] do_vfs_ioctl+0x75a/0xff0 [ 2786.934144] ? ioctl_preallocate+0x1a0/0x1a0 [ 2786.938548] ? lock_downgrade+0x740/0x740 [ 2786.942692] ? __fget+0x225/0x360 [ 2786.946141] ? do_vfs_ioctl+0xff0/0xff0 [ 2786.950113] ? security_file_ioctl+0x83/0xb0 [ 2786.952522] lowmem_reserve[]: 0 [ 2786.954512] SyS_ioctl+0x7f/0xb0 [ 2786.954521] ? do_vfs_ioctl+0xff0/0xff0 [ 2786.957797] 0 [ 2786.961144] do_syscall_64+0x1d5/0x640 [ 2786.970746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2786.975927] RIP: 0033:0x45e219 [ 2786.979108] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.982517] 0 [ 2786.986803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2786.986810] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2786.988594] 0 [ 2786.995836] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.995841] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2786.995846] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2787.022526] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26232kB [ 2787.042536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2787.056332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2787.072526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2787.081373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2787.095547] 0 [ 2787.097363] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2787.112524] 11652 total pagecache pages [ 2787.132519] 0 pages in swap cache [ 2787.135982] Swap cache stats: add 0, delete 0, find 0/0 [ 2787.141335] Free swap = 0kB [ 2787.155911] lowmem_reserve[]: 0 0 0 0 0 [ 2787.159931] Node 1 Normal free:789552kB min:53696kB low:67120kB high:80544kB active_anon:141912kB inactive_anon:8kB active_file:108kB inactive_file:2712kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88224kB pagetables:187904kB bounce:0kB free_pcp:380kB local_pcp:260kB free_cma:0kB [ 2787.162512] Total swap = 0kB [ 2787.232511] 2097051 pages RAM [ 2787.235634] 0 pages HighMem/MovableOnly [ 2787.239598] 363840 pages reserved [ 2787.252179] lowmem_reserve[]: 0 0 0 0 0 [ 2787.256452] 0 pages cma reserved [ 2787.259821] Out of memory (oom_kill_allocating_task): Kill process 30129 (systemd-journal) score 0 or sacrifice child [ 2787.260340] Node 0 DMA: 11*4kB (UM) 28*8kB (UME) 33*16kB (UME) 7*32kB (UME) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11068kB [ 2787.302609] Killed process 30129 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1844kB [ 2787.325756] oom_reaper: reaped process 30129 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1844kB [ 2787.326588] Node 0 DMA32: 4441*4kB (UME) 360*8kB (UMH) 6*16kB (UMH) 12*32kB (UH) 461*64kB (UMEH) 108*128kB (UME) 72*256kB (UM) 17*512kB (U) 2*1024kB (U) 3*2048kB (U) 0*4096kB = 99780kB [ 2787.377087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2787.462500] Node 1 Normal: 649*4kB (ME) 932*8kB (UM) 427*16kB (M) 130*32kB (UM) 1529*64kB (UM) 390*128kB (UME) 250*256kB (UME) 192*512kB (UE) 266*1024kB (UE) 143*2048kB (UE) 116*4096kB (U) = 1371508kB [ 2787.482173] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2787.516320] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2787.522486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2787.550570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2787.556028] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2787.572506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2787.581476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2787.582373] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2787.602503] 13909 total pagecache pages [ 2787.606677] 0 pages in swap cache [ 2787.610200] Swap cache stats: add 0, delete 0, find 0/0 [ 2787.625307] systemd[1]: Stopped Journal Service. [ 2787.632521] Free swap = 0kB [ 2787.635545] Total swap = 0kB [ 2787.638606] 2097051 pages RAM [ 2787.641788] 0 pages HighMem/MovableOnly [ 2787.652477] 363840 pages reserved [ 2787.655936] 0 pages cma reserved [ 2787.659424] in:imklog invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 2787.663002] systemd[1]: Starting Journal Service... [ 2787.692513] in:imklog cpuset=/ mems_allowed=0-1 [ 2787.704008] CPU: 0 PID: 30182 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 2787.711468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.720839] Call Trace: [ 2787.723430] dump_stack+0x1b2/0x283 [ 2787.727067] dump_header+0x178/0x82f [ 2787.730802] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2787.735905] ? ___ratelimit+0x2cd/0x522 [ 2787.739895] oom_kill_process.cold+0x10/0xb18 [ 2787.744401] out_of_memory+0xe3e/0x1190 [ 2787.748372] ? pagefault_out_of_memory+0xaa/0xc9 [ 2787.753108] ? oom_killer_disable+0x1c0/0x1c0 [ 2787.757582] ? mutex_trylock+0x152/0x1a0 [ 2787.761618] ? pagefault_out_of_memory+0xaa/0xc9 [ 2787.766353] pagefault_out_of_memory+0xbb/0xc9 [ 2787.770910] ? out_of_memory+0x1190/0x1190 [ 2787.775124] ? lock_downgrade+0x740/0x740 [ 2787.779249] mm_fault_error+0xad/0x2c0 [ 2787.783116] __do_page_fault+0x93c/0xad0 [ 2787.787159] ? spurious_fault+0x640/0x640 [ 2787.791282] ? do_page_fault+0x60/0x4f2 [ 2787.795232] ? page_fault+0x2f/0x50 [ 2787.798854] page_fault+0x45/0x50 [ 2787.802295] RIP: a31ccd2f:0x7f11f240b000 [ 2787.806328] RSP: ec000000:0000000000023000 EFLAGS: 01bf5000 [ 2787.813001] Mem-Info: [ 2787.821275] active_anon:335198 inactive_anon:8042 isolated_anon:0 [ 2787.821275] active_file:241 inactive_file:3066 isolated_file:0 [ 2787.821275] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2787.821275] slab_reclaimable:28329 slab_unreclaimable:172988 [ 2787.821275] mapped:54165 shmem:11026 pagetables:106055 bounce:0 [ 2787.821275] free:509102 free_pcp:711 free_cma:0 [ 2787.856931] Node 0 active_anon:1198880kB inactive_anon:32160kB active_file:856kB inactive_file:7652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213560kB dirty:0kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 929792kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2787.892454] Node 1 active_anon:142012kB inactive_anon:8kB active_file:208kB inactive_file:4712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3300kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2787.942471] Node 0 DMA free:11300kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2788.002444] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2788.007504] Node 0 DMA32 free:181484kB min:36200kB low:45248kB high:54296kB active_anon:1198720kB inactive_anon:32160kB active_file:956kB inactive_file:7652kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47456kB pagetables:236132kB bounce:0kB free_pcp:1288kB local_pcp:620kB free_cma:0kB [ 2788.072477] lowmem_reserve[]: 0 0 0 0 0 [ 2788.076496] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2788.132444] lowmem_reserve[]: 0 0 0 0 0 [ 2788.136462] Node 1 Normal free:2169732kB min:53696kB low:67120kB high:80544kB active_anon:142012kB inactive_anon:8kB active_file:308kB inactive_file:4712kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88192kB pagetables:187756kB bounce:0kB free_pcp:1316kB local_pcp:636kB free_cma:0kB [ 2788.202443] lowmem_reserve[]: 0 0 0 0 0 [ 2788.206459] Node 0 DMA: 59*4kB (UM) 36*8kB (UME) 33*16kB (UME) 7*32kB (UME) 2*64kB (UE) 3*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 11516kB [ 2788.242435] Node 0 DMA32: 10094*4kB (UME) 957*8kB (UMEH) 1171*16kB (UMEH) 1058*32kB (UMEH) 459*64kB (UMEH) 110*128kB (UME) 89*256kB (UM) 20*512kB (U) 5*1024kB (U) 2*2048kB (U) 0*4096kB = 186320kB [ 2788.282428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2788.302427] Node 1 Normal: 7230*4kB (UME) 12677*8kB (UME) 6382*16kB (UME) 2681*32kB (UME) 777*64kB (UME) 159*128kB (UME) 57*256kB (UME) 25*512kB (UE) 27*1024kB (UE) 15*2048kB (UE) 414*4096kB (U) = 2169824kB [ 2788.345154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2788.364958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2788.385000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2788.412429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2788.421026] 14464 total pagecache pages [ 2788.445583] 0 pages in swap cache [ 2788.449060] Swap cache stats: add 0, delete 0, find 0/0 [ 2788.454489] Free swap = 0kB [ 2788.457497] Total swap = 0kB [ 2788.460513] 2097051 pages RAM [ 2788.466647] 0 pages HighMem/MovableOnly [ 2788.470630] 363840 pages reserved [ 2788.474161] 0 pages cma reserved [ 2788.477516] Out of memory (oom_kill_allocating_task): Kill process 30182 (in:imklog) score 0 or sacrifice child [ 2788.490311] Killed process 30182 (in:imklog) total-vm:115064kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2788.510129] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2788.525157] systemd[1]: rsyslog.service: Unit entered failed state. [ 2788.542733] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2788.593549] systemd-journald[30186]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2788.670352] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2789.097920] IPVS: ftp: loaded support on port[0] = 21 [ 2789.265494] chnl_net:caif_netlink_parms(): no params data found [ 2789.368692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2789.375172] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.382112] device bridge_slave_0 entered promiscuous mode [ 2789.389275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2789.395749] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.404286] device bridge_slave_1 entered promiscuous mode [ 2789.428153] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2789.437049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2789.460370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2789.467521] team0: Port device team_slave_0 added [ 2789.473332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2789.480418] team0: Port device team_slave_1 added [ 2789.501674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2789.507970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2789.533322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2789.545034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2789.551263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2789.576502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2789.587194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2789.594732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2789.621832] device hsr_slave_0 entered promiscuous mode [ 2789.627801] device hsr_slave_1 entered promiscuous mode [ 2789.633960] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2789.641005] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2789.728437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2789.734807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2789.741370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2789.747753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2789.777570] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2789.783899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2789.791569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2789.801431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2789.808964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.815929] bridge0: port 2(bridge_slave_1) entered disabled state [ 2789.827224] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2789.833538] 8021q: adding VLAN 0 to HW filter on device team0 [ 2789.841685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2789.849384] bridge0: port 1(bridge_slave_0) entered blocking state [ 2789.855783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2789.865446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2789.873899] bridge0: port 2(bridge_slave_1) entered blocking state [ 2789.880358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2789.896730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2789.904293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2789.916597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2789.928082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2789.939134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2789.949525] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2789.956310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2789.964321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2789.972045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2789.986502] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2789.994148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2790.000785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2790.014466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2790.069567] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2790.079560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2790.110509] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2790.118127] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2790.124881] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2790.134416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2790.141818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2790.150029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2790.158835] device veth0_vlan entered promiscuous mode [ 2790.169282] device veth1_vlan entered promiscuous mode [ 2790.175510] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2790.185036] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2790.196820] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2790.207135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2790.214519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2790.221762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2790.230402] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2790.239041] device veth0_macvtap entered promiscuous mode [ 2790.248146] device veth1_macvtap entered promiscuous mode [ 2790.256851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2790.266195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2790.275958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2790.286233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.295822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2790.305620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.315076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2790.324933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.334088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2790.343860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.353052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2790.362905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.373559] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2790.380536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2790.388596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2790.396546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2790.406597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2790.416912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.426208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2790.436596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.445782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2790.455551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.464724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2790.474554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.484082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2790.493868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2790.504090] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2790.511150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2790.519281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2790.527520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:12:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0x0, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@in={0x2, 0x4e21, @multicast1}, 0x80, 0x0}, 0x0) 14:12:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, 0x0}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x5c5002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)=ANY=[@ANYBLOB="70050000", @ANYRES16=r9, @ANYBLOB="00012cbd7000fcdbdf250300000008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="600202803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007bbd000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400070000d3ff000000ff01054008000000c808ad09a707000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x570}}, 0x44800) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="880002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400160f000008000100", @ANYRES32=0x0, @ANYBLOB="f8010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004009500000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600eb7f02472957f43faf5506d9aecfe1c708ee11d5a91833e1536b3a5a7093b187fd8808309ef93506cd12", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400060000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4802028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff07000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000400018002000000ff012007f2160000da4905e000fcffff0300008102000000020009020100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ec69000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000"], 0x774}, 0x1, 0x0, 0x0, 0x4}, 0xc000000) 14:12:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x7f, 0x8, &(0x7f0000000080)=0x7}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @fixed={[], 0x11}, 0x4}, 0xa) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) write$nbd(r3, &(0x7f00000002c0)={0x67446698, 0x0, 0x2, 0x0, 0x4, "10ad29a457f0599f08003b7ec23390356fdccf90707e489481d0239816ee17692951f4f82afe780fd196068077732cd1cbc0e74c38da86bd03a21a4db88770189292da6da46843a69609f1deaebba7b89f8e32fa7ea3c2fc1e308f53a8c72a665712354b8393d0978040eabaab39be78117c6af3ae0514261b81041e88341094de5d9f1c40f751e96c0372672acec5574e91b2a36100000000443f499d55c4ee89ce3869e3c1e207cd239e0406cdc4230e03f794d2583627ddc56c57b912cf8a2ad5a432e48058a55571df80d491bdd5f21edd22"}, 0xe4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, 0x0}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:04 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, 0x0}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:04 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x40, @mcast2, 0x2, 0x2}, 0x20) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:12:04 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x40, 0x2, 0x3}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "c0fe17654ada800424778182ca143e6d526571732a1c0e342fcf5eb57effe7259f370552bae924d52cc1fc03bf4993faf092a8506a3f4c59968eb48b3824a1226afc3ce2a87c051b17407ff8fb30275bb6fa25fd2e581627ac54b6ca7e3da41e2d94ceaa8de6"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x31) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x40, 0x3, 0x4}}, 0x14) 14:12:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) [ 2791.152616] Bluetooth: hci1 command 0x0409 tx timeout [ 2791.667780] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2791.716202] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2791.721411] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2791.744177] CPU: 1 PID: 30483 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2791.752074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.761440] Call Trace: [ 2791.764029] dump_stack+0x1b2/0x283 [ 2791.767658] warn_alloc.cold+0x96/0x1cc [ 2791.771632] ? zone_watermark_ok_safe+0x220/0x220 [ 2791.776481] __alloc_pages_nodemask+0x2127/0x2720 [ 2791.781321] ? retint_kernel+0x2d/0x2d [ 2791.785210] ? lock_acquire+0x170/0x3f0 [ 2791.789182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2791.794027] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2791.799472] ? __mutex_unlock_slowpath+0x75/0x770 [ 2791.804309] ? retint_kernel+0x2d/0x2d [ 2791.808190] alloc_pages_current+0x155/0x260 [ 2791.812592] ion_page_pool_alloc+0x118/0x1b0 [ 2791.816997] ion_system_heap_allocate+0x133/0x8c0 [ 2791.821839] ? ion_alloc+0x187/0x810 [ 2791.825548] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2791.831001] ? ion_system_contig_heap_create+0x130/0x130 [ 2791.836444] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2791.841460] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2791.846304] ion_alloc+0x204/0x810 [ 2791.849856] ? ion_dma_buf_release+0x40/0x40 [ 2791.854268] ? __might_fault+0x177/0x1b0 [ 2791.858335] ion_ioctl+0xea/0x1ee [ 2791.861769] ? ion_alloc.cold+0x3b/0x3b [ 2791.865724] ? lock_acquire+0x170/0x3f0 [ 2791.869674] ? lock_downgrade+0x740/0x740 [ 2791.873800] ? ion_alloc.cold+0x3b/0x3b [ 2791.877752] do_vfs_ioctl+0x75a/0xff0 [ 2791.881533] ? ioctl_preallocate+0x1a0/0x1a0 [ 2791.885916] ? lock_downgrade+0x740/0x740 [ 2791.890048] ? __fget+0x225/0x360 [ 2791.893482] ? do_vfs_ioctl+0xff0/0xff0 [ 2791.897435] ? security_file_ioctl+0x83/0xb0 [ 2791.901826] SyS_ioctl+0x7f/0xb0 [ 2791.905168] ? do_vfs_ioctl+0xff0/0xff0 [ 2791.909130] do_syscall_64+0x1d5/0x640 [ 2791.913003] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2791.918170] RIP: 0033:0x45e219 [ 2791.921337] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2791.929034] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2791.936292] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2791.943539] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.950786] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2791.958032] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2791.978866] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2791.989872] warn_alloc_show_mem: 3 callbacks suppressed [ 2791.989875] Mem-Info: [ 2791.992338] syz-executor.5 cpuset= [ 2792.000218] active_anon:336367 inactive_anon:10072 isolated_anon:24 [ 2792.000218] active_file:2484 inactive_file:2665 isolated_file:1 [ 2792.000218] unevictable:0 dirty:186 writeback:0 unstable:0 [ 2792.000218] slab_reclaimable:27450 slab_unreclaimable:174138 [ 2792.000218] mapped:56074 shmem:13079 pagetables:106130 bounce:0 [ 2792.000218] free:99180 free_pcp:43 free_cma:0 [ 2792.002588] / [ 2792.005016] Node 0 active_anon:1203588kB inactive_anon:40288kB active_file:7972kB inactive_file:8388kB unevictable:0kB isolated(anon):96kB isolated(file):4kB mapped:220628kB dirty:688kB writeback:0kB shmem:52316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2792.042891] syz-executor.5 cpuset= [ 2792.072718] Node 1 active_anon:141880kB inactive_anon:0kB active_file:1964kB inactive_file:2272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3668kB dirty:56kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2792.099692] / [ 2792.106806] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.108815] mems_allowed=0-1 [ 2792.141105] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2792.144423] mems_allowed=0-1 [ 2792.147144] Node 0 DMA32 free:65444kB min:36200kB low:45248kB high:54296kB active_anon:1203428kB inactive_anon:40288kB active_file:7972kB inactive_file:8388kB unevictable:0kB writepending:688kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47712kB pagetables:236528kB bounce:0kB free_pcp:144kB local_pcp:128kB free_cma:0kB [ 2792.152225] CPU: 0 PID: 30529 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2792.184290] lowmem_reserve[]: [ 2792.187038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.187042] Call Trace: [ 2792.187061] dump_stack+0x1b2/0x283 [ 2792.190160] 0 [ 2792.199479] warn_alloc.cold+0x96/0x1cc [ 2792.199488] ? zone_watermark_ok_safe+0x220/0x220 [ 2792.199510] __alloc_pages_nodemask+0x2127/0x2720 [ 2792.199524] ? lock_acquire+0x170/0x3f0 [ 2792.199542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2792.199558] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2792.199569] ? __mutex_unlock_slowpath+0x75/0x770 [ 2792.199582] alloc_pages_current+0x155/0x260 [ 2792.199593] ion_page_pool_alloc+0x118/0x1b0 [ 2792.199601] ion_system_heap_allocate+0x133/0x8c0 [ 2792.199612] ? ion_alloc+0x187/0x810 [ 2792.199623] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2792.199632] ? ion_system_contig_heap_create+0x130/0x130 [ 2792.199640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2792.199650] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2792.199662] ion_alloc+0x204/0x810 [ 2792.199676] ? ion_dma_buf_release+0x40/0x40 [ 2792.199691] ? __might_fault+0x177/0x1b0 [ 2792.199701] ion_ioctl+0xea/0x1ee [ 2792.199711] ? ion_alloc.cold+0x3b/0x3b [ 2792.214817] 0 [ 2792.216449] ? lock_acquire+0x170/0x3f0 [ 2792.216459] ? lock_downgrade+0x740/0x740 [ 2792.221298] 0 [ 2792.225233] ? ion_alloc.cold+0x3b/0x3b [ 2792.225244] do_vfs_ioctl+0x75a/0xff0 [ 2792.225256] ? ioctl_preallocate+0x1a0/0x1a0 [ 2792.225263] ? lock_downgrade+0x740/0x740 [ 2792.225277] ? __fget+0x225/0x360 [ 2792.225285] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.225296] ? security_file_ioctl+0x83/0xb0 [ 2792.225305] SyS_ioctl+0x7f/0xb0 [ 2792.225314] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.238723] 0 [ 2792.240391] do_syscall_64+0x1d5/0x640 [ 2792.240413] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2792.244843] 0 [ 2792.249190] RIP: 0033:0x45e219 [ 2792.249195] RSP: 002b:00007f3dd5724c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.249207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2792.263145] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2792.263150] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 2792.263155] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 2792.263160] R13: 00007ffdad9a4ccf R14: 00007f3dd57259c0 R15: 000000000119c184 [ 2792.289265] CPU: 0 PID: 30485 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2792.293835] Node 0 [ 2792.294338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.298404] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.300064] Call Trace: [ 2792.300080] dump_stack+0x1b2/0x283 [ 2792.300094] warn_alloc.cold+0x96/0x1cc [ 2792.304411] lowmem_reserve[]: [ 2792.308163] ? zone_watermark_ok_safe+0x220/0x220 [ 2792.308185] __alloc_pages_nodemask+0x2127/0x2720 [ 2792.309975] 0 [ 2792.313909] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2792.313919] ? finish_task_switch+0x178/0x610 [ 2792.313927] ? finish_task_switch+0x14d/0x610 [ 2792.313939] ? lock_acquire+0x170/0x3f0 [ 2792.313954] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2792.313968] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2792.313979] ? __mutex_unlock_slowpath+0x75/0x770 [ 2792.313990] ? alloc_pages_current+0x37/0x260 [ 2792.322768] 0 [ 2792.326289] alloc_pages_current+0x155/0x260 [ 2792.326301] ion_page_pool_alloc+0x118/0x1b0 [ 2792.329756] 0 [ 2792.333685] ion_system_heap_allocate+0x133/0x8c0 [ 2792.333696] ? ion_alloc+0x187/0x810 [ 2792.333706] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2792.333715] ? ion_system_contig_heap_create+0x130/0x130 [ 2792.333723] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2792.333732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2792.333746] ion_alloc+0x204/0x810 [ 2792.341170] 0 [ 2792.341483] ? ion_dma_buf_release+0x40/0x40 [ 2792.346154] 0 [ 2792.347218] ? __might_fault+0x177/0x1b0 [ 2792.347232] ion_ioctl+0xea/0x1ee [ 2792.356258] ? ion_alloc.cold+0x3b/0x3b [ 2792.356269] ? lock_acquire+0x170/0x3f0 [ 2792.356278] ? lock_downgrade+0x740/0x740 [ 2792.356284] ? ion_alloc.cold+0x3b/0x3b [ 2792.356295] do_vfs_ioctl+0x75a/0xff0 [ 2792.356306] ? ioctl_preallocate+0x1a0/0x1a0 [ 2792.356312] ? lock_downgrade+0x740/0x740 [ 2792.356325] ? __fget+0x225/0x360 [ 2792.356334] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.356345] ? security_file_ioctl+0x83/0xb0 [ 2792.356355] SyS_ioctl+0x7f/0xb0 [ 2792.356363] ? do_vfs_ioctl+0xff0/0xff0 [ 2792.356374] do_syscall_64+0x1d5/0x640 [ 2792.356395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2792.356402] RIP: 0033:0x45e219 [ 2792.356407] RSP: 002b:00007f3dd5787c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.356417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2792.356422] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2792.356426] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.356430] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2792.356435] R13: 00007ffdad9a4ccf R14: 00007f3dd57889c0 R15: 000000000119bf8c [ 2792.680770] Node 1 Normal free:207392kB min:53696kB low:67120kB high:80544kB active_anon:141880kB inactive_anon:0kB active_file:1964kB inactive_file:2272kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187660kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB [ 2792.710249] lowmem_reserve[]: 0 0 0 0 0 [ 2792.714290] Node 0 DMA: 54*4kB (UM) 59*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11120kB [ 2792.730162] Node 0 DMA32: 2110*4kB (ME) 563*8kB (UMEH) 83*16kB (UMEH) 930*32kB (UMEH) 6*64kB (MH) 2*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45184kB [ 2792.745323] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2792.756728] Node 1 Normal: 1001*4kB (UME) 989*8kB (UME) 3601*16kB (UME) 2700*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 155932kB [ 2792.771001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2792.779899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2792.788558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2792.797451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2792.806674] 18238 total pagecache pages [ 2792.810703] 0 pages in swap cache [ 2792.815174] Swap cache stats: add 0, delete 0, find 0/0 [ 2792.820585] Free swap = 0kB [ 2792.824605] Total swap = 0kB [ 2792.827678] 2097051 pages RAM [ 2792.830824] 0 pages HighMem/MovableOnly [ 2792.836189] 363840 pages reserved [ 2792.839695] 0 pages cma reserved [ 2793.232315] Bluetooth: hci1 command 0x041b tx timeout [ 2795.312286] Bluetooth: hci1 command 0x040f tx timeout [ 2797.153842] kworker/u4:6 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2797.216464] kworker/u4:6 cpuset=/ mems_allowed=0-1 [ 2797.221440] CPU: 1 PID: 9374 Comm: kworker/u4:6 Not tainted 4.14.215-syzkaller #0 [ 2797.229054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2797.238419] Workqueue: events_unbound call_usermodehelper_exec_work [ 2797.244819] Call Trace: [ 2797.247405] dump_stack+0x1b2/0x283 [ 2797.251031] dump_header+0x178/0x82f [ 2797.254743] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2797.259844] ? ___ratelimit+0x2cd/0x522 [ 2797.263816] oom_kill_process.cold+0x10/0xb18 [ 2797.268308] ? lock_downgrade+0x740/0x740 [ 2797.272457] out_of_memory+0x2dc/0x1190 [ 2797.276430] ? oom_killer_disable+0x1c0/0x1c0 [ 2797.280918] ? mutex_trylock+0x152/0x1a0 [ 2797.284973] __alloc_pages_nodemask+0x23e1/0x2720 [ 2797.289813] ? deref_stack_reg+0x124/0x1a0 [ 2797.294049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2797.298884] ? fs_reclaim_release+0xd0/0x110 [ 2797.303297] ? kmem_cache_alloc_node+0x38b/0x410 [ 2797.308048] copy_process.part.0+0x265/0x71c0 [ 2797.312538] ? __lock_acquire+0x5fc/0x3f20 [ 2797.316778] ? debug_object_activate+0x292/0x490 [ 2797.321525] ? trace_hardirqs_on+0x10/0x10 [ 2797.325752] ? static_obj+0x50/0x50 [ 2797.329378] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2797.334826] ? __cleanup_sighand+0x40/0x40 [ 2797.339061] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2797.344608] _do_fork+0x184/0xc80 [ 2797.348068] ? fork_idle+0x270/0x270 [ 2797.351781] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2797.356881] ? process_one_work+0x6c4/0x14a0 [ 2797.361304] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2797.366751] kernel_thread+0x2f/0x40 [ 2797.370460] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2797.375740] ? call_usermodehelper+0x80/0x80 [ 2797.380142] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2797.385587] process_one_work+0x793/0x14a0 [ 2797.389819] ? work_busy+0x320/0x320 [ 2797.393638] ? worker_thread+0x158/0xff0 [ 2797.397695] ? _raw_spin_unlock_irq+0x24/0x80 [ 2797.402187] worker_thread+0x5cc/0xff0 [ 2797.406072] ? rescuer_thread+0xc80/0xc80 [ 2797.410214] kthread+0x30d/0x420 [ 2797.413570] ? kthread_create_on_node+0xd0/0xd0 [ 2797.418235] ret_from_fork+0x24/0x30 [ 2797.441709] Bluetooth: hci1 command 0x0419 tx timeout [ 2797.540839] Mem-Info: [ 2797.582161] active_anon:336195 inactive_anon:10076 isolated_anon:0 [ 2797.582161] active_file:37 inactive_file:0 isolated_file:0 [ 2797.582161] unevictable:0 dirty:3 writeback:1 unstable:0 [ 2797.582161] slab_reclaimable:27328 slab_unreclaimable:173660 [ 2797.582161] mapped:52628 shmem:13079 pagetables:106108 bounce:0 [ 2797.582161] free:25118 free_pcp:0 free_cma:0 [ 2797.761571] Node 0 active_anon:1202896kB inactive_anon:40304kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210488kB dirty:4kB writeback:4kB shmem:52316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 931840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2797.908783] Node 1 active_anon:141884kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2798.083432] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2798.246215] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2798.251277] Node 0 DMA32 free:35900kB min:36200kB low:45248kB high:54296kB active_anon:1202736kB inactive_anon:40304kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47648kB pagetables:236440kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2798.473678] lowmem_reserve[]: 0 0 0 0 0 [ 2798.477710] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2798.661262] lowmem_reserve[]: 0 0 0 0 0 [ 2798.683928] Node 1 Normal free:53404kB min:53696kB low:67120kB high:80544kB active_anon:141884kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2798.837457] lowmem_reserve[]: 0 0 0 0 0 [ 2798.868793] Node 0 DMA: 40*4kB (UM) 59*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11064kB [ 2798.958301] Node 0 DMA32: 4938*4kB (ME) 872*8kB (MEH) 82*16kB (UMEH) 161*32kB (UMEH) 4*64kB (MH) 8*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 35752kB [ 2799.051377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2799.111457] Node 1 Normal: 2009*4kB (ME) 1007*8kB (UME) 436*16kB (UME) 936*32kB (UME) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53404kB [ 2799.200591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2799.250509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2799.321051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2799.360855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2799.378916] 13105 total pagecache pages [ 2799.382938] 0 pages in swap cache [ 2799.386383] Swap cache stats: add 0, delete 0, find 0/0 [ 2799.459896] Free swap = 0kB [ 2799.471612] Total swap = 0kB [ 2799.474650] 2097051 pages RAM [ 2799.477750] 0 pages HighMem/MovableOnly [ 2799.519833] 363840 pages reserved [ 2799.523352] 0 pages cma reserved [ 2799.526754] Out of memory: Kill process 17271 (syz-executor.0) score 1005 or sacrifice child [ 2799.591454] Killed process 17271 (syz-executor.0) total-vm:93348kB, anon-rss:3852kB, file-rss:34816kB, shmem-rss:0kB [ 2799.743366] oom_reaper: reaped process 30483 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2799.943041] kworker/u4:6 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2799.971541] kworker/u4:6 cpuset=/ mems_allowed=0-1 [ 2799.976495] CPU: 1 PID: 9374 Comm: kworker/u4:6 Not tainted 4.14.215-syzkaller #0 [ 2799.984107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2799.993467] Workqueue: events_unbound call_usermodehelper_exec_work [ 2799.999870] Call Trace: [ 2800.002456] dump_stack+0x1b2/0x283 [ 2800.006080] dump_header+0x178/0x82f [ 2800.009794] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2800.014899] ? ___ratelimit+0x2cd/0x522 [ 2800.018875] oom_kill_process.cold+0x10/0xb18 [ 2800.023371] ? lock_downgrade+0x740/0x740 [ 2800.027516] out_of_memory+0x2dc/0x1190 [ 2800.031489] ? oom_killer_disable+0x1c0/0x1c0 [ 2800.035976] ? mutex_trylock+0x152/0x1a0 [ 2800.040033] __alloc_pages_nodemask+0x23e1/0x2720 [ 2800.044875] ? deref_stack_reg+0x124/0x1a0 [ 2800.049109] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2800.053950] ? fs_reclaim_release+0xd0/0x110 [ 2800.058361] ? kmem_cache_alloc_node+0x38b/0x410 [ 2800.063115] copy_process.part.0+0x265/0x71c0 [ 2800.067607] ? __lock_acquire+0x5fc/0x3f20 [ 2800.071839] ? debug_object_activate+0x292/0x490 [ 2800.076586] ? trace_hardirqs_on+0x10/0x10 [ 2800.080809] ? static_obj+0x50/0x50 [ 2800.084432] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2800.089875] ? __cleanup_sighand+0x40/0x40 [ 2800.094107] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2800.099556] _do_fork+0x184/0xc80 [ 2800.103007] ? fork_idle+0x270/0x270 [ 2800.106718] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2800.111818] ? process_one_work+0x6c4/0x14a0 [ 2800.116221] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2800.121664] kernel_thread+0x2f/0x40 [ 2800.125375] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2800.130642] ? call_usermodehelper+0x80/0x80 [ 2800.135042] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2800.140488] process_one_work+0x793/0x14a0 [ 2800.144720] ? work_busy+0x320/0x320 [ 2800.148425] ? worker_thread+0x158/0xff0 [ 2800.152480] ? _raw_spin_unlock_irq+0x24/0x80 [ 2800.153347] syz-executor.3: page allocation failure: order:0 [ 2800.156961] worker_thread+0x5cc/0xff0 [ 2800.156976] ? rescuer_thread+0xc80/0xc80 [ 2800.170743] kthread+0x30d/0x420 [ 2800.174104] ? kthread_create_on_node+0xd0/0xd0 [ 2800.178771] ret_from_fork+0x24/0x30 [ 2800.205251] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2800.232536] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2800.237671] CPU: 0 PID: 30483 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2800.245543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2800.254890] Call Trace: [ 2800.257475] dump_stack+0x1b2/0x283 [ 2800.261103] warn_alloc.cold+0x96/0x1cc [ 2800.265072] ? zone_watermark_ok_safe+0x220/0x220 [ 2800.269913] ? usleep_range+0x130/0x130 [ 2800.274228] ? try_to_free_pages+0x23f/0x6e0 [ 2800.278638] ? _find_next_bit+0xdb/0x100 [ 2800.282694] ? run_timer_softirq+0x5a0/0x5a0 [ 2800.287104] __alloc_pages_nodemask+0x2127/0x2720 [ 2800.291946] ? lock_acquire+0x170/0x3f0 [ 2800.295919] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2800.300755] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2800.305252] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2800.310704] ? retint_kernel+0x2d/0x2d [ 2800.314591] alloc_pages_current+0x155/0x260 [ 2800.319001] ion_page_pool_alloc+0x118/0x1b0 [ 2800.323407] ion_system_heap_allocate+0x133/0x8c0 [ 2800.328246] ? ion_alloc+0x187/0x810 [ 2800.331954] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2800.337395] ? ion_system_contig_heap_create+0x130/0x130 [ 2800.342838] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2800.347848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2800.352690] ion_alloc+0x204/0x810 [ 2800.355754] Mem-Info: [ 2800.356226] ? ion_dma_buf_release+0x40/0x40 [ 2800.358622] active_anon:335116 inactive_anon:10076 isolated_anon:0 [ 2800.358622] active_file:16 inactive_file:14 isolated_file:0 [ 2800.358622] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2800.358622] slab_reclaimable:27273 slab_unreclaimable:173518 [ 2800.358622] mapped:52622 shmem:13079 pagetables:106079 bounce:0 [ 2800.358622] free:13841 free_pcp:30 free_cma:0 [ 2800.363005] ? __might_fault+0x177/0x1b0 [ 2800.363015] ion_ioctl+0xea/0x1ee [ 2800.363023] ? ion_alloc.cold+0x3b/0x3b [ 2800.363032] ? lock_acquire+0x170/0x3f0 [ 2800.363049] ? lock_downgrade+0x740/0x740 [ 2800.396565] Node 0 active_anon:1198580kB inactive_anon:40304kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210488kB dirty:0kB writeback:0kB shmem:52316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 927744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2800.400569] ? ion_alloc.cold+0x3b/0x3b [ 2800.404031] Node 1 active_anon:141884kB inactive_anon:0kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2800.407993] do_vfs_ioctl+0x75a/0xff0 [ 2800.411956] Node 0 [ 2800.416067] ? ioctl_preallocate+0x1a0/0x1a0 [ 2800.443933] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2800.447854] ? lock_downgrade+0x740/0x740 [ 2800.474135] lowmem_reserve[]: [ 2800.477904] ? __fget+0x225/0x360 [ 2800.480106] 0 [ 2800.484494] ? do_vfs_ioctl+0xff0/0xff0 [ 2800.484505] ? security_file_ioctl+0x83/0xb0 [ 2800.484515] SyS_ioctl+0x7f/0xb0 [ 2800.510710] 2717 [ 2800.514823] ? do_vfs_ioctl+0xff0/0xff0 [ 2800.514834] do_syscall_64+0x1d5/0x640 [ 2800.514850] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2800.517935] 2718 [ 2800.521370] RIP: 0033:0x45e219 [ 2800.521375] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2800.521384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2800.521389] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2800.521393] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2800.521398] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2800.521406] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2800.523186] 2718 2718 [ 2800.644577] Node 0 DMA32 free:17608kB min:36200kB low:45248kB high:54296kB active_anon:1198420kB inactive_anon:40304kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47648kB pagetables:236324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2800.750894] warn_alloc_show_mem: 2 callbacks suppressed [ 2800.750898] Mem-Info: [ 2800.758795] active_anon:335116 inactive_anon:10076 isolated_anon:0 [ 2800.758795] active_file:16 inactive_file:14 isolated_file:0 [ 2800.758795] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2800.758795] slab_reclaimable:27273 slab_unreclaimable:173518 [ 2800.758795] mapped:52622 shmem:13079 pagetables:106079 bounce:0 [ 2800.758795] free:13841 free_pcp:30 free_cma:0 [ 2800.816411] lowmem_reserve[]: 0 0 0 0 0 [ 2800.820432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2800.883767] lowmem_reserve[]: 0 0 0 0 0 [ 2800.887788] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:141884kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187660kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2800.953821] Node 0 active_anon:1198580kB inactive_anon:40304kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210488kB dirty:0kB writeback:0kB shmem:52316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 927744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2801.007827] lowmem_reserve[]: 0 0 0 0 0 [ 2801.015830] Node 0 DMA: 12*4kB (UM) 59*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2801.071267] Node 0 DMA32: 3303*4kB (UME) 491*8kB (UMEH) 4*16kB (H) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17748kB [ 2801.124682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2801.132558] Node 1 active_anon:141884kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2801.177620] Node 1 Normal: 1930*4kB (UM) 976*8kB (UM) 423*16kB (UM) 141*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26808kB [ 2801.246572] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2801.277062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2801.341286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2801.349890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2801.358875] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2801.379489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2801.397947] Node 0 DMA32 free:17748kB min:36200kB low:45248kB high:54296kB active_anon:1198420kB inactive_anon:40304kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47648kB pagetables:236324kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 2801.421225] 13110 total pagecache pages [ 2801.431111] 0 pages in swap cache [ 2801.481263] Swap cache stats: add 0, delete 0, find 0/0 [ 2801.486647] Free swap = 0kB [ 2801.489657] Total swap = 0kB [ 2801.563683] lowmem_reserve[]: 0 0 0 0 0 [ 2801.567707] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2801.571220] 2097051 pages RAM [ 2801.695664] 0 pages HighMem/MovableOnly [ 2801.699666] 363840 pages reserved [ 2801.717438] 0 pages cma reserved [ 2801.720822] Out of memory: Kill process 17285 (syz-executor.0) score 1005 or sacrifice child [ 2801.721210] lowmem_reserve[]: 0 0 0 0 0 [ 2801.765135] Killed process 17285 (syz-executor.0) total-vm:93348kB, anon-rss:3852kB, file-rss:34816kB, shmem-rss:0kB [ 2801.774477] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:141884kB inactive_anon:0kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187660kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2801.857684] oom_reaper: reaped process 17285 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2801.864727] lowmem_reserve[]: 0 0 0 0 0 [ 2801.901213] Node 0 DMA: 12*4kB (UM) 59*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2801.993678] Node 0 DMA32: 3329*4kB (UME) 506*8kB (UMEH) 5*16kB (EH) 12*32kB (UH) 3*64kB (H) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20324kB [ 2802.081202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2802.154220] kworker/u4:6 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2802.154242] Node 1 Normal: 1960*4kB (UM) 976*8kB (UM) 424*16kB (UM) 141*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26944kB [ 2802.258323] kworker/u4:6 cpuset=/ mems_allowed=0-1 [ 2802.301165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2802.310028] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2802.312202] CPU: 1 PID: 9374 Comm: kworker/u4:6 Not tainted 4.14.215-syzkaller #0 [ 2802.326232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2802.335597] Workqueue: events_unbound call_usermodehelper_exec_work [ 2802.341999] Call Trace: [ 2802.344589] dump_stack+0x1b2/0x283 [ 2802.348218] dump_header+0x178/0x82f [ 2802.351936] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2802.357044] ? ___ratelimit+0x2cd/0x522 [ 2802.361025] oom_kill_process.cold+0x10/0xb18 [ 2802.365524] ? lock_downgrade+0x740/0x740 [ 2802.369675] out_of_memory+0x2dc/0x1190 [ 2802.373658] ? oom_killer_disable+0x1c0/0x1c0 [ 2802.378154] ? mutex_trylock+0x152/0x1a0 [ 2802.382213] __alloc_pages_nodemask+0x23e1/0x2720 [ 2802.387056] ? deref_stack_reg+0x124/0x1a0 [ 2802.391288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2802.396126] ? fs_reclaim_release+0xd0/0x110 [ 2802.400537] ? kmem_cache_alloc_node+0x38b/0x410 [ 2802.405289] copy_process.part.0+0x265/0x71c0 [ 2802.409782] ? __lock_acquire+0x5fc/0x3f20 [ 2802.414018] ? debug_object_activate+0x292/0x490 [ 2802.418855] ? trace_hardirqs_on+0x10/0x10 [ 2802.423081] ? static_obj+0x50/0x50 [ 2802.426709] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2802.432158] ? __cleanup_sighand+0x40/0x40 [ 2802.433446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2802.436423] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2802.450665] _do_fork+0x184/0xc80 [ 2802.454117] ? fork_idle+0x270/0x270 [ 2802.457829] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2802.462927] ? process_one_work+0x6c4/0x14a0 [ 2802.467330] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2802.472774] kernel_thread+0x2f/0x40 [ 2802.476487] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2802.481756] ? call_usermodehelper+0x80/0x80 [ 2802.486163] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2802.491613] process_one_work+0x793/0x14a0 [ 2802.495850] ? work_busy+0x320/0x320 [ 2802.499551] ? worker_thread+0x158/0xff0 [ 2802.501147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2802.503607] ? _raw_spin_unlock_irq+0x24/0x80 [ 2802.516641] worker_thread+0x5cc/0xff0 [ 2802.520529] ? rescuer_thread+0xc80/0xc80 [ 2802.524671] kthread+0x30d/0x420 [ 2802.528035] ? kthread_create_on_node+0xd0/0xd0 [ 2802.532706] ret_from_fork+0x24/0x30 [ 2802.593600] 13110 total pagecache pages [ 2802.597604] 0 pages in swap cache [ 2802.601057] Swap cache stats: add 0, delete 0, find 0/0 [ 2802.653690] Free swap = 0kB [ 2802.656730] Total swap = 0kB [ 2802.659749] 2097051 pages RAM [ 2802.731132] 0 pages HighMem/MovableOnly [ 2802.735181] 363840 pages reserved [ 2802.738627] 0 pages cma reserved [ 2803.136513] Mem-Info: [ 2803.139475] active_anon:334575 inactive_anon:10076 isolated_anon:0 [ 2803.139475] active_file:181 inactive_file:164 isolated_file:0 [ 2803.139475] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2803.139475] slab_reclaimable:27220 slab_unreclaimable:173379 [ 2803.139475] mapped:52872 shmem:13079 pagetables:106051 bounce:0 [ 2803.139475] free:154528 free_pcp:666 free_cma:0 [ 2803.173772] Node 0 active_anon:1196416kB inactive_anon:40304kB active_file:684kB inactive_file:2216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212288kB dirty:0kB writeback:0kB shmem:52316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 925696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2803.202549] Node 1 active_anon:141884kB inactive_anon:0kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2803.230008] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2803.257181] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2803.262324] Node 0 DMA32 free:43704kB min:36200kB low:45248kB high:54296kB active_anon:1196256kB inactive_anon:40304kB active_file:876kB inactive_file:2424kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47616kB pagetables:236212kB bounce:0kB free_pcp:1372kB local_pcp:708kB free_cma:0kB [ 2803.331979] lowmem_reserve[]: 0 0 0 0 0 [ 2803.341280] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2803.397381] lowmem_reserve[]: 0 0 0 0 0 [ 2803.401809] Node 1 Normal free:162460kB min:53696kB low:67120kB high:80544kB active_anon:141884kB inactive_anon:0kB active_file:408kB inactive_file:4056kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187660kB bounce:0kB free_pcp:564kB local_pcp:492kB free_cma:0kB [ 2803.448073] lowmem_reserve[]: 0 0 0 0 0 [ 2803.452221] Node 0 DMA: 54*4kB (UM) 50*8kB (UME) 38*16kB (UME) 7*32kB (UME) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11112kB [ 2803.470032] Node 0 DMA32: 3787*4kB (UME) 781*8kB (MEH) 60*16kB (MEH) 25*32kB (MEH) 36*64kB (UMEH) 67*128kB (UM) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36084kB [ 2803.501080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2803.541095] Node 1 Normal: 905*4kB (UME) 1004*8kB (UME) 442*16kB (UME) 211*32kB (UM) 20*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26756kB [ 2803.611048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2803.660448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2803.720021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2803.757474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2803.806614] 13625 total pagecache pages [ 2803.810604] 0 pages in swap cache [ 2803.834272] Swap cache stats: add 0, delete 0, find 0/0 [ 2803.880514] Free swap = 0kB [ 2803.886868] Total swap = 0kB [ 2803.889894] 2097051 pages RAM [ 2803.927877] 0 pages HighMem/MovableOnly [ 2803.964327] 363840 pages reserved [ 2803.967792] 0 pages cma reserved [ 2803.991096] Out of memory: Kill process 17300 (syz-executor.0) score 1005 or sacrifice child [ 2804.020002] Killed process 17300 (syz-executor.0) total-vm:93348kB, anon-rss:3852kB, file-rss:34816kB, shmem-rss:0kB [ 2804.079212] oom_reaper: reaped process 17300 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2804.314409] oom_reaper: reaped process 30529 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2804.334928] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2804.387479] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2804.395191] CPU: 1 PID: 30483 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2804.403085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2804.412434] Call Trace: [ 2804.415025] dump_stack+0x1b2/0x283 [ 2804.418666] warn_alloc.cold+0x96/0x1cc [ 2804.422644] ? zone_watermark_ok_safe+0x220/0x220 [ 2804.427497] __alloc_pages_nodemask+0x2127/0x2720 [ 2804.432346] ? lock_acquire+0x170/0x3f0 [ 2804.436330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2804.441291] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2804.446743] ? __mutex_unlock_slowpath+0x75/0x770 [ 2804.451590] alloc_pages_current+0x155/0x260 [ 2804.456000] ion_page_pool_alloc+0x118/0x1b0 [ 2804.460407] ion_system_heap_allocate+0x133/0x8c0 [ 2804.465250] ? _raw_spin_unlock+0x29/0x40 [ 2804.469394] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2804.474320] ? ion_system_contig_heap_create+0x130/0x130 [ 2804.479769] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2804.484787] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2804.489633] ion_alloc+0x27a/0x810 [ 2804.493182] ? ion_dma_buf_release+0x40/0x40 [ 2804.497593] ? __might_fault+0x177/0x1b0 [ 2804.501657] ion_ioctl+0xea/0x1ee [ 2804.505111] ? ion_alloc.cold+0x3b/0x3b [ 2804.509084] ? lock_acquire+0x170/0x3f0 [ 2804.513059] ? lock_downgrade+0x740/0x740 [ 2804.517202] ? ion_alloc.cold+0x3b/0x3b [ 2804.521175] do_vfs_ioctl+0x75a/0xff0 [ 2804.524974] ? ioctl_preallocate+0x1a0/0x1a0 [ 2804.529378] ? lock_downgrade+0x740/0x740 [ 2804.533531] ? __fget+0x225/0x360 [ 2804.536980] ? do_vfs_ioctl+0xff0/0xff0 [ 2804.540968] ? security_file_ioctl+0x83/0xb0 [ 2804.545375] SyS_ioctl+0x7f/0xb0 [ 2804.548748] ? do_vfs_ioctl+0xff0/0xff0 [ 2804.552723] do_syscall_64+0x1d5/0x640 [ 2804.556617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2804.561806] RIP: 0033:0x45e219 [ 2804.564998] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2804.572702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2804.580142] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2804.587403] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2804.594669] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2804.601932] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2804.613426] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2804.628371] Mem-Info: [ 2804.630804] active_anon:334020 inactive_anon:10075 isolated_anon:0 [ 2804.630804] active_file:18 inactive_file:3 isolated_file:5 [ 2804.630804] unevictable:0 dirty:35 writeback:0 unstable:0 [ 2804.630804] slab_reclaimable:27182 slab_unreclaimable:174454 [ 2804.630804] mapped:52711 shmem:13078 pagetables:106051 bounce:0 [ 2804.630804] free:13848 free_pcp:0 free_cma:0 [ 2804.668576] Node 0 active_anon:1194180kB inactive_anon:40300kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:210756kB dirty:16kB writeback:0kB shmem:52312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 925696kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2804.680950] syz-fuzzer cpuset= [ 2804.705801] Node 1 active_anon:141900kB inactive_anon:0kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:124kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2804.759478] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2804.760932] / mems_allowed=0-1 [ 2804.894546] CPU: 0 PID: 28453 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2804.902079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2804.911423] Call Trace: [ 2804.914007] dump_stack+0x1b2/0x283 [ 2804.917640] dump_header+0x178/0x82f [ 2804.921357] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2804.926455] ? ___ratelimit+0x2cd/0x522 [ 2804.930425] oom_kill_process.cold+0x10/0xb18 [ 2804.934928] out_of_memory+0xe3e/0x1190 [ 2804.938899] ? oom_killer_disable+0x1c0/0x1c0 [ 2804.943387] ? mutex_trylock+0x152/0x1a0 [ 2804.947444] __alloc_pages_nodemask+0x23e1/0x2720 [ 2804.948096] lowmem_reserve[]: [ 2804.952284] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2804.952306] alloc_pages_current+0x155/0x260 [ 2804.964601] filemap_fault+0xea3/0x1980 [ 2804.968582] ext4_filemap_fault+0x84/0xb0 [ 2804.972728] __do_fault+0xfa/0x380 [ 2804.972848] 0 2717 [ 2804.976253] __handle_mm_fault+0x2497/0x4620 [ 2804.976263] ? vm_insert_page+0x7c0/0x7c0 [ 2804.978475] 2718 [ 2804.982861] ? setup_sigcontext+0x820/0x820 [ 2804.982876] handle_mm_fault+0x391/0x860 [ 2804.982888] __do_page_fault+0x549/0xad0 [ 2804.982900] ? spurious_fault+0x640/0x640 [ 2804.987014] 2718 [ 2804.989057] ? do_page_fault+0x60/0x4f2 [ 2804.993364] 2718 [ 2804.997388] ? page_fault+0x2f/0x50 [ 2805.005541] page_fault+0x45/0x50 [ 2805.007574] Node 0 [ 2805.011521] RIP: 0000:0xb3567c [ 2805.011526] RSP: 043a:000000c001727878 EFLAGS: 00000000 [ 2805.060489] DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:1193984kB inactive_anon:40300kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47584kB pagetables:236100kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2805.161431] Mem-Info: [ 2805.163876] active_anon:334007 inactive_anon:10075 isolated_anon:0 [ 2805.163876] active_file:22 inactive_file:6 isolated_file:0 [ 2805.163876] unevictable:0 dirty:26 writeback:0 unstable:0 [ 2805.163876] slab_reclaimable:27174 slab_unreclaimable:174452 [ 2805.163876] mapped:52650 shmem:13078 pagetables:106023 bounce:0 [ 2805.163876] free:13935 free_pcp:60 free_cma:0 [ 2805.164602] lowmem_reserve[]: 0 0 0 0 0 [ 2805.224949] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2805.237881] Node 0 active_anon:1194144kB inactive_anon:40300kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:0kB writeback:0kB shmem:52312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 923648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2805.309399] lowmem_reserve[]: 0 0 0 0 0 [ 2805.362818] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:141884kB inactive_anon:0kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2805.439788] Node 1 active_anon:141884kB inactive_anon:0kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:104kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2805.466864] lowmem_reserve[]: 0 0 0 0 0 [ 2805.500870] Node 0 DMA: 40*4kB (UM) 46*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2805.582821] Node 0 DMA32: 3343*4kB (UME) 485*8kB (UMEH) 4*16kB (H) 11*32kB (UH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17860kB [ 2805.618740] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:160kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:320kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2805.632535] Node 0 [ 2805.660427] lowmem_reserve[]: [ 2805.680996] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2805.690863] 0 2717 2718 2718 2718 [ 2805.697750] Node 0 DMA32 free:17952kB min:36200kB low:45248kB high:54296kB active_anon:1193984kB inactive_anon:40300kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:47584kB pagetables:236100kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 2805.743203] Node 1 Normal: 1871*4kB (ME) 970*8kB (UME) 416*16kB (ME) 154*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 2805.799927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2805.880879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2805.889485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2805.948353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2805.965708] lowmem_reserve[]: 0 0 0 0 0 [ 2805.969845] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2805.993564] 13133 total pagecache pages [ 2805.999329] 0 pages in swap cache [ 2806.072818] Swap cache stats: add 0, delete 0, find 0/0 [ 2806.078203] Free swap = 0kB [ 2806.120824] lowmem_reserve[]: 0 0 0 0 0 [ 2806.123820] Total swap = 0kB [ 2806.124839] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:141884kB inactive_anon:0kB active_file:36kB inactive_file:76kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:88160kB pagetables:187660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2806.127855] 2097051 pages RAM [ 2806.127861] 0 pages HighMem/MovableOnly [ 2806.328419] lowmem_reserve[]: 0 0 0 0 0 [ 2806.335510] 363840 pages reserved [ 2806.338986] 0 pages cma reserved [ 2806.356720] Node 0 DMA: 40*4kB (UM) 46*8kB (UME) 38*16kB (UME) 7*32kB (UME) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2806.446579] Node 0 DMA32: 3313*4kB (UME) 491*8kB (UMEH) 4*16kB (H) 12*32kB (UH) 3*64kB (H) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 2806.524579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2806.583245] Node 1 Normal: 1871*4kB (ME) 970*8kB (UME) 416*16kB (ME) 154*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 2806.683303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2806.730770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2806.739367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2806.830964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2806.839563] 13133 total pagecache pages [ 2806.886681] 0 pages in swap cache [ 2806.890157] Swap cache stats: add 0, delete 0, find 0/0 [ 2806.959524] Free swap = 0kB [ 2806.969265] Total swap = 0kB [ 2806.994687] 2097051 pages RAM [ 2806.997804] 0 pages HighMem/MovableOnly [ 2807.028325] 363840 pages reserved [ 2807.047201] 0 pages cma reserved [ 2807.059713] Out of memory (oom_kill_allocating_task): Kill process 28453 (syz-fuzzer) score 0 or sacrifice child [ 2807.144705] Killed process 8002 (syz-executor.2) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2807.214644] oom_reaper: reaped process 8002 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2807.303234] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2811.614264] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2811.742699] CPU: 0 PID: 7983 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2811.750178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2811.759532] Call Trace: [ 2811.762122] dump_stack+0x1b2/0x283 [ 2811.765751] dump_header+0x178/0x82f [ 2811.769465] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2811.774567] ? ___ratelimit+0x2cd/0x522 [ 2811.778544] oom_kill_process.cold+0x10/0xb18 [ 2811.783040] out_of_memory+0xe3e/0x1190 [ 2811.787010] ? oom_killer_disable+0x1c0/0x1c0 [ 2811.791501] ? mutex_trylock+0x152/0x1a0 [ 2811.795563] __alloc_pages_nodemask+0x23e1/0x2720 [ 2811.800439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2811.805294] alloc_pages_current+0x155/0x260 [ 2811.809696] filemap_fault+0xea3/0x1980 [ 2811.813672] ext4_filemap_fault+0x84/0xb0 [ 2811.817835] __do_fault+0xfa/0x380 [ 2811.821368] __handle_mm_fault+0x2497/0x4620 [ 2811.825767] ? vm_insert_page+0x7c0/0x7c0 [ 2811.829911] ? __fget+0x225/0x360 [ 2811.833366] handle_mm_fault+0x391/0x860 [ 2811.837449] __do_page_fault+0x549/0xad0 [ 2811.841518] ? spurious_fault+0x640/0x640 [ 2811.845666] ? do_page_fault+0x60/0x4f2 [ 2811.849636] ? page_fault+0x2f/0x50 [ 2811.853259] page_fault+0x45/0x50 [ 2811.856704] RIP: 0000:0xb358f8 [ 2811.859882] RSP: 0083:000000c00003dfa0 EFLAGS: 00438920 [ 2812.377469] Mem-Info: [ 2812.387557] active_anon:268772 inactive_anon:10075 isolated_anon:0 [ 2812.387557] active_file:916 inactive_file:2293 isolated_file:0 [ 2812.387557] unevictable:0 dirty:203 writeback:0 unstable:0 [ 2812.387557] slab_reclaimable:22065 slab_unreclaimable:168006 [ 2812.387557] mapped:45961 shmem:13078 pagetables:76430 bounce:0 [ 2812.387557] free:92156 free_pcp:688 free_cma:0 [ 2812.484047] Node 0 active_anon:974520kB inactive_anon:40300kB active_file:4656kB inactive_file:8868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:184144kB dirty:812kB writeback:0kB shmem:52312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 757760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2812.557348] Node 1 active_anon:100268kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2812.623795] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:128kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2812.692083] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2812.697294] Node 0 DMA32 free:36320kB min:36200kB low:45248kB high:54296kB active_anon:974476kB inactive_anon:40300kB active_file:5672kB inactive_file:6284kB unevictable:0kB writepending:248kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:40576kB pagetables:175188kB bounce:0kB free_pcp:1424kB local_pcp:692kB free_cma:0kB [ 2812.874055] lowmem_reserve[]: 0 0 0 0 0 [ 2812.878080] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2813.024118] lowmem_reserve[]: 0 0 0 0 0 [ 2813.028141] Node 1 Normal free:26696kB min:53696kB low:67120kB high:80544kB active_anon:100196kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:59424kB pagetables:130300kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2813.180189] lowmem_reserve[]: 0 0 0 0 0 [ 2813.200188] Node 0 DMA: 5*4kB (M) 7*8kB (ME) 32*16kB (UME) 14*32kB (UME) 5*64kB (UME) 3*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10956kB [ 2813.250852] Node 0 DMA32: 3653*4kB (UME) 413*8kB (UMEH) 5*16kB (H) 11*32kB (H) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18540kB [ 2813.295051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2813.317966] Node 1 Normal: 2665*4kB (M) 1006*8kB (M) 339*16kB (UM) 84*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26820kB [ 2813.350178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2813.366716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2813.375364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2813.388717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2813.397935] 13152 total pagecache pages [ 2813.408035] 0 pages in swap cache [ 2813.440186] Swap cache stats: add 0, delete 0, find 0/0 [ 2813.445625] Free swap = 0kB [ 2813.448633] Total swap = 0kB [ 2813.459177] 2097051 pages RAM [ 2813.462339] 0 pages HighMem/MovableOnly [ 2813.466334] 363840 pages reserved [ 2813.469773] 0 pages cma reserved [ 2813.473161] Out of memory (oom_kill_allocating_task): Kill process 7983 (syz-fuzzer) score 0 or sacrifice child [ 2813.483490] Killed process 14665 (syz-executor.5) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2813.504330] oom_reaper: reaped process 14665 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2813.642801] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2813.672475] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2813.677272] CPU: 1 PID: 22436 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2813.684975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2813.694324] Call Trace: [ 2813.696910] dump_stack+0x1b2/0x283 [ 2813.700540] dump_header+0x178/0x82f [ 2813.704247] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2813.709343] ? ___ratelimit+0x2cd/0x522 [ 2813.713316] oom_kill_process.cold+0x10/0xb18 [ 2813.717814] out_of_memory+0xe3e/0x1190 [ 2813.721789] ? oom_killer_disable+0x1c0/0x1c0 [ 2813.726277] ? mutex_trylock+0x152/0x1a0 [ 2813.730334] __alloc_pages_nodemask+0x23e1/0x2720 [ 2813.735182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2813.740034] alloc_pages_current+0x155/0x260 [ 2813.744436] filemap_fault+0xea3/0x1980 [ 2813.748410] ext4_filemap_fault+0x84/0xb0 [ 2813.752554] __do_fault+0xfa/0x380 [ 2813.756085] __handle_mm_fault+0x2497/0x4620 [ 2813.760487] ? vm_insert_page+0x7c0/0x7c0 [ 2813.764639] handle_mm_fault+0x391/0x860 [ 2813.768694] __do_page_fault+0x549/0xad0 [ 2813.772753] ? spurious_fault+0x640/0x640 [ 2813.776894] ? do_page_fault+0x60/0x4f2 [ 2813.780860] ? page_fault+0x2f/0x50 [ 2813.784480] page_fault+0x45/0x50 [ 2813.787930] RIP: 0001:0xc00006f0e0 [ 2813.791456] RSP: 0208:000000c0000a5e40 EFLAGS: 00000000 [ 2813.835153] Mem-Info: [ 2813.867247] active_anon:268089 inactive_anon:10074 isolated_anon:0 [ 2813.867247] active_file:15 inactive_file:17 isolated_file:0 [ 2813.867247] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2813.867247] slab_reclaimable:21678 slab_unreclaimable:167746 [ 2813.867247] mapped:35270 shmem:13075 pagetables:76232 bounce:0 [ 2813.867247] free:13956 free_pcp:0 free_cma:0 [ 2813.921969] Node 0 active_anon:972160kB inactive_anon:40296kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141080kB dirty:0kB writeback:0kB shmem:52300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 757760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2813.950615] Node 1 active_anon:100196kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2813.977115] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2814.020101] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2814.025155] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:972116kB inactive_anon:40296kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:40544kB pagetables:174548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2814.100104] lowmem_reserve[]: 0 0 0 0 0 [ 2814.104119] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2814.174560] lowmem_reserve[]: 0 0 0 0 0 [ 2814.178584] Node 1 Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:100196kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:59424kB pagetables:130300kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2814.275555] lowmem_reserve[]: 0 0 0 0 0 [ 2814.279580] Node 0 DMA: 5*4kB (M) 7*8kB (ME) 32*16kB (UME) 14*32kB (UME) 5*64kB (UME) 3*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10956kB [ 2814.337369] Node 0 DMA32: 3466*4kB (UME) 380*8kB (UMEH) 9*16kB (UMH) 13*32kB (UH) 5*64kB (UH) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18168kB [ 2814.433969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2814.520065] Node 1 Normal: 2665*4kB (M) 1006*8kB (M) 339*16kB (UM) 84*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26820kB [ 2814.570089] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2814.628008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2814.639788] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2814.650082] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2814.662998] CPU: 0 PID: 30483 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2814.670888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2814.680524] Call Trace: [ 2814.683117] dump_stack+0x1b2/0x283 [ 2814.686747] warn_alloc.cold+0x96/0x1cc [ 2814.689035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2814.690739] ? zone_watermark_ok_safe+0x220/0x220 [ 2814.690750] ? usleep_range+0x130/0x130 [ 2814.690759] ? try_to_free_pages+0x23f/0x6e0 [ 2814.690771] ? _find_next_bit+0xdb/0x100 [ 2814.699323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2814.704141] ? run_timer_softirq+0x5a0/0x5a0 [ 2814.704156] __alloc_pages_nodemask+0x2127/0x2720 [ 2814.704177] ? lock_acquire+0x170/0x3f0 [ 2814.710876] syz-executor.5 cpuset= [ 2814.712508] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2814.716539] / [ 2814.725354] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2814.751335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2814.753022] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2814.761598] mems_allowed=0-1 [ 2814.767004] alloc_pages_current+0x155/0x260 [ 2814.770096] 13107 total pagecache pages [ 2814.774464] ion_page_pool_alloc+0x118/0x1b0 [ 2814.778406] 0 pages in swap cache [ 2814.782786] ion_system_heap_allocate+0x133/0x8c0 [ 2814.782798] ? _raw_spin_unlock+0x29/0x40 [ 2814.782807] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2814.800065] ? ion_system_contig_heap_create+0x130/0x130 [ 2814.805492] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2814.810009] Swap cache stats: add 0, delete 0, find 0/0 [ 2814.810491] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2814.815819] Free swap = 0kB [ 2814.820656] ion_alloc+0x27a/0x810 [ 2814.820671] ? ion_dma_buf_release+0x40/0x40 [ 2814.820686] ? __might_fault+0x177/0x1b0 [ 2814.830007] Total swap = 0kB [ 2814.831587] ion_ioctl+0xea/0x1ee [ 2814.835617] 2097051 pages RAM [ 2814.838622] ? ion_alloc.cold+0x3b/0x3b [ 2814.849082] ? lock_acquire+0x170/0x3f0 [ 2814.853035] ? lock_downgrade+0x740/0x740 [ 2814.857160] ? ion_alloc.cold+0x3b/0x3b [ 2814.860003] 0 pages HighMem/MovableOnly [ 2814.861115] do_vfs_ioctl+0x75a/0xff0 [ 2814.865056] 363840 pages reserved [ 2814.868838] ? ioctl_preallocate+0x1a0/0x1a0 [ 2814.876642] ? lock_downgrade+0x740/0x740 [ 2814.880002] 0 pages cma reserved [ 2814.880776] ? __fget+0x225/0x360 [ 2814.884110] Out of memory (oom_kill_allocating_task): Kill process 22436 (syz-fuzzer) score 0 or sacrifice child [ 2814.887551] ? do_vfs_ioctl+0xff0/0xff0 [ 2814.901783] ? security_file_ioctl+0x83/0xb0 [ 2814.906952] SyS_ioctl+0x7f/0xb0 [ 2814.910308] ? do_vfs_ioctl+0xff0/0xff0 [ 2814.914261] do_syscall_64+0x1d5/0x640 [ 2814.918131] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2814.920057] Killed process 4582 (syz-executor.4) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2814.923301] RIP: 0033:0x45e219 [ 2814.936665] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2814.944352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2814.951606] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2814.958870] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2814.966133] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2814.970998] oom_reaper: reaped process 4582 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2814.973415] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2815.030581] Mem-Info: [ 2815.033047] active_anon:268089 inactive_anon:10074 isolated_anon:0 [ 2815.033047] active_file:15 inactive_file:17 isolated_file:0 [ 2815.033047] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2815.033047] slab_reclaimable:21628 slab_unreclaimable:167574 [ 2815.033047] mapped:35270 shmem:13075 pagetables:76232 bounce:0 [ 2815.033047] free:14099 free_pcp:194 free_cma:0 [ 2815.882679] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2815.885307] Node 0 active_anon:955604kB inactive_anon:40296kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114528kB dirty:0kB writeback:0kB shmem:52300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2815.895382] CPU: 1 PID: 30529 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2815.930598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2815.939945] Call Trace: [ 2815.942530] dump_stack+0x1b2/0x283 [ 2815.946159] warn_alloc.cold+0x96/0x1cc [ 2815.950132] ? zone_watermark_ok_safe+0x220/0x220 [ 2815.954973] ? usleep_range+0x130/0x130 [ 2815.958947] ? try_to_free_pages+0x23f/0x6e0 [ 2815.963353] ? _find_next_bit+0xdb/0x100 [ 2815.967413] ? run_timer_softirq+0x5a0/0x5a0 [ 2815.971823] __alloc_pages_nodemask+0x2127/0x2720 [ 2815.976667] ? lock_acquire+0x170/0x3f0 [ 2815.980644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2815.985481] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2815.989977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2815.995435] alloc_pages_current+0x155/0x260 [ 2815.999849] ion_page_pool_alloc+0x118/0x1b0 [ 2816.004253] ion_system_heap_allocate+0x133/0x8c0 [ 2816.009092] ? ion_alloc+0x187/0x810 [ 2816.012802] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2816.018249] ? ion_system_contig_heap_create+0x130/0x130 [ 2816.023694] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2816.028711] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2816.033551] ion_alloc+0x204/0x810 [ 2816.037096] ? ion_dma_buf_release+0x40/0x40 [ 2816.041506] ? __might_fault+0x177/0x1b0 [ 2816.045567] ion_ioctl+0xea/0x1ee [ 2816.049018] ? ion_alloc.cold+0x3b/0x3b [ 2816.052999] ? lock_acquire+0x170/0x3f0 [ 2816.056969] ? lock_downgrade+0x740/0x740 [ 2816.061110] ? ion_alloc.cold+0x3b/0x3b [ 2816.065085] do_vfs_ioctl+0x75a/0xff0 [ 2816.068885] ? ioctl_preallocate+0x1a0/0x1a0 [ 2816.073287] ? lock_downgrade+0x740/0x740 [ 2816.077433] ? __fget+0x225/0x360 [ 2816.080883] ? do_vfs_ioctl+0xff0/0xff0 [ 2816.084855] ? security_file_ioctl+0x83/0xb0 [ 2816.089255] SyS_ioctl+0x7f/0xb0 [ 2816.092613] ? do_vfs_ioctl+0xff0/0xff0 [ 2816.096587] do_syscall_64+0x1d5/0x640 [ 2816.100476] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2816.105658] RIP: 0033:0x45e219 [ 2816.106396] Node 1 active_anon:96976kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2816.108834] RSP: 002b:00007f3dd5724c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2816.108843] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2816.108848] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2816.108852] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 2816.108857] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 2816.108861] R13: 00007ffdad9a4ccf R14: 00007f3dd57259c0 R15: 000000000119c184 [ 2816.149008] Mem-Info: [ 2816.182859] systemd-journal cpuset=/ mems_allowed=0-1 [ 2816.185431] active_anon:263095 inactive_anon:10074 isolated_anon:0 [ 2816.185431] active_file:260 inactive_file:422 isolated_file:0 [ 2816.185431] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2816.185431] slab_reclaimable:21626 slab_unreclaimable:166397 [ 2816.185431] mapped:26957 shmem:13075 pagetables:71409 bounce:0 [ 2816.185431] free:20922 free_pcp:452 free_cma:0 [ 2816.242872] CPU: 0 PID: 30186 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2816.250864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2816.252455] Node 0 active_anon:955004kB inactive_anon:40296kB active_file:1636kB inactive_file:2580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108328kB dirty:100kB writeback:0kB shmem:52300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2816.260220] Call Trace: [ 2816.260235] dump_stack+0x1b2/0x283 [ 2816.260247] dump_header+0x178/0x82f [ 2816.260257] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2816.260268] ? ___ratelimit+0x2cd/0x522 [ 2816.288565] Node 1 active_anon:96876kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2816.291103] oom_kill_process.cold+0x10/0xb18 [ 2816.291116] out_of_memory+0xe3e/0x1190 [ 2816.291128] ? oom_killer_disable+0x1c0/0x1c0 [ 2816.291139] ? mutex_trylock+0x152/0x1a0 [ 2816.294737] Node 0 [ 2816.298428] __alloc_pages_nodemask+0x23e1/0x2720 [ 2816.303564] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2816.307526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2816.333525] lowmem_reserve[]: [ 2816.337997] ? cache_grow_begin+0x41/0x630 [ 2816.341950] 0 [ 2816.346407] cache_grow_begin+0x91/0x630 [ 2816.350452] 2717 [ 2816.352655] ? cache_grow_begin+0x91/0x630 [ 2816.357469] 2718 [ 2816.383297] fallback_alloc+0x207/0x2c0 [ 2816.383310] kmem_cache_alloc+0x1e5/0x3c0 [ 2816.383320] getname_flags+0xc8/0x550 [ 2816.388135] 2718 [ 2816.391335] SyS_mkdirat+0x83/0x270 [ 2816.391344] ? SyS_mknod+0x30/0x30 [ 2816.391352] ? do_syscall_64+0x4c/0x640 [ 2816.391358] ? SyS_mkdirat+0x270/0x270 [ 2816.391369] do_syscall_64+0x1d5/0x640 [ 2816.395589] 2718 [ 2816.397375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2816.403463] RIP: 0033:0x7f248c439687 [ 2816.407688] Node 0 [ 2816.409752] RSP: 002b:00007ffc34c24318 EFLAGS: 00000293 [ 2816.413745] DMA32 free:40948kB min:36200kB low:45248kB high:54296kB active_anon:955560kB inactive_anon:40296kB active_file:960kB inactive_file:2500kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:40000kB pagetables:158204kB bounce:0kB free_pcp:600kB local_pcp:232kB free_cma:0kB [ 2816.417821] ORIG_RAX: 0000000000000053 [ 2816.417829] RAX: ffffffffffffffda RBX: 00007ffc34c27230 RCX: 00007f248c439687 [ 2816.421635] lowmem_reserve[]: [ 2816.423657] RDX: 00007f248ceaaa00 RSI: 00000000000001ed RDI: 000055f30feecd60 [ 2816.427267] 0 [ 2816.430782] RBP: 00007ffc34c24350 R08: 0000000000000000 R09: 0000000000000000 [ 2816.430786] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2816.430790] R13: 0000000000000000 R14: 00007ffc34c27230 R15: 00007ffc34c24840 [ 2816.480471] Node 0 [ 2816.497548] 0 [ 2816.511002] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:128kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2816.520557] 0 [ 2816.528954] lowmem_reserve[]: [ 2816.531199] 0 [ 2816.549529] 0 [ 2816.567685] 0 [ 2816.575759] 2717 2718 2718 2718 [ 2816.582044] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2816.594859] Node 0 [ 2816.617361] lowmem_reserve[]: 0 0 0 0 0 [ 2816.682688] Node 1 Normal free:37864kB min:53696kB low:67120kB high:80544kB active_anon:96376kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54432kB pagetables:127204kB bounce:0kB free_pcp:1404kB local_pcp:664kB free_cma:0kB [ 2816.702364] DMA32 free:77176kB min:36200kB low:45248kB high:54296kB active_anon:951780kB inactive_anon:40296kB active_file:1276kB inactive_file:3044kB unevictable:0kB writepending:500kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39680kB pagetables:157668kB bounce:0kB free_pcp:408kB local_pcp:664kB free_cma:0kB [ 2816.719874] lowmem_reserve[]: 0 0 0 0 0 [ 2816.746112] Node 0 DMA: 6*4kB (UM) 8*8kB (UME) 32*16kB (UME) 15*32kB (UME) 5*64kB (UME) 3*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11000kB [ 2816.746883] lowmem_reserve[]: [ 2816.772287] Mem-Info: [ 2816.772508] Node 0 [ 2816.775910] active_anon:262022 inactive_anon:10074 isolated_anon:0 [ 2816.775910] active_file:317 inactive_file:819 isolated_file:0 [ 2816.775910] unevictable:0 dirty:96 writeback:7 unstable:0 [ 2816.775910] slab_reclaimable:21614 slab_unreclaimable:163605 [ 2816.775910] mapped:27094 shmem:13075 pagetables:71212 bounce:0 [ 2816.775910] free:32891 free_pcp:707 free_cma:0 [ 2816.777804] DMA32: 8196*4kB (UME) 3641*8kB (UMEH) 399*16kB (UMEH) 255*32kB (UMH) 15*64kB (UH) 6*128kB (UM) 1*256kB (U) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) [ 2816.781788] Node 0 active_anon:951776kB inactive_anon:40296kB active_file:1264kB inactive_file:3368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108476kB dirty:388kB writeback:24kB shmem:52300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2816.817171] 0*4096kB [ 2816.829800] 0 0 0 0 0 [ 2816.873105] = 82024kB [ 2816.875520] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2816.877847] Node 0 [ 2816.886972] Node 1 Normal: 3931*4kB (UM) 1107*8kB (UM) 361*16kB (UM) 255*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38644kB [ 2816.892772] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2816.904452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2816.937807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2816.938765] Node 1 active_anon:96308kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2816.947701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2816.983728] lowmem_reserve[]: 0 0 0 0 0 [ 2816.985078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2816.989608] Node 1 [ 2816.996824] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2817.001274] 14607 total pagecache pages [ 2817.025965] Normal free:38644kB min:53696kB low:67120kB high:80544kB active_anon:96308kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127184kB bounce:0kB free_pcp:1316kB local_pcp:628kB free_cma:0kB [ 2817.033375] 0 pages in swap cache [ 2817.058193] lowmem_reserve[]: 0 0 0 0 0 [ 2817.065566] Node 0 DMA: 6*4kB (UM) 9*8kB (UME) 32*16kB (UME) 15*32kB (UME) 5*64kB (UME) 3*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11008kB [ 2817.078793] Swap cache stats: add 0, delete 0, find 0/0 [ 2817.082437] Node 0 DMA32: 11401*4kB (UME) 4137*8kB (UMEH) 444*16kB (UMEH) 260*32kB (UMH) 17*64kB (UH) 7*128kB (UM) 1*256kB (U) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 99948kB [ 2817.098509] Free swap = 0kB [ 2817.104882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2817.118960] Node 1 Normal: 3931*4kB (UM) 1107*8kB (UM) 361*16kB (UM) 255*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38644kB [ 2817.127162] Total swap = 0kB [ 2817.138666] 2097051 pages RAM [ 2817.147592] 0 pages HighMem/MovableOnly [ 2817.151888] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2817.156927] Node 0 DMA32 free:105996kB min:36200kB low:45248kB high:54296kB active_anon:951876kB inactive_anon:40296kB active_file:3156kB inactive_file:4376kB unevictable:0kB writepending:452kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39744kB pagetables:157588kB bounce:0kB free_pcp:736kB local_pcp:336kB free_cma:0kB [ 2817.162405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2817.191321] 363840 pages reserved [ 2817.196941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2817.199461] 0 pages cma reserved [ 2817.209388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2817.221394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2817.231307] 15162 total pagecache pages [ 2817.235369] lowmem_reserve[]: 0 0 0 0 0 [ 2817.235697] 0 pages in swap cache [ 2817.239352] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2817.239369] lowmem_reserve[]: 0 0 0 0 0 [ 2817.239387] Node 1 Normal free:38644kB min:53696kB low:67120kB high:80544kB active_anon:96308kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54208kB pagetables:127184kB bounce:0kB free_pcp:1316kB local_pcp:688kB free_cma:0kB [ 2817.239403] lowmem_reserve[]: 0 0 0 [ 2817.243561] Swap cache stats: add 0, delete 0, find 0/0 [ 2817.311408] Free swap = 0kB [ 2817.313152] 0 [ 2817.314423] Total swap = 0kB [ 2817.314428] 0 [ 2817.316207] 2097051 pages RAM [ 2817.319206] Node 0 [ 2817.321646] 0 pages HighMem/MovableOnly [ 2817.325456] DMA: [ 2817.326715] 363840 pages reserved [ 2817.336323] 0 pages cma reserved [ 2817.350416] 6*4kB (UM) 9*8kB (UME) 32*16kB (UME) 15*32kB (UME) 5*64kB (UME) 3*128kB (UE) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11008kB [ 2817.365234] Node 0 DMA32: [ 2817.375160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2817.393705] 12291*4kB (UME) 4375*8kB (UMEH) 448*16kB (UMEH) 261*32kB (UMH) 17*64kB (UH) 7*128kB (UM) 1*256kB (U) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 105508kB [ 2817.409916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2817.417997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2817.424932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2817.428602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2817.435988] Node 1 Normal: 3931*4kB (UM) 1107*8kB (UM) 361*16kB (UM) 256*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38676kB [ 2817.459214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2817.469437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2817.469731] device bridge_slave_1 left promiscuous mode [ 2817.478241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2817.478247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2817.478250] 15236 total pagecache pages [ 2817.478259] 0 pages in swap cache [ 2817.478264] Swap cache stats: add 0, delete 0, find 0/0 [ 2817.478267] Free swap = 0kB [ 2817.478270] Total swap = 0kB [ 2817.478276] 2097051 pages RAM [ 2817.478279] 0 pages HighMem/MovableOnly [ 2817.478282] 363840 pages reserved [ 2817.478285] 0 pages cma reserved [ 2817.478291] Out of memory (oom_kill_allocating_task): Kill process 30186 (systemd-journal) score 0 or sacrifice child [ 2817.478318] Killed process 30186 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1704kB [ 2817.515122] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2817.518070] bridge0: port 2(bridge_slave_1) entered disabled state [ 2817.521746] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2817.530907] device bridge_slave_0 left promiscuous mode [ 2817.543277] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2817.556731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2817.568612] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2817.605040] device veth1_macvtap left promiscuous mode [ 2817.612312] device veth0_macvtap left promiscuous mode [ 2817.613337] systemd[1]: Stopped Journal Service. [ 2817.622422] device veth1_vlan left promiscuous mode [ 2817.622472] device veth0_vlan left promiscuous mode [ 2817.648758] systemd[1]: Starting Journal Service... 14:12:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) [ 2817.783791] device hsr_slave_1 left promiscuous mode [ 2817.799110] device hsr_slave_0 left promiscuous mode [ 2817.822530] team0 (unregistering): Port device team_slave_1 removed [ 2817.834970] team0 (unregistering): Port device team_slave_0 removed [ 2817.843742] systemd-journald[30556]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2817.858647] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2817.866238] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2817.925476] bond0 (unregistering): Released all slaves [ 2818.258807] systemd[1]: Started Journal Service. [ 2818.654948] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2818.682343] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2818.687483] CPU: 1 PID: 30529 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2818.695355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2818.704695] Call Trace: [ 2818.707277] dump_stack+0x1b2/0x283 [ 2818.710897] warn_alloc.cold+0x96/0x1cc [ 2818.714860] ? zone_watermark_ok_safe+0x220/0x220 [ 2818.719704] __alloc_pages_nodemask+0x2127/0x2720 [ 2818.724543] ? lock_acquire+0x170/0x3f0 [ 2818.728509] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2818.733373] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2818.738816] ? __mutex_unlock_slowpath+0x75/0x770 [ 2818.743655] alloc_pages_current+0x155/0x260 [ 2818.748053] ion_page_pool_alloc+0x118/0x1b0 [ 2818.752454] ion_system_heap_allocate+0x133/0x8c0 [ 2818.757290] ? _raw_spin_unlock+0x29/0x40 [ 2818.761428] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2818.766347] ? ion_system_contig_heap_create+0x130/0x130 [ 2818.771784] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2818.776790] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2818.781624] ion_alloc+0x27a/0x810 [ 2818.785160] ? ion_dma_buf_release+0x40/0x40 [ 2818.789562] ? __might_fault+0x177/0x1b0 [ 2818.793615] ion_ioctl+0xea/0x1ee [ 2818.797056] ? ion_alloc.cold+0x3b/0x3b [ 2818.801025] ? lock_acquire+0x170/0x3f0 [ 2818.804986] ? lock_downgrade+0x740/0x740 [ 2818.809121] ? ion_alloc.cold+0x3b/0x3b [ 2818.813085] do_vfs_ioctl+0x75a/0xff0 [ 2818.816876] ? ioctl_preallocate+0x1a0/0x1a0 [ 2818.821271] ? lock_downgrade+0x740/0x740 [ 2818.825412] ? __fget+0x225/0x360 [ 2818.828864] ? do_vfs_ioctl+0xff0/0xff0 [ 2818.832834] ? security_file_ioctl+0x83/0xb0 [ 2818.837233] SyS_ioctl+0x7f/0xb0 [ 2818.840587] ? do_vfs_ioctl+0xff0/0xff0 [ 2818.844554] do_syscall_64+0x1d5/0x640 [ 2818.848435] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2818.853619] RIP: 0033:0x45e219 [ 2818.856812] RSP: 002b:00007f3dd5724c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2818.864520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2818.871789] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2818.879059] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 2818.886337] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 2818.893589] R13: 00007ffdad9a4ccf R14: 00007f3dd57259c0 R15: 000000000119c184 [ 2818.914010] Mem-Info: [ 2818.916435] active_anon:262032 inactive_anon:12102 isolated_anon:0 [ 2818.916435] active_file:1833 inactive_file:2482 isolated_file:0 [ 2818.916435] unevictable:0 dirty:8 writeback:0 unstable:0 [ 2818.916435] slab_reclaimable:21555 slab_unreclaimable:162581 [ 2818.916435] mapped:29041 shmem:15119 pagetables:71185 bounce:0 [ 2818.916435] free:176225 free_pcp:41 free_cma:0 [ 2818.956966] Node 0 active_anon:951820kB inactive_anon:48408kB active_file:7324kB inactive_file:9924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116164kB dirty:24kB writeback:0kB shmem:60476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2818.988516] Node 1 active_anon:96308kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2819.018763] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2819.049049] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2819.054382] Node 0 DMA32 free:345200kB min:36200kB low:45248kB high:54296kB active_anon:951776kB inactive_anon:48408kB active_file:7324kB inactive_file:9924kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39584kB pagetables:157476kB bounce:0kB free_pcp:160kB local_pcp:28kB free_cma:0kB [ 2819.091435] lowmem_reserve[]: 0 0 0 0 0 [ 2819.095450] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2819.124555] lowmem_reserve[]: 0 0 0 0 0 [ 2819.128563] Node 1 Normal free:348772kB min:53696kB low:67120kB high:80544kB active_anon:96308kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54208kB pagetables:127184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2819.163587] lowmem_reserve[]: 0 0 0 0 0 [ 2819.167588] Node 0 DMA: 46*4kB (UM) 78*8kB (UME) 38*16kB (UME) 15*32kB (UME) 3*64kB (ME) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11048kB [ 2819.186325] Node 0 DMA32: 25953*4kB (UME) 13814*8kB (UMEH) 3431*16kB (UMEH) 2351*32kB (UMEH) 4*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 344708kB [ 2819.203881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2819.214822] Node 1 Normal: 12109*4kB (UME) 9483*8kB (UME) 6282*16kB (UME) 3875*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 348812kB [ 2819.232855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2819.241791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2819.253533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2819.262677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2819.274395] 19434 total pagecache pages [ 2819.278581] 0 pages in swap cache [ 2819.282278] Swap cache stats: add 0, delete 0, find 0/0 [ 2819.287637] Free swap = 0kB [ 2819.290912] Total swap = 0kB [ 2819.293928] 2097051 pages RAM [ 2819.297018] 0 pages HighMem/MovableOnly [ 2819.301244] 363840 pages reserved [ 2819.304699] 0 pages cma reserved [ 2819.656398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2819.667679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2819.681988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2819.688726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2819.700904] device bridge_slave_1 left promiscuous mode [ 2819.706420] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.724541] device bridge_slave_0 left promiscuous mode [ 2819.730438] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.741095] device veth1_macvtap left promiscuous mode [ 2819.746931] device veth0_macvtap left promiscuous mode [ 2819.753026] device veth1_vlan left promiscuous mode [ 2819.758091] device veth0_vlan left promiscuous mode [ 2819.849225] device hsr_slave_1 left promiscuous mode [ 2819.857858] device hsr_slave_0 left promiscuous mode [ 2819.870808] team0 (unregistering): Port device team_slave_1 removed [ 2819.880032] team0 (unregistering): Port device team_slave_0 removed [ 2819.888696] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2819.899901] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2819.924935] bond0 (unregistering): Released all slaves 14:12:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}, 0x84}, 0xa) 14:12:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x7f, 0x8, &(0x7f0000000080)=0x7}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) 14:12:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0xba9) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x2180, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x3, 0x17}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 14:12:33 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @fixed={[], 0x11}, 0x4}, 0xa) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) write$nbd(r3, &(0x7f00000002c0)={0x67446698, 0x0, 0x2, 0x0, 0x4, "10ad29a457f0599f08003b7ec23390356fdccf90707e489481d0239816ee17692951f4f82afe780fd196068077732cd1cbc0e74c38da86bd03a21a4db88770189292da6da46843a69609f1deaebba7b89f8e32fa7ea3c2fc1e308f53a8c72a665712354b8393d0978040eabaab39be78117c6af3ae0514261b81041e88341094de5d9f1c40f751e96c0372672acec5574e91b2a36100000000443f499d55c4ee89ce3869e3c1e207cd239e0406cdc4230e03f794d2583627ddc56c57b912cf8a2ad5a432e48058a55571df80d491bdd5f21edd22"}, 0xe4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:34 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:34 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:34 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:12:34 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:34 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) [ 2821.781803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2821.788539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2821.806453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2821.815688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2821.825139] device bridge_slave_1 left promiscuous mode [ 2821.833758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2821.841771] device bridge_slave_0 left promiscuous mode [ 2821.847283] bridge0: port 1(bridge_slave_0) entered disabled state [ 2821.860343] device veth1_macvtap left promiscuous mode [ 2821.865654] device veth0_macvtap left promiscuous mode [ 2821.874308] device veth1_vlan left promiscuous mode [ 2821.880083] device veth0_vlan left promiscuous mode [ 2821.994772] device hsr_slave_1 left promiscuous mode [ 2822.002817] device hsr_slave_0 left promiscuous mode [ 2822.021649] team0 (unregistering): Port device team_slave_1 removed [ 2822.036428] team0 (unregistering): Port device team_slave_0 removed [ 2822.047039] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2822.066861] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2822.105593] bond0 (unregistering): Released all slaves [ 2823.132844] IPVS: ftp: loaded support on port[0] = 21 [ 2823.204551] IPVS: ftp: loaded support on port[0] = 21 [ 2823.322943] chnl_net:caif_netlink_parms(): no params data found [ 2823.356328] IPVS: ftp: loaded support on port[0] = 21 [ 2823.502189] chnl_net:caif_netlink_parms(): no params data found [ 2823.642505] bridge0: port 1(bridge_slave_0) entered blocking state [ 2823.648907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2823.656192] device bridge_slave_0 entered promiscuous mode [ 2823.663238] chnl_net:caif_netlink_parms(): no params data found [ 2823.679263] bridge0: port 2(bridge_slave_1) entered blocking state [ 2823.685613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2823.693074] device bridge_slave_1 entered promiscuous mode [ 2823.737005] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2823.746363] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2823.784759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2823.792999] team0: Port device team_slave_0 added [ 2823.807951] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2823.817486] team0: Port device team_slave_1 added [ 2823.822631] bridge0: port 1(bridge_slave_0) entered blocking state [ 2823.828970] bridge0: port 1(bridge_slave_0) entered disabled state [ 2823.836403] device bridge_slave_0 entered promiscuous mode [ 2823.850895] bridge0: port 2(bridge_slave_1) entered blocking state [ 2823.857263] bridge0: port 2(bridge_slave_1) entered disabled state [ 2823.865165] device bridge_slave_1 entered promiscuous mode [ 2823.905699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2823.912043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2823.938792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2823.950200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2823.956561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2823.963866] device bridge_slave_0 entered promiscuous mode [ 2823.970979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2823.977310] bridge0: port 2(bridge_slave_1) entered disabled state [ 2823.984338] device bridge_slave_1 entered promiscuous mode [ 2823.999437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2824.005682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.031924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2824.052520] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2824.060750] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2824.068734] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2824.084632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2824.101778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2824.127315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2824.144638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2824.152089] team0: Port device team_slave_0 added [ 2824.169979] device hsr_slave_0 entered promiscuous mode [ 2824.175570] device hsr_slave_1 entered promiscuous mode [ 2824.181579] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2824.188673] team0: Port device team_slave_1 added [ 2824.204269] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2824.218491] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2824.228097] team0: Port device team_slave_0 added [ 2824.233589] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2824.249539] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2824.256609] team0: Port device team_slave_1 added [ 2824.274022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2824.282318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.308499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2824.327095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2824.333790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.359059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2824.369821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2824.391967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2824.399600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2824.405828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.431335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2824.442928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2824.449466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2824.474701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2824.502759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2824.524210] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2824.541842] device hsr_slave_0 entered promiscuous mode [ 2824.547598] device hsr_slave_1 entered promiscuous mode [ 2824.570892] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2824.589629] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2824.602427] device hsr_slave_0 entered promiscuous mode [ 2824.608086] device hsr_slave_1 entered promiscuous mode [ 2824.627484] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2824.649894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2824.812447] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2824.848853] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2824.881261] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2824.905114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2824.923822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2824.933865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2824.942212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2824.951485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2824.958237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2824.967285] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2824.973728] 8021q: adding VLAN 0 to HW filter on device team0 [ 2824.983086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2824.993720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2825.003262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2825.011244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2825.018719] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.025084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2825.032331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2825.040511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2825.047990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.054358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2825.062192] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2825.074400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2825.082990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2825.090949] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2825.097824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2825.108171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2825.116649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2825.123972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2825.130928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2825.138534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2825.149370] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2825.156445] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2825.163347] Bluetooth: hci5 command 0x0409 tx timeout [ 2825.166115] 8021q: adding VLAN 0 to HW filter on device team0 [ 2825.168557] Bluetooth: hci3 command 0x0409 tx timeout [ 2825.181038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2825.189950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2825.199222] Bluetooth: hci2 command 0x0409 tx timeout [ 2825.203604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2825.213713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2825.223135] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2825.229550] 8021q: adding VLAN 0 to HW filter on device team0 [ 2825.235838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2825.244043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2825.251797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2825.259453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2825.266904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2825.274733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2825.282239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2825.289049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2825.297592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2825.298490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2825.300693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2825.302793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2825.304179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2825.305538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2825.306919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2825.308270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2825.316634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2825.372385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2825.383442] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2825.390445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2825.397838] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2825.407160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2825.415295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2825.423186] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.429606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2825.436544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2825.444147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2825.451676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2825.459500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2825.467013] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.473432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2825.480669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2825.488241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2825.496062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2825.503796] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.510163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2825.516932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2825.525291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2825.533132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2825.540790] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.547118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2825.554349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2825.562779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2825.570460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2825.578456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2825.585507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2825.592578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2825.602253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2825.610802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2825.621058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2825.634621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2825.644030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2825.652663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2825.661109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2825.668480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2825.678431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2825.687909] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2825.695481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2825.703571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2825.711765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2825.722107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2825.730488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2825.738243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2825.746317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2825.755075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2825.762773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2825.772568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2825.781146] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2825.788252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2825.796725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2825.804419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2825.811452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2825.823544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2825.831647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2825.840188] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2825.846210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2825.854835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2825.863649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2825.874525] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2825.881320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2825.898081] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2825.906445] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2825.914182] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2825.921262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2825.927935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2825.938732] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2825.949925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2825.956685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2825.965876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2825.977688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2826.045192] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2826.056096] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2826.064308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2826.072585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2826.101153] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2826.112989] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2826.124290] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2826.133696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2826.145332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2826.155297] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2826.163025] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2826.170095] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2826.177733] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2826.188772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2826.200610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2826.212072] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2826.223975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2826.235286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2826.243711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2826.255706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2826.263595] device veth0_vlan entered promiscuous mode [ 2826.274904] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2826.282220] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2826.288701] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2826.304141] device veth1_vlan entered promiscuous mode [ 2826.310156] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2826.318927] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2826.329308] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2826.336277] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2826.343459] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2826.352772] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2826.360888] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2826.367283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2826.374865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2826.382324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2826.389938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2826.397274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2826.405041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2826.413063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2826.420449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2826.427356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2826.434635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2826.447067] device veth0_vlan entered promiscuous mode [ 2826.455868] device veth0_vlan entered promiscuous mode [ 2826.463539] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2826.474554] device veth1_vlan entered promiscuous mode [ 2826.483177] device veth1_vlan entered promiscuous mode [ 2826.496415] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2826.504447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2826.512787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2826.522282] device veth0_macvtap entered promiscuous mode [ 2826.528317] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2826.542071] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2826.550854] device veth1_macvtap entered promiscuous mode [ 2826.556893] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2826.567258] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2826.576977] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2826.586512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2826.595669] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2826.603169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2826.610588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2826.618068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2826.627707] device veth0_macvtap entered promiscuous mode [ 2826.633906] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2826.642639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2826.654033] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2826.662042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2826.672572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2826.681717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2826.691475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2826.700632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2826.710394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2826.720743] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2826.727645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2826.735568] device veth1_macvtap entered promiscuous mode [ 2826.742427] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2826.748719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2826.756490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2826.763873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2826.771544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2826.779211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2826.786789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2826.796845] device veth0_macvtap entered promiscuous mode [ 2826.803619] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2826.812525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2826.823087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2826.832921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2826.842984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2826.852406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2826.862509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2826.873770] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2826.881179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2826.891022] device veth1_macvtap entered promiscuous mode [ 2826.897119] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2826.904642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2826.913666] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2826.920838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2826.928434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2826.939269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2826.958276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2826.968231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2827.007481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2827.016283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.030305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.039523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.049944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.059454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.069638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.078730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.090693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.101468] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2827.108412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2827.118453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.129294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.138403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.148679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.158097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.167867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.177115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.186911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.196038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2827.206493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.216815] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2827.223937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2827.229183] Bluetooth: hci2 command 0x041b tx timeout [ 2827.232575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.245945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.255245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.265069] Bluetooth: hci3 command 0x041b tx timeout [ 2827.265227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.271141] Bluetooth: hci5 command 0x041b tx timeout [ 2827.280001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.294863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.304074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.313894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.323875] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2827.331471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2827.338051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2827.346952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2827.355134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2827.363424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2827.371488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2827.379501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2827.398467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.408332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.417704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.428079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.437258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.447000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.456176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.465952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.475702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2827.485471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2827.495481] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2827.502594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2827.514250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2827.522832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:12:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$nbd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="064466980000000000000200010000001eff54392d81418266b4210cb01dd852623fae244062749ab82d1140aa50999d7108cad9fb396cfe4daf16b45ec92bc1e6309cddeba4eff842e53d70cef0e2ebd76a0a956cef8eb577178387693a696f709fe6e9d50ff7789ad795952b33223b21cf936985a1aeba555d5e1bfc32eb7441"], 0x8f) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) 14:12:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 14:12:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 14:12:41 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000000c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x5109046d, 0x2e}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40, 0x0) [ 2828.502317] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2828.526466] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2828.534798] CPU: 1 PID: 31456 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2828.542682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2828.552032] Call Trace: [ 2828.554620] dump_stack+0x1b2/0x283 [ 2828.558268] warn_alloc.cold+0x96/0x1cc [ 2828.562267] ? zone_watermark_ok_safe+0x220/0x220 [ 2828.567117] __alloc_pages_nodemask+0x2127/0x2720 [ 2828.571952] ? __schedule+0x893/0x1de0 [ 2828.575832] ? lock_acquire+0x170/0x3f0 [ 2828.579801] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2828.584640] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2828.590093] ? __mutex_unlock_slowpath+0x75/0x770 [ 2828.594969] alloc_pages_current+0x155/0x260 [ 2828.599374] ion_page_pool_alloc+0x118/0x1b0 [ 2828.603777] ion_system_heap_allocate+0x133/0x8c0 [ 2828.608612] ? ion_alloc+0x187/0x810 [ 2828.612317] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2828.617756] ? ion_system_contig_heap_create+0x130/0x130 [ 2828.623195] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2828.628189] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2828.633009] ion_alloc+0x204/0x810 [ 2828.636531] ? ion_dma_buf_release+0x40/0x40 [ 2828.640930] ? __might_fault+0x177/0x1b0 [ 2828.644974] ion_ioctl+0xea/0x1ee [ 2828.648403] ? ion_alloc.cold+0x3b/0x3b [ 2828.652358] ? lock_acquire+0x170/0x3f0 [ 2828.656311] ? lock_downgrade+0x740/0x740 [ 2828.660434] ? ion_alloc.cold+0x3b/0x3b [ 2828.664390] do_vfs_ioctl+0x75a/0xff0 [ 2828.668171] ? ioctl_preallocate+0x1a0/0x1a0 [ 2828.672556] ? lock_downgrade+0x740/0x740 [ 2828.676687] ? __fget+0x225/0x360 [ 2828.680117] ? do_vfs_ioctl+0xff0/0xff0 [ 2828.684071] ? security_file_ioctl+0x83/0xb0 [ 2828.688462] SyS_ioctl+0x7f/0xb0 [ 2828.691808] ? do_vfs_ioctl+0xff0/0xff0 [ 2828.695763] do_syscall_64+0x1d5/0x640 [ 2828.699632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2828.704796] RIP: 0033:0x45e219 [ 2828.707963] RSP: 002b:00007faff9a13c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2828.715660] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2828.722909] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2828.730159] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2828.737408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2828.744657] R13: 00007ffd3f0b1def R14: 00007faff9a149c0 R15: 000000000119c034 [ 2828.833654] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2828.847740] Mem-Info: [ 2828.854121] active_anon:263696 inactive_anon:12106 isolated_anon:20 [ 2828.854121] active_file:2887 inactive_file:5177 isolated_file:2 [ 2828.854121] unevictable:0 dirty:16 writeback:0 unstable:0 [ 2828.854121] slab_reclaimable:21145 slab_unreclaimable:155743 [ 2828.854121] mapped:57700 shmem:15126 pagetables:71337 bounce:0 [ 2828.854121] free:184555 free_pcp:71 free_cma:0 [ 2828.855339] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2828.894620] Node 0 active_anon:958508kB inactive_anon:48424kB active_file:11540kB inactive_file:20704kB unevictable:0kB isolated(anon):80kB isolated(file):8kB mapped:230800kB dirty:56kB writeback:0kB shmem:60504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 757760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2828.894792] CPU: 0 PID: 31469 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2828.930940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2828.940284] Call Trace: [ 2828.942929] dump_stack+0x1b2/0x283 [ 2828.946555] warn_alloc.cold+0x96/0x1cc [ 2828.950514] ? zone_watermark_ok_safe+0x220/0x220 [ 2828.955344] __alloc_pages_nodemask+0x2127/0x2720 [ 2828.960169] ? lock_acquire+0x170/0x3f0 [ 2828.964126] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2828.968951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2828.974380] ? __mutex_unlock_slowpath+0x75/0x770 [ 2828.979204] ? alloc_pages_current+0x15d/0x260 [ 2828.983773] alloc_pages_current+0x155/0x260 [ 2828.988165] ion_page_pool_alloc+0x118/0x1b0 [ 2828.992551] ion_system_heap_allocate+0x133/0x8c0 [ 2828.997373] ? ion_alloc+0x187/0x810 [ 2829.001067] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2829.006493] ? ion_system_contig_heap_create+0x130/0x130 [ 2829.011919] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2829.016912] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2829.021734] ion_alloc+0x204/0x810 [ 2829.025259] ? ion_dma_buf_release+0x40/0x40 [ 2829.029647] ? __might_fault+0x177/0x1b0 [ 2829.033685] ion_ioctl+0xea/0x1ee [ 2829.037112] ? ion_alloc.cold+0x3b/0x3b [ 2829.041085] ? lock_acquire+0x170/0x3f0 [ 2829.045051] ? lock_downgrade+0x740/0x740 [ 2829.049183] ? ion_alloc.cold+0x3b/0x3b [ 2829.053144] do_vfs_ioctl+0x75a/0xff0 [ 2829.056928] ? ioctl_preallocate+0x1a0/0x1a0 [ 2829.061311] ? lock_downgrade+0x740/0x740 [ 2829.065436] ? __fget+0x225/0x360 [ 2829.068867] ? do_vfs_ioctl+0xff0/0xff0 [ 2829.072820] ? security_file_ioctl+0x83/0xb0 [ 2829.077206] SyS_ioctl+0x7f/0xb0 [ 2829.080551] ? do_vfs_ioctl+0xff0/0xff0 [ 2829.084513] do_syscall_64+0x1d5/0x640 [ 2829.088381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2829.093560] RIP: 0033:0x45e219 [ 2829.096741] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2829.104440] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2829.111693] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2829.118948] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.126209] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2829.133461] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2829.156217] Node 1 active_anon:96276kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2829.182434] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2829.210510] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2829.215556] Node 0 DMA32 free:237688kB min:36200kB low:45248kB high:54296kB active_anon:958464kB inactive_anon:48424kB active_file:11340kB inactive_file:20636kB unevictable:0kB writepending:56kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39936kB pagetables:158084kB bounce:0kB free_pcp:244kB local_pcp:132kB free_cma:0kB [ 2829.248041] lowmem_reserve[]: 0 0 0 0 0 [ 2829.252730] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2829.279556] lowmem_reserve[]: 0 0 0 0 0 [ 2829.283560] Node 1 Normal free:443852kB min:53696kB low:67120kB high:80544kB active_anon:96276kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54208kB pagetables:127184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2829.308799] Bluetooth: hci5 command 0x040f tx timeout [ 2829.313685] lowmem_reserve[]: 0 0 0 0 0 [ 2829.321145] Bluetooth: hci3 command 0x040f tx timeout [ 2829.322173] Node 0 DMA: 45*4kB (UM) 126*8kB (UME) 48*16kB (UME) 21*32kB (UME) 4*64kB (UME) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11076kB [ 2829.331581] Bluetooth: hci2 command 0x040f tx timeout [ 2829.342950] Node 0 DMA32: 3040*4kB (UMEH) 1912*8kB (MEH) 3383*16kB (UMEH) 2593*32kB (UMEH) 12*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165328kB [ 2829.378772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2829.399211] Node 1 Normal: 14077*4kB (UME) 14787*8kB (UME) 8090*16kB (UME) 4369*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 443852kB [ 2829.414240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2829.424027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2829.433311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2829.442796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2829.452000] 22960 total pagecache pages [ 2829.455986] 0 pages in swap cache [ 2829.460476] Swap cache stats: add 0, delete 0, find 0/0 [ 2829.465844] Free swap = 0kB [ 2829.469986] Total swap = 0kB [ 2829.473006] 2097051 pages RAM [ 2829.476094] 0 pages HighMem/MovableOnly [ 2829.488818] 363840 pages reserved [ 2829.492279] 0 pages cma reserved 14:12:43 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x7}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/hwrng\x00') 14:12:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @local}, 0x80, 0x0}, 0x0) 14:12:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 14:12:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 14:12:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x80, r2, 0x8, 0x70bd2c, 0x5da, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b54c204}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ca1b943}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40a43bc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000000) 14:12:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}, 0x84}, 0xa) 14:12:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 14:12:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 14:12:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0xba9) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x2180, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x3, 0x17}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 14:12:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x5}) 14:12:43 executing program 5: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x9, 0x24, 0x1}) 14:12:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6}) 14:12:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x840) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 14:12:43 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001980)=ANY=[@ANYBLOB="78050000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="600202803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007bbd000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400070000d3ff000000ff010540080000008100ad09a707000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="f91dd5667ba3dd113e491c3594e5eb0f4e29052cce7e9179b3925d"], 0x578}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf250f0000005400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d0000005c0001801400020062726964676530000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08f70200010000000800be85d3f83a17783070207e0100ccba66822fe67309fb80ca277b6555bb47aabda2907bdbdcdd55836f01", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f31000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="14000200776732000000000000000000000000005800018008000300020000000800030000000000140002006361696630000000000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002007465616d300000000000000000000000200001801400020076657468305f746f5f626f6e640000000800030001000000"], 0x174}}, 0x8000) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r11, &(0x7f0000001940)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xe0, @local}, 0xff62, 0x0}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r13, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) 14:12:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x5}) 14:12:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x6, 0x4) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x20) 14:12:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6}) 14:12:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x12000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x44000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x244940, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x701680, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4405c0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREAD(r4, &(0x7f0000000240)=ANY=[], 0xcc) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x404800) write$9p(r3, &(0x7f0000000240)="35b70b3905e220e1ccd7dfbcd4b8c71a3a6d9004264f116eb072ca4efcbc076929f27b5f9dc7841285cd9886de2541ef94fc0c0d830d6d6594ca5473ca87bea8278b189574accc49ae44c8c0d7b1c84edae6825758cac9c5086ec44698c282de7d0deccb50b1c5df63e7c1be108fc05242853c8192dd0410ebbc52e24ab37b3c41f7a4eb44f1300b4c93ed5750fc9feb537d1172d57e594acf78989d44e2cc689d58d7222f4d83528288", 0xaa) 14:12:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @rc={0x1f, @any, 0x6}, @in={0x2, 0x4e23, @multicast1}, @sco, 0x7fff, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='sit0\x00', 0x7, 0x91ea, 0x5}) 14:12:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6}) [ 2831.388820] Bluetooth: hci2 command 0x0419 tx timeout [ 2831.394273] Bluetooth: hci3 command 0x0419 tx timeout [ 2831.412520] Bluetooth: hci5 command 0x0419 tx timeout [ 2831.432077] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2831.434150] syz-executor.5: [ 2831.449680] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2831.463012] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2831.470031] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2831.484326] CPU: 0 PID: 31523 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2831.486269] syz-executor.5 cpuset= [ 2831.492914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.492918] Call Trace: [ 2831.492933] dump_stack+0x1b2/0x283 [ 2831.492946] warn_alloc.cold+0x96/0x1cc [ 2831.492956] ? zone_watermark_ok_safe+0x220/0x220 [ 2831.492977] __alloc_pages_nodemask+0x2127/0x2720 [ 2831.499009] / [ 2831.505832] ? lock_acquire+0x170/0x3f0 [ 2831.508623] syz-executor.5 cpuset= [ 2831.511998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.512015] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2831.516201] / [ 2831.520798] ? __mutex_unlock_slowpath+0x75/0x770 [ 2831.528157] mems_allowed=0-1 [ 2831.531264] ? retint_kernel+0x2d/0x2d [ 2831.531279] alloc_pages_current+0x155/0x260 [ 2831.531294] ion_page_pool_alloc+0x118/0x1b0 [ 2831.539962] mems_allowed=0-1 [ 2831.545078] ion_system_heap_allocate+0x133/0x8c0 [ 2831.545090] ? ion_alloc+0x187/0x810 [ 2831.545103] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2831.584334] ? ion_system_contig_heap_create+0x130/0x130 [ 2831.589767] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2831.594852] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2831.599679] ion_alloc+0x204/0x810 [ 2831.603208] ? ion_dma_buf_release+0x40/0x40 [ 2831.607601] ? __might_fault+0x177/0x1b0 [ 2831.611648] ion_ioctl+0xea/0x1ee [ 2831.615082] ? ion_alloc.cold+0x3b/0x3b [ 2831.619039] ? lock_acquire+0x170/0x3f0 [ 2831.622994] ? lock_downgrade+0x740/0x740 [ 2831.627120] ? ion_alloc.cold+0x3b/0x3b [ 2831.631081] do_vfs_ioctl+0x75a/0xff0 [ 2831.634864] ? ioctl_preallocate+0x1a0/0x1a0 [ 2831.639260] ? lock_downgrade+0x740/0x740 [ 2831.643392] ? __fget+0x225/0x360 [ 2831.646828] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.650783] ? security_file_ioctl+0x83/0xb0 [ 2831.655175] SyS_ioctl+0x7f/0xb0 [ 2831.658526] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.662487] do_syscall_64+0x1d5/0x640 [ 2831.666362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2831.671532] RIP: 0033:0x45e219 [ 2831.674703] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2831.682412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2831.689670] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2831.696920] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2831.704171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2831.711421] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2831.718686] CPU: 1 PID: 31566 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2831.726559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.735900] Call Trace: [ 2831.738483] dump_stack+0x1b2/0x283 [ 2831.742104] warn_alloc.cold+0x96/0x1cc [ 2831.746073] ? zone_watermark_ok_safe+0x220/0x220 [ 2831.750920] __alloc_pages_nodemask+0x2127/0x2720 [ 2831.755762] ? lock_acquire+0x170/0x3f0 [ 2831.759739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.764581] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2831.767341] warn_alloc_show_mem: 1 callbacks suppressed [ 2831.767344] Mem-Info: [ 2831.770022] ? __mutex_unlock_slowpath+0x75/0x770 [ 2831.770036] alloc_pages_current+0x155/0x260 [ 2831.770048] ion_page_pool_alloc+0x118/0x1b0 [ 2831.770059] ion_system_heap_allocate+0x133/0x8c0 [ 2831.775439] active_anon:263930 inactive_anon:12106 isolated_anon:12 [ 2831.775439] active_file:3188 inactive_file:4520 isolated_file:0 [ 2831.775439] unevictable:0 dirty:104 writeback:0 unstable:0 [ 2831.775439] slab_reclaimable:21131 slab_unreclaimable:155585 [ 2831.775439] mapped:57743 shmem:15126 pagetables:71336 bounce:0 [ 2831.775439] free:185006 free_pcp:32 free_cma:0 [ 2831.777796] ? ion_alloc+0x187/0x810 [ 2831.777805] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2831.777816] ? ion_system_contig_heap_create+0x130/0x130 [ 2831.786027] Node 0 active_anon:958292kB inactive_anon:48424kB active_file:12652kB inactive_file:18036kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:230928kB dirty:408kB writeback:0kB shmem:60504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 757760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2831.787016] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2831.792230] Node 1 active_anon:97428kB inactive_anon:0kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2831.796222] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2831.796248] ion_alloc+0x204/0x810 [ 2831.833875] Node 0 [ 2831.834017] ? ion_dma_buf_release+0x40/0x40 [ 2831.839513] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2831.844865] ? __might_fault+0x177/0x1b0 [ 2831.844877] ion_ioctl+0xea/0x1ee [ 2831.880008] lowmem_reserve[]: [ 2831.904847] ? ion_alloc.cold+0x3b/0x3b [ 2831.904859] ? lock_acquire+0x170/0x3f0 [ 2831.904868] ? lock_downgrade+0x740/0x740 [ 2831.904874] ? ion_alloc.cold+0x3b/0x3b [ 2831.904885] do_vfs_ioctl+0x75a/0xff0 [ 2831.904897] ? ioctl_preallocate+0x1a0/0x1a0 [ 2831.904904] ? lock_downgrade+0x740/0x740 [ 2831.904916] ? __fget+0x225/0x360 [ 2831.904925] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.904935] ? security_file_ioctl+0x83/0xb0 [ 2831.904946] SyS_ioctl+0x7f/0xb0 [ 2831.913129] 0 [ 2831.913288] ? do_vfs_ioctl+0xff0/0xff0 [ 2831.915530] 2717 [ 2831.919905] do_syscall_64+0x1d5/0x640 [ 2831.919921] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2831.919929] RIP: 0033:0x45e219 [ 2831.919934] RSP: 002b:00007faff9a13c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2831.919943] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2831.919948] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2831.919956] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2831.949595] 2718 [ 2831.949752] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2831.953229] 2718 [ 2831.956276] R13: 00007ffd3f0b1def R14: 00007faff9a149c0 R15: 000000000119c034 [ 2831.970865] CPU: 1 PID: 31558 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2831.984450] 2718 [ 2831.984661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.984665] Call Trace: [ 2831.984682] dump_stack+0x1b2/0x283 [ 2831.992069] warn_alloc.cold+0x96/0x1cc [ 2831.992078] ? zone_watermark_ok_safe+0x220/0x220 [ 2831.992101] __alloc_pages_nodemask+0x2127/0x2720 [ 2831.992111] ? retint_kernel+0x2d/0x2d [ 2831.992124] ? lock_acquire+0x170/0x3f0 [ 2831.992137] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2831.992152] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2831.992166] ? __mutex_unlock_slowpath+0x75/0x770 [ 2831.992180] alloc_pages_current+0x155/0x260 [ 2831.992193] ion_page_pool_alloc+0x118/0x1b0 [ 2831.992203] ion_system_heap_allocate+0x133/0x8c0 [ 2831.992215] ? ion_alloc+0x187/0x810 [ 2831.992225] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2831.992234] ? ion_system_contig_heap_create+0x130/0x130 [ 2831.992242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2831.992253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2831.992265] ion_alloc+0x204/0x810 [ 2831.992279] ? ion_dma_buf_release+0x40/0x40 [ 2831.996682] Node 0 [ 2832.000019] ? __might_fault+0x177/0x1b0 [ 2832.000030] ion_ioctl+0xea/0x1ee [ 2832.000038] ? ion_alloc.cold+0x3b/0x3b [ 2832.000048] ? lock_acquire+0x170/0x3f0 [ 2832.000056] ? lock_downgrade+0x740/0x740 [ 2832.000063] ? ion_alloc.cold+0x3b/0x3b [ 2832.000073] do_vfs_ioctl+0x75a/0xff0 [ 2832.000085] ? ioctl_preallocate+0x1a0/0x1a0 [ 2832.000092] ? lock_downgrade+0x740/0x740 [ 2832.000104] ? __fget+0x225/0x360 [ 2832.000112] ? do_vfs_ioctl+0xff0/0xff0 [ 2832.000121] ? security_file_ioctl+0x83/0xb0 [ 2832.000131] SyS_ioctl+0x7f/0xb0 [ 2832.006349] DMA32 free:286324kB min:36200kB low:45248kB high:54296kB active_anon:958264kB inactive_anon:48424kB active_file:12740kB inactive_file:18080kB unevictable:0kB writepending:412kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39840kB pagetables:158052kB bounce:0kB free_pcp:248kB local_pcp:8kB free_cma:0kB [ 2832.007907] ? do_vfs_ioctl+0xff0/0xff0 [ 2832.007921] do_syscall_64+0x1d5/0x640 [ 2832.017271] lowmem_reserve[]: [ 2832.020145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2832.020153] RIP: 0033:0x45e219 [ 2832.020157] RSP: 002b:00007faff9a34c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2832.020167] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2832.020172] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2832.020177] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2832.020182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2832.020187] R13: 00007ffd3f0b1def R14: 00007faff9a359c0 R15: 000000000119bf8c [ 2832.324455] 0 0 0 0 0 [ 2832.327256] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2832.354069] lowmem_reserve[]: 0 0 0 0 0 [ 2832.358808] Node 1 Normal free:435320kB min:53696kB low:67120kB high:80544kB active_anon:97428kB inactive_anon:0kB active_file:100kB inactive_file:44kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127216kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 2832.393842] lowmem_reserve[]: 0 0 0 0 0 [ 2832.398260] Node 0 DMA: 45*4kB (UM) 126*8kB (UME) 48*16kB (UME) 21*32kB (UME) 4*64kB (UME) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11076kB [ 2832.418726] Node 0 DMA32: 3194*4kB (MEH) 1808*8kB (UMEH) 554*16kB (UMEH) 240*32kB (UMEH) 17*64kB (UH) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45128kB [ 2832.438736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2832.453659] Node 1 Normal: 817*4kB (UME) 8453*8kB (UME) 8128*16kB (UME) 4360*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 340460kB [ 2832.473285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.492732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.513425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.534491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.554166] 22619 total pagecache pages [ 2832.563755] 0 pages in swap cache [ 2832.571297] Swap cache stats: add 0, delete 0, find 0/0 [ 2832.583334] Free swap = 0kB [ 2832.591679] Total swap = 0kB [ 2832.597521] 2097051 pages RAM [ 2832.604761] 0 pages HighMem/MovableOnly [ 2832.614158] 363840 pages reserved [ 2832.622874] 0 pages cma reserved [ 2834.836942] oom_reaper: reaped process 31523 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 14:12:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0xba9) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x2180, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x3, 0x17}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 14:12:50 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendto(r0, &(0x7f0000000000)="744a619c19e4f33e8aa56ed03cbea0b22f770cf5e0a448fdaaf698cfb4d83047fd76c3c3b391f35501355f6cdc4aaf02f1aee317a597fc4bd0c0f44507d24b046db911b2be15076c0d10f21fe1b17c4be7e013b271ef104e0f040eac94db50578fd1d78875cfdbacc44d1893625c11b39639d8f2287d04ce174bc188a74f339aa6220591518a6d2ef751291389c1fb552891ed842b1e7d69369a34539c18daf5e74591de863c33b7e29a7e623b3c59a13e6ccf3a6525da14fe7f194f8b", 0xbd, 0x20000844, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x1, @remote, 'netdevsim0\x00'}}, 0x80) 14:12:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x525900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10002, 0x0) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) 14:12:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x5}) 14:12:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d}) 14:12:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109006d, 0x16}) 14:12:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8, 0x1}, 0x20) pkey_alloc(0x0, 0x7) 14:12:50 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f00000002c0)=0xe8) sendmsg$sock(r1, &(0x7f0000000000)={&(0x7f00000004c0)=@can={0x1d, r2}, 0x80, 0x0}, 0x0) 14:12:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d}) 14:12:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8}) 14:12:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8}) 14:12:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d}) [ 2837.415738] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2837.451315] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2837.456460] CPU: 0 PID: 31603 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2837.464338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2837.473790] Call Trace: [ 2837.476387] dump_stack+0x1b2/0x283 [ 2837.480039] warn_alloc.cold+0x96/0x1cc [ 2837.484013] ? zone_watermark_ok_safe+0x220/0x220 [ 2837.488870] __alloc_pages_nodemask+0x2127/0x2720 [ 2837.493708] ? __schedule+0x893/0x1de0 [ 2837.497597] ? lock_acquire+0x170/0x3f0 [ 2837.501577] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2837.506420] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2837.511869] ? __mutex_unlock_slowpath+0x75/0x770 [ 2837.516711] alloc_pages_current+0x155/0x260 [ 2837.521122] ion_page_pool_alloc+0x118/0x1b0 [ 2837.525529] ion_system_heap_allocate+0x133/0x8c0 [ 2837.530371] ? ion_alloc+0x187/0x810 [ 2837.534085] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2837.539540] ? ion_system_contig_heap_create+0x130/0x130 [ 2837.545128] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2837.550140] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2837.555047] ion_alloc+0x204/0x810 [ 2837.558699] ? ion_dma_buf_release+0x40/0x40 [ 2837.563106] ? __might_fault+0x177/0x1b0 [ 2837.567177] ion_ioctl+0xea/0x1ee [ 2837.570621] ? ion_alloc.cold+0x3b/0x3b [ 2837.574591] ? lock_acquire+0x170/0x3f0 [ 2837.578556] ? lock_downgrade+0x740/0x740 [ 2837.582695] ? ion_alloc.cold+0x3b/0x3b [ 2837.586663] do_vfs_ioctl+0x75a/0xff0 [ 2837.590462] ? ioctl_preallocate+0x1a0/0x1a0 [ 2837.594865] ? lock_downgrade+0x740/0x740 [ 2837.599012] ? __fget+0x225/0x360 [ 2837.602465] ? do_vfs_ioctl+0xff0/0xff0 [ 2837.606436] ? security_file_ioctl+0x83/0xb0 [ 2837.610838] SyS_ioctl+0x7f/0xb0 [ 2837.614195] ? do_vfs_ioctl+0xff0/0xff0 [ 2837.618165] do_syscall_64+0x1d5/0x640 [ 2837.622054] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2837.627236] RIP: 0033:0x45e219 [ 2837.630418] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2837.638205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2837.645468] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2837.652729] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2837.659988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2837.667259] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2837.977411] warn_alloc_show_mem: 2 callbacks suppressed [ 2837.977416] Mem-Info: [ 2837.989789] active_anon:263655 inactive_anon:12106 isolated_anon:12 [ 2837.989789] active_file:921 inactive_file:2868 isolated_file:0 [ 2837.989789] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2837.989789] slab_reclaimable:20973 slab_unreclaimable:154688 [ 2837.989789] mapped:55242 shmem:15126 pagetables:71336 bounce:0 [ 2837.989789] free:188767 free_pcp:523 free_cma:0 [ 2838.027027] Node 0 active_anon:957328kB inactive_anon:48424kB active_file:808kB inactive_file:1576kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:211592kB dirty:20kB writeback:0kB shmem:60504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2838.141419] Node 1 active_anon:97292kB inactive_anon:0kB active_file:2876kB inactive_file:9896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:9376kB dirty:60kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2838.217967] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.282739] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2838.287802] Node 0 DMA32 free:313624kB min:36200kB low:45248kB high:54296kB active_anon:957284kB inactive_anon:48424kB active_file:708kB inactive_file:1280kB unevictable:0kB writepending:120kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39840kB pagetables:158064kB bounce:0kB free_pcp:172kB local_pcp:52kB free_cma:0kB [ 2838.401361] lowmem_reserve[]: 0 0 0 0 0 [ 2838.405391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.497939] lowmem_reserve[]: 0 0 0 0 0 [ 2838.501958] Node 1 Normal free:431144kB min:53696kB low:67120kB high:80544kB active_anon:97292kB inactive_anon:0kB active_file:2876kB inactive_file:9896kB unevictable:0kB writepending:160kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54272kB pagetables:127200kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 2838.611691] lowmem_reserve[]: 0 0 0 0 0 [ 2838.627131] Node 0 DMA: 45*4kB (UM) 124*8kB (UME) 54*16kB (UME) 21*32kB (UME) 3*64kB (ME) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11092kB [ 2838.677933] Node 0 DMA32: 13759*4kB (UMEH) 9789*8kB (UMEH) 5956*16kB (UMEH) 2609*32kB (UMEH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 312324kB [ 2838.707909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2838.728563] Node 1 Normal: 12992*4kB (UME) 14338*8kB (UME) 7914*16kB (UME) 4280*32kB (UME) 3*64kB (U) 3*128kB (U) 1*256kB (U) 3*512kB (U) 105*1024kB (U) 47*2048kB (U) 0*4096kB = 636400kB [ 2838.751874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2838.760764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2838.770311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2838.779753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2838.789477] 18770 total pagecache pages [ 2838.793450] 0 pages in swap cache [ 2838.796890] Swap cache stats: add 0, delete 0, find 0/0 [ 2838.803391] Free swap = 0kB [ 2838.806404] Total swap = 0kB [ 2838.810314] 2097051 pages RAM [ 2838.813415] 0 pages HighMem/MovableOnly [ 2838.817383] 363840 pages reserved [ 2838.824498] 0 pages cma reserved 14:12:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0xba9) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x2180, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x3, 0x17}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 14:12:53 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0xffffffffffffffd3, 0x0}, 0x80) 14:12:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2}) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0xffffffffffffffff) 14:12:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8}) 14:12:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x6, 0x4) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x20) 14:12:53 executing program 5: ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000080)=""/11) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:12:53 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x5, @mcast1, 0x81}, 0x20) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:12:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109006d, 0x16}) 14:12:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000ffdbdf251000000008000600", @ANYRES32=r2, @ANYBLOB="08003c00020000000601000000010010463121a72a418d3645002a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 14:12:53 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x4, 0x3, 0x4, @dev={0xfe, 0x80, [], 0x3b}, @private1, 0x7, 0x20, 0xffff, 0x2a}}) 14:12:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x81, 0x1}, @in={0x2, 0x4e23, @broadcast}, @generic={0x2c, "dd4637a8fa5350c7b82a9a8bfae6"}, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x3d7, 0x4}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) 14:12:53 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000000), 0x0, 0x40000000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) [ 2840.252603] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2840.252769] syz-executor.0: [ 2840.264742] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2840.298585] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2840.310242] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2840.316841] CPU: 1 PID: 31672 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2840.324729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2840.331915] page allocation failure: order:4 [ 2840.334071] Call Trace: [ 2840.334090] dump_stack+0x1b2/0x283 [ 2840.334104] warn_alloc.cold+0x96/0x1cc [ 2840.334115] ? zone_watermark_ok_safe+0x220/0x220 [ 2840.334136] __alloc_pages_nodemask+0x2127/0x2720 [ 2840.334151] ? lock_acquire+0x170/0x3f0 [ 2840.362279] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2840.367126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2840.372582] ? __mutex_unlock_slowpath+0x75/0x770 [ 2840.377430] alloc_pages_current+0x155/0x260 [ 2840.381849] ion_page_pool_alloc+0x118/0x1b0 [ 2840.383166] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2840.386252] ion_system_heap_allocate+0x133/0x8c0 [ 2840.386266] ? ion_alloc+0x187/0x810 [ 2840.386278] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2840.386287] ? ion_system_contig_heap_create+0x130/0x130 [ 2840.386293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2840.386305] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2840.422640] ion_alloc+0x204/0x810 [ 2840.426184] ? ion_dma_buf_release+0x40/0x40 [ 2840.430597] ? __might_fault+0x177/0x1b0 [ 2840.432020] (null) [ 2840.434649] ion_ioctl+0xea/0x1ee [ 2840.434659] ? ion_alloc.cold+0x3b/0x3b [ 2840.434671] ? lock_acquire+0x170/0x3f0 [ 2840.434681] ? lock_downgrade+0x740/0x740 [ 2840.434686] ? ion_alloc.cold+0x3b/0x3b [ 2840.434697] do_vfs_ioctl+0x75a/0xff0 [ 2840.447324] syz-executor.0 cpuset= [ 2840.448177] ? ioctl_preallocate+0x1a0/0x1a0 [ 2840.448186] ? lock_downgrade+0x740/0x740 [ 2840.448201] ? __fget+0x225/0x360 [ 2840.448211] ? do_vfs_ioctl+0xff0/0xff0 [ 2840.448222] ? security_file_ioctl+0x83/0xb0 [ 2840.448231] SyS_ioctl+0x7f/0xb0 [ 2840.448238] ? do_vfs_ioctl+0xff0/0xff0 [ 2840.448248] do_syscall_64+0x1d5/0x640 [ 2840.448263] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2840.480574] / [ 2840.483989] RIP: 0033:0x45e219 [ 2840.505240] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2840.513039] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2840.513477] mems_allowed=0-1 [ 2840.520303] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2840.520309] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2840.520314] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2840.520320] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2840.542032] CPU: 1 PID: 31674 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2840.560695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2840.570044] Call Trace: [ 2840.572634] dump_stack+0x1b2/0x283 [ 2840.576272] warn_alloc.cold+0x96/0x1cc [ 2840.580256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2840.585280] ? zone_watermark_ok_safe+0x220/0x220 [ 2840.590151] __alloc_pages_nodemask+0x2127/0x2720 [ 2840.594991] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2840.600008] ? lock_acquire+0x170/0x3f0 [ 2840.604001] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2840.608854] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2840.614305] ? __mutex_unlock_slowpath+0x75/0x770 [ 2840.619184] alloc_pages_current+0x155/0x260 [ 2840.623590] ion_page_pool_alloc+0x118/0x1b0 [ 2840.627995] ion_system_heap_allocate+0x133/0x8c0 [ 2840.632837] ? ion_alloc+0x187/0x810 [ 2840.636563] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2840.642025] ? ion_system_contig_heap_create+0x130/0x130 [ 2840.647476] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2840.652487] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2840.657326] ion_alloc+0x204/0x810 [ 2840.660858] ? ion_dma_buf_release+0x40/0x40 [ 2840.665265] ? __might_fault+0x177/0x1b0 [ 2840.669328] ion_ioctl+0xea/0x1ee [ 2840.672775] ? ion_alloc.cold+0x3b/0x3b [ 2840.676747] ? lock_acquire+0x170/0x3f0 [ 2840.680719] ? lock_downgrade+0x740/0x740 [ 2840.684868] ? ion_alloc.cold+0x3b/0x3b [ 2840.688837] do_vfs_ioctl+0x75a/0xff0 [ 2840.692642] ? ioctl_preallocate+0x1a0/0x1a0 [ 2840.697052] ? lock_downgrade+0x740/0x740 [ 2840.701194] ? __fget+0x225/0x360 [ 2840.704635] ? do_vfs_ioctl+0xff0/0xff0 [ 2840.708614] ? security_file_ioctl+0x83/0xb0 [ 2840.713017] SyS_ioctl+0x7f/0xb0 [ 2840.716376] ? do_vfs_ioctl+0xff0/0xff0 [ 2840.720341] do_syscall_64+0x1d5/0x640 [ 2840.724232] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2840.729420] RIP: 0033:0x45e219 [ 2840.732597] RSP: 002b:00007faff9a34c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2840.740292] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2840.747552] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2840.754810] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2840.762066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2840.769325] R13: 00007ffd3f0b1def R14: 00007faff9a359c0 R15: 000000000119bf8c [ 2840.780094] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2840.780251] CPU: 0 PID: 31665 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2840.792915] syz-executor.1 cpuset= [ 2840.799766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2840.799769] Call Trace: [ 2840.799784] dump_stack+0x1b2/0x283 [ 2840.799797] warn_alloc.cold+0x96/0x1cc [ 2840.799806] ? zone_watermark_ok_safe+0x220/0x220 [ 2840.799828] __alloc_pages_nodemask+0x2127/0x2720 [ 2840.803871] / [ 2840.812685] ? __schedule+0x893/0x1de0 [ 2840.815681] mems_allowed=0-1 [ 2840.818856] ? lock_acquire+0x170/0x3f0 [ 2840.818872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2840.818888] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2840.855284] ? __mutex_unlock_slowpath+0x75/0x770 [ 2840.860114] alloc_pages_current+0x155/0x260 [ 2840.864616] ion_page_pool_alloc+0x118/0x1b0 [ 2840.869008] ion_system_heap_allocate+0x133/0x8c0 [ 2840.873833] ? ion_alloc+0x187/0x810 [ 2840.877546] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2840.882982] ? ion_system_contig_heap_create+0x130/0x130 [ 2840.888419] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2840.893451] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2840.898279] ion_alloc+0x204/0x810 [ 2840.901813] ? ion_dma_buf_release+0x40/0x40 [ 2840.906211] ? __might_fault+0x177/0x1b0 [ 2840.910253] ion_ioctl+0xea/0x1ee [ 2840.913688] ? ion_alloc.cold+0x3b/0x3b [ 2840.917645] ? lock_acquire+0x170/0x3f0 [ 2840.921601] ? lock_downgrade+0x740/0x740 [ 2840.925732] ? ion_alloc.cold+0x3b/0x3b [ 2840.929686] do_vfs_ioctl+0x75a/0xff0 [ 2840.933473] ? ioctl_preallocate+0x1a0/0x1a0 [ 2840.937862] ? lock_downgrade+0x740/0x740 [ 2840.941993] ? __fget+0x225/0x360 [ 2840.945427] ? do_vfs_ioctl+0xff0/0xff0 [ 2840.949383] ? security_file_ioctl+0x83/0xb0 [ 2840.953773] SyS_ioctl+0x7f/0xb0 [ 2840.957119] ? do_vfs_ioctl+0xff0/0xff0 [ 2840.961075] do_syscall_64+0x1d5/0x640 [ 2840.964949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2840.970120] RIP: 0033:0x45e219 [ 2840.973292] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2840.980982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2840.988237] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2840.995484] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.002737] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2841.008628] Mem-Info: [ 2841.009992] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2841.021208] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2841.022939] CPU: 1 PID: 31689 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2841.040876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2841.050221] Call Trace: [ 2841.052804] dump_stack+0x1b2/0x283 [ 2841.056433] warn_alloc.cold+0x96/0x1cc [ 2841.060402] ? zone_watermark_ok_safe+0x220/0x220 [ 2841.065249] __alloc_pages_nodemask+0x2127/0x2720 [ 2841.070100] ? lock_acquire+0x170/0x3f0 [ 2841.073945] syz-executor.5 cpuset=/ [ 2841.074073] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2841.082525] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2841.085586] mems_allowed=0-1 [ 2841.087971] ? __mutex_unlock_slowpath+0x75/0x770 [ 2841.087981] ? retint_kernel+0x2d/0x2d [ 2841.087996] alloc_pages_current+0x155/0x260 [ 2841.088008] ion_page_pool_alloc+0x118/0x1b0 [ 2841.088017] ion_system_heap_allocate+0x133/0x8c0 [ 2841.088030] ? ion_alloc+0x187/0x810 [ 2841.088040] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2841.088048] ? ion_system_contig_heap_create+0x130/0x130 [ 2841.088055] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2841.088067] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2841.137804] ion_alloc+0x204/0x810 [ 2841.141348] ? ion_dma_buf_release+0x40/0x40 [ 2841.145756] ? __might_fault+0x177/0x1b0 [ 2841.149815] ion_ioctl+0xea/0x1ee [ 2841.153262] ? ion_alloc.cold+0x3b/0x3b [ 2841.157223] ? lock_acquire+0x170/0x3f0 [ 2841.161186] ? lock_downgrade+0x740/0x740 [ 2841.165322] ? ion_alloc.cold+0x3b/0x3b [ 2841.169294] do_vfs_ioctl+0x75a/0xff0 [ 2841.173093] ? ioctl_preallocate+0x1a0/0x1a0 [ 2841.177490] ? lock_downgrade+0x740/0x740 [ 2841.181636] ? __fget+0x225/0x360 [ 2841.185087] ? do_vfs_ioctl+0xff0/0xff0 [ 2841.189057] ? security_file_ioctl+0x83/0xb0 [ 2841.193467] SyS_ioctl+0x7f/0xb0 [ 2841.196820] ? do_vfs_ioctl+0xff0/0xff0 [ 2841.200782] do_syscall_64+0x1d5/0x640 [ 2841.204670] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2841.209853] RIP: 0033:0x45e219 [ 2841.213028] RSP: 002b:00007f0190180c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2841.220730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2841.227992] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2841.235253] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.242512] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2841.249769] R13: 00007ffe7c6cce5f R14: 00007f01901819c0 R15: 000000000119bf8c [ 2841.259597] CPU: 0 PID: 31731 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2841.267475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2841.269111] active_anon:263790 inactive_anon:12106 isolated_anon:0 [ 2841.269111] active_file:1643 inactive_file:4516 isolated_file:12 [ 2841.269111] unevictable:0 dirty:94 writeback:0 unstable:0 [ 2841.269111] slab_reclaimable:21025 slab_unreclaimable:158665 [ 2841.269111] mapped:57120 shmem:15126 pagetables:71383 bounce:0 [ 2841.269111] free:111765 free_pcp:260 free_cma:0 [ 2841.276812] Call Trace: [ 2841.276827] dump_stack+0x1b2/0x283 [ 2841.276850] warn_alloc.cold+0x96/0x1cc [ 2841.321058] ? zone_watermark_ok_safe+0x220/0x220 [ 2841.325912] __alloc_pages_nodemask+0x2127/0x2720 [ 2841.330756] ? _raw_spin_unlock_irq+0x24/0x80 [ 2841.335246] ? lock_acquire+0x170/0x3f0 [ 2841.335363] Node 0 active_anon:957176kB inactive_anon:48420kB active_file:776kB inactive_file:512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211652kB dirty:160kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2841.339212] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2841.339228] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2841.339243] ? __mutex_unlock_slowpath+0x75/0x770 [ 2841.382427] alloc_pages_current+0x155/0x260 [ 2841.386840] ion_page_pool_alloc+0x118/0x1b0 [ 2841.391246] ion_system_heap_allocate+0x133/0x8c0 [ 2841.396089] ? ion_alloc+0x187/0x810 [ 2841.399799] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2841.403944] Node 1 active_anon:97984kB inactive_anon:4kB active_file:5796kB inactive_file:17552kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:16828kB dirty:216kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2841.405239] ? ion_system_contig_heap_create+0x130/0x130 [ 2841.405246] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2841.405259] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2841.447669] ion_alloc+0x204/0x810 [ 2841.451218] ? ion_dma_buf_release+0x40/0x40 [ 2841.455629] ? __might_fault+0x177/0x1b0 [ 2841.459689] ion_ioctl+0xea/0x1ee [ 2841.463139] ? ion_alloc.cold+0x3b/0x3b [ 2841.465403] Node 0 [ 2841.467109] ? lock_acquire+0x170/0x3f0 [ 2841.467120] ? lock_downgrade+0x740/0x740 [ 2841.474324] DMA free:11104kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2841.477414] ? ion_alloc.cold+0x3b/0x3b [ 2841.477425] do_vfs_ioctl+0x75a/0xff0 [ 2841.477437] ? ioctl_preallocate+0x1a0/0x1a0 [ 2841.515313] ? lock_downgrade+0x740/0x740 [ 2841.519463] ? __fget+0x225/0x360 [ 2841.522913] ? do_vfs_ioctl+0xff0/0xff0 [ 2841.526890] ? security_file_ioctl+0x83/0xb0 [ 2841.531297] SyS_ioctl+0x7f/0xb0 [ 2841.534660] ? do_vfs_ioctl+0xff0/0xff0 [ 2841.537181] lowmem_reserve[]: [ 2841.538622] do_syscall_64+0x1d5/0x640 [ 2841.538641] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2841.538649] RIP: 0033:0x45e219 [ 2841.538655] RSP: 002b:00007faff99d1c68 EFLAGS: 00000246 [ 2841.543097] 0 [ 2841.545604] ORIG_RAX: 0000000000000010 [ 2841.545610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2841.545615] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2841.545623] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 2841.561073] 2717 [ 2841.561112] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 2841.568925] 2718 [ 2841.572317] R13: 00007ffd3f0b1def R14: 00007faff99d29c0 R15: 000000000119c184 [ 2841.682471] 2718 2718 [ 2841.692869] Node 0 DMA32 free:149976kB min:36200kB low:45248kB high:54296kB active_anon:957132kB inactive_anon:48420kB active_file:776kB inactive_file:512kB unevictable:0kB writepending:160kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:158040kB bounce:0kB free_pcp:844kB local_pcp:144kB free_cma:0kB [ 2841.770935] lowmem_reserve[]: 0 0 0 0 0 [ 2841.784011] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2841.797203] warn_alloc_show_mem: 1 callbacks suppressed [ 2841.797206] Mem-Info: [ 2841.832472] active_anon:263786 inactive_anon:12106 isolated_anon:0 [ 2841.832472] active_file:1643 inactive_file:4553 isolated_file:12 [ 2841.832472] unevictable:0 dirty:106 writeback:0 unstable:0 [ 2841.832472] slab_reclaimable:21025 slab_unreclaimable:159192 [ 2841.832472] mapped:57118 shmem:15126 pagetables:71393 bounce:0 [ 2841.832472] free:131860 free_pcp:304 free_cma:0 [ 2841.877117] lowmem_reserve[]: 0 0 0 0 0 [ 2841.895597] Node 1 Normal free:270736kB min:53696kB low:67120kB high:80544kB active_anon:97976kB inactive_anon:4kB active_file:5496kB inactive_file:17676kB unevictable:0kB writepending:216kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54432kB pagetables:127452kB bounce:0kB free_pcp:940kB local_pcp:252kB free_cma:0kB [ 2841.911729] Node 0 active_anon:957168kB inactive_anon:48420kB active_file:776kB inactive_file:548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211688kB dirty:208kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2842.006669] Node 1 active_anon:97976kB inactive_anon:4kB active_file:5796kB inactive_file:17664kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:16784kB dirty:216kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2842.011596] lowmem_reserve[]: [ 2842.065073] Node 0 DMA free:12308kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2842.083283] 0 0 0 0 0 [ 2842.127540] Node 0 DMA: 45*4kB (UM) 124*8kB [ 2842.131620] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2842.146032] (UME) 50*16kB (UME) 21*32kB (UME) 5*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 12308kB [ 2842.153700] Node 0 DMA32 free:90132kB min:36200kB low:45248kB high:54296kB active_anon:957124kB inactive_anon:48420kB active_file:776kB inactive_file:548kB unevictable:0kB writepending:208kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39840kB pagetables:158040kB bounce:0kB free_pcp:972kB local_pcp:696kB free_cma:0kB [ 2842.193226] Node 0 DMA32: 6027*4kB (MEH) 1660*8kB (UMEH) 335*16kB (UMEH) 55*32kB (MEH) 28*64kB (UMEH) 4*128kB (M) 3*256kB (UM) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 50652kB [ 2842.242992] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2842.252063] lowmem_reserve[]: 0 0 0 0 0 [ 2842.282398] Node 1 Normal: 139*4kB (ME) 9592*8kB (UE) 7243*16kB (UE) 4245*32kB (UME) 6*64kB (UM) 2*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 330172kB [ 2842.285386] Node 0 [ 2842.301604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2842.322959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2842.342116] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2842.350646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2842.386249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2842.433357] 21304 total pagecache pages [ 2842.441063] lowmem_reserve[]: 0 0 0 0 0 [ 2842.451335] 0 pages in swap cache [ 2842.455577] Node 1 Normal free:212620kB min:53696kB low:67120kB high:80544kB active_anon:97976kB inactive_anon:4kB active_file:5496kB inactive_file:17676kB unevictable:0kB writepending:216kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54432kB pagetables:127452kB bounce:0kB free_pcp:288kB local_pcp:228kB free_cma:0kB [ 2842.466003] Swap cache stats: add 0, delete 0, find 0/0 [ 2842.497626] Free swap = 0kB [ 2842.525980] Total swap = 0kB [ 2842.539200] 2097051 pages RAM [ 2842.554066] 0 pages HighMem/MovableOnly [ 2842.557165] lowmem_reserve[]: 0 0 0 0 0 [ 2842.571546] 363840 pages reserved [ 2842.577811] Node 0 DMA: 6*4kB (UM) 7*8kB (ME) 43*16kB (UME) 21*32kB (UME) 5*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11104kB [ 2842.583750] 0 pages cma reserved [ 2842.624458] Node 0 DMA32: 5986*4kB (UMEH) 1592*8kB (MEH) 319*16kB (UMEH) 50*32kB (MEH) 13*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44216kB [ 2842.694336] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2842.760985] Node 1 Normal: 114*4kB (UME) 45*8kB (UME) 12*16kB (E) 1608*32kB (UME) 6*64kB (UM) 2*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53616kB [ 2842.805882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2842.825537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2842.847580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2842.867553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2842.876140] 19283 total pagecache pages [ 2842.943044] 0 pages in swap cache [ 2842.946518] Swap cache stats: add 0, delete 0, find 0/0 [ 2843.007532] Free swap = 0kB [ 2843.010571] Total swap = 0kB [ 2843.013581] 2097051 pages RAM [ 2843.016671] 0 pages HighMem/MovableOnly [ 2843.077557] 363840 pages reserved [ 2843.077561] 0 pages cma reserved [ 2845.832919] oom_reaper: reaped process 31674 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2845.936977] oom_reaper: reaped process 31689 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2846.054033] oom_reaper: reaped process 31665 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2846.183486] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2846.260765] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2846.265564] CPU: 1 PID: 7995 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2846.273004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2846.282349] Call Trace: [ 2846.284939] dump_stack+0x1b2/0x283 [ 2846.288579] dump_header+0x178/0x82f [ 2846.292292] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2846.297392] ? ___ratelimit+0x2cd/0x522 [ 2846.301363] oom_kill_process.cold+0x10/0xb18 [ 2846.305861] out_of_memory+0xe3e/0x1190 [ 2846.309834] ? oom_killer_disable+0x1c0/0x1c0 [ 2846.314325] ? mutex_trylock+0x152/0x1a0 [ 2846.318382] __alloc_pages_nodemask+0x23e1/0x2720 [ 2846.323237] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2846.328091] alloc_pages_current+0x155/0x260 [ 2846.332495] filemap_fault+0xea3/0x1980 [ 2846.336477] ext4_filemap_fault+0x84/0xb0 [ 2846.340624] __do_fault+0xfa/0x380 [ 2846.344171] __handle_mm_fault+0x2497/0x4620 [ 2846.348579] ? vm_insert_page+0x7c0/0x7c0 [ 2846.352735] handle_mm_fault+0x391/0x860 [ 2846.356798] __do_page_fault+0x549/0xad0 [ 2846.360860] ? spurious_fault+0x640/0x640 [ 2846.365003] ? do_page_fault+0x60/0x4f2 [ 2846.368973] ? page_fault+0x2f/0x50 [ 2846.372601] page_fault+0x45/0x50 [ 2846.376047] RIP: 0001:0x2a0d7c0dd3c [ 2846.379660] RSP: b4008:000000c0004bfdb8 EFLAGS: 2a0d7c0dd3c [ 2846.727212] Mem-Info: [ 2846.735353] active_anon:263726 inactive_anon:12106 isolated_anon:0 [ 2846.735353] active_file:15 inactive_file:15 isolated_file:0 [ 2846.735353] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2846.735353] slab_reclaimable:20979 slab_unreclaimable:159449 [ 2846.735353] mapped:52707 shmem:15126 pagetables:71393 bounce:0 [ 2846.735353] free:13868 free_pcp:193 free_cma:0 [ 2846.908225] Node 0 active_anon:957132kB inactive_anon:48420kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210828kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2847.052190] Node 1 active_anon:97716kB inactive_anon:4kB active_file:60kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2847.171617] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2847.294451] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2847.346318] Node 0 DMA32 free:17680kB min:36200kB low:45248kB high:54296kB active_anon:957088kB inactive_anon:48420kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39840kB pagetables:158040kB bounce:0kB free_pcp:256kB local_pcp:52kB free_cma:0kB [ 2847.444551] lowmem_reserve[]: 0 0 0 0 0 [ 2847.448654] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2847.551542] lowmem_reserve[]: 0 0 0 0 0 [ 2847.555562] Node 1 Normal free:26820kB min:53696kB low:67120kB high:80544kB active_anon:97716kB inactive_anon:4kB active_file:60kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:508kB local_pcp:424kB free_cma:0kB [ 2847.621021] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2847.645919] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2847.656216] CPU: 1 PID: 31689 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2847.664220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.673570] Call Trace: [ 2847.676158] dump_stack+0x1b2/0x283 [ 2847.679786] warn_alloc.cold+0x96/0x1cc [ 2847.683758] ? zone_watermark_ok_safe+0x220/0x220 [ 2847.688602] ? usleep_range+0x130/0x130 [ 2847.692575] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2847.697680] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2847.702694] ? run_timer_softirq+0x5a0/0x5a0 [ 2847.707107] __alloc_pages_nodemask+0x2127/0x2720 [ 2847.711949] ? lock_acquire+0x170/0x3f0 [ 2847.715935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2847.720774] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2847.725270] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2847.730721] ? alloc_pages_current+0x15d/0x260 [ 2847.735297] alloc_pages_current+0x155/0x260 [ 2847.739704] ion_page_pool_alloc+0x118/0x1b0 [ 2847.744106] ion_system_heap_allocate+0x133/0x8c0 [ 2847.748948] ? ion_alloc+0x187/0x810 [ 2847.752655] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2847.758104] ? ion_system_contig_heap_create+0x130/0x130 [ 2847.763549] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2847.768562] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2847.773403] ion_alloc+0x204/0x810 [ 2847.776951] ? ion_dma_buf_release+0x40/0x40 [ 2847.781362] ? __might_fault+0x177/0x1b0 [ 2847.785421] ion_ioctl+0xea/0x1ee [ 2847.788874] ? ion_alloc.cold+0x3b/0x3b [ 2847.792847] ? lock_acquire+0x170/0x3f0 [ 2847.796817] ? lock_downgrade+0x740/0x740 [ 2847.800956] ? ion_alloc.cold+0x3b/0x3b [ 2847.804926] do_vfs_ioctl+0x75a/0xff0 [ 2847.808730] ? ioctl_preallocate+0x1a0/0x1a0 [ 2847.813130] ? lock_downgrade+0x740/0x740 [ 2847.817276] ? __fget+0x225/0x360 [ 2847.820728] ? do_vfs_ioctl+0xff0/0xff0 [ 2847.824698] ? security_file_ioctl+0x83/0xb0 [ 2847.829101] SyS_ioctl+0x7f/0xb0 [ 2847.832466] ? do_vfs_ioctl+0xff0/0xff0 [ 2847.836444] do_syscall_64+0x1d5/0x640 [ 2847.840333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2847.845513] RIP: 0033:0x45e219 [ 2847.847131] syz-executor.5: [ 2847.848688] RSP: 002b:00007f0190180c68 EFLAGS: 00000246 [ 2847.848696] page allocation failure: order:0 [ 2847.851684] ORIG_RAX: 0000000000000010 [ 2847.857030] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2847.861408] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2847.861414] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2847.861418] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2847.861428] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2847.861433] R13: 00007ffe7c6cce5f R14: 00007f01901819c0 R15: 000000000119bf8c [ 2847.909494] lowmem_reserve[]: 0 0 0 0 0 [ 2847.913496] Node 0 DMA: 5*4kB (M) 7*8kB (ME) 35*16kB (UME) 21*32kB (UME) 5*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10972kB [ 2847.921720] (null) [ 2847.929146] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2847.934547] syz-executor.5 cpuset= [ 2847.957134] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2847.967098] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2847.992035] / mems_allowed=0-1 [ 2847.995264] CPU: 0 PID: 31674 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2848.003142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.007087] Node 0 [ 2848.012503] Call Trace: [ 2848.012505] DMA32: 2766*4kB [ 2848.014733] dump_stack+0x1b2/0x283 [ 2848.023921] warn_alloc.cold+0x96/0x1cc [ 2848.027893] ? zone_watermark_ok_safe+0x220/0x220 [ 2848.032721] ? usleep_range+0x130/0x130 [ 2848.036673] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2848.041769] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2848.046786] ? run_timer_softirq+0x5a0/0x5a0 [ 2848.047621] (UME) 631*8kB (UME) [ 2848.051193] __alloc_pages_nodemask+0x2127/0x2720 [ 2848.051209] ? lock_acquire+0x170/0x3f0 [ 2848.054547] 65*16kB [ 2848.059467] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2848.059477] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2848.059491] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2848.059505] ? retint_kernel+0x2d/0x2d [ 2848.084319] alloc_pages_current+0x155/0x260 [ 2848.087062] (UM) 12*32kB [ 2848.088709] ion_page_pool_alloc+0x118/0x1b0 [ 2848.088718] ion_system_heap_allocate+0x133/0x8c0 [ 2848.091461] (UM) [ 2848.095850] ? ion_alloc+0x187/0x810 [ 2848.106397] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2848.107057] 3*64kB [ 2848.111836] ? ion_system_contig_heap_create+0x130/0x130 [ 2848.111838] (U) 0*128kB [ 2848.114057] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2848.127129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2848.131952] ion_alloc+0x204/0x810 [ 2848.135476] ? ion_dma_buf_release+0x40/0x40 [ 2848.137058] 0*256kB 0*512kB [ 2848.139870] ? __might_fault+0x177/0x1b0 [ 2848.139881] ion_ioctl+0xea/0x1ee [ 2848.142899] 0*1024kB [ 2848.146937] ? ion_alloc.cold+0x3b/0x3b [ 2848.156706] ? lock_acquire+0x170/0x3f0 [ 2848.157054] 0*2048kB [ 2848.160660] ? lock_downgrade+0x740/0x740 [ 2848.160662] 0*4096kB = 17728kB [ 2848.163052] ? ion_alloc.cold+0x3b/0x3b [ 2848.174285] do_vfs_ioctl+0x75a/0xff0 [ 2848.177054] Node 0 Normal: [ 2848.178079] ? ioctl_preallocate+0x1a0/0x1a0 [ 2848.178085] 0*4kB [ 2848.180995] ? lock_downgrade+0x740/0x740 [ 2848.185380] 0*8kB [ 2848.187513] ? __fget+0x225/0x360 [ 2848.187522] ? do_vfs_ioctl+0xff0/0xff0 [ 2848.187532] ? security_file_ioctl+0x83/0xb0 [ 2848.205533] SyS_ioctl+0x7f/0xb0 [ 2848.207048] 0*16kB [ 2848.208877] ? do_vfs_ioctl+0xff0/0xff0 [ 2848.208879] 0*32kB 0*64kB [ 2848.211101] do_syscall_64+0x1d5/0x640 [ 2848.215042] 0*128kB [ 2848.217887] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2848.217896] RIP: 0033:0x45e219 [ 2848.232460] RSP: 002b:00007faff9a34c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2848.237046] 0*256kB [ 2848.240148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2848.240154] 0*512kB [ 2848.242452] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2848.259246] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2848.266506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2848.267045] 0*1024kB [ 2848.273754] R13: 00007ffd3f0b1def R14: 00007faff9a359c0 R15: 000000000119bf8c [ 2848.273760] 0*2048kB [ 2848.300268] warn_alloc_show_mem: 2 callbacks suppressed [ 2848.300272] Mem-Info: [ 2848.310500] active_anon:263712 inactive_anon:12106 isolated_anon:0 [ 2848.310500] active_file:15 inactive_file:15 isolated_file:0 [ 2848.310500] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2848.310500] slab_reclaimable:20974 slab_unreclaimable:159419 [ 2848.310500] mapped:52707 shmem:15126 pagetables:71393 bounce:0 [ 2848.310500] free:13868 free_pcp:207 free_cma:0 [ 2848.320869] CPU: 1 PID: 31731 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2848.351861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.361210] Call Trace: [ 2848.363796] dump_stack+0x1b2/0x283 [ 2848.367077] Node 0 active_anon:957132kB inactive_anon:48420kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210828kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2848.367421] warn_alloc.cold+0x96/0x1cc [ 2848.398569] syz-executor.0 cpuset=/ [ 2848.399206] ? zone_watermark_ok_safe+0x220/0x220 [ 2848.399218] ? usleep_range+0x130/0x130 [ 2848.402821] mems_allowed=0-1 [ 2848.407638] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2848.407649] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2848.407659] ? run_timer_softirq+0x5a0/0x5a0 [ 2848.407673] __alloc_pages_nodemask+0x2127/0x2720 [ 2848.407688] ? lock_acquire+0x170/0x3f0 [ 2848.438025] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2848.442847] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2848.447333] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2848.452790] alloc_pages_current+0x155/0x260 [ 2848.457199] ion_page_pool_alloc+0x118/0x1b0 [ 2848.461603] ion_system_heap_allocate+0x133/0x8c0 [ 2848.466444] ? ion_alloc+0x187/0x810 [ 2848.470153] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2848.475598] ? ion_system_contig_heap_create+0x130/0x130 [ 2848.477102] Node 1 active_anon:97716kB inactive_anon:4kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2848.481041] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2848.512215] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2848.517056] ion_alloc+0x204/0x810 [ 2848.520582] ? ion_dma_buf_release+0x40/0x40 [ 2848.524973] ? __might_fault+0x177/0x1b0 [ 2848.529026] ion_ioctl+0xea/0x1ee [ 2848.532476] ? ion_alloc.cold+0x3b/0x3b [ 2848.536449] ? lock_acquire+0x170/0x3f0 [ 2848.540419] ? lock_downgrade+0x740/0x740 [ 2848.544564] ? ion_alloc.cold+0x3b/0x3b [ 2848.548542] do_vfs_ioctl+0x75a/0xff0 [ 2848.552518] ? ioctl_preallocate+0x1a0/0x1a0 [ 2848.556925] ? lock_downgrade+0x740/0x740 [ 2848.561077] ? __fget+0x225/0x360 [ 2848.564522] ? do_vfs_ioctl+0xff0/0xff0 [ 2848.568488] ? security_file_ioctl+0x83/0xb0 [ 2848.572892] SyS_ioctl+0x7f/0xb0 [ 2848.576253] ? do_vfs_ioctl+0xff0/0xff0 [ 2848.580223] do_syscall_64+0x1d5/0x640 [ 2848.584114] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2848.589298] RIP: 0033:0x45e219 [ 2848.592483] RSP: 002b:00007faff99d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2848.600193] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2848.607455] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2848.614720] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 2848.621981] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 2848.629237] R13: 00007ffd3f0b1def R14: 00007faff99d29c0 R15: 000000000119c184 [ 2848.651108] 0*4096kB = 0kB [ 2848.653862] CPU: 0 PID: 31665 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2848.653974] Node 1 [ 2848.661838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.661841] Call Trace: [ 2848.661858] dump_stack+0x1b2/0x283 [ 2848.661872] warn_alloc.cold+0x96/0x1cc [ 2848.661882] ? zone_watermark_ok_safe+0x220/0x220 [ 2848.667245] Normal: [ 2848.673437] ? usleep_range+0x130/0x130 [ 2848.675992] 1307*4kB [ 2848.679596] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2848.679609] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2848.679618] ? run_timer_softirq+0x5a0/0x5a0 [ 2848.679634] __alloc_pages_nodemask+0x2127/0x2720 [ 2848.683575] (ME) [ 2848.688400] ? lock_acquire+0x170/0x3f0 [ 2848.688416] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2848.690710] 765*8kB [ 2848.694661] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2848.707025] (ME) [ 2848.707132] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2848.711506] 271*16kB [ 2848.716335] alloc_pages_current+0x155/0x260 [ 2848.727018] (ME) [ 2848.727144] ion_page_pool_alloc+0x118/0x1b0 [ 2848.729537] 136*32kB [ 2848.734008] ion_system_heap_allocate+0x133/0x8c0 [ 2848.736047] (UME) [ 2848.741483] ? ion_alloc+0x187/0x810 [ 2848.741493] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2848.741500] ? ion_system_contig_heap_create+0x130/0x130 [ 2848.741509] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2848.757017] 10*64kB [ 2848.757101] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2848.761910] (UM) [ 2848.764044] ion_alloc+0x204/0x810 [ 2848.777013] 6*128kB [ 2848.778592] ? ion_dma_buf_release+0x40/0x40 [ 2848.783571] (UM) [ 2848.785877] ? __might_fault+0x177/0x1b0 [ 2848.807011] 3*256kB (M) 3*512kB [ 2848.809029] ion_ioctl+0xea/0x1ee [ 2848.809039] ? ion_alloc.cold+0x3b/0x3b [ 2848.812379] (UM) [ 2848.815813] ? lock_acquire+0x170/0x3f0 [ 2848.825765] ? lock_downgrade+0x740/0x740 [ 2848.829908] ? ion_alloc.cold+0x3b/0x3b [ 2848.833890] do_vfs_ioctl+0x75a/0xff0 [ 2848.837072] 1*1024kB (M) 1*2048kB [ 2848.837688] ? ioctl_preallocate+0x1a0/0x1a0 [ 2848.837697] ? lock_downgrade+0x740/0x740 [ 2848.841214] (M) [ 2848.845604] ? __fget+0x225/0x360 [ 2848.855118] ? do_vfs_ioctl+0xff0/0xff0 [ 2848.859085] ? security_file_ioctl+0x83/0xb0 [ 2848.863487] SyS_ioctl+0x7f/0xb0 [ 2848.866848] ? do_vfs_ioctl+0xff0/0xff0 [ 2848.867010] 0*4096kB = 26820kB [ 2848.870812] do_syscall_64+0x1d5/0x640 [ 2848.870828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2848.873994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2848.877855] RIP: 0033:0x45e219 [ 2848.877859] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2848.877868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2848.877873] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2848.877878] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2848.877884] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2848.897011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2848.902720] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2848.927009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2848.947044] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.028034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2849.036631] 15231 total pagecache pages [ 2849.037024] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2849.048211] Node 0 DMA32 free:78556kB min:36200kB low:45248kB high:54296kB active_anon:957088kB inactive_anon:48420kB active_file:20kB inactive_file:720kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39840kB pagetables:158040kB bounce:0kB free_pcp:1208kB local_pcp:528kB free_cma:0kB [ 2849.057002] 0 pages in swap cache [ 2849.085143] Swap cache stats: add 0, delete 0, find 0/0 [ 2849.092162] Free swap = 0kB [ 2849.095528] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2849.107861] Total swap = 0kB [ 2849.110882] 2097051 pages RAM [ 2849.113976] 0 pages HighMem/MovableOnly [ 2849.117988] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2849.123104] CPU: 1 PID: 31689 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2849.130977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.140324] Call Trace: [ 2849.142909] dump_stack+0x1b2/0x283 [ 2849.146539] warn_alloc.cold+0x96/0x1cc [ 2849.150511] ? zone_watermark_ok_safe+0x220/0x220 [ 2849.155367] __alloc_pages_nodemask+0x2127/0x2720 [ 2849.160207] ? lock_acquire+0x170/0x3f0 [ 2849.164180] ? lock_acquire+0x170/0x3f0 [ 2849.168158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2849.173005] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2849.178454] ? __mutex_unlock_slowpath+0x75/0x770 [ 2849.183299] alloc_pages_current+0x155/0x260 [ 2849.187705] ion_page_pool_alloc+0x118/0x1b0 [ 2849.192112] ion_system_heap_allocate+0x133/0x8c0 [ 2849.196957] ? _raw_spin_unlock+0x29/0x40 [ 2849.201099] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2849.205375] lowmem_reserve[]: [ 2849.206023] ? ion_system_contig_heap_create+0x130/0x130 [ 2849.206032] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2849.206044] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2849.206056] ion_alloc+0x27a/0x810 [ 2849.227975] ? ion_dma_buf_release+0x40/0x40 [ 2849.231830] 0 [ 2849.232383] ? __might_fault+0x177/0x1b0 [ 2849.232395] ion_ioctl+0xea/0x1ee [ 2849.232404] ? ion_alloc.cold+0x3b/0x3b [ 2849.232416] ? lock_acquire+0x170/0x3f0 [ 2849.232425] ? lock_downgrade+0x740/0x740 [ 2849.236913] 0 [ 2849.238259] ? ion_alloc.cold+0x3b/0x3b [ 2849.238270] do_vfs_ioctl+0x75a/0xff0 [ 2849.238282] ? ioctl_preallocate+0x1a0/0x1a0 [ 2849.238290] ? lock_downgrade+0x740/0x740 [ 2849.238302] ? __fget+0x225/0x360 [ 2849.238312] ? do_vfs_ioctl+0xff0/0xff0 [ 2849.241796] 0 [ 2849.245721] ? security_file_ioctl+0x83/0xb0 [ 2849.285407] SyS_ioctl+0x7f/0xb0 [ 2849.288773] ? do_vfs_ioctl+0xff0/0xff0 [ 2849.292747] do_syscall_64+0x1d5/0x640 [ 2849.296638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2849.300403] 0 [ 2849.301815] RIP: 0033:0x45e219 [ 2849.301819] RSP: 002b:00007f0190180c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2849.301827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2849.301832] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2849.301837] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2849.301841] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2849.301846] R13: 00007ffe7c6cce5f R14: 00007f01901819c0 R15: 000000000119bf8c [ 2849.303058] 363840 pages reserved [ 2849.323303] 0 [ 2849.329493] 0 pages cma reserved [ 2849.362373] Out of memory (oom_kill_allocating_task): Kill process 7995 (syz-fuzzer) score 0 or sacrifice child [ 2849.373658] Killed process 30594 (syz-executor.5) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2849.395747] oom_reaper: reaped process 30594 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2849.407587] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.415963] warn_alloc_show_mem: 1 callbacks suppressed [ 2849.415966] Mem-Info: [ 2849.478786] active_anon:263262 inactive_anon:12106 isolated_anon:0 [ 2849.478786] active_file:376 inactive_file:1402 isolated_file:0 [ 2849.478786] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2849.478786] slab_reclaimable:20764 slab_unreclaimable:160659 [ 2849.478786] mapped:45282 shmem:15126 pagetables:71393 bounce:0 [ 2849.478786] free:25106 free_pcp:521 free_cma:0 [ 2849.485871] lowmem_reserve[]: 0 0 0 0 0 [ 2849.544089] Node 1 Normal free:53596kB min:53696kB low:67120kB high:80544kB active_anon:97716kB inactive_anon:4kB active_file:1540kB inactive_file:3852kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 2849.574035] Node 0 active_anon:955332kB inactive_anon:48420kB active_file:92kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176228kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2849.656992] lowmem_reserve[]: 0 0 0 0 0 [ 2849.657219] Node 1 active_anon:97716kB inactive_anon:4kB active_file:1472kB inactive_file:1508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2700kB dirty:100kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2849.661009] Node 0 [ 2849.756984] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.776939] DMA: 6*4kB (UM) 9*8kB (UME) 35*16kB (UME) 21*32kB (UME) 5*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10992kB [ 2849.832054] oom_reaper: reaped process 31672 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2849.867109] Node 0 DMA32: 3036*4kB (UME) 631*8kB (UME) 55*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 2849.870911] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2849.906963] Node 0 DMA32 free:17884kB min:36200kB low:45248kB high:54296kB active_anon:955260kB inactive_anon:48420kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39808kB pagetables:157844kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2849.908955] Node 0 [ 2849.966397] lowmem_reserve[]: 0 0 0 0 0 [ 2849.972705] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2850.020806] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2850.060395] Node 1 Normal: 1373*4kB (UME) 762*8kB (ME) 272*16kB (UME) 328*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26436kB [ 2850.072381] lowmem_reserve[]: 0 0 0 0 0 [ 2850.082837] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2850.096909] Node 1 Normal free:26560kB min:53696kB low:67120kB high:80544kB active_anon:97632kB inactive_anon:4kB active_file:96kB inactive_file:620kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:156kB local_pcp:120kB free_cma:0kB [ 2850.122812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2850.148244] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2850.153380] CPU: 0 PID: 31665 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2850.161255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.170602] Call Trace: [ 2850.173187] dump_stack+0x1b2/0x283 [ 2850.176816] warn_alloc.cold+0x96/0x1cc [ 2850.180790] ? zone_watermark_ok_safe+0x220/0x220 [ 2850.185644] __alloc_pages_nodemask+0x2127/0x2720 [ 2850.190480] ? lock_acquire+0x170/0x3f0 [ 2850.194452] ? lock_acquire+0x170/0x3f0 [ 2850.198425] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2850.203269] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2850.208716] ? __mutex_unlock_slowpath+0x75/0x770 [ 2850.213557] alloc_pages_current+0x155/0x260 [ 2850.217961] ion_page_pool_alloc+0x118/0x1b0 [ 2850.222363] ion_system_heap_allocate+0x133/0x8c0 [ 2850.222677] lowmem_reserve[]: [ 2850.227196] ? _raw_spin_unlock+0x29/0x40 [ 2850.227205] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2850.227215] ? ion_system_contig_heap_create+0x130/0x130 [ 2850.244859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2850.249876] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2850.254715] ion_alloc+0x27a/0x810 [ 2850.258265] ? ion_dma_buf_release+0x40/0x40 [ 2850.262674] ? __might_fault+0x177/0x1b0 [ 2850.263004] 0 0 [ 2850.266724] ion_ioctl+0xea/0x1ee [ 2850.266742] 0 0 [ 2850.268713] ? ion_alloc.cold+0x3b/0x3b [ 2850.268724] ? lock_acquire+0x170/0x3f0 [ 2850.268732] ? lock_downgrade+0x740/0x740 [ 2850.268741] ? ion_alloc.cold+0x3b/0x3b [ 2850.273733] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 2850.274141] do_vfs_ioctl+0x75a/0xff0 [ 2850.303162] ? ioctl_preallocate+0x1a0/0x1a0 [ 2850.307736] ? lock_downgrade+0x740/0x740 [ 2850.311881] ? __fget+0x225/0x360 [ 2850.315328] ? do_vfs_ioctl+0xff0/0xff0 [ 2850.316877] (null) [ 2850.319291] ? security_file_ioctl+0x83/0xb0 [ 2850.319294] , order=1, oom_score_adj=0 [ 2850.319300] systemd-journal cpuset= [ 2850.321428] SyS_ioctl+0x7f/0xb0 [ 2850.325812] / [ 2850.329765] ? do_vfs_ioctl+0xff0/0xff0 [ 2850.329778] do_syscall_64+0x1d5/0x640 [ 2850.333518] 0 [ 2850.336839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2850.353304] RIP: 0033:0x45e219 [ 2850.356482] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 [ 2850.356487] Node 0 [ 2850.356494] ORIG_RAX: 0000000000000010 [ 2850.368006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2850.375267] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2850.382527] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2850.389787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2850.393127] DMA: [ 2850.397049] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2850.406436] mems_allowed=0-1 [ 2850.426999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2850.435669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2850.436876] CPU: 1 PID: 30556 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2850.452447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.461896] Call Trace: [ 2850.464482] dump_stack+0x1b2/0x283 [ 2850.468109] dump_header+0x178/0x82f [ 2850.471819] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2850.476913] ? ___ratelimit+0x2cd/0x522 [ 2850.480885] oom_kill_process.cold+0x10/0xb18 [ 2850.485390] out_of_memory+0xe3e/0x1190 [ 2850.487986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2850.489359] ? oom_killer_disable+0x1c0/0x1c0 [ 2850.502393] ? mutex_trylock+0x152/0x1a0 [ 2850.506450] __alloc_pages_nodemask+0x23e1/0x2720 [ 2850.511299] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2850.516148] ? cache_grow_begin+0x41/0x630 [ 2850.519109] 15172 total pagecache pages [ 2850.520394] cache_grow_begin+0x91/0x630 [ 2850.524346] 0 pages in swap cache [ 2850.528380] ? cache_grow_begin+0x91/0x630 [ 2850.528389] fallback_alloc+0x207/0x2c0 [ 2850.528401] kmem_cache_alloc+0x1e5/0x3c0 [ 2850.528410] getname_flags+0xc8/0x550 [ 2850.528419] SyS_mkdirat+0x83/0x270 [ 2850.528427] ? SyS_mknod+0x30/0x30 [ 2850.528435] ? do_syscall_64+0x4c/0x640 [ 2850.528440] ? SyS_mkdirat+0x270/0x270 [ 2850.528447] do_syscall_64+0x1d5/0x640 [ 2850.528461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2850.528470] RIP: 0033:0x7f2325209687 [ 2850.570924] Swap cache stats: add 0, delete 0, find 0/0 [ 2850.572000] RSP: 002b:00007ffd445de1f8 EFLAGS: 00000293 [ 2850.575695] Free swap = 0kB [ 2850.581029] ORIG_RAX: 0000000000000053 [ 2850.581035] RAX: ffffffffffffffda RBX: 00007ffd445e1260 RCX: 00007f2325209687 [ 2850.581039] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055ddbb32c860 [ 2850.581043] RBP: 00007ffd445de230 R08: 000055ddb9f453e5 R09: 0000000000000018 [ 2850.581047] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2850.581050] R13: 0000000000000001 R14: 000055ddbb32c860 R15: 00007ffd445de870 [ 2850.593104] 5*4kB [ 2850.672704] Total swap = 0kB [ 2850.692654] 2097051 pages RAM [ 2850.695782] 0 pages HighMem/MovableOnly [ 2850.715905] (M) 9*8kB (UME) 34*16kB (UME) 21*32kB (UME) 5*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10972kB [ 2850.736921] 363840 pages reserved [ 2850.740415] 0 pages cma reserved [ 2850.767137] Node 0 DMA32: 3014*4kB (ME) 627*8kB (UME) 55*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18080kB [ 2850.827018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2850.866851] Node 1 Normal: 1373*4kB (UME) 762*8kB (ME) 272*16kB (UME) 328*32kB (UME) 427*64kB (U) 57*128kB (U) 41*256kB (U) 18*512kB (U) 277*1024kB (U) 47*2048kB (U) 0*4096kB = 460676kB [ 2850.906909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2850.926834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2850.935424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2850.976844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2850.985439] 15157 total pagecache pages [ 2851.006839] 0 pages in swap cache [ 2851.006883] warn_alloc_show_mem: 2 callbacks suppressed [ 2851.006885] Mem-Info: [ 2851.010295] Swap cache stats: add 0, delete 0, find 0/0 [ 2851.015649] active_anon:263232 inactive_anon:12106 isolated_anon:0 [ 2851.015649] active_file:15 inactive_file:16 isolated_file:0 [ 2851.015649] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2851.015649] slab_reclaimable:20692 slab_unreclaimable:160823 [ 2851.015649] mapped:44024 shmem:15126 pagetables:71344 bounce:0 [ 2851.015649] free:180009 free_pcp:678 free_cma:0 [ 2851.046816] Free swap = 0kB [ 2851.067111] Mem-Info: [ 2851.069530] active_anon:263232 inactive_anon:12106 isolated_anon:0 [ 2851.069530] active_file:15 inactive_file:16 isolated_file:0 [ 2851.069530] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2851.069530] slab_reclaimable:20692 slab_unreclaimable:160823 [ 2851.069530] mapped:44024 shmem:15126 pagetables:71344 bounce:0 [ 2851.069530] free:191334 free_pcp:661 free_cma:0 [ 2851.126830] Total swap = 0kB [ 2851.129869] 2097051 pages RAM [ 2851.130136] Node 0 active_anon:955296kB inactive_anon:48420kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176096kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2851.132959] 0 pages HighMem/MovableOnly [ 2851.200113] Node 1 active_anon:97632kB inactive_anon:4kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2851.236818] Node 0 active_anon:955296kB inactive_anon:48420kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176096kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2851.288504] 363840 pages reserved [ 2851.291972] 0 pages cma reserved [ 2851.346812] Node 1 active_anon:97632kB inactive_anon:4kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2851.350214] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2851.456791] Node 0 [ 2851.522810] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2851.530558] Node 0 DMA32 free:317632kB min:36200kB low:45248kB high:54296kB active_anon:955252kB inactive_anon:48420kB active_file:1020kB inactive_file:716kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39808kB pagetables:157844kB bounce:0kB free_pcp:908kB local_pcp:580kB free_cma:0kB [ 2851.530776] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2851.626808] lowmem_reserve[]: 0 0 0 0 0 [ 2851.630822] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2851.682285] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2851.694174] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2851.730230] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2851.735374] CPU: 1 PID: 31731 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2851.738820] lowmem_reserve[]: [ 2851.743240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2851.743247] 0 [ 2851.746325] Call Trace: [ 2851.760024] dump_stack+0x1b2/0x283 [ 2851.763649] warn_alloc.cold+0x96/0x1cc [ 2851.767618] ? zone_watermark_ok_safe+0x220/0x220 [ 2851.772519] __alloc_pages_nodemask+0x2127/0x2720 [ 2851.777357] ? lock_acquire+0x170/0x3f0 [ 2851.781326] ? lock_acquire+0x170/0x3f0 [ 2851.785301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2851.790151] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2851.795598] ? __mutex_unlock_slowpath+0x75/0x770 [ 2851.796780] 0 0 0 [ 2851.800436] alloc_pages_current+0x155/0x260 [ 2851.800449] ion_page_pool_alloc+0x118/0x1b0 [ 2851.802574] 0 [ 2851.806960] ion_system_heap_allocate+0x133/0x8c0 [ 2851.806970] ? _raw_spin_unlock+0x29/0x40 [ 2851.806978] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2851.806986] ? ion_system_contig_heap_create+0x130/0x130 [ 2851.806995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2851.807004] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2851.807016] ion_alloc+0x27a/0x810 [ 2851.807032] ? ion_dma_buf_release+0x40/0x40 [ 2851.827063] ? __might_fault+0x177/0x1b0 [ 2851.832481] Node 1 [ 2851.837481] ion_ioctl+0xea/0x1ee [ 2851.837497] ? ion_alloc.cold+0x3b/0x3b [ 2851.837510] ? lock_acquire+0x170/0x3f0 [ 2851.866771] syz-executor.5 cpuset= [ 2851.867831] ? lock_downgrade+0x740/0x740 [ 2851.867832] / mems_allowed=0-1 [ 2851.871372] ? ion_alloc.cold+0x3b/0x3b [ 2851.882628] do_vfs_ioctl+0x75a/0xff0 [ 2851.886425] ? ioctl_preallocate+0x1a0/0x1a0 [ 2851.886775] Normal free:183672kB min:53696kB low:67120kB high:80544kB active_anon:97632kB inactive_anon:4kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:100kB local_pcp:212kB free_cma:0kB [ 2851.890822] ? lock_downgrade+0x740/0x740 [ 2851.923298] ? __fget+0x225/0x360 [ 2851.926741] ? do_vfs_ioctl+0xff0/0xff0 [ 2851.930710] ? security_file_ioctl+0x83/0xb0 [ 2851.935114] SyS_ioctl+0x7f/0xb0 [ 2851.938467] ? do_vfs_ioctl+0xff0/0xff0 [ 2851.942429] do_syscall_64+0x1d5/0x640 [ 2851.946300] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2851.951500] RIP: 0033:0x45e219 [ 2851.954677] RSP: 002b:00007faff99d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2851.962376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2851.969636] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2851.976911] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 2851.984680] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 2851.991932] R13: 00007ffd3f0b1def R14: 00007faff99d29c0 R15: 000000000119c184 [ 2852.016783] CPU: 0 PID: 31674 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2852.024677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.034024] Call Trace: [ 2852.036617] dump_stack+0x1b2/0x283 [ 2852.036728] lowmem_reserve[]: 0 [ 2852.040234] warn_alloc.cold+0x96/0x1cc [ 2852.040240] 2717 [ 2852.043497] ? zone_watermark_ok_safe+0x220/0x220 [ 2852.054328] __alloc_pages_nodemask+0x2127/0x2720 [ 2852.059168] ? lock_acquire+0x170/0x3f0 [ 2852.061777] 2718 2718 2718 [ 2852.063141] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2852.066062] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2852.076317] ? __mutex_unlock_slowpath+0x75/0x770 [ 2852.081158] alloc_pages_current+0x155/0x260 [ 2852.085561] ion_page_pool_alloc+0x118/0x1b0 [ 2852.086726] Node 0 DMA32 free:45172kB min:36200kB low:45248kB high:54296kB active_anon:955248kB inactive_anon:48420kB active_file:820kB inactive_file:896kB unevictable:0kB writepending:76kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39808kB pagetables:157844kB bounce:0kB free_pcp:752kB local_pcp:700kB free_cma:0kB [ 2852.089972] ion_system_heap_allocate+0x133/0x8c0 [ 2852.089985] ? _raw_spin_unlock+0x29/0x40 [ 2852.128426] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2852.133348] ? ion_system_contig_heap_create+0x130/0x130 [ 2852.138788] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2852.143799] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2852.148636] ion_alloc+0x27a/0x810 [ 2852.152172] ? ion_dma_buf_release+0x40/0x40 [ 2852.155519] lowmem_reserve[]: 0 [ 2852.156573] ? __might_fault+0x177/0x1b0 [ 2852.156578] 0 [ 2852.159834] ion_ioctl+0xea/0x1ee [ 2852.159850] ? ion_alloc.cold+0x3b/0x3b [ 2852.159862] ? lock_acquire+0x170/0x3f0 [ 2852.165609] 0 [ 2852.165686] ? lock_downgrade+0x740/0x740 [ 2852.169129] 0 [ 2852.173086] ? ion_alloc.cold+0x3b/0x3b [ 2852.188683] do_vfs_ioctl+0x75a/0xff0 [ 2852.192482] ? ioctl_preallocate+0x1a0/0x1a0 [ 2852.195335] 0 [ 2852.196877] ? lock_downgrade+0x740/0x740 [ 2852.196891] ? __fget+0x225/0x360 [ 2852.196901] ? do_vfs_ioctl+0xff0/0xff0 [ 2852.202809] ? security_file_ioctl+0x83/0xb0 [ 2852.206232] Node 0 [ 2852.210209] SyS_ioctl+0x7f/0xb0 [ 2852.210218] ? do_vfs_ioctl+0xff0/0xff0 [ 2852.210229] do_syscall_64+0x1d5/0x640 [ 2852.210246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2852.214645] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2852.216833] RIP: 0033:0x45e219 [ 2852.216838] RSP: 002b:00007faff9a34c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2852.216851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2852.220185] lowmem_reserve[]: [ 2852.224144] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2852.228040] 0 [ 2852.233170] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2852.258080] 0 [ 2852.261211] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2852.268924] 0 [ 2852.276140] R13: 00007ffd3f0b1def R14: 00007faff9a359c0 R15: 000000000119bf8c [ 2852.279250] 0 [ 2852.296715] lowmem_reserve[]: 0 0 0 0 0 [ 2852.350015] 0 [ 2852.350734] Node 0 DMA: [ 2852.352528] Node 1 [ 2852.352531] 7*4kB (UM) [ 2852.355191] Normal free:77928kB min:53696kB low:67120kB high:80544kB active_anon:97632kB inactive_anon:4kB active_file:40kB inactive_file:240kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:188kB local_pcp:52kB free_cma:0kB [ 2852.366715] 13*8kB (UME) 40*16kB (UME) 21*32kB (UME) 4*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11044kB [ 2852.486711] lowmem_reserve[]: 0 0 0 0 0 [ 2852.486743] Node 0 [ 2852.490724] Node 0 [ 2852.490732] DMA32: [ 2852.492942] DMA: [ 2852.495161] 3201*4kB [ 2852.520527] 5*4kB (M) 7*8kB (ME) 40*16kB (UME) 21*32kB (UME) 4*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10988kB [ 2852.537547] (UME) 556*8kB (UME) 35*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17812kB [ 2852.588404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2852.591508] Node 0 [ 2852.629139] Node 1 [ 2852.629196] DMA32: 3285*4kB (UME) 542*8kB (UME) 34*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 2852.640021] Normal: 918*4kB (UME) 505*8kB (UME) 208*16kB (ME) 492*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 2852.696806] Mem-Info: [ 2852.699248] active_anon:263206 inactive_anon:12106 isolated_anon:39 [ 2852.699248] active_file:6 inactive_file:1 isolated_file:0 [ 2852.699248] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2852.699248] slab_reclaimable:20692 slab_unreclaimable:160595 [ 2852.699248] mapped:44033 shmem:15126 pagetables:71344 bounce:0 [ 2852.699248] free:13832 free_pcp:2 free_cma:0 [ 2852.716697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2852.732873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2852.776707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2852.792079] Node 1 Normal: 918*4kB (UME) 505*8kB (UME) 208*16kB (ME) 492*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 2852.828533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2852.846676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2852.849973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2852.855254] 15152 total pagecache pages [ 2852.880572] Node 0 active_anon:955224kB inactive_anon:48420kB active_file:20kB inactive_file:40kB unevictable:0kB isolated(anon):76kB isolated(file):0kB mapped:176168kB dirty:76kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2852.916667] 0 pages in swap cache [ 2852.920158] Swap cache stats: add 0, delete 0, find 0/0 [ 2852.925510] Free swap = 0kB [ 2852.940684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2852.948177] Total swap = 0kB [ 2852.952280] 2097051 pages RAM [ 2852.955371] 0 pages HighMem/MovableOnly [ 2852.956071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2852.986656] 363840 pages reserved [ 2852.990113] 0 pages cma reserved [ 2852.993301] Node 1 active_anon:97636kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:32kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2853.040546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2853.071778] 15152 total pagecache pages [ 2853.075771] 0 pages in swap cache [ 2853.102418] Swap cache stats: add 0, delete 0, find 0/0 [ 2853.120514] Free swap = 0kB [ 2853.123544] Total swap = 0kB [ 2853.126555] 2097051 pages RAM [ 2853.129692] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2853.207237] 0 pages HighMem/MovableOnly [ 2853.211233] 363840 pages reserved [ 2853.214674] 0 pages cma reserved [ 2853.235873] Out of memory (oom_kill_allocating_task): Kill process 30556 (systemd-journal) score 0 or sacrifice child [ 2853.259925] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2853.265002] Node 0 DMA32 free:17900kB min:36200kB low:45248kB high:54296kB active_anon:955180kB inactive_anon:48420kB active_file:316kB inactive_file:408kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39808kB pagetables:157844kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2853.315371] Killed process 30556 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1932kB [ 2853.350542] oom_reaper: reaped process 30556 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1932kB [ 2853.443109] lowmem_reserve[]: 0 0 0 0 0 [ 2853.448906] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2853.479051] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2853.504675] systemd-journal: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2853.532023] systemd-journal cpuset=/ mems_allowed=0-1 [ 2853.546652] in:imklog cpuset=/ mems_allowed=0-1 [ 2853.551355] CPU: 1 PID: 30190 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 2853.558792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.568147] Call Trace: [ 2853.570733] dump_stack+0x1b2/0x283 [ 2853.574354] dump_header+0x178/0x82f [ 2853.578062] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2853.583158] ? ___ratelimit+0x2cd/0x522 [ 2853.587137] oom_kill_process.cold+0x10/0xb18 [ 2853.591635] out_of_memory+0xe3e/0x1190 [ 2853.595606] ? oom_killer_disable+0x1c0/0x1c0 [ 2853.600095] ? mutex_trylock+0x152/0x1a0 [ 2853.604150] __alloc_pages_nodemask+0x23e1/0x2720 [ 2853.609087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2853.613940] alloc_pages_current+0x155/0x260 [ 2853.618344] filemap_fault+0xea3/0x1980 [ 2853.622317] ext4_filemap_fault+0x84/0xb0 [ 2853.626458] __do_fault+0xfa/0x380 [ 2853.630004] __handle_mm_fault+0x2497/0x4620 [ 2853.634410] ? vm_insert_page+0x7c0/0x7c0 [ 2853.638551] ? lock_downgrade+0x740/0x740 [ 2853.642703] handle_mm_fault+0x391/0x860 [ 2853.646771] __do_page_fault+0x549/0xad0 [ 2853.650838] ? spurious_fault+0x640/0x640 [ 2853.654981] ? do_page_fault+0x60/0x4f2 [ 2853.658952] ? page_fault+0x2f/0x50 [ 2853.662574] page_fault+0x45/0x50 [ 2853.666017] RIP: 1fa0:0x1f9f [ 2853.669035] RSP: 0000:000055a4d206a9d0 EFLAGS: 7f04c57d6da0 [ 2853.669954] CPU: 1 PID: 30556 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2853.683628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.692978] Call Trace: [ 2853.695571] dump_stack+0x1b2/0x283 [ 2853.699195] warn_alloc.cold+0x96/0x1cc [ 2853.703163] ? zone_watermark_ok_safe+0x220/0x220 [ 2853.708004] ? usleep_range+0x130/0x130 [ 2853.711974] ? _find_next_bit+0xdb/0x100 [ 2853.716032] ? run_timer_softirq+0x5a0/0x5a0 [ 2853.720454] __alloc_pages_nodemask+0x2127/0x2720 [ 2853.725301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2853.730151] ? cache_grow_begin+0x41/0x630 [ 2853.734380] cache_grow_begin+0x91/0x630 [ 2853.738434] ? cache_grow_begin+0x91/0x630 [ 2853.742664] fallback_alloc+0x207/0x2c0 [ 2853.746635] kmem_cache_alloc+0x1e5/0x3c0 [ 2853.750775] getname_flags+0xc8/0x550 [ 2853.754584] SyS_mkdirat+0x83/0x270 [ 2853.758208] ? SyS_mknod+0x30/0x30 [ 2853.761745] ? do_syscall_64+0x4c/0x640 [ 2853.765711] ? SyS_mkdirat+0x270/0x270 [ 2853.769591] do_syscall_64+0x1d5/0x640 [ 2853.773477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2853.778657] RIP: 0033:0x7f2325209687 [ 2853.782355] RSP: 002b:00007ffd445de1f8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 2853.790059] RAX: ffffffffffffffda RBX: 00007ffd445e1260 RCX: 00007f2325209687 [ 2853.797319] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055ddbb32c860 [ 2853.804587] RBP: 00007ffd445de230 R08: 000055ddb9f453e5 R09: 0000000000000018 [ 2853.811850] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 2853.819114] R13: 0000000000000001 R14: 000055ddbb32c860 R15: 00007ffd445de870 [ 2853.847113] lowmem_reserve[]: 0 0 0 0 0 [ 2853.851128] Node 1 Normal free:26888kB min:53696kB low:67120kB high:80544kB active_anon:97636kB inactive_anon:4kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 2853.891480] lowmem_reserve[]: 0 0 0 0 0 [ 2853.895491] Node 0 DMA: 6*4kB (UM) 7*8kB (ME) 38*16kB (UME) 21*32kB (UME) 4*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2853.920539] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2853.926596] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2853.936564] Node 0 DMA32: 3254*4kB (UME) 545*8kB (UME) 35*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2853.944212] syz-executor.3: page allocation failure: order:0 [ 2853.970240] = 17968kB [ 2853.978470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2853.979927] syz-executor.0: [ 2853.989259] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2853.996729] Node 1 Normal: 918*4kB (UME) 505*8kB (UME) 209*16kB (UME) 488*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26672kB [ 2854.001104] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2854.011281] page allocation failure: order:0 [ 2854.022276] CPU: 0 PID: 31689 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2854.022946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2854.026685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.026689] Call Trace: [ 2854.026704] dump_stack+0x1b2/0x283 [ 2854.026719] warn_alloc.cold+0x96/0x1cc [ 2854.034572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2854.043382] ? zone_watermark_ok_safe+0x220/0x220 [ 2854.043392] ? usleep_range+0x130/0x130 [ 2854.043405] ? try_to_free_pages+0x23f/0x6e0 [ 2854.052776] Mem-Info: [ 2854.055321] ? _find_next_bit+0xdb/0x100 [ 2854.058962] active_anon:263115 inactive_anon:12106 isolated_anon:0 [ 2854.058962] active_file:15 inactive_file:13 isolated_file:0 [ 2854.058962] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2854.058962] slab_reclaimable:20664 slab_unreclaimable:160570 [ 2854.058962] mapped:44024 shmem:15126 pagetables:71344 bounce:0 [ 2854.058962] free:13890 free_pcp:195 free_cma:0 [ 2854.062890] ? run_timer_softirq+0x5a0/0x5a0 [ 2854.071475] Node 0 active_anon:954824kB inactive_anon:48420kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176096kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2854.076274] __alloc_pages_nodemask+0x2127/0x2720 [ 2854.080243] Node 1 active_anon:97636kB inactive_anon:4kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2854.084608] ? lock_acquire+0x170/0x3f0 [ 2854.087012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2854.091038] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2854.124524] Node 0 [ 2854.128883] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2854.128902] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2854.156751] warn_alloc_show_mem: 1 callbacks suppressed [ 2854.156754] Mem-Info: [ 2854.161568] alloc_pages_current+0x155/0x260 [ 2854.187764] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2854.191683] ion_page_pool_alloc+0x118/0x1b0 [ 2854.200510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2854.205308] ion_system_heap_allocate+0x133/0x8c0 [ 2854.207639] active_anon:263115 inactive_anon:12106 isolated_anon:0 [ 2854.207639] active_file:15 inactive_file:13 isolated_file:0 [ 2854.207639] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2854.207639] slab_reclaimable:20664 slab_unreclaimable:160570 [ 2854.207639] mapped:44024 shmem:15126 pagetables:71344 bounce:0 [ 2854.207639] free:13890 free_pcp:195 free_cma:0 [ 2854.212083] ? _raw_spin_unlock+0x29/0x40 [ 2854.217530] 15154 total pagecache pages [ 2854.222853] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2854.225235] 0 pages in swap cache [ 2854.229616] ? ion_system_contig_heap_create+0x130/0x130 [ 2854.229625] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2854.229638] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2854.255407] Node 0 active_anon:954824kB inactive_anon:48420kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176096kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2854.259768] ion_alloc+0x27a/0x810 [ 2854.259783] ? ion_dma_buf_release+0x40/0x40 [ 2854.259799] ? __might_fault+0x177/0x1b0 [ 2854.268356] lowmem_reserve[]: [ 2854.273172] ion_ioctl+0xea/0x1ee [ 2854.306920] Node 1 active_anon:97636kB inactive_anon:4kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2854.311017] ? ion_alloc.cold+0x3b/0x3b [ 2854.314971] Node 0 [ 2854.319878] ? lock_acquire+0x170/0x3f0 [ 2854.319887] ? lock_downgrade+0x740/0x740 [ 2854.319895] ? ion_alloc.cold+0x3b/0x3b [ 2854.323330] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2854.328750] do_vfs_ioctl+0x75a/0xff0 [ 2854.328762] ? ioctl_preallocate+0x1a0/0x1a0 [ 2854.328771] ? lock_downgrade+0x740/0x740 [ 2854.333770] Swap cache stats: add 0, delete 0, find 0/0 [ 2854.338590] ? __fget+0x225/0x360 [ 2854.338604] ? do_vfs_ioctl+0xff0/0xff0 [ 2854.366438] 0 [ 2854.369940] ? security_file_ioctl+0x83/0xb0 [ 2854.369950] SyS_ioctl+0x7f/0xb0 [ 2854.369959] ? do_vfs_ioctl+0xff0/0xff0 [ 2854.374339] 2717 [ 2854.378377] do_syscall_64+0x1d5/0x640 [ 2854.378391] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2854.378399] RIP: 0033:0x45e219 [ 2854.381480] lowmem_reserve[]: [ 2854.384940] RSP: 002b:00007f0190180c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2854.411204] 2718 [ 2854.415098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2854.417327] 2718 [ 2854.421272] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2854.425389] 2718 [ 2854.429353] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2854.429359] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2854.429363] R13: 00007ffe7c6cce5f R14: 00007f01901819c0 R15: 000000000119bf8c [ 2854.436533] syz-executor.5 cpuset= [ 2854.467101] Free swap = 0kB [ 2854.475203] (null) [ 2854.476371] Total swap = 0kB [ 2854.480366] syz-executor.3 cpuset= [ 2854.486511] 0 [ 2854.496527] / [ 2854.503697] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2854.504936] mems_allowed=0-1 [ 2854.519626] (null) [ 2854.529818] / [ 2854.534563] 2097051 pages RAM [ 2854.537723] mems_allowed=0-1 [ 2854.537735] CPU: 0 PID: 31674 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2854.546508] 2717 [ 2854.547027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.554281] 2718 [ 2854.561702] Call Trace: [ 2854.561721] dump_stack+0x1b2/0x283 [ 2854.561735] warn_alloc.cold+0x96/0x1cc [ 2854.561745] ? zone_watermark_ok_safe+0x220/0x220 [ 2854.565268] 0 pages HighMem/MovableOnly [ 2854.568352] ? usleep_range+0x130/0x130 [ 2854.568366] ? try_to_free_pages+0x23f/0x6e0 [ 2854.570494] syz-executor.0 cpuset= [ 2854.573485] ? _find_next_bit+0xdb/0x100 [ 2854.583534] 363840 pages reserved [ 2854.587560] ? run_timer_softirq+0x5a0/0x5a0 [ 2854.587579] __alloc_pages_nodemask+0x2127/0x2720 [ 2854.590668] / [ 2854.592812] ? lock_acquire+0x170/0x3f0 [ 2854.594496] mems_allowed=0-1 [ 2854.597583] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2854.597592] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2854.597612] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2854.603898] 0 pages cma reserved [ 2854.608562] alloc_pages_current+0x155/0x260 [ 2854.608578] ion_page_pool_alloc+0x118/0x1b0 [ 2854.612178] Node 0 [ 2854.619975] ion_system_heap_allocate+0x133/0x8c0 [ 2854.619988] ? _raw_spin_unlock+0x29/0x40 [ 2854.619997] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2854.636489] 2718 [ 2854.636961] ? ion_system_contig_heap_create+0x130/0x130 [ 2854.640907] 2718 [ 2854.644857] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2854.644869] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2854.656512] DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:954780kB inactive_anon:48420kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39808kB pagetables:157844kB bounce:0kB free_pcp:608kB local_pcp:576kB free_cma:0kB [ 2854.656821] ion_alloc+0x27a/0x810 [ 2854.660243] lowmem_reserve[]: [ 2854.664633] ? ion_dma_buf_release+0x40/0x40 [ 2854.687470] ? __might_fault+0x177/0x1b0 [ 2854.692899] Node 0 [ 2854.696245] ion_ioctl+0xea/0x1ee [ 2854.705662] 0 [ 2854.707231] ? ion_alloc.cold+0x3b/0x3b [ 2854.707242] ? lock_acquire+0x170/0x3f0 [ 2854.707251] ? lock_downgrade+0x740/0x740 [ 2854.712066] 0 [ 2854.716192] ? ion_alloc.cold+0x3b/0x3b [ 2854.736492] DMA32 free:17928kB min:36200kB low:45248kB high:54296kB active_anon:954780kB inactive_anon:48420kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39808kB pagetables:157844kB bounce:0kB free_pcp:608kB local_pcp:576kB free_cma:0kB [ 2854.740433] do_vfs_ioctl+0x75a/0xff0 [ 2854.769077] 0 [ 2854.772576] ? ioctl_preallocate+0x1a0/0x1a0 [ 2854.775645] 0 [ 2854.780029] ? lock_downgrade+0x740/0x740 [ 2854.780042] ? __fget+0x225/0x360 [ 2854.780053] ? do_vfs_ioctl+0xff0/0xff0 [ 2854.806468] 0 [ 2854.809223] ? security_file_ioctl+0x83/0xb0 [ 2854.846466] lowmem_reserve[]: [ 2854.847755] SyS_ioctl+0x7f/0xb0 [ 2854.849525] 0 [ 2854.853653] ? do_vfs_ioctl+0xff0/0xff0 [ 2854.866461] 0 [ 2854.867181] do_syscall_64+0x1d5/0x640 [ 2854.870252] 0 [ 2854.873605] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2854.875371] 0 [ 2854.879321] RIP: 0033:0x45e219 [ 2854.879326] RSP: 002b:00007faff9a34c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2854.879335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2854.879342] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2854.886767] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2854.891929] Node 0 [ 2854.893740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2854.906459] 0 [ 2854.911839] R13: 00007ffd3f0b1def R14: 00007faff9a359c0 R15: 000000000119bf8c [ 2854.919111] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2854.936736] CPU: 0 PID: 31672 Comm: syz-executor.3 Not tainted 4.14.215-syzkaller #0 [ 2854.943174] syz-executor.5: [ 2854.946326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.991385] Call Trace: [ 2854.993959] dump_stack+0x1b2/0x283 [ 2854.997572] Node 0 [ 2854.997580] warn_alloc.cold+0x96/0x1cc [ 2854.997590] ? zone_watermark_ok_safe+0x220/0x220 [ 2854.999826] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2855.003771] ? usleep_range+0x130/0x130 [ 2855.026459] lowmem_reserve[]: [ 2855.033465] ? try_to_free_pages+0x23f/0x6e0 [ 2855.037427] lowmem_reserve[]: [ 2855.040494] ? _find_next_bit+0xdb/0x100 [ 2855.044869] 0 [ 2855.047953] ? run_timer_softirq+0x5a0/0x5a0 [ 2855.047970] __alloc_pages_nodemask+0x2127/0x2720 [ 2855.056453] page allocation failure: order:0 [ 2855.058248] ? lock_acquire+0x170/0x3f0 [ 2855.063060] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2855.067446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.067455] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2855.067470] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2855.076446] 0 [ 2855.078493] alloc_pages_current+0x155/0x260 [ 2855.083294] 0 [ 2855.087768] ion_page_pool_alloc+0x118/0x1b0 [ 2855.087778] ion_system_heap_allocate+0x133/0x8c0 [ 2855.087790] ? ion_alloc+0x187/0x810 [ 2855.096444] 0 [ 2855.099383] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2855.101151] 0 [ 2855.105541] ? ion_system_contig_heap_create+0x130/0x130 [ 2855.116440] (null) [ 2855.121249] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2855.123023] syz-executor.5 cpuset= [ 2855.128453] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2855.128465] ion_alloc+0x204/0x810 [ 2855.128479] ? ion_dma_buf_release+0x40/0x40 [ 2855.136441] 0 [ 2855.139116] ? __might_fault+0x177/0x1b0 [ 2855.143923] 0 [ 2855.147442] ion_ioctl+0xea/0x1ee [ 2855.147451] ? ion_alloc.cold+0x3b/0x3b [ 2855.147461] ? lock_acquire+0x170/0x3f0 [ 2855.151846] 0 [ 2855.153622] ? lock_downgrade+0x740/0x740 [ 2855.166437] / [ 2855.166798] ? ion_alloc.cold+0x3b/0x3b [ 2855.170743] mems_allowed=0-1 [ 2855.172521] do_vfs_ioctl+0x75a/0xff0 [ 2855.176656] 0 [ 2855.178340] ? ioctl_preallocate+0x1a0/0x1a0 [ 2855.185362] ? lock_downgrade+0x740/0x740 [ 2855.196434] 0 [ 2855.199412] ? __fget+0x225/0x360 [ 2855.201186] Node 1 Normal free:26672kB min:53696kB low:67120kB high:80544kB active_anon:97636kB inactive_anon:4kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 2855.204626] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.204637] ? security_file_ioctl+0x83/0xb0 [ 2855.241661] SyS_ioctl+0x7f/0xb0 [ 2855.245030] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.246433] Node 1 Normal free:26672kB min:53696kB low:67120kB high:80544kB active_anon:97636kB inactive_anon:4kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127452kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 2855.249005] do_syscall_64+0x1d5/0x640 [ 2855.249023] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2855.286722] RIP: 0033:0x45e219 [ 2855.289890] RSP: 002b:00007f0d8dffec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2855.297577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2855.304824] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2855.312072] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.319322] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2855.326570] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 2855.333841] CPU: 1 PID: 31665 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2855.341720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.347998] Mem-Info: [ 2855.351064] Call Trace: [ 2855.353472] active_anon:263115 inactive_anon:12106 isolated_anon:0 [ 2855.353472] active_file:14 inactive_file:14 isolated_file:0 [ 2855.353472] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2855.353472] slab_reclaimable:20599 slab_unreclaimable:160523 [ 2855.353472] mapped:44024 shmem:15126 pagetables:71344 bounce:0 [ 2855.353472] free:13927 free_pcp:226 free_cma:0 [ 2855.356045] dump_stack+0x1b2/0x283 [ 2855.395664] warn_alloc.cold+0x96/0x1cc [ 2855.399635] ? zone_watermark_ok_safe+0x220/0x220 [ 2855.404473] ? usleep_range+0x130/0x130 [ 2855.408447] ? try_to_free_pages+0x23f/0x6e0 [ 2855.412853] ? _find_next_bit+0xdb/0x100 [ 2855.416914] ? run_timer_softirq+0x5a0/0x5a0 [ 2855.421328] __alloc_pages_nodemask+0x2127/0x2720 [ 2855.426169] ? lock_acquire+0x170/0x3f0 [ 2855.430145] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.434985] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2855.439485] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2855.444941] alloc_pages_current+0x155/0x260 [ 2855.449345] ion_page_pool_alloc+0x118/0x1b0 [ 2855.453762] ion_system_heap_allocate+0x133/0x8c0 [ 2855.458609] ? _raw_spin_unlock+0x29/0x40 [ 2855.462756] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2855.467681] ? ion_system_contig_heap_create+0x130/0x130 [ 2855.473120] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2855.476489] Node 0 active_anon:954824kB inactive_anon:48420kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176096kB dirty:0kB writeback:0kB shmem:60500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2855.478137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2855.510905] ion_alloc+0x27a/0x810 [ 2855.514449] ? ion_dma_buf_release+0x40/0x40 [ 2855.518861] ? __might_fault+0x177/0x1b0 [ 2855.522920] ion_ioctl+0xea/0x1ee [ 2855.526371] ? ion_alloc.cold+0x3b/0x3b [ 2855.530344] ? lock_acquire+0x170/0x3f0 [ 2855.534308] ? lock_downgrade+0x740/0x740 [ 2855.538447] ? ion_alloc.cold+0x3b/0x3b [ 2855.542522] do_vfs_ioctl+0x75a/0xff0 [ 2855.546335] ? ioctl_preallocate+0x1a0/0x1a0 [ 2855.550736] ? lock_downgrade+0x740/0x740 [ 2855.554884] ? __fget+0x225/0x360 [ 2855.558336] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.562306] ? security_file_ioctl+0x83/0xb0 [ 2855.566708] SyS_ioctl+0x7f/0xb0 [ 2855.570072] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.574052] do_syscall_64+0x1d5/0x640 [ 2855.577943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2855.583119] RIP: 0033:0x45e219 [ 2855.586456] Node 1 active_anon:97636kB inactive_anon:4kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2855.592724] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2855.626602] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2855.633871] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2855.641134] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.648395] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2855.655666] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2855.677985] CPU: 1 PID: 31731 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2855.685893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.695242] Call Trace: [ 2855.697887] dump_stack+0x1b2/0x283 [ 2855.701533] warn_alloc.cold+0x96/0x1cc [ 2855.705514] ? zone_watermark_ok_safe+0x220/0x220 [ 2855.710363] ? usleep_range+0x130/0x130 [ 2855.714338] ? try_to_free_pages+0x23f/0x6e0 [ 2855.716467] Node 0 [ 2855.718737] ? _find_next_bit+0xdb/0x100 [ 2855.718750] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2855.718754] lowmem_reserve[]: [ 2855.720971] ? run_timer_softirq+0x5a0/0x5a0 [ 2855.725011] 0 [ 2855.750842] __alloc_pages_nodemask+0x2127/0x2720 [ 2855.750856] ? lock_acquire+0x170/0x3f0 [ 2855.750870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2855.750879] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2855.750901] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2855.750919] alloc_pages_current+0x155/0x260 [ 2855.788118] ion_page_pool_alloc+0x118/0x1b0 [ 2855.792537] ion_system_heap_allocate+0x133/0x8c0 [ 2855.797388] ? _raw_spin_unlock+0x29/0x40 [ 2855.801530] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2855.806453] ? ion_system_contig_heap_create+0x130/0x130 [ 2855.811907] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2855.816929] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2855.821768] ion_alloc+0x27a/0x810 [ 2855.825310] ? ion_dma_buf_release+0x40/0x40 [ 2855.829729] ? __might_fault+0x177/0x1b0 [ 2855.833785] ion_ioctl+0xea/0x1ee [ 2855.837230] ? ion_alloc.cold+0x3b/0x3b [ 2855.841197] ? lock_acquire+0x170/0x3f0 [ 2855.845163] ? lock_downgrade+0x740/0x740 [ 2855.849305] ? ion_alloc.cold+0x3b/0x3b [ 2855.853291] do_vfs_ioctl+0x75a/0xff0 [ 2855.857095] ? ioctl_preallocate+0x1a0/0x1a0 [ 2855.861594] ? lock_downgrade+0x740/0x740 [ 2855.865739] ? __fget+0x225/0x360 [ 2855.867325] 2717 2718 [ 2855.869181] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.869192] ? security_file_ioctl+0x83/0xb0 [ 2855.871669] 2718 [ 2855.875623] SyS_ioctl+0x7f/0xb0 [ 2855.885394] ? do_vfs_ioctl+0xff0/0xff0 [ 2855.889371] do_syscall_64+0x1d5/0x640 [ 2855.893274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2855.898464] RIP: 0033:0x45e219 [ 2855.901641] RSP: 002b:00007faff99d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2855.909340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2855.916611] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2855.923888] RBP: 000000000119c1b8 R08: 0000000000000000 R09: 0000000000000000 [ 2855.926409] 2718 [ 2855.931151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c184 [ 2855.933199] R13: 00007ffd3f0b1def R14: 00007faff99d29c0 R15: 000000000119c184 [ 2855.950811] lowmem_reserve[]: 0 0 0 0 0 [ 2855.954805] Node 0 DMA: 6*4kB (UM) 8*8kB (UME) 38*16kB (UME) 21*32kB (UME) 4*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10968kB [ 2855.970563] lowmem_reserve[]: 0 0 0 0 0 [ 2855.974556] Node 0 DMA: 6*4kB (UM) 8*8kB (UME) 38*16kB (UME) 21*32kB (UME) 4*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10968kB [ 2855.989695] Node 0 DMA32 free:96624kB min:36200kB low:45248kB high:54296kB active_anon:954780kB inactive_anon:48420kB active_file:24kB inactive_file:860kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39808kB pagetables:157844kB bounce:0kB free_pcp:1360kB local_pcp:656kB free_cma:0kB [ 2855.990547] Node 0 [ 2856.019755] Node 0 DMA32: 3681*4kB (UME) 881*8kB (UME) 430*16kB (UME) 595*32kB (UE) 458*64kB (U) 154*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 96716kB [ 2856.036843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2856.047594] Node 1 Normal: 3744*4kB (UME) 4054*8kB (UME) 2770*16kB (UME) 1625*32kB (UME) 749*64kB (UM) 243*128kB (UM) 69*256kB (U) 57*512kB (U) 1*1024kB (U) 61*2048kB (U) 10*4096kB (U) = 436528kB [ 2856.065283] DMA32: 4492*4kB (UME) 1492*8kB (UME) 432*16kB (UME) 615*32kB (UE) 458*64kB (U) 154*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 105520kB [ 2856.080236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2856.090998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.099881] Node 1 Normal: 3773*4kB (UME) 4075*8kB (UME) 2774*16kB (UME) 1709*32kB (UME) 748*64kB (UM) 244*128kB (UM) 69*256kB (U) 57*512kB (U) 1*1024kB (U) 24*2048kB (U) 10*4096kB (U) = 363852kB [ 2856.117522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.126090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.126395] lowmem_reserve[]: 0 0 0 0 0 [ 2856.134949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.147771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.156517] 15367 total pagecache pages [ 2856.160483] 0 pages in swap cache [ 2856.163920] Swap cache stats: add 0, delete 0, find 0/0 [ 2856.169321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.177978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.186390] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.186829] Free swap = 0kB [ 2856.215910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.224515] 15367 total pagecache pages [ 2856.228513] 0 pages in swap cache [ 2856.231958] Swap cache stats: add 0, delete 0, find 0/0 [ 2856.237357] Total swap = 0kB [ 2856.240366] 2097051 pages RAM [ 2856.243455] 0 pages HighMem/MovableOnly [ 2856.247454] Free swap = 0kB [ 2856.250461] Total swap = 0kB [ 2856.253477] 2097051 pages RAM [ 2856.256610] 363840 pages reserved [ 2856.260046] 0 pages cma reserved [ 2856.263398] Out of memory (oom_kill_allocating_task): Kill process 30190 (in:imklog) score 0 or sacrifice child [ 2856.273762] 0 pages HighMem/MovableOnly [ 2856.277761] 363840 pages reserved [ 2856.281212] 0 pages cma reserved [ 2856.284829] Killed process 30188 (rsyslogd) total-vm:254332kB, anon-rss:1292kB, file-rss:0kB, shmem-rss:0kB [ 2856.301737] oom_reaper: reaped process 30188 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2856.320075] lowmem_reserve[]: 0 0 0 0 0 [ 2856.327072] Node 1 Normal free:331520kB min:53696kB low:67120kB high:80544kB active_anon:97636kB inactive_anon:4kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127452kB bounce:0kB free_pcp:956kB local_pcp:660kB free_cma:0kB [ 2856.413009] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2856.429207] lowmem_reserve[]: 0 0 0 0 0 [ 2856.433261] Node 0 DMA: 6*4kB (UM) 8*8kB (UME) 38*16kB (UME) 21*32kB (UME) 4*64kB (UME) 3*128kB (UE) 3*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10968kB [ 2856.446660] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2856.479126] Node 0 DMA32: 4485*4kB (UME) 3820*8kB (UME) 3086*16kB (UME) 1313*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 139892kB [ 2856.495791] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2856.528926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2856.536726] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2856.566493] systemd[1]: Stopped Journal Service. [ 2856.577525] Node 1 Normal: 6512*4kB (UME) 8507*8kB (UME) 4035*16kB (UME) 2540*32kB (UME) 15*64kB (M) 4*128kB (UM) 1*256kB (U) 1*512kB (U) 165*1024kB (U) 63*2048kB (U) 8*4096kB (U) = 572936kB [ 2856.590053] systemd[1]: Starting Journal Service... [ 2856.628630] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2856.646629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.655547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.674840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.675510] systemd[1]: Stopped System Logging Service. [ 2856.693188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2856.716603] 17278 total pagecache pages [ 2856.716863] systemd[1]: Starting System Logging Service... [ 2856.721194] 0 pages in swap cache [ 2856.746344] Swap cache stats: add 0, delete 0, find 0/0 [ 2856.751716] Free swap = 0kB [ 2856.754809] Total swap = 0kB [ 2856.784362] 2097051 pages RAM [ 2856.787641] 0 pages HighMem/MovableOnly [ 2856.791609] 363840 pages reserved [ 2856.795057] 0 pages cma reserved [ 2856.851837] systemd-journald[31739]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2857.100344] systemd[1]: Started System Logging Service. 14:13:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109006d, 0x16}) 14:13:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x6, 0x4) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x20) 14:13:11 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREADDIR(r1, &(0x7f0000000040)={0x68, 0x29, 0x1, {0x1f, [{{0x80, 0x0, 0x4}, 0x7, 0x0, 0x7, './file0'}, {{0x8, 0x11, 0x4000000002}, 0x7, 0x1, 0x7, './file0'}, {{0x80, 0x0, 0x5}, 0x7, 0x93, 0x7, './file0'}]}}, 0x68) 14:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) write$snddsp(r1, &(0x7f00000005c0)="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", 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 14:13:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x81, 0x1}, @in={0x2, 0x4e23, @broadcast}, @generic={0x2c, "dd4637a8fa5350c7b82a9a8bfae6"}, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x3d7, 0x4}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) 14:13:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={r1}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x4000, 0x0) [ 2858.039219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2858.045984] batman_adv: batadv0: Removing interface: batadv_slave_0 14:13:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x81, 0x1}, @in={0x2, 0x4e23, @broadcast}, @generic={0x2c, "dd4637a8fa5350c7b82a9a8bfae6"}, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x3d7, 0x4}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) 14:13:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x10000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x8001, 0xbba, &(0x7f0000000040)=0x6c}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) [ 2858.177814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 14:13:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x81, 0x1}, @in={0x2, 0x4e23, @broadcast}, @generic={0x2c, "dd4637a8fa5350c7b82a9a8bfae6"}, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x3d7, 0x4}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) [ 2858.221723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2858.255368] device bridge_slave_1 left promiscuous mode 14:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) [ 2858.280227] bridge0: port 2(bridge_slave_1) entered disabled state [ 2858.310703] device bridge_slave_0 left promiscuous mode 14:13:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x81, 0x1}, @in={0x2, 0x4e23, @broadcast}, @generic={0x2c, "dd4637a8fa5350c7b82a9a8bfae6"}, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x3d7, 0x4}) [ 2858.350014] bridge0: port 1(bridge_slave_0) entered disabled state 14:13:12 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x2f, 0x7, 0x4, 0x5, 0xdc, @remote, @local, 0x0, 0x1, 0x0, 0x1583}}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xf4, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8027, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)={0xc4, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffceb, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x801}, 0x240048d5) r15 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r15, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) [ 2858.391235] device veth1_macvtap left promiscuous mode [ 2858.426519] device veth0_macvtap left promiscuous mode [ 2858.449229] device veth1_vlan left promiscuous mode [ 2858.465747] device veth0_vlan left promiscuous mode [ 2858.745544] device hsr_slave_1 left promiscuous mode 14:13:12 executing program 1: ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000080)=""/11) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:13:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) [ 2858.769979] device hsr_slave_0 left promiscuous mode [ 2858.817700] team0 (unregistering): Port device team_slave_1 removed 14:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @rc={0x1f, @any, 0x6}, @in={0x2, 0x4e23, @multicast1}, @sco, 0x7fff, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='sit0\x00', 0x7, 0x91ea, 0x5}) 14:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x81, 0x1}, @in={0x2, 0x4e23, @broadcast}, @generic={0x2c, "dd4637a8fa5350c7b82a9a8bfae6"}, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x3d7, 0x4}) 14:13:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) [ 2858.889696] team0 (unregistering): Port device team_slave_0 removed [ 2858.927263] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2858.994918] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2859.065864] bond0 (unregistering): Released all slaves [ 2861.412488] IPVS: ftp: loaded support on port[0] = 21 [ 2861.553299] chnl_net:caif_netlink_parms(): no params data found [ 2861.622576] bridge0: port 1(bridge_slave_0) entered blocking state [ 2861.629086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2861.637294] device bridge_slave_0 entered promiscuous mode [ 2861.643860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2861.651968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2861.659462] device bridge_slave_1 entered promiscuous mode [ 2861.682187] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2861.691911] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2861.713384] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2861.720577] team0: Port device team_slave_0 added [ 2861.726535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2861.733681] team0: Port device team_slave_1 added [ 2861.753285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2861.759557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2861.785680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2861.797728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2861.803957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2861.829720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2861.840702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2861.848588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2861.878095] device hsr_slave_0 entered promiscuous mode [ 2861.883698] device hsr_slave_1 entered promiscuous mode [ 2861.890113] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2861.897646] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2861.983946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2861.990320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2861.996951] bridge0: port 1(bridge_slave_0) entered blocking state [ 2862.003335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2862.034585] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2862.041372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2862.050719] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2862.060559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2862.068154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2862.074740] bridge0: port 2(bridge_slave_1) entered disabled state [ 2862.084542] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2862.090680] 8021q: adding VLAN 0 to HW filter on device team0 [ 2862.098975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2862.106882] bridge0: port 1(bridge_slave_0) entered blocking state [ 2862.113223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2862.134508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2862.144410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2862.155485] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2862.162506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2862.170173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2862.176673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2862.184040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2862.191960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2862.199675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2862.207308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2862.214755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2862.221591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2862.234092] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2862.241923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2862.248821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2862.262352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2862.313530] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2862.323245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2862.352765] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2862.360171] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2862.368226] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2862.378584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2862.386874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2862.393734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2862.402505] device veth0_vlan entered promiscuous mode [ 2862.412378] device veth1_vlan entered promiscuous mode [ 2862.418338] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2862.427285] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2862.438108] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2862.447880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2862.454957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2862.462688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2862.472026] device veth0_macvtap entered promiscuous mode [ 2862.479036] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2862.487458] device veth1_macvtap entered promiscuous mode [ 2862.495558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2862.505835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2862.514029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2862.524660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.533796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2862.543559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.552723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2862.562470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.571603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2862.581679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.590827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2862.600560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.611014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2862.618253] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2862.625306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2862.633549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2862.643693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2862.654319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.663787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2862.674029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.683458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2862.694212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.703625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2862.714071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.723505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2862.733646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2862.743935] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2862.751434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2862.759182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2862.767067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:13:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) 14:13:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 14:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @rc={0x1f, @any, 0x6}, @in={0x2, 0x4e23, @multicast1}, @sco, 0x7fff, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='sit0\x00', 0x7, 0x91ea, 0x5}) 14:13:16 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001980)=ANY=[@ANYBLOB="78050000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="600202803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007bbd000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400070000d3ff000000ff010540080000008100ad09a707000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="f91dd5667ba3dd113e491c3594e5eb0f4e29052cce7e9179b3925d"], 0x578}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf250f0000005400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d0000005c0001801400020062726964676530000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08f70200010000000800be85d3f83a17783070207e0100ccba66822fe67309fb80ca277b6555bb47aabda2907bdbdcdd55836f01", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f31000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="14000200776732000000000000000000000000005800018008000300020000000800030000000000140002006361696630000000000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002007465616d300000000000000000000000200001801400020076657468305f746f5f626f6e640000000800030001000000"], 0x174}}, 0x8000) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r11, &(0x7f0000001940)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xe0, @local}, 0xff62, 0x0}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r13, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) 14:13:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x4444}, 0x80, 0x0}, 0x0) 14:13:16 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x2f, 0x7, 0x4, 0x5, 0xdc, @remote, @local, 0x0, 0x1, 0x0, 0x1583}}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xf4, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8027, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)={0xc4, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffceb, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x801}, 0x240048d5) r15 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r15, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:13:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40900, 0x0) 14:13:16 executing program 2: sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000140)={0xb}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=@dellinkprop={0x298, 0x6d, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9082, 0x40000}, [@IFLA_GROUP={0x8, 0x1b, 0xfffffffc}, @IFLA_VFINFO_LIST={0x1e4, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @remote}}]}, {0x130, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3f, 0xb9, 0x80, 0x8100}}, {0x14, 0x1, {0x6, 0x1c0, 0x5, 0x8100}}, {0x14, 0x1, {0x5, 0x3cf, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x2, 0x184, 0x7, 0x9a8}}, {0x14, 0x1, {0x7, 0xa88, 0xfffffff8, 0x88a8}}, {0x14, 0x1, {0xffffffe0, 0x989, 0x7, 0x88a8}}, {0x14, 0x1, {0x1000, 0xa4e, 0xffff0a06, 0x88a8}}, {0x14, 0x1, {0x100, 0x1d1, 0x0, 0x9a8}}, {0x14, 0x1, {0x0, 0xcb0, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x3, 0xdc, 0x1, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1f, 0x800}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3, 0xfff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0xfff}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @local}}, @IFLA_VF_RATE={0x10, 0x6, {0x1fdd67af, 0x6, 0x1000}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x400}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x53}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @local}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x69, 0x10001}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffff002, 0xffffffffffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x401, 0x8}}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x101}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_bridge\x00'}, {0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'wlan1\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000011}, 0x84) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x20) write$P9_RREAD(r0, &(0x7f00000005c0)={0x57, 0x75, 0x2, {0x4c, "7e2c0c82d8d4a71d111d39cb22d6ac079350ce7da94f1e641cee40b31cc7c65c3b100c3e8ecc43441a764bcdb3adeea016a753243d098a3d97be8be0b5d7640b72fd9e4e1f25e3c1b1d77a13"}}, 0x57) getrusage(0xffffffffffffffff, &(0x7f0000000080)) 14:13:16 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001980)=ANY=[@ANYBLOB="78050000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="600202803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007bbd000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400070000d3ff000000ff010540080000008100ad09a707000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="f91dd5667ba3dd113e491c3594e5eb0f4e29052cce7e9179b3925d"], 0x578}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf250f0000005400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d0000005c0001801400020062726964676530000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08f70200010000000800be85d3f83a17783070207e0100ccba66822fe67309fb80ca277b6555bb47aabda2907bdbdcdd55836f01", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f31000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="14000200776732000000000000000000000000005800018008000300020000000800030000000000140002006361696630000000000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002007465616d300000000000000000000000200001801400020076657468305f746f5f626f6e640000000800030001000000"], 0x174}}, 0x8000) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r11, &(0x7f0000001940)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xe0, @local}, 0xff62, 0x0}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r13, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) 14:13:16 executing program 4: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x9, 0x24, 0x1}) 14:13:16 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) 14:13:16 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@generic={0x21, "ed45771775b0174bc4fa85fe1f9d1a5ff38d37a94370ebff6f4adf26a31b1bdf788760572bb0f11c2f45636f32dd20b51a2f44bc85c0fef131993c3e13f8be1d8c6d4ea7a4940190672526c829fbd7682af6d3c6597fe74dc8f386ad43ab44d128e271b70903ea248d566249446a0b925efac75ded3c92eed07393e278de"}, 0x80, 0x0}, 0x0) 14:13:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000080)=""/100, &(0x7f0000000100)=0x64) 14:13:17 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001980)=ANY=[@ANYBLOB="78050000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="2c02028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006d0800004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004007f0006057f0000000001000308000000080020090500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="600202803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007bbd000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400070000d3ff000000ff010540080000008100ad09a707000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="f91dd5667ba3dd113e491c3594e5eb0f4e29052cce7e9179b3925d"], 0x578}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf250f0000005400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d0000005c0001801400020062726964676530000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08f70200010000000800be85d3f83a17783070207e0100ccba66822fe67309fb80ca277b6555bb47aabda2907bdbdcdd55836f01", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f31000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="14000200776732000000000000000000000000005800018008000300020000000800030000000000140002006361696630000000000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002007465616d300000000000000000000000200001801400020076657468305f746f5f626f6e640000000800030001000000"], 0x174}}, 0x8000) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r11, &(0x7f0000001940)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xe0, @local}, 0xff62, 0x0}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r13, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) 14:13:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:17 executing program 4: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x9, 0x24, 0x1}) 14:13:17 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4e894b8d6d7bd75168b0", @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf250300000008003c000500000008003c000004000005002a000100000008000b003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x24044804) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xf6, 0x1, 0x1, 0x8, @empty, @private0, 0x8, 0x80, 0x8000, 0xfffffffa}}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000801) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:13:17 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) [ 2863.466408] Bluetooth: hci5 command 0x0409 tx timeout 14:13:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x513}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) 14:13:17 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) 14:13:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0x0, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:13:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 2864.410029] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2864.444220] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2864.455082] CPU: 0 PID: 32240 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2864.462975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.472322] Call Trace: [ 2864.474913] dump_stack+0x1b2/0x283 [ 2864.478540] warn_alloc.cold+0x96/0x1cc [ 2864.482510] ? zone_watermark_ok_safe+0x220/0x220 [ 2864.487361] __alloc_pages_nodemask+0x2127/0x2720 [ 2864.492203] ? lock_acquire+0x170/0x3f0 [ 2864.496183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.501039] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2864.506490] ? __mutex_unlock_slowpath+0x75/0x770 [ 2864.511324] alloc_pages_current+0x155/0x260 [ 2864.515727] ion_page_pool_alloc+0x118/0x1b0 [ 2864.520131] ion_system_heap_allocate+0x133/0x8c0 [ 2864.524970] ? ion_alloc+0x187/0x810 [ 2864.528677] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2864.534120] ? ion_system_contig_heap_create+0x130/0x130 [ 2864.539768] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2864.544787] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2864.549640] ion_alloc+0x204/0x810 [ 2864.553184] ? ion_dma_buf_release+0x40/0x40 [ 2864.557603] ? __might_fault+0x177/0x1b0 [ 2864.561672] ion_ioctl+0xea/0x1ee [ 2864.565128] ? ion_alloc.cold+0x3b/0x3b [ 2864.569117] ? lock_acquire+0x170/0x3f0 [ 2864.573086] ? lock_downgrade+0x740/0x740 [ 2864.577230] ? ion_alloc.cold+0x3b/0x3b [ 2864.581209] do_vfs_ioctl+0x75a/0xff0 [ 2864.585008] ? ioctl_preallocate+0x1a0/0x1a0 [ 2864.589405] ? lock_downgrade+0x740/0x740 [ 2864.593551] ? __fget+0x225/0x360 [ 2864.597002] ? do_vfs_ioctl+0xff0/0xff0 [ 2864.600975] ? security_file_ioctl+0x83/0xb0 [ 2864.605378] SyS_ioctl+0x7f/0xb0 [ 2864.608771] ? do_vfs_ioctl+0xff0/0xff0 [ 2864.612741] do_syscall_64+0x1d5/0x640 [ 2864.616627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2864.621807] RIP: 0033:0x45e219 [ 2864.624988] RSP: 002b:00007fbaae83ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2864.632684] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2864.639954] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2864.647212] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2864.654472] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2864.661734] R13: 00007fffdc1f695f R14: 00007fbaae83f9c0 R15: 000000000119c034 [ 2864.732084] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2864.739545] warn_alloc_show_mem: 4 callbacks suppressed [ 2864.739548] Mem-Info: [ 2864.754192] active_anon:263099 inactive_anon:14140 isolated_anon:12 [ 2864.754192] active_file:2378 inactive_file:5627 isolated_file:37 [ 2864.754192] unevictable:0 dirty:230 writeback:0 unstable:0 [ 2864.754192] slab_reclaimable:19890 slab_unreclaimable:166960 [ 2864.754192] mapped:57950 shmem:17175 pagetables:71358 bounce:0 [ 2864.754192] free:175317 free_pcp:41 free_cma:0 [ 2864.778816] syz-executor.4 cpuset= [ 2864.795664] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2864.804330] Node 0 active_anon:955428kB inactive_anon:56556kB active_file:9520kB inactive_file:22248kB unevictable:0kB isolated(anon):96kB isolated(file):92kB mapped:231800kB dirty:808kB writeback:100kB shmem:68700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2864.825615] / [ 2864.841277] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2864.847044] Node 1 active_anon:96988kB inactive_anon:0kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2864.855607] mems_allowed=0-1 [ 2864.877975] CPU: 1 PID: 32225 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2864.885844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.895187] Call Trace: [ 2864.897772] dump_stack+0x1b2/0x283 [ 2864.901394] warn_alloc.cold+0x96/0x1cc [ 2864.905352] ? zone_watermark_ok_safe+0x220/0x220 [ 2864.910182] __alloc_pages_nodemask+0x2127/0x2720 [ 2864.915007] ? lock_acquire+0x170/0x3f0 [ 2864.918963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2864.923794] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2864.929224] ? __mutex_unlock_slowpath+0x75/0x770 [ 2864.934051] alloc_pages_current+0x155/0x260 [ 2864.938441] ion_page_pool_alloc+0x118/0x1b0 [ 2864.942827] ion_system_heap_allocate+0x133/0x8c0 [ 2864.947673] ? ion_alloc+0x187/0x810 [ 2864.951366] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2864.956793] ? ion_system_contig_heap_create+0x130/0x130 [ 2864.962219] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2864.967214] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2864.972036] ion_alloc+0x204/0x810 [ 2864.975576] ? ion_dma_buf_release+0x40/0x40 [ 2864.979967] ? __might_fault+0x177/0x1b0 [ 2864.984006] ion_ioctl+0xea/0x1ee [ 2864.987435] ? ion_alloc.cold+0x3b/0x3b [ 2864.991390] ? lock_acquire+0x170/0x3f0 [ 2864.995340] ? lock_downgrade+0x740/0x740 [ 2864.999478] ? ion_alloc.cold+0x3b/0x3b [ 2865.003430] do_vfs_ioctl+0x75a/0xff0 [ 2865.007210] ? ioctl_preallocate+0x1a0/0x1a0 [ 2865.011615] ? lock_downgrade+0x740/0x740 [ 2865.015756] ? __fget+0x225/0x360 [ 2865.019187] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.023138] ? security_file_ioctl+0x83/0xb0 [ 2865.027524] SyS_ioctl+0x7f/0xb0 [ 2865.030868] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.034818] do_syscall_64+0x1d5/0x640 [ 2865.038686] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.043853] RIP: 0033:0x45e219 [ 2865.047039] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2865.054727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2865.061975] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2865.069226] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.076486] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2865.083740] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2865.105507] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2865.128380] CPU: 1 PID: 32253 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2865.132644] lowmem_reserve[]: [ 2865.140031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.140035] Call Trace: [ 2865.140050] dump_stack+0x1b2/0x283 [ 2865.140063] warn_alloc.cold+0x96/0x1cc [ 2865.140072] ? zone_watermark_ok_safe+0x220/0x220 [ 2865.140094] __alloc_pages_nodemask+0x2127/0x2720 [ 2865.140102] ? __schedule+0x893/0x1de0 [ 2865.140116] ? lock_acquire+0x170/0x3f0 [ 2865.146701] 0 [ 2865.152549] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2865.152566] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2865.155142] 2717 [ 2865.158733] ? __mutex_unlock_slowpath+0x75/0x770 [ 2865.158747] alloc_pages_current+0x155/0x260 [ 2865.158760] ion_page_pool_alloc+0x118/0x1b0 [ 2865.158770] ion_system_heap_allocate+0x133/0x8c0 [ 2865.158782] ? ion_alloc+0x187/0x810 [ 2865.158792] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2865.158800] ? ion_system_contig_heap_create+0x130/0x130 [ 2865.158810] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2865.167124] 2718 [ 2865.167608] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2865.172467] 2718 [ 2865.176305] ion_alloc+0x204/0x810 [ 2865.176319] ? ion_dma_buf_release+0x40/0x40 [ 2865.176333] ? __might_fault+0x177/0x1b0 [ 2865.176345] ion_ioctl+0xea/0x1ee [ 2865.180311] 2718 [ 2865.182070] ? ion_alloc.cold+0x3b/0x3b [ 2865.182080] ? lock_acquire+0x170/0x3f0 [ 2865.182090] ? lock_downgrade+0x740/0x740 [ 2865.192334] ? ion_alloc.cold+0x3b/0x3b [ 2865.192345] do_vfs_ioctl+0x75a/0xff0 [ 2865.192357] ? ioctl_preallocate+0x1a0/0x1a0 [ 2865.194424] Node 0 [ 2865.199223] ? lock_downgrade+0x740/0x740 [ 2865.199237] ? __fget+0x225/0x360 [ 2865.199245] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.199256] ? security_file_ioctl+0x83/0xb0 [ 2865.199266] SyS_ioctl+0x7f/0xb0 [ 2865.199273] ? do_vfs_ioctl+0xff0/0xff0 [ 2865.199282] do_syscall_64+0x1d5/0x640 [ 2865.199297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2865.199306] RIP: 0033:0x45e219 [ 2865.207475] DMA32 free:250936kB min:36200kB low:45248kB high:54296kB active_anon:955492kB inactive_anon:56556kB active_file:9604kB inactive_file:22232kB unevictable:0kB writepending:272kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39968kB pagetables:158168kB bounce:0kB free_pcp:712kB local_pcp:788kB free_cma:0kB [ 2865.208075] RSP: 002b:00007f580214fc68 EFLAGS: 00000246 [ 2865.212956] lowmem_reserve[]: [ 2865.216604] ORIG_RAX: 0000000000000010 [ 2865.216610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2865.216615] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2865.216619] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.216623] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2865.216628] R13: 00007ffe2c3a508f R14: 00007f58021509c0 R15: 000000000119bf8c [ 2865.418831] 0 0 0 0 0 [ 2865.422083] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2865.453521] lowmem_reserve[]: 0 0 0 0 0 [ 2865.458147] Node 1 Normal free:437428kB min:53696kB low:67120kB high:80544kB active_anon:96988kB inactive_anon:0kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54208kB pagetables:127184kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2865.491191] lowmem_reserve[]: 0 0 0 0 0 [ 2865.495251] Node 0 DMA: 44*4kB (UM) 115*8kB (UME) 58*16kB (UME) 25*32kB (UME) 3*64kB (ME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11080kB [ 2865.516178] Node 0 DMA32: 3103*4kB (ME) 1128*8kB (ME) 4014*16kB (UME) 2380*32kB (UME) 4*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 162332kB [ 2865.534533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2865.545582] Bluetooth: hci5 command 0x041b tx timeout [ 2865.551319] Node 1 Normal: 13707*4kB (UME) 14519*8kB (UME) 7941*16kB (UME) 4356*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 437428kB [ 2865.569854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2865.579422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2865.595286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2865.616252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2865.639251] 25001 total pagecache pages [ 2865.650569] 0 pages in swap cache [ 2865.658441] Swap cache stats: add 0, delete 0, find 0/0 [ 2865.674174] Free swap = 0kB [ 2865.679536] Total swap = 0kB [ 2865.684534] 2097051 pages RAM [ 2865.692098] 0 pages HighMem/MovableOnly [ 2865.696798] 363840 pages reserved [ 2865.702478] 0 pages cma reserved [ 2867.625696] Bluetooth: hci5 command 0x040f tx timeout [ 2868.755203] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2868.774326] systemd-journal cpuset=/ mems_allowed=0-1 [ 2868.779725] CPU: 0 PID: 31739 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2868.787824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.797180] Call Trace: [ 2868.799777] dump_stack+0x1b2/0x283 [ 2868.803413] dump_header+0x178/0x82f [ 2868.807131] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2868.812236] ? ___ratelimit+0x2cd/0x522 [ 2868.816218] oom_kill_process.cold+0x10/0xb18 [ 2868.820725] out_of_memory+0xe3e/0x1190 [ 2868.824713] ? oom_killer_disable+0x1c0/0x1c0 [ 2868.829210] ? mutex_trylock+0x152/0x1a0 [ 2868.833274] __alloc_pages_nodemask+0x23e1/0x2720 [ 2868.838343] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2868.843213] alloc_pages_current+0x155/0x260 [ 2868.847637] filemap_fault+0xea3/0x1980 [ 2868.851746] ext4_filemap_fault+0x84/0xb0 [ 2868.856024] __do_fault+0xfa/0x380 [ 2868.859571] __handle_mm_fault+0x2497/0x4620 [ 2868.863990] ? ____cache_alloc_node+0xf4/0x1d0 [ 2868.868579] ? vm_insert_page+0x7c0/0x7c0 [ 2868.872818] ? check_stack_object+0x86/0xa0 [ 2868.877159] handle_mm_fault+0x391/0x860 [ 2868.881235] __do_page_fault+0x549/0xad0 [ 2868.885304] ? spurious_fault+0x640/0x640 [ 2868.889464] ? do_page_fault+0x60/0x4f2 [ 2868.893448] ? page_fault+0x2f/0x50 [ 2868.897081] page_fault+0x45/0x50 [ 2868.900540] RIP: 0000:0x7ffe92faeef0 [ 2868.904253] RSP: 92faeef0:00007ffe92fac010 EFLAGS: 00000000 [ 2869.025271] Mem-Info: [ 2869.033588] active_anon:263145 inactive_anon:14139 isolated_anon:0 [ 2869.033588] active_file:18 inactive_file:16 isolated_file:0 [ 2869.033588] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2869.033588] slab_reclaimable:19894 slab_unreclaimable:166431 [ 2869.033588] mapped:52681 shmem:17174 pagetables:71336 bounce:0 [ 2869.033588] free:25114 free_pcp:0 free_cma:0 [ 2869.171855] Node 0 active_anon:955592kB inactive_anon:56556kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210724kB dirty:0kB writeback:0kB shmem:68696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2869.246940] Node 1 active_anon:96988kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2869.368223] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2869.495217] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2869.500299] Node 0 DMA32 free:35980kB min:36200kB low:45248kB high:54296kB active_anon:955548kB inactive_anon:56556kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39904kB pagetables:158080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2869.590890] lowmem_reserve[]: 0 0 0 0 0 [ 2869.594934] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2869.695215] lowmem_reserve[]: 0 0 0 0 0 [ 2869.699390] Node 1 Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:96988kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54208kB pagetables:127184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2869.735274] Bluetooth: hci5 command 0x0419 tx timeout [ 2869.812531] lowmem_reserve[]: 0 0 0 0 0 [ 2869.820605] Node 0 DMA: 37*4kB (UM) 115*8kB (UME) 57*16kB (UME) 26*32kB (UME) 3*64kB (ME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11068kB [ 2869.856077] Node 0 DMA32: 4776*4kB (ME) 1421*8kB (UME) 279*16kB (UME) 33*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36056kB [ 2869.874305] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2869.899609] Node 1 Normal: 920*4kB (UME) 493*8kB (UME) 204*16kB (ME) 1329*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53416kB [ 2869.928569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2869.941437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2869.979105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2870.005346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2870.014133] 17208 total pagecache pages [ 2870.049631] 0 pages in swap cache [ 2870.053118] Swap cache stats: add 0, delete 0, find 0/0 [ 2870.075008] Free swap = 0kB [ 2870.096800] Total swap = 0kB [ 2870.099860] 2097051 pages RAM [ 2870.103132] 0 pages HighMem/MovableOnly [ 2870.121885] 363840 pages reserved [ 2870.155158] 0 pages cma reserved [ 2870.158550] Out of memory (oom_kill_allocating_task): Kill process 31739 (systemd-journal) score 0 or sacrifice child [ 2870.196576] Killed process 31739 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1816kB [ 2870.227118] oom_reaper: reaped process 31739 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1828kB [ 2870.763282] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2870.784577] in:imklog cpuset=/ mems_allowed=0-1 [ 2870.789347] CPU: 0 PID: 31742 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 2870.796797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2870.806156] Call Trace: [ 2870.808754] dump_stack+0x1b2/0x283 [ 2870.812390] dump_header+0x178/0x82f [ 2870.816232] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2870.821354] ? ___ratelimit+0x2cd/0x522 [ 2870.825338] oom_kill_process.cold+0x10/0xb18 [ 2870.829854] out_of_memory+0xe3e/0x1190 [ 2870.833839] ? oom_killer_disable+0x1c0/0x1c0 [ 2870.838336] ? mutex_trylock+0x152/0x1a0 [ 2870.842405] __alloc_pages_nodemask+0x23e1/0x2720 [ 2870.847281] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2870.852155] alloc_pages_current+0x155/0x260 [ 2870.856575] filemap_fault+0xea3/0x1980 [ 2870.860546] ext4_filemap_fault+0x84/0xb0 [ 2870.864683] __do_fault+0xfa/0x380 [ 2870.868216] __handle_mm_fault+0x2497/0x4620 [ 2870.872617] ? vm_insert_page+0x7c0/0x7c0 [ 2870.876759] ? lock_downgrade+0x740/0x740 [ 2870.880903] handle_mm_fault+0x391/0x860 [ 2870.884963] __do_page_fault+0x549/0xad0 [ 2870.889029] ? spurious_fault+0x640/0x640 [ 2870.893208] ? do_page_fault+0x60/0x4f2 [ 2870.897171] ? page_fault+0x2f/0x50 [ 2870.900785] page_fault+0x45/0x50 [ 2870.904261] RIP: fffff7e7:0x1f9f [ 2870.908392] RSP: d99304a0:00007fc0d99304ac EFLAGS: 7fc0d9930da0 [ 2870.963507] Mem-Info: [ 2871.004075] active_anon:263028 inactive_anon:14138 isolated_anon:0 [ 2871.004075] active_file:18 inactive_file:16 isolated_file:0 [ 2871.004075] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2871.004075] slab_reclaimable:19893 slab_unreclaimable:166402 [ 2871.004075] mapped:52225 shmem:17174 pagetables:71311 bounce:0 [ 2871.004075] free:25111 free_pcp:91 free_cma:0 [ 2871.055104] Node 0 active_anon:955124kB inactive_anon:56552kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:68696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2871.119238] Node 1 active_anon:96988kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2871.175070] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2871.224768] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2871.229961] Node 0 DMA32 free:35960kB min:36200kB low:45248kB high:54296kB active_anon:955080kB inactive_anon:56552kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:157980kB bounce:0kB free_pcp:364kB local_pcp:120kB free_cma:0kB [ 2871.284225] lowmem_reserve[]: 0 0 0 0 0 [ 2871.292524] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2871.331594] lowmem_reserve[]: 0 0 0 0 0 [ 2871.336364] Node 1 Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:96988kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54208kB pagetables:127184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2871.395909] lowmem_reserve[]: 0 0 0 0 0 [ 2871.399942] Node 0 DMA: 37*4kB (UM) 115*8kB (UME) 57*16kB (UME) 26*32kB (UME) 3*64kB (ME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11068kB [ 2871.446684] Node 0 DMA32: 4766*4kB (UME) 1423*8kB (UME) 279*16kB (ME) 32*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35936kB [ 2871.498954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2871.521931] Node 1 Normal: 920*4kB (UME) 493*8kB (UME) 204*16kB (ME) 1329*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53416kB [ 2871.547184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2871.560128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2871.589072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2871.622606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2871.648577] 17208 total pagecache pages [ 2871.652582] 0 pages in swap cache [ 2871.675021] Swap cache stats: add 0, delete 0, find 0/0 [ 2871.680621] Free swap = 0kB [ 2871.683728] Total swap = 0kB [ 2871.718259] 2097051 pages RAM [ 2871.721534] 0 pages HighMem/MovableOnly [ 2871.732970] 363840 pages reserved [ 2871.737115] 0 pages cma reserved [ 2871.740509] Out of memory (oom_kill_allocating_task): Kill process 31742 (in:imklog) score 0 or sacrifice child [ 2871.775057] Killed process 31740 (rsyslogd) total-vm:254332kB, anon-rss:672kB, file-rss:0kB, shmem-rss:0kB [ 2872.934088] oom_reaper: reaped process 32253 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2873.210878] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2873.224557] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2873.249139] systemd[1]: rsyslog.service: Unit entered failed state. [ 2873.265189] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2873.272143] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2873.293335] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2873.301823] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2873.309132] systemd[1]: Stopped Journal Service. [ 2873.324792] systemd[1]: Starting Journal Service... [ 2873.412962] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 2873.501860] systemd-journald[32277]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 14:13:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@local}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) 14:13:28 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x754898f248a0b6d4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c002}, 0xc0) 14:13:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x141000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x240, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x100, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xad3, @private2, 0x60000000, 0x3}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:13:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 14:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:29 executing program 1: setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x10001, 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfffffffffffffffe, 0xa}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x1c1081, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100026bddf250200009d0500070003000000080009000300000005000d0000000000080011000000000006001b004e22000008000c000100000008001100010000000500050001000000050021000100000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000025}, 0x20040000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1d}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10004) 14:13:29 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x20) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x9, 0x4}, 0x80, 0x0}, 0x0) 14:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:29 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="e4000000290100070000000103000000000000000000000003000000000000000707002e2f66696c653008000000000600000000000000ffffffff000000007f07002e2f66696c653000040000000400000000000000060000000000000002002e2f66696c6530100000000004000000000000000100000000000000ff07002e2f66696c6530040100000005000000000000000200000000000000060700546b66696c65300802000000040000000000000003000000000000000607002e2f66696c65302002000000010000000000000001ffffffffffffff0107002e2f66696c6530"], 0xe4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x200408e1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:13:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:29 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x754898f248a0b6d4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c002}, 0xc0) [ 2876.074658] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2876.114628] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2876.119926] CPU: 0 PID: 32292 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2876.127812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2876.137173] Call Trace: [ 2876.139769] dump_stack+0x1b2/0x283 [ 2876.143406] warn_alloc.cold+0x96/0x1cc [ 2876.147389] ? zone_watermark_ok_safe+0x220/0x220 [ 2876.152250] __alloc_pages_nodemask+0x2127/0x2720 [ 2876.157107] ? lock_acquire+0x170/0x3f0 [ 2876.161088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2876.165941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2876.171393] ? __mutex_unlock_slowpath+0x75/0x770 [ 2876.176331] alloc_pages_current+0x155/0x260 [ 2876.180744] ion_page_pool_alloc+0x118/0x1b0 [ 2876.185158] ion_system_heap_allocate+0x133/0x8c0 [ 2876.190010] ? ion_alloc+0x187/0x810 [ 2876.193727] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2876.199186] ? ion_system_contig_heap_create+0x130/0x130 [ 2876.204635] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2876.204646] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2876.204658] ion_alloc+0x204/0x810 [ 2876.204672] ? ion_dma_buf_release+0x40/0x40 [ 2876.204686] ? __might_fault+0x177/0x1b0 [ 2876.204697] ion_ioctl+0xea/0x1ee [ 2876.204705] ? ion_alloc.cold+0x3b/0x3b [ 2876.204715] ? lock_acquire+0x170/0x3f0 [ 2876.204723] ? lock_downgrade+0x740/0x740 [ 2876.204729] ? ion_alloc.cold+0x3b/0x3b [ 2876.204738] do_vfs_ioctl+0x75a/0xff0 [ 2876.204751] ? ioctl_preallocate+0x1a0/0x1a0 [ 2876.254414] ? lock_downgrade+0x740/0x740 [ 2876.258588] ? __fget+0x225/0x360 [ 2876.262044] ? do_vfs_ioctl+0xff0/0xff0 [ 2876.266039] ? security_file_ioctl+0x83/0xb0 [ 2876.270457] SyS_ioctl+0x7f/0xb0 [ 2876.273824] ? do_vfs_ioctl+0xff0/0xff0 [ 2876.277807] do_syscall_64+0x1d5/0x640 [ 2876.281706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2876.286896] RIP: 0033:0x45e219 [ 2876.290087] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2876.297954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2876.305232] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2876.312504] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.319914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2876.327213] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2876.546898] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2876.581696] warn_alloc_show_mem: 2 callbacks suppressed [ 2876.581699] Mem-Info: [ 2876.582174] syz-executor.4 cpuset= [ 2876.587136] active_anon:263609 inactive_anon:16171 isolated_anon:24 [ 2876.587136] active_file:2134 inactive_file:2604 isolated_file:4 [ 2876.587136] unevictable:0 dirty:103 writeback:0 unstable:0 [ 2876.587136] slab_reclaimable:20149 slab_unreclaimable:167898 [ 2876.587136] mapped:55858 shmem:19222 pagetables:71337 bounce:0 [ 2876.587136] free:100775 free_pcp:359 free_cma:0 [ 2876.587154] Node 0 active_anon:956880kB inactive_anon:64680kB active_file:3648kB inactive_file:6904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216516kB dirty:184kB writeback:0kB shmem:76884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 757760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2876.603583] / [ 2876.631916] Node 1 active_anon:97556kB inactive_anon:4kB active_file:4888kB inactive_file:3512kB unevictable:0kB isolated(anon):96kB isolated(file):16kB mapped:6916kB dirty:228kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2876.691906] Node 0 DMA free:12388kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2876.722386] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2876.728047] Node 0 DMA32 free:235260kB min:36200kB low:45248kB high:54296kB active_anon:956836kB inactive_anon:64680kB active_file:3548kB inactive_file:7124kB unevictable:0kB writepending:184kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39840kB pagetables:157860kB bounce:0kB free_pcp:832kB local_pcp:832kB free_cma:0kB [ 2876.762277] mems_allowed=0-1 [ 2876.762303] lowmem_reserve[]: 0 0 0 0 0 [ 2876.768784] CPU: 1 PID: 32303 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2876.770023] Node 0 [ 2876.777868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2876.777872] Call Trace: [ 2876.777886] dump_stack+0x1b2/0x283 [ 2876.777900] warn_alloc.cold+0x96/0x1cc [ 2876.777909] ? zone_watermark_ok_safe+0x220/0x220 [ 2876.777933] __alloc_pages_nodemask+0x2127/0x2720 [ 2876.777946] ? lock_acquire+0x170/0x3f0 [ 2876.777960] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2876.777977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2876.784908] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2876.789700] ? __mutex_unlock_slowpath+0x75/0x770 [ 2876.792264] lowmem_reserve[]: [ 2876.795886] alloc_pages_current+0x155/0x260 [ 2876.795899] ion_page_pool_alloc+0x118/0x1b0 [ 2876.795908] ion_system_heap_allocate+0x133/0x8c0 [ 2876.795923] ? ion_alloc+0x187/0x810 [ 2876.802474] 0 [ 2876.804811] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2876.804822] ? ion_system_contig_heap_create+0x130/0x130 [ 2876.804830] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2876.804840] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2876.804852] ion_alloc+0x204/0x810 [ 2876.811325] 0 [ 2876.813666] ? ion_dma_buf_release+0x40/0x40 [ 2876.819895] 0 [ 2876.823939] ? __might_fault+0x177/0x1b0 [ 2876.848973] 0 [ 2876.853926] ion_ioctl+0xea/0x1ee [ 2876.857028] 0 [ 2876.861410] ? ion_alloc.cold+0x3b/0x3b [ 2876.870770] ? lock_acquire+0x170/0x3f0 [ 2876.874464] Node 1 [ 2876.876257] ? lock_downgrade+0x740/0x740 [ 2876.876264] ? ion_alloc.cold+0x3b/0x3b [ 2876.876274] do_vfs_ioctl+0x75a/0xff0 [ 2876.876286] ? ioctl_preallocate+0x1a0/0x1a0 [ 2876.881734] Normal free:251772kB min:53696kB low:67120kB high:80544kB active_anon:97556kB inactive_anon:4kB active_file:4932kB inactive_file:3460kB unevictable:0kB writepending:228kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54336kB pagetables:127408kB bounce:0kB free_pcp:780kB local_pcp:40kB free_cma:0kB [ 2876.887159] ? lock_downgrade+0x740/0x740 [ 2876.887171] ? __fget+0x225/0x360 [ 2876.887179] ? do_vfs_ioctl+0xff0/0xff0 [ 2876.887189] ? security_file_ioctl+0x83/0xb0 [ 2876.887199] SyS_ioctl+0x7f/0xb0 [ 2876.887208] ? do_vfs_ioctl+0xff0/0xff0 [ 2876.899835] lowmem_reserve[]: [ 2876.900587] do_syscall_64+0x1d5/0x640 [ 2876.902375] 0 [ 2876.906957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2876.906964] RIP: 0033:0x45e219 [ 2876.906969] RSP: 002b:00007f580214fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2876.908766] 0 [ 2876.912813] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2876.916893] 0 [ 2876.918047] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2876.919835] 0 [ 2876.923925] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.928120] 0 [ 2876.930321] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2876.938465] R13: 00007ffe2c3a508f R14: 00007f58021509c0 R15: 000000000119bf8c [ 2876.942247] Node 0 DMA: 44*4kB (UM) 112*8kB (UME) 60*16kB (UME) 26*32kB (UME) 7*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 12400kB [ 2877.097174] Node 0 DMA32: 12287*4kB (UME) 5952*8kB (UME) 4851*16kB (UME) 1643*32kB (UME) 5*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 3*2048kB (U) 0*4096kB = 234316kB [ 2877.116508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2877.129285] Node 1 Normal: 12449*4kB (UME) 13838*8kB (UME) 7860*16kB (UME) 4320*32kB (UME) 1861*64kB (U) 8*128kB (U) 3*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 546420kB [ 2877.150529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2877.160159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2877.173229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2877.182798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2877.195919] 23961 total pagecache pages [ 2877.199958] 0 pages in swap cache [ 2877.203456] Swap cache stats: add 0, delete 0, find 0/0 [ 2877.212661] Free swap = 0kB [ 2877.217605] Total swap = 0kB [ 2877.223944] 2097051 pages RAM [ 2877.236901] 0 pages HighMem/MovableOnly [ 2877.244199] 363840 pages reserved [ 2877.255849] 0 pages cma reserved 14:13:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) 14:13:31 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x18000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getpeername$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x20) sendmsg$nl_route(r1, 0x0, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000000)=""/189, 0xbd, 0x40000160, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x20) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0xc6}, 0x80, 0x0}, 0x0) 14:13:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x70, 0x16, 0x2, 0x70bd2a, 0x25dfdbfb, {0xa, 0x57, 0x40, 0xff, r5}, [@IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x4a}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}]}, 0x70}}, 0x800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:13:32 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:13:32 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@ethernet={0x0, @random="cd6c3e1ed583"}, 0x80, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="961032e3", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25070000000500210001000000080009000100000014002000fc02000000000000000000000000000106000e005d00000006001d0005000000"], 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000000) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000180)) 14:13:32 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:13:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x40, 'syz0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6, 0x1}) 14:13:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x141000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x240, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x100, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xad3, @private2, 0x60000000, 0x3}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) [ 2878.989700] FAULT_INJECTION: forcing a failure. [ 2878.989700] name failslab, interval 1, probability 0, space 0, times 0 [ 2878.995445] FAULT_INJECTION: forcing a failure. [ 2878.995445] name failslab, interval 1, probability 0, space 0, times 0 [ 2879.057210] CPU: 0 PID: 32371 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2879.065119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2879.074470] Call Trace: [ 2879.077167] dump_stack+0x1b2/0x283 [ 2879.080804] should_fail.cold+0x10a/0x154 [ 2879.084966] should_failslab+0xd6/0x130 [ 2879.088941] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2879.093611] ion_alloc+0x187/0x810 [ 2879.097158] ? ion_dma_buf_release+0x40/0x40 [ 2879.101572] ? __might_fault+0x177/0x1b0 [ 2879.105630] ion_ioctl+0xea/0x1ee [ 2879.109076] ? ion_alloc.cold+0x3b/0x3b [ 2879.113057] ? SyS_write+0x1b7/0x210 [ 2879.116773] ? ion_alloc.cold+0x3b/0x3b [ 2879.120741] do_vfs_ioctl+0x75a/0xff0 [ 2879.124534] ? ioctl_preallocate+0x1a0/0x1a0 [ 2879.128935] ? lock_downgrade+0x740/0x740 [ 2879.133166] ? __fget+0x225/0x360 [ 2879.136615] ? do_vfs_ioctl+0xff0/0xff0 [ 2879.140641] ? security_file_ioctl+0x83/0xb0 [ 2879.145051] SyS_ioctl+0x7f/0xb0 [ 2879.148415] ? do_vfs_ioctl+0xff0/0xff0 [ 2879.152385] do_syscall_64+0x1d5/0x640 [ 2879.156271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2879.161460] RIP: 0033:0x45e219 [ 2879.164649] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2879.172351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2879.179602] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2879.186854] RBP: 00007f41bc77bca0 R08: 0000000000000000 R09: 0000000000000000 [ 2879.194103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2879.201352] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2879.211069] CPU: 1 PID: 32369 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2879.218959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2879.228302] Call Trace: [ 2879.230885] dump_stack+0x1b2/0x283 [ 2879.234517] should_fail.cold+0x10a/0x154 [ 2879.238672] should_failslab+0xd6/0x130 [ 2879.242668] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2879.247345] ion_alloc+0x187/0x810 [ 2879.250895] ? ion_dma_buf_release+0x40/0x40 [ 2879.255312] ? __might_fault+0x177/0x1b0 [ 2879.259370] ion_ioctl+0xea/0x1ee [ 2879.262816] ? ion_alloc.cold+0x3b/0x3b [ 2879.266794] ? SyS_write+0x1b7/0x210 [ 2879.270514] ? ion_alloc.cold+0x3b/0x3b [ 2879.274483] do_vfs_ioctl+0x75a/0xff0 [ 2879.278276] ? ioctl_preallocate+0x1a0/0x1a0 [ 2879.282683] ? lock_downgrade+0x740/0x740 [ 2879.286850] ? __fget+0x225/0x360 [ 2879.290310] ? do_vfs_ioctl+0xff0/0xff0 [ 2879.294286] ? security_file_ioctl+0x83/0xb0 [ 2879.298688] SyS_ioctl+0x7f/0xb0 [ 2879.302058] ? do_vfs_ioctl+0xff0/0xff0 [ 2879.306042] do_syscall_64+0x1d5/0x640 [ 2879.309953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2879.315152] RIP: 0033:0x45e219 [ 2879.318340] RSP: 002b:00007f580214fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2879.326026] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2879.333273] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2879.340520] RBP: 00007f580214fca0 R08: 0000000000000000 R09: 0000000000000000 [ 2879.347769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 14:13:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r2, 0x29, 0x4e, 0x5, 0xad2, 0x2f, @mcast1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x700, 0x700, 0x7ff, 0x1}}) [ 2879.355016] R13: 00007ffe2c3a508f R14: 00007f58021509c0 R15: 000000000119bf8c 14:13:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:13:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1014}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:13:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getpeername$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, &(0x7f0000000080)=0x20) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 14:13:33 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:33 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:13:33 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x80, 0x0}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x4}, 0x20) [ 2879.874824] FAULT_INJECTION: forcing a failure. [ 2879.874824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2879.914406] CPU: 0 PID: 32415 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2879.922320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2879.931681] Call Trace: [ 2879.934286] dump_stack+0x1b2/0x283 [ 2879.937931] should_fail.cold+0x10a/0x154 [ 2879.942098] __alloc_pages_nodemask+0x22c/0x2720 [ 2879.946861] ? kasan_kmalloc+0xeb/0x160 [ 2879.950847] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 2879.955694] ? ion_ioctl+0xea/0x1ee [ 2879.959318] ? do_vfs_ioctl+0x75a/0xff0 [ 2879.963297] ? SyS_ioctl+0x7f/0xb0 [ 2879.966853] ? trace_hardirqs_on+0x10/0x10 [ 2879.971079] ? __lock_acquire+0x5fc/0x3f20 14:13:33 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) [ 2879.975312] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2879.980153] ? trace_hardirqs_on+0x10/0x10 [ 2879.984399] ? trace_hardirqs_on+0x10/0x10 [ 2879.988625] ? _parse_integer+0xe4/0x130 [ 2879.992685] ? fs_reclaim_release+0xd0/0x110 [ 2879.997097] alloc_pages_current+0x155/0x260 [ 2880.001511] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2880.006975] ion_system_contig_heap_allocate+0x3d/0x320 [ 2880.012352] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2880.017209] ion_alloc+0x204/0x810 [ 2880.020766] ? ion_dma_buf_release+0x40/0x40 [ 2880.025184] ? __might_fault+0x177/0x1b0 [ 2880.029249] ion_ioctl+0xea/0x1ee [ 2880.032706] ? ion_alloc.cold+0x3b/0x3b [ 2880.036692] ? SyS_write+0x1b7/0x210 [ 2880.040413] ? ion_alloc.cold+0x3b/0x3b [ 2880.044387] do_vfs_ioctl+0x75a/0xff0 [ 2880.048192] ? ioctl_preallocate+0x1a0/0x1a0 [ 2880.052594] ? lock_downgrade+0x740/0x740 [ 2880.056754] ? __fget+0x225/0x360 [ 2880.060334] ? do_vfs_ioctl+0xff0/0xff0 [ 2880.064312] ? security_file_ioctl+0x83/0xb0 [ 2880.068733] SyS_ioctl+0x7f/0xb0 [ 2880.072106] ? do_vfs_ioctl+0xff0/0xff0 [ 2880.076074] do_syscall_64+0x1d5/0x640 [ 2880.079977] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2880.085169] RIP: 0033:0x45e219 [ 2880.088356] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2880.096099] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2880.103365] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2880.110634] RBP: 00007f41bc77bca0 R08: 0000000000000000 R09: 0000000000000000 [ 2880.117906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2880.125265] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 2880.318352] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2880.336239] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2880.351422] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2880.358778] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2880.364108] CPU: 1 PID: 32370 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2880.371985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2880.381329] Call Trace: [ 2880.383913] dump_stack+0x1b2/0x283 [ 2880.387539] warn_alloc.cold+0x96/0x1cc [ 2880.391513] ? zone_watermark_ok_safe+0x220/0x220 [ 2880.396368] __alloc_pages_nodemask+0x2127/0x2720 [ 2880.401211] ? _raw_spin_unlock_irq+0x24/0x80 [ 2880.405705] ? lock_acquire+0x170/0x3f0 [ 2880.409681] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2880.414527] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2880.419975] ? __mutex_unlock_slowpath+0x75/0x770 [ 2880.424822] alloc_pages_current+0x155/0x260 [ 2880.429225] ion_page_pool_alloc+0x118/0x1b0 [ 2880.433629] ion_system_heap_allocate+0x133/0x8c0 [ 2880.438469] ? ion_alloc+0x187/0x810 [ 2880.442182] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2880.447631] ? ion_system_contig_heap_create+0x130/0x130 [ 2880.453332] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2880.458346] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2880.463192] ion_alloc+0x204/0x810 [ 2880.466733] ? ion_dma_buf_release+0x40/0x40 [ 2880.471148] ? __might_fault+0x177/0x1b0 [ 2880.475208] ion_ioctl+0xea/0x1ee [ 2880.478666] ? ion_alloc.cold+0x3b/0x3b [ 2880.482642] ? lock_acquire+0x170/0x3f0 [ 2880.486607] ? lock_downgrade+0x740/0x740 [ 2880.490747] ? ion_alloc.cold+0x3b/0x3b [ 2880.494715] do_vfs_ioctl+0x75a/0xff0 [ 2880.498512] ? ioctl_preallocate+0x1a0/0x1a0 [ 2880.502913] ? lock_downgrade+0x740/0x740 [ 2880.507058] ? __fget+0x225/0x360 [ 2880.510503] ? do_vfs_ioctl+0xff0/0xff0 [ 2880.514472] ? security_file_ioctl+0x83/0xb0 [ 2880.518875] SyS_ioctl+0x7f/0xb0 [ 2880.522234] ? do_vfs_ioctl+0xff0/0xff0 [ 2880.526210] do_syscall_64+0x1d5/0x640 [ 2880.530083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2880.535250] RIP: 0033:0x45e219 [ 2880.538416] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2880.546204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2880.553457] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2880.560825] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2880.568074] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2880.575496] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2880.587870] CPU: 1 PID: 32379 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2880.595876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2880.605229] Call Trace: [ 2880.607822] dump_stack+0x1b2/0x283 [ 2880.611452] warn_alloc.cold+0x96/0x1cc [ 2880.615429] ? zone_watermark_ok_safe+0x220/0x220 [ 2880.620277] __alloc_pages_nodemask+0x2127/0x2720 [ 2880.625111] ? io_schedule_timeout+0x140/0x140 [ 2880.629697] ? lock_acquire+0x170/0x3f0 [ 2880.633667] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2880.638513] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2880.643967] ? retint_kernel+0x2d/0x2d [ 2880.647861] ? ion_page_pool_alloc+0x28/0x1b0 [ 2880.652344] ? __mutex_unlock_slowpath+0x75/0x770 [ 2880.657177] ? ion_page_pool_alloc+0x28/0x1b0 [ 2880.661666] alloc_pages_current+0x155/0x260 [ 2880.666084] ion_page_pool_alloc+0x118/0x1b0 [ 2880.670486] ion_system_heap_allocate+0x133/0x8c0 [ 2880.675313] ? ion_alloc+0x187/0x810 [ 2880.679097] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2880.684530] ? ion_system_contig_heap_create+0x130/0x130 [ 2880.689960] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2880.694977] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2880.699803] ion_alloc+0x204/0x810 [ 2880.703328] ? ion_dma_buf_release+0x40/0x40 [ 2880.707717] ? __might_fault+0x177/0x1b0 [ 2880.711769] ion_ioctl+0xea/0x1ee [ 2880.715199] ? ion_alloc.cold+0x3b/0x3b [ 2880.719153] ? lock_acquire+0x170/0x3f0 [ 2880.723118] ? lock_downgrade+0x740/0x740 [ 2880.727249] ? ion_alloc.cold+0x3b/0x3b [ 2880.731210] do_vfs_ioctl+0x75a/0xff0 [ 2880.734992] ? ioctl_preallocate+0x1a0/0x1a0 [ 2880.739376] ? lock_downgrade+0x740/0x740 [ 2880.743515] ? __fget+0x225/0x360 [ 2880.746953] ? do_vfs_ioctl+0xff0/0xff0 [ 2880.750905] ? security_file_ioctl+0x83/0xb0 [ 2880.755297] SyS_ioctl+0x7f/0xb0 [ 2880.758642] ? do_vfs_ioctl+0xff0/0xff0 [ 2880.762597] do_syscall_64+0x1d5/0x640 [ 2880.766486] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2880.771653] RIP: 0033:0x45e219 [ 2880.774821] RSP: 002b:00007f0190180c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2880.782507] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2880.789752] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2880.796999] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2880.804260] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2880.811509] R13: 00007ffe7c6cce5f R14: 00007f01901819c0 R15: 000000000119bf8c [ 2880.820671] warn_alloc_show_mem: 1 callbacks suppressed [ 2880.820675] Mem-Info: [ 2880.828816] active_anon:264220 inactive_anon:16171 isolated_anon:0 [ 2880.828816] active_file:2009 inactive_file:1557 isolated_file:0 [ 2880.828816] unevictable:0 dirty:138 writeback:0 unstable:0 [ 2880.828816] slab_reclaimable:20281 slab_unreclaimable:168495 [ 2880.828816] mapped:55560 shmem:19222 pagetables:71387 bounce:0 [ 2880.828816] free:175326 free_pcp:440 free_cma:0 [ 2880.894245] Node 0 active_anon:959316kB inactive_anon:64684kB active_file:2220kB inactive_file:3132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214392kB dirty:320kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 759808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2880.947823] Node 1 active_anon:97488kB inactive_anon:0kB active_file:5820kB inactive_file:3104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7864kB dirty:268kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2880.982340] Node 0 DMA free:12216kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.013466] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2881.019255] Node 0 DMA32 free:117168kB min:36200kB low:45248kB high:54296kB active_anon:959272kB inactive_anon:64684kB active_file:2220kB inactive_file:3132kB unevictable:0kB writepending:320kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39840kB pagetables:157956kB bounce:0kB free_pcp:712kB local_pcp:592kB free_cma:0kB [ 2881.053930] lowmem_reserve[]: 0 0 0 0 0 [ 2881.058717] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2881.095041] lowmem_reserve[]: 0 0 0 0 0 [ 2881.099150] Node 1 Normal free:426256kB min:53696kB low:67120kB high:80544kB active_anon:97488kB inactive_anon:0kB active_file:5820kB inactive_file:3104kB unevictable:0kB writepending:268kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54272kB pagetables:127312kB bounce:0kB free_pcp:780kB local_pcp:668kB free_cma:0kB [ 2881.133647] lowmem_reserve[]: 0 0 0 0 0 [ 2881.138402] Node 0 DMA: 5*4kB (M) 8*8kB (UME) 54*16kB (UME) 26*32kB (UME) 4*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11124kB [ 2881.158396] Node 0 DMA32: 3284*4kB (ME) 1072*8kB (ME) 163*16kB (UME) 50*32kB (UME) 9*64kB (U) 2*128kB (U) 1*256kB (U) 3*512kB (U) 16*1024kB (U) 0*2048kB 0*4096kB = 44928kB [ 2881.174117] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2881.189275] Node 1 Normal: 97*4kB (ME) 5905*8kB (UME) 7869*16kB (UME) 4331*32kB (UME) 235*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 327676kB [ 2881.208930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2881.218525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2881.231347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2881.247878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2881.256625] 22797 total pagecache pages [ 2881.260664] 0 pages in swap cache [ 2881.269294] Swap cache stats: add 0, delete 0, find 0/0 [ 2881.275652] Free swap = 0kB [ 2881.278745] Total swap = 0kB [ 2881.281904] 2097051 pages RAM [ 2881.289759] 0 pages HighMem/MovableOnly [ 2881.293795] 363840 pages reserved [ 2881.299125] 0 pages cma reserved 14:13:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:13:35 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:13:35 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x20000810) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bind$l2tp6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x3, @local, 0x101, 0x3}, 0x20) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) getpeername$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xad}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4004081) 14:13:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x220, 0x800}}, 0x20}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2c4700, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x40000005109046f, 0x23, 0x1}) 14:13:35 executing program 0 (fault-call:2 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) 14:13:35 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) 14:13:35 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2881.496854] PF_BRIDGE: RTM_SETLINK with unknown ifindex [ 2881.510662] PF_BRIDGE: RTM_SETLINK with unknown ifindex [ 2881.518219] FAULT_INJECTION: forcing a failure. [ 2881.518219] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.532195] FAULT_INJECTION: forcing a failure. [ 2881.532195] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.543230] CPU: 0 PID: 32430 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2881.551260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.560614] Call Trace: [ 2881.563206] dump_stack+0x1b2/0x283 [ 2881.566835] should_fail.cold+0x10a/0x154 [ 2881.570986] should_failslab+0xd6/0x130 [ 2881.574961] kmem_cache_alloc+0x40/0x3c0 [ 2881.579020] ? ipv6_sysctl_rtcache_flush+0x100/0x100 [ 2881.584121] dst_alloc+0xed/0x6d0 [ 2881.587571] __ip6_dst_alloc+0x2f/0x130 [ 2881.591542] ip6_pol_route+0xb9b/0x1dc0 14:13:35 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2881.595522] ? __ip6_route_redirect+0x810/0x810 [ 2881.600192] fib6_rule_lookup+0x185/0x3e0 [ 2881.604338] ? ip6_pol_route_input+0x70/0x70 [ 2881.608753] ? fib6_rules_seq_read+0x20/0x20 [ 2881.613177] ip6_route_output_flags+0x244/0x2d0 [ 2881.617841] ip6_dst_lookup_tail+0xd87/0x16c0 [ 2881.622341] ? ima_rdwr_violation_check+0x1e4/0x3a0 [ 2881.627369] ? trace_hardirqs_on+0x10/0x10 [ 2881.631608] ? ip6_flush_pending_frames+0xb0/0xb0 [ 2881.636448] ? __lock_acquire+0x5fc/0x3f20 [ 2881.640693] ip6_dst_lookup_flow+0x7c/0x190 [ 2881.645021] ? lock_acquire+0x170/0x3f0 [ 2881.648992] ? ip6_dst_lookup+0x60/0x60 [ 2881.652969] l2tp_ip6_sendmsg+0x837/0x14d0 [ 2881.657206] ? l2tp_ip6_recvmsg+0xa70/0xa70 [ 2881.661527] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 2881.666287] ? import_iovec+0x1df/0x360 [ 2881.670266] ? copy_msghdr_from_user+0x218/0x3b0 [ 2881.675017] inet_sendmsg+0x11a/0x4e0 [ 2881.678821] ? security_socket_sendmsg+0x83/0xb0 [ 2881.683596] ? inet_recvmsg+0x4d0/0x4d0 [ 2881.687582] sock_sendmsg+0xb5/0x100 [ 2881.691297] ___sys_sendmsg+0x6c8/0x800 14:13:35 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 2881.695268] ? get_pid_task+0x91/0x130 [ 2881.699151] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2881.703915] ? lock_downgrade+0x740/0x740 [ 2881.708065] ? __fget+0x1fe/0x360 [ 2881.711521] ? lock_acquire+0x170/0x3f0 [ 2881.715495] ? lock_downgrade+0x740/0x740 [ 2881.719660] ? sockfd_lookup_light+0xb2/0x160 [ 2881.724154] __sys_sendmsg+0xa3/0x120 [ 2881.727962] ? SyS_shutdown+0x160/0x160 [ 2881.733416] ? wait_for_completion_io+0x10/0x10 [ 2881.738081] ? SyS_read+0x210/0x210 [ 2881.741695] ? SyS_clock_settime+0x1a0/0x1a0 [ 2881.746105] SyS_sendmsg+0x27/0x40 [ 2881.749647] ? __sys_sendmsg+0x120/0x120 [ 2881.753705] do_syscall_64+0x1d5/0x640 [ 2881.757602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2881.762788] RIP: 0033:0x45e219 [ 2881.765967] RSP: 002b:00007f0190180c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2881.773663] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2881.780954] RDX: 0000000000000000 RSI: 0000000020001940 RDI: 0000000000000003 [ 2881.788222] RBP: 00007f0190180ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2881.795484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2881.802787] R13: 00007ffe7c6cce5f R14: 00007f01901819c0 R15: 000000000119bf8c [ 2881.811688] CPU: 1 PID: 32429 Comm: syz-executor.0 Not tainted 4.14.215-syzkaller #0 [ 2881.819580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2881.828932] Call Trace: [ 2881.831521] dump_stack+0x1b2/0x283 [ 2881.835153] should_fail.cold+0x10a/0x154 [ 2881.839312] should_failslab+0xd6/0x130 [ 2881.843289] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2881.848088] ? alloc_pages_current+0x15d/0x260 [ 2881.852671] ion_system_contig_heap_allocate+0xe6/0x320 [ 2881.858042] ion_alloc+0x204/0x810 [ 2881.861592] ? ion_dma_buf_release+0x40/0x40 [ 2881.866004] ? __might_fault+0x177/0x1b0 [ 2881.870061] ion_ioctl+0xea/0x1ee [ 2881.873510] ? ion_alloc.cold+0x3b/0x3b [ 2881.877477] ? SyS_write+0x1b7/0x210 [ 2881.881185] ? ion_alloc.cold+0x3b/0x3b [ 2881.885157] do_vfs_ioctl+0x75a/0xff0 [ 2881.888966] ? ioctl_preallocate+0x1a0/0x1a0 [ 2881.893370] ? lock_downgrade+0x740/0x740 [ 2881.897518] ? __fget+0x225/0x360 [ 2881.900970] ? do_vfs_ioctl+0xff0/0xff0 [ 2881.904944] ? security_file_ioctl+0x83/0xb0 [ 2881.909348] SyS_ioctl+0x7f/0xb0 [ 2881.912710] ? do_vfs_ioctl+0xff0/0xff0 [ 2881.916683] do_syscall_64+0x1d5/0x640 [ 2881.920574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2881.925755] RIP: 0033:0x45e219 [ 2881.928933] RSP: 002b:00007f41bc77bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2881.936634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 14:13:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x121401, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x8101}, 0x4) [ 2881.943895] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2881.951175] RBP: 00007f41bc77bca0 R08: 0000000000000000 R09: 0000000000000000 [ 2881.958439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2881.965705] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c 14:13:35 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x80, 0x0}, 0x81) pipe2$9p(&(0x7f0000000000), 0x0) 14:13:35 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) [ 2882.080357] FAULT_INJECTION: forcing a failure. [ 2882.080357] name failslab, interval 1, probability 0, space 0, times 0 [ 2882.109112] CPU: 1 PID: 32448 Comm: syz-executor.1 Not tainted 4.14.215-syzkaller #0 [ 2882.117025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2882.126387] Call Trace: [ 2882.128997] dump_stack+0x1b2/0x283 [ 2882.132646] should_fail.cold+0x10a/0x154 [ 2882.136821] should_failslab+0xd6/0x130 [ 2882.140804] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2882.145915] __kmalloc_node_track_caller+0x38/0x70 [ 2882.150876] __alloc_skb+0x96/0x510 [ 2882.154517] alloc_skb_with_frags+0x85/0x500 [ 2882.159033] ? __local_bh_enable_ip+0xc1/0x170 [ 2882.163619] ? ipv6_dev_get_saddr+0x22c/0x9c0 [ 2882.168116] sock_alloc_send_pskb+0x577/0x6d0 [ 2882.172615] ? sock_kzfree_s+0x50/0x50 [ 2882.176499] ? __ipv6_dev_get_saddr+0x620/0x620 [ 2882.181163] ? fib6_rule_lookup+0x1cc/0x3e0 [ 2882.185484] ? trace_hardirqs_on+0x10/0x10 [ 2882.189716] ? __lock_acquire+0x5fc/0x3f20 [ 2882.193953] __ip6_append_data.isra.0+0x161f/0x2860 [ 2882.198983] ? ip6_sk_dst_lookup_flow+0x7d0/0x7d0 [ 2882.203831] ? ip6_mtu+0x18a/0x420 [ 2882.207378] ? ip6_setup_cork+0xcb1/0x12c0 [ 2882.211619] ip6_append_data+0x1b8/0x2f0 [ 2882.215682] ? ip_do_fragment+0x1fb0/0x1fb0 [ 2882.220006] ? ip_do_fragment+0x1fb0/0x1fb0 [ 2882.224325] l2tp_ip6_sendmsg+0x921/0x14d0 [ 2882.228562] ? l2tp_ip6_recvmsg+0xa70/0xa70 [ 2882.232884] ? rw_copy_check_uvector+0x1dd/0x2b0 [ 2882.237641] ? import_iovec+0x1df/0x360 [ 2882.241630] ? copy_msghdr_from_user+0x218/0x3b0 [ 2882.246405] inet_sendmsg+0x11a/0x4e0 [ 2882.250216] ? security_socket_sendmsg+0x83/0xb0 [ 2882.254973] ? inet_recvmsg+0x4d0/0x4d0 [ 2882.258969] sock_sendmsg+0xb5/0x100 [ 2882.262691] ___sys_sendmsg+0x6c8/0x800 [ 2882.266678] ? get_pid_task+0x91/0x130 [ 2882.270572] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2882.275335] ? lock_downgrade+0x740/0x740 [ 2882.279489] ? __fget+0x1fe/0x360 [ 2882.282945] ? lock_acquire+0x170/0x3f0 [ 2882.286924] ? lock_downgrade+0x740/0x740 [ 2882.291081] ? sockfd_lookup_light+0xb2/0x160 [ 2882.295575] __sys_sendmsg+0xa3/0x120 [ 2882.299376] ? SyS_shutdown+0x160/0x160 [ 2882.303353] ? wait_for_completion_io+0x10/0x10 [ 2882.308041] ? SyS_read+0x210/0x210 [ 2882.311680] ? SyS_clock_settime+0x1a0/0x1a0 [ 2882.316100] SyS_sendmsg+0x27/0x40 [ 2882.319653] ? __sys_sendmsg+0x120/0x120 [ 2882.323727] do_syscall_64+0x1d5/0x640 [ 2882.327626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2882.332820] RIP: 0033:0x45e219 [ 2882.336009] RSP: 002b:00007f0190180c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2882.343723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 2882.350994] RDX: 0000000000000000 RSI: 0000000020001940 RDI: 0000000000000003 [ 2882.358271] RBP: 00007f0190180ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2882.365535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2882.372822] R13: 00007ffe7c6cce5f R14: 00007f01901819c0 R15: 000000000119bf8c [ 2882.531040] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2882.542987] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2882.567654] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2882.575026] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2882.583482] CPU: 1 PID: 32432 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2882.591375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2882.600739] Call Trace: [ 2882.603335] dump_stack+0x1b2/0x283 [ 2882.606967] warn_alloc.cold+0x96/0x1cc [ 2882.610938] ? zone_watermark_ok_safe+0x220/0x220 [ 2882.615784] __alloc_pages_nodemask+0x2127/0x2720 [ 2882.620619] ? __schedule+0x893/0x1de0 [ 2882.624513] ? lock_acquire+0x170/0x3f0 [ 2882.628488] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2882.633332] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2882.638780] ? __mutex_unlock_slowpath+0x75/0x770 [ 2882.643623] alloc_pages_current+0x155/0x260 [ 2882.648048] ion_page_pool_alloc+0x118/0x1b0 [ 2882.652459] ion_system_heap_allocate+0x133/0x8c0 [ 2882.657386] ? ion_alloc+0x187/0x810 [ 2882.661092] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2882.666538] ? ion_system_contig_heap_create+0x130/0x130 [ 2882.671981] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2882.676992] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2882.681831] ion_alloc+0x204/0x810 [ 2882.685372] ? ion_dma_buf_release+0x40/0x40 [ 2882.689784] ? __might_fault+0x177/0x1b0 [ 2882.693844] ion_ioctl+0xea/0x1ee [ 2882.697289] ? ion_alloc.cold+0x3b/0x3b [ 2882.701255] ? lock_acquire+0x170/0x3f0 [ 2882.705220] ? lock_downgrade+0x740/0x740 [ 2882.709362] ? ion_alloc.cold+0x3b/0x3b [ 2882.713329] do_vfs_ioctl+0x75a/0xff0 [ 2882.717127] ? ioctl_preallocate+0x1a0/0x1a0 [ 2882.721524] ? lock_downgrade+0x740/0x740 [ 2882.725668] ? __fget+0x225/0x360 [ 2882.729115] ? do_vfs_ioctl+0xff0/0xff0 [ 2882.733089] ? security_file_ioctl+0x83/0xb0 [ 2882.737498] SyS_ioctl+0x7f/0xb0 [ 2882.740859] ? do_vfs_ioctl+0xff0/0xff0 [ 2882.744828] do_syscall_64+0x1d5/0x640 [ 2882.748720] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2882.753905] RIP: 0033:0x45e219 [ 2882.757083] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2882.764781] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2882.772043] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2882.779302] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2882.786561] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2882.793827] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2882.812795] CPU: 1 PID: 32451 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2882.820697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2882.830045] Call Trace: [ 2882.832637] dump_stack+0x1b2/0x283 [ 2882.836272] warn_alloc.cold+0x96/0x1cc [ 2882.840243] ? zone_watermark_ok_safe+0x220/0x220 [ 2882.845096] __alloc_pages_nodemask+0x2127/0x2720 [ 2882.849946] ? lock_acquire+0x170/0x3f0 [ 2882.853925] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2882.858859] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2882.864306] ? __mutex_unlock_slowpath+0x75/0x770 [ 2882.869143] alloc_pages_current+0x155/0x260 [ 2882.873547] ion_page_pool_alloc+0x118/0x1b0 [ 2882.877951] ion_system_heap_allocate+0x133/0x8c0 [ 2882.882791] ? ion_alloc+0x187/0x810 [ 2882.886527] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2882.891972] ? ion_system_contig_heap_create+0x130/0x130 [ 2882.897415] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2882.902437] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2882.907276] ion_alloc+0x204/0x810 [ 2882.910813] ? ion_dma_buf_release+0x40/0x40 [ 2882.915216] ? __might_fault+0x177/0x1b0 [ 2882.919271] ion_ioctl+0xea/0x1ee [ 2882.922719] ? ion_alloc.cold+0x3b/0x3b [ 2882.926687] ? lock_acquire+0x170/0x3f0 [ 2882.930653] ? lock_downgrade+0x740/0x740 [ 2882.934791] ? ion_alloc.cold+0x3b/0x3b [ 2882.938756] do_vfs_ioctl+0x75a/0xff0 [ 2882.942553] ? ioctl_preallocate+0x1a0/0x1a0 [ 2882.946952] ? lock_downgrade+0x740/0x740 [ 2882.951102] ? __fget+0x225/0x360 [ 2882.954551] ? do_vfs_ioctl+0xff0/0xff0 [ 2882.958517] ? security_file_ioctl+0x83/0xb0 [ 2882.962917] SyS_ioctl+0x7f/0xb0 [ 2882.966276] ? do_vfs_ioctl+0xff0/0xff0 [ 2882.970244] do_syscall_64+0x1d5/0x640 [ 2882.974135] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2882.979413] RIP: 0033:0x45e219 [ 2882.982597] RSP: 002b:00007fbaae81dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2882.990296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2882.991794] syz-executor.4: [ 2882.997555] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2882.997560] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2882.997566] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2882.997571] R13: 00007fffdc1f695f R14: 00007fbaae81e9c0 R15: 000000000119c0dc [ 2883.144007] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2883.164530] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2883.169669] CPU: 1 PID: 32447 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2883.177538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2883.186889] Call Trace: [ 2883.189493] dump_stack+0x1b2/0x283 [ 2883.193129] warn_alloc.cold+0x96/0x1cc [ 2883.197098] ? zone_watermark_ok_safe+0x220/0x220 [ 2883.201949] __alloc_pages_nodemask+0x2127/0x2720 [ 2883.206797] ? _raw_spin_unlock_irq+0x24/0x80 [ 2883.211302] ? lock_acquire+0x170/0x3f0 [ 2883.215342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2883.220200] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2883.225658] ? __mutex_unlock_slowpath+0x75/0x770 [ 2883.230501] alloc_pages_current+0x155/0x260 [ 2883.234921] ion_page_pool_alloc+0x118/0x1b0 [ 2883.239346] ion_system_heap_allocate+0x133/0x8c0 [ 2883.244201] ? ion_alloc+0x187/0x810 [ 2883.247922] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2883.253373] ? ion_system_contig_heap_create+0x130/0x130 [ 2883.258826] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2883.263852] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2883.268704] ion_alloc+0x204/0x810 [ 2883.272248] ? ion_dma_buf_release+0x40/0x40 [ 2883.276670] ? __might_fault+0x177/0x1b0 [ 2883.280749] ion_ioctl+0xea/0x1ee [ 2883.284205] ? ion_alloc.cold+0x3b/0x3b [ 2883.288184] ? lock_acquire+0x170/0x3f0 [ 2883.292161] ? lock_downgrade+0x740/0x740 [ 2883.296317] ? ion_alloc.cold+0x3b/0x3b [ 2883.300297] do_vfs_ioctl+0x75a/0xff0 [ 2883.304110] ? ioctl_preallocate+0x1a0/0x1a0 [ 2883.308512] ? lock_downgrade+0x740/0x740 [ 2883.312658] ? __fget+0x225/0x360 [ 2883.316117] ? do_vfs_ioctl+0xff0/0xff0 [ 2883.320102] ? security_file_ioctl+0x83/0xb0 [ 2883.324518] SyS_ioctl+0x7f/0xb0 [ 2883.327892] ? do_vfs_ioctl+0xff0/0xff0 [ 2883.331867] do_syscall_64+0x1d5/0x640 [ 2883.335739] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2883.340904] RIP: 0033:0x45e219 [ 2883.344072] RSP: 002b:00007f580214fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2883.351764] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2883.359092] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2883.366338] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2883.373585] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2883.380851] R13: 00007ffe2c3a508f R14: 00007f58021509c0 R15: 000000000119bf8c [ 2883.473982] warn_alloc_show_mem: 1 callbacks suppressed [ 2883.473985] Mem-Info: [ 2883.481814] active_anon:263749 inactive_anon:16171 isolated_anon:0 [ 2883.481814] active_file:2032 inactive_file:1025 isolated_file:26 [ 2883.481814] unevictable:0 dirty:174 writeback:0 unstable:0 [ 2883.481814] slab_reclaimable:20323 slab_unreclaimable:169324 [ 2883.481814] mapped:55074 shmem:19222 pagetables:71365 bounce:0 [ 2883.481814] free:105050 free_pcp:293 free_cma:0 [ 2883.583993] Node 0 active_anon:957292kB inactive_anon:64684kB active_file:1052kB inactive_file:612kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:211660kB dirty:384kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 759808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2883.612574] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2883.612595] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2883.612615] CPU: 0 PID: 32449 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2883.612621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2883.612624] Call Trace: [ 2883.612644] dump_stack+0x1b2/0x283 [ 2883.652912] warn_alloc.cold+0x96/0x1cc [ 2883.656888] ? zone_watermark_ok_safe+0x220/0x220 [ 2883.661740] __alloc_pages_nodemask+0x2127/0x2720 [ 2883.666585] ? lock_acquire+0x170/0x3f0 [ 2883.670561] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2883.675405] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2883.680860] ? __mutex_unlock_slowpath+0x75/0x770 [ 2883.683980] Node 1 active_anon:97704kB inactive_anon:0kB active_file:7076kB inactive_file:3488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8636kB dirty:312kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2883.685693] ? retint_kernel+0x2d/0x2d [ 2883.716443] alloc_pages_current+0x155/0x260 [ 2883.720853] ion_page_pool_alloc+0x118/0x1b0 [ 2883.725261] ion_system_heap_allocate+0x133/0x8c0 [ 2883.730100] ? ion_alloc+0x187/0x810 [ 2883.733810] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2883.739263] ? ion_system_contig_heap_create+0x130/0x130 [ 2883.744709] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2883.749719] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2883.754573] ion_alloc+0x204/0x810 [ 2883.758112] ? ion_dma_buf_release+0x40/0x40 [ 2883.762518] ? __might_fault+0x177/0x1b0 [ 2883.764013] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2883.766578] ion_ioctl+0xea/0x1ee [ 2883.766587] ? ion_alloc.cold+0x3b/0x3b [ 2883.800337] ? lock_acquire+0x170/0x3f0 [ 2883.804305] ? lock_downgrade+0x740/0x740 [ 2883.808444] ? ion_alloc.cold+0x3b/0x3b [ 2883.812435] do_vfs_ioctl+0x75a/0xff0 [ 2883.816236] ? ioctl_preallocate+0x1a0/0x1a0 [ 2883.820637] ? lock_downgrade+0x740/0x740 [ 2883.824798] ? __fget+0x225/0x360 [ 2883.828250] ? do_vfs_ioctl+0xff0/0xff0 [ 2883.832240] ? security_file_ioctl+0x83/0xb0 [ 2883.836649] SyS_ioctl+0x7f/0xb0 [ 2883.840187] ? do_vfs_ioctl+0xff0/0xff0 [ 2883.844162] do_syscall_64+0x1d5/0x640 [ 2883.848056] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2883.853243] RIP: 0033:0x45e219 [ 2883.856429] RSP: 002b:00007f580212ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2883.864058] lowmem_reserve[]: [ 2883.864130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2883.864136] 0 [ 2883.867217] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2883.883506] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2883.890769] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2883.893950] 2717 [ 2883.898037] R13: 00007ffe2c3a508f R14: 00007f580212f9c0 R15: 000000000119c034 [ 2883.898042] 2718 2718 2718 [ 2883.936955] Node 0 DMA32 free:100900kB min:36200kB low:45248kB high:54296kB active_anon:957248kB inactive_anon:64684kB active_file:1072kB inactive_file:1092kB unevictable:0kB writepending:384kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:158044kB bounce:0kB free_pcp:72kB local_pcp:44kB free_cma:0kB [ 2884.033951] lowmem_reserve[]: 0 0 0 0 0 [ 2884.037966] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2884.123916] lowmem_reserve[]: 0 0 0 0 0 [ 2884.127942] Node 1 Normal free:345316kB min:53696kB low:67120kB high:80544kB active_anon:97704kB inactive_anon:0kB active_file:6776kB inactive_file:3488kB unevictable:0kB writepending:316kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54336kB pagetables:127336kB bounce:0kB free_pcp:748kB local_pcp:648kB free_cma:0kB [ 2884.213918] lowmem_reserve[]: 0 0 0 0 0 [ 2884.217939] Node 0 DMA: 7*4kB (UME) 8*8kB (UME) 46*16kB (UM) 26*32kB (UME) 6*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11132kB [ 2884.253914] Node 0 DMA32: 4324*4kB (UME) 1071*8kB (UME) 210*16kB (ME) 458*32kB (UME) 9*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44840kB [ 2884.268927] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2884.303955] Node 1 Normal: 54*4kB (ME) 59*8kB (UME) 4676*16kB (UME) 4287*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 212752kB [ 2884.331884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.353942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.362539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2884.383946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2884.392554] 22301 total pagecache pages [ 2884.399549] 0 pages in swap cache [ 2884.413953] Swap cache stats: add 0, delete 0, find 0/0 [ 2884.419341] Free swap = 0kB [ 2884.422351] Total swap = 0kB [ 2884.454469] 2097051 pages RAM [ 2884.457586] 0 pages HighMem/MovableOnly [ 2884.461550] 363840 pages reserved [ 2884.503897] 0 pages cma reserved [ 2886.513635] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2886.589524] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2886.603159] CPU: 1 PID: 30599 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2886.611050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2886.620422] Call Trace: [ 2886.623008] dump_stack+0x1b2/0x283 [ 2886.626637] dump_header+0x178/0x82f [ 2886.630347] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2886.635446] ? ___ratelimit+0x2cd/0x522 [ 2886.639416] oom_kill_process.cold+0x10/0xb18 [ 2886.643908] out_of_memory+0xe3e/0x1190 [ 2886.647867] ? oom_killer_disable+0x1c0/0x1c0 [ 2886.652341] ? mutex_trylock+0x152/0x1a0 [ 2886.656390] __alloc_pages_nodemask+0x23e1/0x2720 [ 2886.661216] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2886.666034] ? do_nanosleep+0x1c3/0x600 [ 2886.670001] ? cache_grow_begin+0x41/0x630 [ 2886.674214] cache_grow_begin+0x91/0x630 [ 2886.678250] ? cache_grow_begin+0x91/0x630 [ 2886.682462] fallback_alloc+0x207/0x2c0 [ 2886.686414] kmem_cache_alloc+0x1e5/0x3c0 [ 2886.690542] getname_flags+0xc8/0x550 [ 2886.694319] ? enqueue_hrtimer+0x3b0/0x3b0 [ 2886.698529] do_sys_open+0x1ce/0x410 [ 2886.702219] ? filp_open+0x60/0x60 [ 2886.705734] ? hrtimer_nanosleep+0x450/0x450 [ 2886.710118] ? do_syscall_64+0x4c/0x640 [ 2886.714066] ? do_sys_open+0x410/0x410 [ 2886.717928] do_syscall_64+0x1d5/0x640 [ 2886.721793] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2886.726959] RIP: 0033:0x45c190 [ 2886.730134] RSP: 002b:00007ffe2c3a5210 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 2886.737820] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c190 [ 2886.745065] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004c2b77 [ 2886.752308] RBP: 00007ffe2c3a5310 R08: 0000000000000000 R09: 000000000221d940 [ 2886.759552] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000004c [ 2886.766800] R13: 0000000000000005 R14: 0000000000000032 R15: 00000000002bfafa [ 2886.782352] Mem-Info: [ 2886.803734] active_anon:263728 inactive_anon:16171 isolated_anon:0 [ 2886.803734] active_file:62 inactive_file:69 isolated_file:32 [ 2886.803734] unevictable:0 dirty:69 writeback:17 unstable:0 [ 2886.803734] slab_reclaimable:20320 slab_unreclaimable:169644 [ 2886.803734] mapped:52704 shmem:19222 pagetables:71337 bounce:0 [ 2886.803734] free:13728 free_pcp:0 free_cma:0 [ 2886.843091] Node 0 active_anon:957284kB inactive_anon:64684kB active_file:92kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210524kB dirty:124kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 757760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2886.871377] Node 1 active_anon:97628kB inactive_anon:0kB active_file:160kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:152kB dirty:100kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2886.899809] Node 0 DMA free:10936kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2886.927037] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2886.932083] Node 0 DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:957240kB inactive_anon:64684kB active_file:84kB inactive_file:84kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:158044kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2886.981493] lowmem_reserve[]: 0 0 0 0 0 [ 2886.987840] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2887.023591] lowmem_reserve[]: 0 0 0 0 0 [ 2887.029350] Node 1 Normal free:26360kB min:53696kB low:67120kB high:80544kB active_anon:97628kB inactive_anon:0kB active_file:160kB inactive_file:144kB unevictable:0kB writepending:96kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127224kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 2887.063709] lowmem_reserve[]: 0 0 0 0 0 [ 2887.067708] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 34*16kB (UM) 26*32kB (UME) 6*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10936kB [ 2887.083368] Node 0 DMA32: 2980*4kB (UME) 669*8kB (UME) 52*16kB (UME) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18104kB [ 2887.103659] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2887.135858] Node 1 Normal: 1376*4kB (UME) 606*8kB (UME) 141*16kB (UME) 439*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26720kB [ 2887.152103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2887.160986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2887.169592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2887.178453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2887.194333] 19302 total pagecache pages [ 2887.198305] 0 pages in swap cache [ 2887.201745] Swap cache stats: add 0, delete 0, find 0/0 [ 2887.217157] Free swap = 0kB [ 2887.220179] Total swap = 0kB [ 2887.223187] 2097051 pages RAM [ 2887.226926] 0 pages HighMem/MovableOnly [ 2887.230892] 363840 pages reserved [ 2887.234378] 0 pages cma reserved [ 2887.237736] Out of memory (oom_kill_allocating_task): Kill process 30599 (syz-executor.4) score 0 or sacrifice child [ 2887.249372] Killed process 32447 (syz-executor.4) total-vm:93876kB, anon-rss:3888kB, file-rss:34816kB, shmem-rss:0kB [ 2887.298957] oom_reaper: reaped process 32447 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2887.420767] oom_reaper: reaped process 32451 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2887.537829] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2887.623488] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2887.657267] CPU: 1 PID: 30599 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2887.665165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2887.674515] Call Trace: [ 2887.677101] dump_stack+0x1b2/0x283 [ 2887.680727] dump_header+0x178/0x82f [ 2887.684445] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2887.689543] ? ___ratelimit+0x2cd/0x522 [ 2887.693517] oom_kill_process.cold+0x10/0xb18 [ 2887.698015] out_of_memory+0xe3e/0x1190 [ 2887.701987] ? oom_killer_disable+0x1c0/0x1c0 [ 2887.706481] ? mutex_trylock+0x152/0x1a0 [ 2887.710548] __alloc_pages_nodemask+0x23e1/0x2720 [ 2887.715398] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2887.720233] ? do_nanosleep+0x1c3/0x600 [ 2887.724213] ? cache_grow_begin+0x41/0x630 [ 2887.728447] cache_grow_begin+0x91/0x630 [ 2887.732502] ? cache_grow_begin+0x91/0x630 [ 2887.736733] fallback_alloc+0x207/0x2c0 [ 2887.740707] kmem_cache_alloc+0x1e5/0x3c0 [ 2887.744848] getname_flags+0xc8/0x550 [ 2887.748659] ? enqueue_hrtimer+0x3b0/0x3b0 [ 2887.752888] do_sys_open+0x1ce/0x410 [ 2887.756597] ? filp_open+0x60/0x60 [ 2887.760129] ? hrtimer_nanosleep+0x450/0x450 [ 2887.764528] ? do_syscall_64+0x4c/0x640 [ 2887.768493] ? do_sys_open+0x410/0x410 [ 2887.772373] do_syscall_64+0x1d5/0x640 [ 2887.776258] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2887.781440] RIP: 0033:0x45c190 [ 2887.784623] RSP: 002b:00007ffe2c3a5210 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 2887.792331] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c190 [ 2887.799591] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004c2b77 [ 2887.806851] RBP: 00007ffe2c3a5310 R08: 0000000000000000 R09: 000000000221d940 [ 2887.814111] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000004c [ 2887.821370] R13: 0000000000000005 R14: 0000000000000032 R15: 00000000002bfafa [ 2887.900241] Mem-Info: [ 2887.902682] active_anon:263152 inactive_anon:16171 isolated_anon:0 [ 2887.902682] active_file:35 inactive_file:35 isolated_file:0 [ 2887.902682] unevictable:0 dirty:43 writeback:0 unstable:0 [ 2887.902682] slab_reclaimable:20318 slab_unreclaimable:169634 [ 2887.902682] mapped:52631 shmem:19222 pagetables:71336 bounce:0 [ 2887.902682] free:13729 free_pcp:42 free_cma:0 [ 2888.013409] Node 0 active_anon:955168kB inactive_anon:64684kB active_file:84kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210524kB dirty:116kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2888.148419] Node 1 active_anon:97440kB inactive_anon:0kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:56kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2888.228695] Node 0 DMA free:10936kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2888.263816] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2888.268850] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:955124kB inactive_anon:64684kB active_file:184kB inactive_file:0kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:158044kB bounce:0kB free_pcp:168kB local_pcp:0kB free_cma:0kB [ 2888.446906] lowmem_reserve[]: 0 0 0 0 0 [ 2888.450931] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2888.484224] lowmem_reserve[]: 0 0 0 0 0 [ 2888.488218] Node 1 Normal free:25936kB min:53696kB low:67120kB high:80544kB active_anon:97440kB inactive_anon:0kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2888.654824] lowmem_reserve[]: 0 0 0 0 0 [ 2888.661585] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 34*16kB (UM) 26*32kB (UME) 6*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10936kB [ 2888.771007] Node 0 DMA32: 2945*4kB (UME) 632*8kB (UME) 43*16kB (ME) 0*32kB 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18100kB [ 2888.796747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2888.843614] Node 1 Normal: 1384*4kB (UME) 618*8kB (UME) 146*16kB (UME) 408*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25936kB [ 2888.896128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2888.943519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2888.952118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2889.017649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2889.026308] 19292 total pagecache pages [ 2889.030277] 0 pages in swap cache [ 2889.033773] Swap cache stats: add 0, delete 0, find 0/0 [ 2889.039126] Free swap = 0kB [ 2889.042131] Total swap = 0kB [ 2889.045179] 2097051 pages RAM [ 2889.048270] 0 pages HighMem/MovableOnly [ 2889.052231] 363840 pages reserved [ 2889.055707] 0 pages cma reserved [ 2889.059063] Out of memory (oom_kill_allocating_task): Kill process 30599 (syz-executor.4) score 0 or sacrifice child [ 2889.069773] Killed process 30599 (syz-executor.4) total-vm:93216kB, anon-rss:1764kB, file-rss:34816kB, shmem-rss:0kB [ 2889.106525] oom_reaper: reaped process 30599 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2890.154572] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 2890.205877] ion_system_heap cpuset=/ mems_allowed=0-1 [ 2890.211109] CPU: 0 PID: 4244 Comm: ion_system_heap Not tainted 4.14.215-syzkaller #0 [ 2890.218986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2890.228335] Call Trace: [ 2890.230920] dump_stack+0x1b2/0x283 [ 2890.234547] dump_header+0x178/0x82f [ 2890.238257] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2890.243352] ? ___ratelimit+0x2cd/0x522 [ 2890.247313] oom_kill_process.cold+0x10/0xb18 [ 2890.251785] ? lock_downgrade+0x740/0x740 [ 2890.255925] out_of_memory+0x2dc/0x1190 [ 2890.259903] ? oom_killer_disable+0x1c0/0x1c0 [ 2890.264424] ? mutex_trylock+0x152/0x1a0 [ 2890.268479] __alloc_pages_nodemask+0x23e1/0x2720 [ 2890.273332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2890.278174] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 2890.283451] ? cache_grow_begin+0x41/0x630 [ 2890.287678] cache_grow_begin+0x91/0x630 [ 2890.291735] ? cache_grow_begin+0x91/0x630 [ 2890.295963] fallback_alloc+0x207/0x2c0 [ 2890.299944] kmem_cache_alloc_node_trace+0xed/0x400 [ 2890.304958] alloc_vmap_area+0xf0/0x7c0 [ 2890.308932] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2890.314375] ? purge_vmap_area_lazy+0xb0/0xb0 [ 2890.318863] ? __get_vm_area_node+0xed/0x340 [ 2890.323265] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2890.328542] __get_vm_area_node+0x126/0x340 [ 2890.332861] vmap+0xd5/0x290 [ 2890.335873] ? ion_heap_clear_pages+0x23/0x70 [ 2890.340359] ? vunmap+0x50/0x50 [ 2890.343738] ? __vunmap+0x21c/0x300 [ 2890.347362] ion_heap_clear_pages+0x23/0x70 [ 2890.351676] ion_heap_sglist_zero+0x165/0x220 [ 2890.356167] ? ion_heap_clear_pages+0x70/0x70 [ 2890.360664] ? finish_task_switch+0x178/0x610 [ 2890.365169] ? pagerange_is_ram_callback+0x100/0x100 [ 2890.370268] ? ion_heap_deferred_free+0x222/0x470 [ 2890.375107] ion_system_heap_free+0x1d0/0x240 [ 2890.379603] ion_buffer_destroy+0x132/0x190 [ 2890.383921] ion_heap_deferred_free+0x22a/0x470 [ 2890.388589] ? __schedule+0x807/0x1de0 [ 2890.392474] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2890.397141] ? wait_woken+0x230/0x230 [ 2890.400934] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2890.406028] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 2890.410696] kthread+0x30d/0x420 [ 2890.414066] ? kthread_create_on_node+0xd0/0xd0 [ 2890.418731] ret_from_fork+0x24/0x30 [ 2890.570978] Mem-Info: [ 2890.577395] active_anon:263131 inactive_anon:16171 isolated_anon:0 [ 2890.577395] active_file:37 inactive_file:33 isolated_file:0 [ 2890.577395] unevictable:0 dirty:43 writeback:0 unstable:0 [ 2890.577395] slab_reclaimable:20308 slab_unreclaimable:169492 [ 2890.577395] mapped:52631 shmem:19222 pagetables:71336 bounce:0 [ 2890.577395] free:13742 free_pcp:102 free_cma:0 [ 2890.756061] Node 0 active_anon:955100kB inactive_anon:64684kB active_file:128kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210524kB dirty:116kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 755712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2890.784404] Node 1 active_anon:97424kB inactive_anon:0kB active_file:40kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:56kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2890.810721] Node 0 DMA free:10936kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2890.837244] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2890.842254] Node 0 DMA32 free:18144kB min:36200kB low:45248kB high:54296kB active_anon:955056kB inactive_anon:64684kB active_file:84kB inactive_file:84kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:158044kB bounce:0kB free_pcp:416kB local_pcp:304kB free_cma:0kB [ 2890.871711] lowmem_reserve[]: 0 0 0 0 0 [ 2890.963444] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2891.072614] lowmem_reserve[]: 0 0 0 0 0 [ 2891.087583] Node 1 Normal free:25984kB min:53696kB low:67120kB high:80544kB active_anon:97424kB inactive_anon:0kB active_file:48kB inactive_file:64kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2891.254186] lowmem_reserve[]: 0 0 0 0 0 [ 2891.258205] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 34*16kB (UM) 26*32kB (UME) 6*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10936kB [ 2891.304048] Node 0 DMA32: 2961*4kB (ME) 645*8kB (UMEH) 46*16kB (UMEH) 1*32kB (U) 2*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18412kB [ 2891.437990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2891.448775] Node 1 Normal: 1380*4kB (UME) 622*8kB (UME) 146*16kB (UME) 409*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25984kB [ 2891.495192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2891.521522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2891.628699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2891.705414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2891.922628] 19292 total pagecache pages [ 2891.926681] 0 pages in swap cache [ 2891.930126] Swap cache stats: add 0, delete 0, find 0/0 [ 2892.015126] Free swap = 0kB [ 2892.018172] Total swap = 0kB [ 2892.021184] 2097051 pages RAM [ 2892.111533] 0 pages HighMem/MovableOnly [ 2892.119479] 363840 pages reserved [ 2892.122939] 0 pages cma reserved [ 2892.137107] Out of memory: Kill process 17323 (syz-executor.0) score 1005 or sacrifice child [ 2892.186683] Killed process 17323 (syz-executor.0) total-vm:93348kB, anon-rss:3852kB, file-rss:34816kB, shmem-rss:0kB [ 2892.420413] oom_reaper: reaped process 17323 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2892.520067] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2892.557787] in:imklog cpuset=/ mems_allowed=0-1 [ 2892.562516] CPU: 1 PID: 32280 Comm: in:imklog Not tainted 4.14.215-syzkaller #0 [ 2892.569954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2892.579298] Call Trace: [ 2892.581880] dump_stack+0x1b2/0x283 [ 2892.585506] dump_header+0x178/0x82f [ 2892.589214] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2892.594308] ? ___ratelimit+0x2cd/0x522 [ 2892.598280] oom_kill_process.cold+0x10/0xb18 [ 2892.602779] out_of_memory+0xe3e/0x1190 [ 2892.606751] ? oom_killer_disable+0x1c0/0x1c0 [ 2892.611240] ? mutex_trylock+0x152/0x1a0 [ 2892.615297] __alloc_pages_nodemask+0x23e1/0x2720 [ 2892.620144] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2892.624995] alloc_pages_current+0x155/0x260 [ 2892.629395] filemap_fault+0xea3/0x1980 [ 2892.633372] ext4_filemap_fault+0x84/0xb0 [ 2892.637516] __do_fault+0xfa/0x380 [ 2892.641049] __handle_mm_fault+0x2497/0x4620 [ 2892.645466] ? vm_insert_page+0x7c0/0x7c0 [ 2892.649602] ? lock_downgrade+0x740/0x740 [ 2892.653755] handle_mm_fault+0x391/0x860 [ 2892.657812] __do_page_fault+0x549/0xad0 [ 2892.661867] ? spurious_fault+0x640/0x640 [ 2892.666007] ? do_page_fault+0x60/0x4f2 [ 2892.669975] ? page_fault+0x2f/0x50 [ 2892.673597] page_fault+0x45/0x50 [ 2892.677037] RIP: 1fa0:0x1f9f [ 2892.680047] RSP: 0000:000055e7a46299d0 EFLAGS: 7f56e0e28da0 [ 2892.732902] Mem-Info: [ 2892.757447] active_anon:262590 inactive_anon:16171 isolated_anon:0 [ 2892.757447] active_file:38 inactive_file:25 isolated_file:0 [ 2892.757447] unevictable:0 dirty:43 writeback:0 unstable:0 [ 2892.757447] slab_reclaimable:20282 slab_unreclaimable:169212 [ 2892.757447] mapped:52631 shmem:19222 pagetables:71271 bounce:0 [ 2892.757447] free:13745 free_pcp:95 free_cma:0 [ 2892.823391] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2892.881766] Node 0 active_anon:952936kB inactive_anon:64684kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210524kB dirty:116kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2892.918572] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2892.963220] CPU: 0 PID: 32449 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2892.971123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2892.980474] Call Trace: [ 2892.983058] dump_stack+0x1b2/0x283 [ 2892.986691] warn_alloc.cold+0x96/0x1cc [ 2892.990659] ? zone_watermark_ok_safe+0x220/0x220 [ 2892.995498] ? usleep_range+0x130/0x130 [ 2892.999470] ? try_to_free_pages+0x23f/0x6e0 [ 2893.003873] ? _find_next_bit+0xdb/0x100 [ 2893.007933] ? run_timer_softirq+0x5a0/0x5a0 [ 2893.012344] __alloc_pages_nodemask+0x2127/0x2720 [ 2893.017189] ? lock_acquire+0x170/0x3f0 [ 2893.021162] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2893.025998] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2893.030492] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2893.035947] alloc_pages_current+0x155/0x260 [ 2893.040350] ion_page_pool_alloc+0x118/0x1b0 [ 2893.044753] ion_system_heap_allocate+0x133/0x8c0 [ 2893.049599] ? ion_alloc+0x187/0x810 [ 2893.053312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2893.058755] ? ion_system_contig_heap_create+0x130/0x130 [ 2893.064305] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2893.069316] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2893.074160] ion_alloc+0x204/0x810 [ 2893.077702] ? ion_dma_buf_release+0x40/0x40 [ 2893.082196] ? __might_fault+0x177/0x1b0 [ 2893.086256] ion_ioctl+0xea/0x1ee [ 2893.089704] ? ion_alloc.cold+0x3b/0x3b [ 2893.093676] ? lock_acquire+0x170/0x3f0 [ 2893.097641] ? lock_downgrade+0x740/0x740 [ 2893.101779] ? ion_alloc.cold+0x3b/0x3b [ 2893.105747] do_vfs_ioctl+0x75a/0xff0 [ 2893.109544] ? ioctl_preallocate+0x1a0/0x1a0 [ 2893.113945] ? lock_downgrade+0x740/0x740 [ 2893.118089] ? __fget+0x225/0x360 [ 2893.121536] ? do_vfs_ioctl+0xff0/0xff0 [ 2893.125504] ? security_file_ioctl+0x83/0xb0 [ 2893.129915] SyS_ioctl+0x7f/0xb0 [ 2893.133274] ? do_vfs_ioctl+0xff0/0xff0 [ 2893.137242] do_syscall_64+0x1d5/0x640 [ 2893.141140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2893.146323] RIP: 0033:0x45e219 [ 2893.149502] RSP: 002b:00007f580212ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2893.153270] Node 1 active_anon:97424kB inactive_anon:0kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:56kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2893.157202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2893.183492] Node 0 [ 2893.190711] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2893.190718] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2893.192937] DMA free:10936kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2893.200188] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2893.200193] R13: 00007ffe2c3a508f R14: 00007f580212f9c0 R15: 000000000119c034 [ 2893.213142] warn_alloc_show_mem: 3 callbacks suppressed [ 2893.213145] Mem-Info: [ 2893.256490] active_anon:262590 inactive_anon:16171 isolated_anon:0 [ 2893.256490] active_file:62 inactive_file:0 isolated_file:0 [ 2893.256490] unevictable:0 dirty:43 writeback:0 unstable:0 [ 2893.256490] slab_reclaimable:20280 slab_unreclaimable:169206 [ 2893.256490] mapped:52631 shmem:19222 pagetables:71283 bounce:0 [ 2893.256490] free:13732 free_pcp:30 free_cma:0 [ 2893.289990] Node 0 active_anon:952936kB inactive_anon:64684kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210524kB dirty:116kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2893.356549] Node 1 active_anon:97424kB inactive_anon:0kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:56kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2893.368788] lowmem_reserve[]: [ 2893.427585] Node 0 [ 2893.427680] 0 [ 2893.430713] DMA free:10936kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2893.432918] 2717 [ 2893.434735] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2893.478157] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:952892kB inactive_anon:64684kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:157832kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2893.509366] 2718 2718 2718 [ 2893.512323] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:952892kB inactive_anon:64684kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:116kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39872kB pagetables:157832kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2893.593677] lowmem_reserve[]: 0 0 0 0 0 [ 2893.597701] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2893.618925] lowmem_reserve[]: 0 0 0 0 0 [ 2893.628245] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2893.670874] lowmem_reserve[]: 0 0 0 0 0 [ 2893.674954] Node 1 Normal free:25984kB min:53696kB low:67120kB high:80544kB active_anon:97424kB inactive_anon:0kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2893.683717] lowmem_reserve[]: 0 0 0 0 0 [ 2893.737096] Node 1 Normal free:25984kB min:53696kB low:67120kB high:80544kB active_anon:97424kB inactive_anon:0kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127220kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2893.799955] lowmem_reserve[]: 0 0 0 0 0 [ 2893.804018] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 34*16kB (UM) 26*32kB (UME) 6*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10936kB [ 2893.843081] Node 0 DMA32: 2988*4kB (UME) 652*8kB (UMEH) 45*16kB (MEH) 0*32kB 1*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18336kB [ 2893.856192] lowmem_reserve[]: 0 0 0 0 0 [ 2893.860981] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 34*16kB (UM) 26*32kB (UME) 6*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10936kB [ 2893.874004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2893.921396] Node 1 Normal: 1380*4kB (UME) 622*8kB (UME) 146*16kB (UME) 409*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25984kB [ 2893.981603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2893.993488] Node 0 DMA32: 3021*4kB (UME) 642*8kB (UMEH) 48*16kB (UMEH) 2*32kB (U) 1*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18500kB [ 2894.033480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2894.041747] Node 0 [ 2894.042154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2894.042157] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2894.078437] Node 1 Normal: 1381*4kB (UME) 623*8kB (UME) 146*16kB (UME) 409*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25996kB [ 2894.079715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2894.133056] 19292 total pagecache pages [ 2894.133107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2894.137048] 0 pages in swap cache [ 2894.171671] Swap cache stats: add 0, delete 0, find 0/0 [ 2894.182074] Free swap = 0kB [ 2894.193058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2894.201642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2894.212157] Total swap = 0kB [ 2894.241169] 2097051 pages RAM [ 2894.242772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2894.252892] 19292 total pagecache pages [ 2894.258642] 0 pages HighMem/MovableOnly [ 2894.262618] 363840 pages reserved [ 2894.283921] 0 pages cma reserved [ 2894.293849] 0 pages in swap cache [ 2894.303033] Swap cache stats: add 0, delete 0, find 0/0 [ 2894.308432] Free swap = 0kB [ 2894.311436] Total swap = 0kB [ 2894.333121] 2097051 pages RAM [ 2894.336230] 0 pages HighMem/MovableOnly [ 2894.340188] 363840 pages reserved [ 2894.363028] 0 pages cma reserved [ 2894.366437] Out of memory (oom_kill_allocating_task): Kill process 32280 (in:imklog) score 0 or sacrifice child [ 2894.396945] Killed process 32278 (rsyslogd) total-vm:254332kB, anon-rss:504kB, file-rss:0kB, shmem-rss:0kB [ 2894.488880] oom_reaper: reaped process 32278 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2894.953622] systemd-cgroups invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2895.006879] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 2895.012108] CPU: 1 PID: 32456 Comm: systemd-cgroups Not tainted 4.14.215-syzkaller #0 [ 2895.020067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.029425] Call Trace: [ 2895.031995] dump_stack+0x1b2/0x283 [ 2895.035599] dump_header+0x178/0x82f [ 2895.039289] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2895.044388] ? ___ratelimit+0x2cd/0x522 [ 2895.048339] oom_kill_process.cold+0x10/0xb18 [ 2895.052815] out_of_memory+0xe3e/0x1190 [ 2895.056773] ? oom_killer_disable+0x1c0/0x1c0 [ 2895.061243] ? mutex_trylock+0x152/0x1a0 [ 2895.065283] __alloc_pages_nodemask+0x23e1/0x2720 [ 2895.070117] ? put_timespec64+0xf0/0xf0 [ 2895.074069] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2895.078888] ? perf_event_namespaces+0x30/0x30 [ 2895.083447] ? uprobe_mmap+0xcb/0xa30 [ 2895.087226] ? __anon_vma_prepare+0x28f/0x4f0 [ 2895.091701] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 2895.097130] alloc_pages_vma+0xd2/0x6d0 [ 2895.101094] __handle_mm_fault+0xe4f/0x4620 [ 2895.105392] ? vm_insert_page+0x7c0/0x7c0 [ 2895.109514] ? vm_mmap_pgoff+0x168/0x1a0 [ 2895.113551] ? vm_mmap_pgoff+0xcb/0x1a0 [ 2895.117525] handle_mm_fault+0x391/0x860 [ 2895.121563] __do_page_fault+0x549/0xad0 [ 2895.125602] ? spurious_fault+0x640/0x640 [ 2895.129726] ? do_page_fault+0x60/0x4f2 [ 2895.133700] ? page_fault+0x2f/0x50 [ 2895.137301] page_fault+0x45/0x50 [ 2895.140728] RIP: 0002:0x801 [ 2895.143633] RSP: b31123c0:00007ffe5aa36000 EFLAGS: 7ffe5aa360e8 [ 2895.383921] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2895.444402] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2895.449548] CPU: 0 PID: 32449 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2895.457423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.466767] Call Trace: [ 2895.469353] dump_stack+0x1b2/0x283 [ 2895.472981] warn_alloc.cold+0x96/0x1cc [ 2895.476951] ? zone_watermark_ok_safe+0x220/0x220 [ 2895.481910] __alloc_pages_nodemask+0x2127/0x2720 [ 2895.486753] ? _raw_spin_unlock_irq+0x24/0x80 [ 2895.491246] ? lock_acquire+0x170/0x3f0 [ 2895.495217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2895.500061] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2895.502916] Mem-Info: [ 2895.505502] ? __mutex_unlock_slowpath+0x75/0x770 [ 2895.507912] active_anon:262420 inactive_anon:16171 isolated_anon:0 [ 2895.507912] active_file:44 inactive_file:35 isolated_file:8 [ 2895.507912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2895.507912] slab_reclaimable:20252 slab_unreclaimable:168859 [ 2895.507912] mapped:52664 shmem:19222 pagetables:71259 bounce:0 [ 2895.507912] free:13792 free_pcp:103 free_cma:0 [ 2895.512750] alloc_pages_current+0x155/0x260 [ 2895.550747] ion_page_pool_alloc+0x118/0x1b0 [ 2895.555154] ion_system_heap_allocate+0x133/0x8c0 [ 2895.559996] ? _raw_spin_unlock+0x29/0x40 [ 2895.564136] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2895.569059] ? ion_system_contig_heap_create+0x130/0x130 [ 2895.574500] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2895.579521] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2895.582925] Node 0 active_anon:952208kB inactive_anon:64684kB active_file:32kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2895.584356] ion_alloc+0x27a/0x810 [ 2895.615636] ? ion_dma_buf_release+0x40/0x40 [ 2895.620044] ? __might_fault+0x177/0x1b0 [ 2895.624100] ion_ioctl+0xea/0x1ee [ 2895.627545] ? ion_alloc.cold+0x3b/0x3b [ 2895.631514] ? lock_acquire+0x170/0x3f0 [ 2895.635482] ? lock_downgrade+0x740/0x740 [ 2895.639625] ? ion_alloc.cold+0x3b/0x3b [ 2895.642921] Node 1 active_anon:97472kB inactive_anon:0kB active_file:144kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:56kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2895.643591] do_vfs_ioctl+0x75a/0xff0 [ 2895.673738] ? ioctl_preallocate+0x1a0/0x1a0 [ 2895.678137] ? lock_downgrade+0x740/0x740 [ 2895.682285] ? __fget+0x225/0x360 [ 2895.685731] ? do_vfs_ioctl+0xff0/0xff0 [ 2895.689701] ? security_file_ioctl+0x83/0xb0 [ 2895.692902] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2895.694110] SyS_ioctl+0x7f/0xb0 [ 2895.694119] ? do_vfs_ioctl+0xff0/0xff0 [ 2895.727774] do_syscall_64+0x1d5/0x640 [ 2895.731662] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2895.736843] RIP: 0033:0x45e219 [ 2895.740027] RSP: 002b:00007f580212ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2895.747727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2895.750974] lowmem_reserve[]: [ 2895.754984] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2895.754989] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2895.754994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2895.754999] R13: 00007ffe2c3a508f R14: 00007f580212f9c0 R15: 000000000119c034 [ 2895.937390] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2895.962894] 0 2717 2718 2718 2718 [ 2895.972899] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2895.978035] CPU: 0 PID: 32451 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2895.978209] Node 0 [ 2895.985900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.985904] Call Trace: [ 2895.985921] dump_stack+0x1b2/0x283 [ 2895.985933] warn_alloc.cold+0x96/0x1cc [ 2896.007620] ? zone_watermark_ok_safe+0x220/0x220 [ 2896.012461] ? usleep_range+0x130/0x130 [ 2896.012882] DMA32 free:17848kB min:36200kB low:45248kB high:54296kB active_anon:952164kB inactive_anon:64684kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39712kB pagetables:157708kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.016425] ? try_to_free_pages+0x23f/0x6e0 [ 2896.049003] ? _find_next_bit+0xdb/0x100 [ 2896.053059] ? run_timer_softirq+0x5a0/0x5a0 [ 2896.057475] __alloc_pages_nodemask+0x2127/0x2720 [ 2896.062319] ? lock_acquire+0x170/0x3f0 [ 2896.066294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2896.071131] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2896.075627] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2896.081080] alloc_pages_current+0x155/0x260 [ 2896.085490] ion_page_pool_alloc+0x118/0x1b0 [ 2896.089932] ion_system_heap_allocate+0x133/0x8c0 [ 2896.094767] ? ion_alloc+0x187/0x810 [ 2896.098479] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2896.103928] ? ion_system_contig_heap_create+0x130/0x130 [ 2896.107478] lowmem_reserve[]: [ 2896.109368] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2896.109375] 0 [ 2896.112462] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2896.124077] ion_alloc+0x204/0x810 [ 2896.127653] ? ion_dma_buf_release+0x40/0x40 [ 2896.132063] ? __might_fault+0x177/0x1b0 [ 2896.136126] ion_ioctl+0xea/0x1ee [ 2896.139571] ? ion_alloc.cold+0x3b/0x3b [ 2896.142863] 0 0 [ 2896.143536] ? lock_acquire+0x170/0x3f0 [ 2896.143545] ? lock_downgrade+0x740/0x740 [ 2896.145499] 0 [ 2896.149454] ? ion_alloc.cold+0x3b/0x3b [ 2896.149466] do_vfs_ioctl+0x75a/0xff0 [ 2896.163122] ? ioctl_preallocate+0x1a0/0x1a0 [ 2896.166324] 0 [ 2896.167515] ? lock_downgrade+0x740/0x740 [ 2896.169306] ? __fget+0x225/0x360 [ 2896.176870] ? do_vfs_ioctl+0xff0/0xff0 [ 2896.180837] ? security_file_ioctl+0x83/0xb0 [ 2896.185243] SyS_ioctl+0x7f/0xb0 [ 2896.188603] ? do_vfs_ioctl+0xff0/0xff0 [ 2896.192574] do_syscall_64+0x1d5/0x640 [ 2896.192856] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.196462] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2896.196471] RIP: 0033:0x45e219 [ 2896.230412] RSP: 002b:00007fbaae81dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2896.238113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2896.245378] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2896.252643] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2896.259918] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2896.267180] R13: 00007fffdc1f695f R14: 00007fbaae81e9c0 R15: 000000000119c0dc [ 2896.271018] lowmem_reserve[]: 0 0 0 0 0 [ 2896.278455] Node 1 Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:97544kB inactive_anon:0kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54336kB pagetables:127276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2896.392090] lowmem_reserve[]: 0 0 0 0 0 [ 2896.400797] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2896.442034] Node 0 DMA32: 2820*4kB (UME) 671*8kB (ME) 35*16kB (UMEH) 0*32kB 12*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 2896.508483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2896.550126] Node 1 Normal: 1348*4kB (ME) 624*8kB (UME) 147*16kB (ME) 40*32kB (UME) 13*64kB (UM) 1*128kB (U) 0*256kB 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26752kB [ 2896.609878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.637707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.672131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2896.722710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2896.754512] 19257 total pagecache pages [ 2896.758510] 0 pages in swap cache [ 2896.761962] Swap cache stats: add 0, delete 0, find 0/0 [ 2896.814578] Free swap = 0kB [ 2896.817610] Total swap = 0kB [ 2896.820618] 2097051 pages RAM [ 2896.872805] 0 pages HighMem/MovableOnly [ 2896.878538] 363840 pages reserved [ 2896.881999] 0 pages cma reserved [ 2896.927653] Out of memory (oom_kill_allocating_task): Kill process 32456 (systemd-cgroups) score 0 or sacrifice child [ 2896.969781] Mem-Info: [ 2896.972222] active_anon:262438 inactive_anon:16171 isolated_anon:0 [ 2896.972222] active_file:15 inactive_file:19 isolated_file:0 [ 2896.972222] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2896.972222] slab_reclaimable:20262 slab_unreclaimable:168876 [ 2896.972222] mapped:52638 shmem:19222 pagetables:71266 bounce:0 [ 2896.972222] free:13920 free_pcp:2 free_cma:0 [ 2896.980403] Killed process 32456 (systemd-cgroups) total-vm:26548kB, anon-rss:124kB, file-rss:4kB, shmem-rss:0kB [ 2897.128468] Node 0 active_anon:952208kB inactive_anon:64684kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210552kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2897.142894] oom_reaper: reaped process 32456 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2897.246648] Node 1 active_anon:97444kB inactive_anon:0kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2897.267156] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2897.362971] systemd-journal cpuset=/ mems_allowed=0-1 [ 2897.363250] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.368186] CPU: 1 PID: 32277 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2897.368193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2897.411836] Call Trace: [ 2897.414421] dump_stack+0x1b2/0x283 [ 2897.418040] dump_header+0x178/0x82f [ 2897.421744] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2897.426924] ? ___ratelimit+0x2cd/0x522 [ 2897.430896] oom_kill_process.cold+0x10/0xb18 [ 2897.435388] out_of_memory+0xe3e/0x1190 [ 2897.439359] ? oom_killer_disable+0x1c0/0x1c0 [ 2897.443845] ? mutex_trylock+0x152/0x1a0 [ 2897.447900] __alloc_pages_nodemask+0x23e1/0x2720 [ 2897.452753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2897.457595] ? trace_hardirqs_on+0x10/0x10 [ 2897.461830] ? check_preemption_disabled+0x35/0x240 [ 2897.463126] lowmem_reserve[]: [ 2897.466839] ? cache_grow_begin+0x41/0x630 [ 2897.466849] cache_grow_begin+0x91/0x630 [ 2897.466857] ? cache_grow_begin+0x91/0x630 [ 2897.466866] fallback_alloc+0x207/0x2c0 [ 2897.466878] kmem_cache_alloc+0x1e5/0x3c0 [ 2897.466887] getname_flags+0xc8/0x550 [ 2897.466898] do_sys_open+0x1ce/0x410 [ 2897.466906] ? filp_open+0x60/0x60 [ 2897.466917] ? do_syscall_64+0x4c/0x640 [ 2897.466925] ? do_sys_open+0x410/0x410 [ 2897.466933] do_syscall_64+0x1d5/0x640 [ 2897.466948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2897.477767] 0 [ 2897.478296] RIP: 0033:0x7f55db54c840 [ 2897.496073] 2717 [ 2897.498060] RSP: 002b:00007ffe85de3fb8 EFLAGS: 00000246 [ 2897.501578] 2718 [ 2897.505523] ORIG_RAX: 0000000000000002 [ 2897.505528] RAX: ffffffffffffffda RBX: 00007ffe85de42c0 RCX: 00007f55db54c840 [ 2897.505532] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 00005642d30cbf50 [ 2897.505536] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 2897.505540] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 2897.505545] R13: 00005642d30c7040 R14: 00007ffe85de4280 R15: 00005642d30cb920 [ 2897.603636] Mem-Info: [ 2897.606070] active_anon:262413 inactive_anon:16171 isolated_anon:0 [ 2897.606070] active_file:110 inactive_file:364 isolated_file:0 [ 2897.606070] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2897.606070] slab_reclaimable:20262 slab_unreclaimable:168876 [ 2897.606070] mapped:52863 shmem:19222 pagetables:71266 bounce:0 [ 2897.606070] free:39782 free_pcp:511 free_cma:0 [ 2897.650282] 2718 2718 [ 2897.659788] Node 0 active_anon:952208kB inactive_anon:64684kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210552kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2897.661032] Node 0 [ 2897.697118] Node 1 active_anon:97444kB inactive_anon:0kB active_file:440kB inactive_file:3680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2400kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2897.734450] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.734879] DMA32 free:34372kB min:36200kB low:45248kB high:54296kB active_anon:952164kB inactive_anon:64684kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39712kB pagetables:157708kB bounce:0kB free_pcp:896kB local_pcp:700kB free_cma:0kB [ 2897.760873] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2897.760892] Node 0 DMA32 free:34372kB min:36200kB low:45248kB high:54296kB active_anon:952164kB inactive_anon:64684kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39712kB pagetables:157708kB bounce:0kB free_pcp:968kB local_pcp:268kB free_cma:0kB [ 2897.790475] lowmem_reserve[]: 0 0 0 0 0 [ 2897.828110] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.854041] lowmem_reserve[]: 0 0 0 0 0 [ 2897.854533] lowmem_reserve[]: [ 2897.858029] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.858046] lowmem_reserve[]: 0 0 0 0 0 [ 2897.890947] Node 1 Normal free:65320kB min:53696kB low:67120kB high:80544kB active_anon:97520kB inactive_anon:0kB active_file:528kB inactive_file:5120kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127424kB bounce:0kB free_pcp:580kB local_pcp:352kB free_cma:0kB [ 2897.966779] 0 0 0 0 0 [ 2897.969433] Node 1 Normal free:26396kB min:53696kB low:67120kB high:80544kB active_anon:97520kB inactive_anon:0kB active_file:2040kB inactive_file:2428kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127424kB bounce:0kB free_pcp:1104kB local_pcp:680kB free_cma:0kB [ 2898.035143] lowmem_reserve[]: 0 0 0 0 0 [ 2898.039157] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2898.090045] lowmem_reserve[]: 0 0 0 0 0 [ 2898.126610] Node 0 DMA32: 2701*4kB (UME) 638*8kB (UME) 33*16kB (MEH) 49*32kB (U) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18260kB [ 2898.142620] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2898.172708] Node 0 DMA32: 2669*4kB (UME) 638*8kB (UME) 33*16kB (MEH) 49*32kB (U) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18132kB [ 2898.182950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2898.202702] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2898.205945] Node 1 Normal: 1373*4kB (UME) 538*8kB (ME) 147*16kB (ME) 47*32kB (UME) 13*64kB (UM) 1*128kB (U) 1*256kB (U) 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26644kB [ 2898.222720] Node 1 [ 2898.236837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2898.242707] Normal: 1373*4kB (UME) 538*8kB (ME) 147*16kB (ME) 47*32kB (UME) 13*64kB (UM) 1*128kB (U) 1*256kB (U) 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26644kB [ 2898.247985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2898.273675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2898.274282] syz-executor.5: [ 2898.282505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2898.282517] page allocation failure: order:4 [ 2898.288521] 19312 total pagecache pages [ 2898.312693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2898.318635] 0 pages in swap cache [ 2898.321616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2898.330532] Swap cache stats: add 0, delete 0, find 0/0 [ 2898.352725] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2898.355745] Free swap = 0kB [ 2898.361569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2898.368206] Total swap = 0kB [ 2898.373253] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2898.373262] syz-executor.5 cpuset=/ [ 2898.379527] 2097051 pages RAM [ 2898.390630] 0 pages HighMem/MovableOnly [ 2898.398483] 363840 pages reserved [ 2898.401928] 0 pages cma reserved [ 2898.402691] mems_allowed=0-1 [ 2898.405327] Out of memory (oom_kill_allocating_task): Kill process 32277 (systemd-journal) score 0 or sacrifice child [ 2898.408392] CPU: 0 PID: 32451 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2898.427068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2898.432680] Killed process 32277 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:1648kB [ 2898.436420] Call Trace: [ 2898.449553] dump_stack+0x1b2/0x283 [ 2898.453181] warn_alloc.cold+0x96/0x1cc [ 2898.457162] ? zone_watermark_ok_safe+0x220/0x220 [ 2898.462013] __alloc_pages_nodemask+0x2127/0x2720 [ 2898.466858] ? lock_acquire+0x170/0x3f0 [ 2898.470927] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2898.475773] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2898.481221] ? __mutex_unlock_slowpath+0x75/0x770 [ 2898.486058] ? retint_kernel+0x2d/0x2d [ 2898.489952] alloc_pages_current+0x155/0x260 [ 2898.494356] ion_page_pool_alloc+0x118/0x1b0 [ 2898.498757] ion_system_heap_allocate+0x133/0x8c0 [ 2898.503596] ? _raw_spin_unlock+0x29/0x40 [ 2898.507734] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2898.512660] ? ion_system_contig_heap_create+0x130/0x130 [ 2898.518101] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2898.523113] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2898.527954] ion_alloc+0x27a/0x810 [ 2898.531519] ? ion_dma_buf_release+0x40/0x40 [ 2898.535926] ? __might_fault+0x177/0x1b0 [ 2898.539982] ion_ioctl+0xea/0x1ee [ 2898.543434] ? ion_alloc.cold+0x3b/0x3b [ 2898.547409] ? lock_acquire+0x170/0x3f0 [ 2898.551379] ? lock_downgrade+0x740/0x740 [ 2898.555523] ? ion_alloc.cold+0x3b/0x3b [ 2898.559514] do_vfs_ioctl+0x75a/0xff0 [ 2898.563318] ? ioctl_preallocate+0x1a0/0x1a0 [ 2898.567838] ? lock_downgrade+0x740/0x740 [ 2898.571990] ? __fget+0x225/0x360 [ 2898.575443] ? do_vfs_ioctl+0xff0/0xff0 [ 2898.579414] ? security_file_ioctl+0x83/0xb0 [ 2898.583827] SyS_ioctl+0x7f/0xb0 [ 2898.587182] ? do_vfs_ioctl+0xff0/0xff0 [ 2898.591138] do_syscall_64+0x1d5/0x640 [ 2898.595027] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2898.600195] RIP: 0033:0x45e219 [ 2898.603364] RSP: 002b:00007fbaae81dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2898.611051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2898.618301] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2898.625549] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2898.632796] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2898.640044] R13: 00007fffdc1f695f R14: 00007fbaae81e9c0 R15: 000000000119c0dc [ 2898.647950] oom_reaper: reaped process 32277 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1648kB [ 2898.652765] 19262 total pagecache pages [ 2898.662222] 0 pages in swap cache [ 2898.665757] Swap cache stats: add 0, delete 0, find 0/0 [ 2898.671109] Free swap = 0kB [ 2898.674154] Total swap = 0kB [ 2898.677164] 2097051 pages RAM [ 2898.680258] 0 pages HighMem/MovableOnly [ 2898.684276] 363840 pages reserved [ 2898.687715] 0 pages cma reserved [ 2898.705055] warn_alloc_show_mem: 1 callbacks suppressed [ 2898.705058] Mem-Info: [ 2898.712865] active_anon:262357 inactive_anon:16171 isolated_anon:0 [ 2898.712865] active_file:16 inactive_file:0 isolated_file:10 [ 2898.712865] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2898.712865] slab_reclaimable:20261 slab_unreclaimable:168943 [ 2898.712865] mapped:52657 shmem:19222 pagetables:71303 bounce:0 [ 2898.712865] free:13838 free_pcp:30 free_cma:0 [ 2898.746806] Node 0 active_anon:951808kB inactive_anon:64684kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210552kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2898.783207] (rsyslogd) invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2898.812661] Node 1 active_anon:97632kB inactive_anon:0kB active_file:64kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2898.866655] (rsyslogd) cpuset=/ mems_allowed=0-1 [ 2898.871686] CPU: 0 PID: 32457 Comm: (rsyslogd) Not tainted 4.14.215-syzkaller #0 [ 2898.879208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2898.888551] Call Trace: [ 2898.891135] dump_stack+0x1b2/0x283 [ 2898.894760] dump_header+0x178/0x82f [ 2898.898467] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2898.903565] ? ___ratelimit+0x2cd/0x522 [ 2898.907538] oom_kill_process.cold+0x10/0xb18 [ 2898.912034] out_of_memory+0xe3e/0x1190 [ 2898.916013] ? oom_killer_disable+0x1c0/0x1c0 [ 2898.920506] ? mutex_trylock+0x152/0x1a0 [ 2898.924560] __alloc_pages_nodemask+0x23e1/0x2720 [ 2898.929399] ? do_execveat_common+0x9a9/0x1f30 [ 2898.933972] ? do_syscall_64+0x1d5/0x640 [ 2898.938027] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2898.942860] ? sched_ttwu_pending+0x1a0/0x1a0 [ 2898.947351] ? sched_ttwu_pending+0x1a0/0x1a0 [ 2898.951844] ? fs_reclaim_release+0xd0/0x110 [ 2898.956248] alloc_pages_current+0x155/0x260 [ 2898.960653] __get_free_pages+0xb/0x40 [ 2898.964530] pgd_alloc+0x20/0x2b0 [ 2898.967975] mm_init+0x578/0x960 [ 2898.971337] mm_alloc+0xa2/0xc0 [ 2898.974609] do_execveat_common+0x9a9/0x1f30 [ 2898.979012] ? copy_strings_kernel+0x110/0x110 [ 2898.983586] ? strncpy_from_user+0x210/0x2c0 [ 2898.987985] ? getname_flags+0x22e/0x550 [ 2898.992038] SyS_execve+0x3b/0x50 [ 2898.995487] ? setup_new_exec+0x770/0x770 [ 2898.999625] do_syscall_64+0x1d5/0x640 [ 2899.003519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2899.008698] RIP: 0033:0x7f6c061e4647 [ 2899.012398] RSP: 002b:00007fff57a8dc58 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2899.020095] RAX: ffffffffffffffda RBX: 000055e630e7fff0 RCX: 00007f6c061e4647 [ 2899.027357] RDX: 000055e630d9b0d0 RSI: 000055e630e74830 RDI: 000055e630d87150 [ 2899.034616] RBP: 00007fff57a8ddc0 R08: 000000000000fcfe R09: 0000000000000010 [ 2899.041874] R10: 000055e630d867c0 R11: 0000000000000246 R12: 000055e630d86358 [ 2899.041886] Node 0 [ 2899.049131] R13: 0000000000000000 R14: 000055e630e74830 R15: 00007fff57a8dea0 [ 2899.051403] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2899.058933] Mem-Info: [ 2899.086978] active_anon:262347 inactive_anon:16171 isolated_anon:0 [ 2899.086978] active_file:13 inactive_file:21 isolated_file:0 [ 2899.086978] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2899.086978] slab_reclaimable:20256 slab_unreclaimable:168954 [ 2899.086978] mapped:52638 shmem:19222 pagetables:71298 bounce:0 [ 2899.086978] free:13908 free_pcp:49 free_cma:0 [ 2899.120452] Node 0 active_anon:951732kB inactive_anon:64684kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210552kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2899.122610] syz-executor.4: [ 2899.148154] syz-executor.5: [ 2899.148319] Node 1 active_anon:97656kB inactive_anon:0kB active_file:56kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2899.151167] page allocation failure: order:0 [ 2899.154186] Node 0 [ 2899.182602] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2899.192642] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2899.214345] syz-executor.4 cpuset= [ 2899.234413] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2899.240067] / [ 2899.248418] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2899.261518] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2899.271434] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2899.276515] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2899.281640] CPU: 0 PID: 32449 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2899.282590] mems_allowed=0-1 [ 2899.289505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2899.292613] Node 0 [ 2899.301920] Call Trace: [ 2899.301939] DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:951688kB inactive_anon:64684kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39712kB pagetables:157708kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 2899.304150] dump_stack+0x1b2/0x283 [ 2899.304165] warn_alloc.cold+0x96/0x1cc [ 2899.332577] lowmem_reserve[]: [ 2899.335159] ? zone_watermark_ok_safe+0x220/0x220 [ 2899.338752] 0 [ 2899.342702] ? usleep_range+0x130/0x130 [ 2899.342713] ? try_to_free_pages+0x23f/0x6e0 [ 2899.342724] ? _find_next_bit+0xdb/0x100 [ 2899.352572] 0 [ 2899.356335] ? run_timer_softirq+0x5a0/0x5a0 [ 2899.360711] 0 [ 2899.364756] __alloc_pages_nodemask+0x2127/0x2720 [ 2899.364773] ? lock_acquire+0x170/0x3f0 [ 2899.381490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2899.382587] 0 [ 2899.386315] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2899.386316] 0 [ 2899.388104] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2899.399807] alloc_pages_current+0x155/0x260 [ 2899.402569] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2899.404238] ion_page_pool_alloc+0x118/0x1b0 [ 2899.404248] ion_system_heap_allocate+0x133/0x8c0 [ 2899.438941] ? _raw_spin_unlock+0x29/0x40 [ 2899.443068] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2899.447977] ? ion_system_contig_heap_create+0x130/0x130 [ 2899.453408] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2899.458419] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2899.462563] lowmem_reserve[]: 0 [ 2899.463241] ion_alloc+0x27a/0x810 [ 2899.463256] ? ion_dma_buf_release+0x40/0x40 [ 2899.466507] 0 [ 2899.470028] ? __might_fault+0x177/0x1b0 [ 2899.480220] ion_ioctl+0xea/0x1ee [ 2899.482555] 0 0 [ 2899.483651] ? ion_alloc.cold+0x3b/0x3b [ 2899.483662] ? lock_acquire+0x170/0x3f0 [ 2899.485608] 0 [ 2899.489562] ? lock_downgrade+0x740/0x740 [ 2899.499400] ? ion_alloc.cold+0x3b/0x3b [ 2899.503353] do_vfs_ioctl+0x75a/0xff0 [ 2899.503355] Node 1 Normal free:26620kB min:53696kB low:67120kB high:80544kB active_anon:97656kB inactive_anon:0kB active_file:56kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127404kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 2899.507155] ? ioctl_preallocate+0x1a0/0x1a0 [ 2899.540225] ? lock_downgrade+0x740/0x740 [ 2899.544373] ? __fget+0x225/0x360 [ 2899.547866] ? do_vfs_ioctl+0xff0/0xff0 [ 2899.551835] ? security_file_ioctl+0x83/0xb0 [ 2899.556229] SyS_ioctl+0x7f/0xb0 [ 2899.559574] ? do_vfs_ioctl+0xff0/0xff0 [ 2899.563530] do_syscall_64+0x1d5/0x640 [ 2899.567402] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2899.572558] lowmem_reserve[]: [ 2899.572569] RIP: 0033:0x45e219 [ 2899.572571] 0 0 [ 2899.575654] RSP: 002b:00007f580212ec68 EFLAGS: 00000246 [ 2899.578824] 0 [ 2899.580777] ORIG_RAX: 0000000000000010 [ 2899.591835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2899.599084] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2899.602550] 0 [ 2899.606333] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2899.606339] 0 [ 2899.608121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2899.624390] R13: 00007ffe2c3a508f R14: 00007f580212f9c0 R15: 000000000119c034 [ 2899.624396] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2899.632419] syz-executor.5 cpuset= [ 2899.647255] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:951688kB inactive_anon:64684kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39712kB pagetables:157708kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 2899.673121] CPU: 1 PID: 32447 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2899.679867] / [ 2899.687624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2899.687661] mems_allowed=0-1 [ 2899.689323] Call Trace: [ 2899.702563] lowmem_reserve[]: 0 [ 2899.704300] dump_stack+0x1b2/0x283 [ 2899.704314] warn_alloc.cold+0x96/0x1cc [ 2899.707558] 0 [ 2899.711166] ? zone_watermark_ok_safe+0x220/0x220 [ 2899.721702] ? usleep_range+0x130/0x130 [ 2899.725652] ? queue_work_on+0x10d/0x1d0 [ 2899.729702] ? _find_next_bit+0xdb/0x100 [ 2899.732546] 0 0 [ 2899.733744] ? run_timer_softirq+0x5a0/0x5a0 [ 2899.733760] __alloc_pages_nodemask+0x2127/0x2720 [ 2899.735703] 0 [ 2899.740092] ? lock_acquire+0x170/0x3f0 [ 2899.750643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2899.755478] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2899.755484] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2899.759966] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2899.759984] alloc_pages_current+0x155/0x260 [ 2899.795523] ion_page_pool_alloc+0x118/0x1b0 [ 2899.799914] ion_system_heap_allocate+0x133/0x8c0 [ 2899.804759] ? ion_alloc+0x187/0x810 [ 2899.808463] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2899.813892] ? ion_system_contig_heap_create+0x130/0x130 [ 2899.819320] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2899.824323] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2899.829165] ion_alloc+0x204/0x810 [ 2899.832699] ? ion_dma_buf_release+0x40/0x40 [ 2899.837103] ? __might_fault+0x177/0x1b0 [ 2899.841141] ion_ioctl+0xea/0x1ee [ 2899.842548] lowmem_reserve[]: [ 2899.844575] ? ion_alloc.cold+0x3b/0x3b [ 2899.844576] 0 0 [ 2899.847666] ? lock_acquire+0x170/0x3f0 [ 2899.851618] 0 [ 2899.853576] ? lock_downgrade+0x740/0x740 [ 2899.853583] ? ion_alloc.cold+0x3b/0x3b [ 2899.853594] do_vfs_ioctl+0x75a/0xff0 [ 2899.853609] ? ioctl_preallocate+0x1a0/0x1a0 [ 2899.853618] ? lock_downgrade+0x740/0x740 [ 2899.874077] 0 [ 2899.875584] ? __fget+0x225/0x360 [ 2899.879713] 0 [ 2899.881495] ? do_vfs_ioctl+0xff0/0xff0 [ 2899.890665] ? security_file_ioctl+0x83/0xb0 [ 2899.895061] SyS_ioctl+0x7f/0xb0 [ 2899.898418] ? do_vfs_ioctl+0xff0/0xff0 [ 2899.902385] do_syscall_64+0x1d5/0x640 [ 2899.906265] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2899.911430] RIP: 0033:0x45e219 [ 2899.914598] RSP: 002b:00007f580214fc68 EFLAGS: 00000246 [ 2899.914600] Node 1 Normal free:26620kB min:53696kB low:67120kB high:80544kB active_anon:97656kB inactive_anon:0kB active_file:52kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54368kB pagetables:127404kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 2899.919951] ORIG_RAX: 0000000000000010 [ 2899.952509] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2899.959768] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2899.967045] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2899.974300] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2899.981559] R13: 00007ffe2c3a508f R14: 00007f58021509c0 R15: 000000000119bf8c [ 2899.988846] CPU: 0 PID: 32432 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2899.989626] Node 0 [ 2899.996818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2899.996821] Call Trace: [ 2899.996837] dump_stack+0x1b2/0x283 [ 2899.996851] warn_alloc.cold+0x96/0x1cc [ 2899.999060] DMA32: [ 2900.008391] ? zone_watermark_ok_safe+0x220/0x220 [ 2900.008400] ? usleep_range+0x130/0x130 [ 2900.008412] ? try_to_free_pages+0x23f/0x6e0 [ 2900.010969] 2668*4kB [ 2900.014572] ? _find_next_bit+0xdb/0x100 [ 2900.014582] ? run_timer_softirq+0x5a0/0x5a0 [ 2900.014598] __alloc_pages_nodemask+0x2127/0x2720 [ 2900.018534] (UME) [ 2900.020776] ? lock_acquire+0x170/0x3f0 [ 2900.025599] 693*8kB [ 2900.029542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2900.033930] (UME) [ 2900.036317] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2900.040345] 33*16kB [ 2900.044737] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2900.044756] alloc_pages_current+0x155/0x260 [ 2900.049562] (MEH) [ 2900.051702] ion_page_pool_alloc+0x118/0x1b0 [ 2900.055661] 34*32kB [ 2900.057948] ion_system_heap_allocate+0x133/0x8c0 [ 2900.062773] (U) [ 2900.064897] ? ion_alloc+0x187/0x810 [ 2900.069357] 4*64kB [ 2900.071662] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2900.077095] (H) [ 2900.081484] ? ion_system_contig_heap_create+0x130/0x130 [ 2900.083624] 0*128kB [ 2900.087992] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2900.090286] 0*256kB [ 2900.095116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2900.095130] ion_alloc+0x204/0x810 [ 2900.095149] ? ion_dma_buf_release+0x40/0x40 [ 2900.097102] 0*512kB [ 2900.100795] ? __might_fault+0x177/0x1b0 [ 2900.103021] 0*1024kB [ 2900.108431] ion_ioctl+0xea/0x1ee [ 2900.110375] 0*2048kB [ 2900.115805] ? ion_alloc.cold+0x3b/0x3b [ 2900.115816] ? lock_acquire+0x170/0x3f0 [ 2900.115826] ? lock_downgrade+0x740/0x740 [ 2900.118124] 0*4096kB [ 2900.123117] ? ion_alloc.cold+0x3b/0x3b [ 2900.123127] do_vfs_ioctl+0x75a/0xff0 [ 2900.123140] ? ioctl_preallocate+0x1a0/0x1a0 [ 2900.125435] = 18088kB [ 2900.130268] ? lock_downgrade+0x740/0x740 [ 2900.133802] Node 0 [ 2900.138184] ? __fget+0x225/0x360 [ 2900.140475] Normal: [ 2900.144515] ? do_vfs_ioctl+0xff0/0xff0 [ 2900.144527] ? security_file_ioctl+0x83/0xb0 [ 2900.144539] SyS_ioctl+0x7f/0xb0 [ 2900.146922] 0*4kB [ 2900.150382] ? do_vfs_ioctl+0xff0/0xff0 [ 2900.152780] 0*8kB [ 2900.156717] do_syscall_64+0x1d5/0x640 [ 2900.156750] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2900.160671] 0*16kB [ 2900.164793] RIP: 0033:0x45e219 [ 2900.164797] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2900.164806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2900.164815] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2900.167199] 0*32kB [ 2900.171143] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2900.171150] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2900.174941] 0*64kB [ 2900.179316] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2900.181699] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2900.299505] Node 1 Normal: 1379*4kB (UME) 597*8kB (UME) 147*16kB (ME) 49*32kB (UME) 13*64kB (UM) 1*128kB (U) 1*256kB (U) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26692kB [ 2900.300036] lowmem_reserve[]: [ 2900.318882] Mem-Info: [ 2900.324467] active_anon:262347 inactive_anon:16171 isolated_anon:0 [ 2900.324467] active_file:17 inactive_file:17 isolated_file:0 [ 2900.324467] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2900.324467] slab_reclaimable:20256 slab_unreclaimable:168956 [ 2900.324467] mapped:52638 shmem:19222 pagetables:71285 bounce:0 [ 2900.324467] free:13931 free_pcp:48 free_cma:0 [ 2900.361812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2900.362507] 0 0 0 0 0 [ 2900.370693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2900.381745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2900.383708] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2900.393961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2900.419600] Node 0 active_anon:951732kB inactive_anon:64684kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210552kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2900.422700] Node 0 [ 2900.453140] 19256 total pagecache pages [ 2900.459346] 0 pages in swap cache [ 2900.470273] DMA32: 2668*4kB (UME) 693*8kB (UME) 33*16kB (MEH) 34*32kB (U) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 2900.472497] Node 1 active_anon:97656kB inactive_anon:0kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2900.492504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2900.531630] Node 1 Normal: 1379*4kB (UME) 597*8kB (UME) 147*16kB (ME) 49*32kB (UME) 13*64kB (UM) 1*128kB (U) 1*256kB (U) 22*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26692kB [ 2900.532494] Swap cache stats: add 0, delete 0, find 0/0 [ 2900.561189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2900.570889] Free swap = 0kB [ 2900.571643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2900.586301] Total swap = 0kB [ 2900.587504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2900.589318] 2097051 pages RAM [ 2900.598523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2900.598528] 19256 total pagecache pages [ 2900.598537] 0 pages in swap cache [ 2900.631218] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2900.631882] Swap cache stats: add 0, delete 0, find 0/0 [ 2900.661119] 0 pages HighMem/MovableOnly [ 2900.667497] 363840 pages reserved [ 2900.670932] 0 pages cma reserved [ 2900.708594] Free swap = 0kB [ 2900.732484] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2900.735770] Total swap = 0kB [ 2900.737529] Node 0 DMA32 free:28648kB min:36200kB low:45248kB high:54296kB active_anon:951688kB inactive_anon:64684kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39712kB pagetables:157708kB bounce:0kB free_pcp:112kB local_pcp:112kB free_cma:0kB [ 2900.740571] 2097051 pages RAM [ 2900.842478] 0 pages HighMem/MovableOnly [ 2900.846473] 363840 pages reserved [ 2900.849923] 0 pages cma reserved [ 2900.852464] lowmem_reserve[]: 0 0 0 0 0 [ 2900.872464] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2900.872485] Out of memory (oom_kill_allocating_task): Kill process 32457 ((rsyslogd)) score 0 or sacrifice child [ 2900.872722] Killed process 32457 ((rsyslogd)) total-vm:139496kB, anon-rss:2024kB, file-rss:0kB, shmem-rss:0kB [ 2900.952445] lowmem_reserve[]: 0 0 0 0 0 [ 2900.956458] Node 1 Normal free:762176kB min:53696kB low:67120kB high:80544kB active_anon:97656kB inactive_anon:0kB active_file:64kB inactive_file:704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127352kB bounce:0kB free_pcp:216kB local_pcp:188kB free_cma:0kB [ 2901.029451] lowmem_reserve[]: 0 0 0 0 0 [ 2901.066310] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 2901.075111] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2901.089837] Node 0 DMA32: 1667*4kB (UME) 785*8kB (UME) 81*16kB (UMEH) 8*32kB (U) 328*64kB (UMEH) 19*128kB (UM) 10*256kB (U) 7*512kB (U) 27*1024kB (U) 3*2048kB (U) 0*4096kB = 77860kB [ 2901.112619] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2901.132442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2901.147115] Node 1 Normal: 1974*4kB (UME) 649*8kB (UME) 755*16kB (UME) 96*32kB (UME) 1532*64kB (UM) 298*128kB (U) 158*256kB (U) 45*512kB (U) 401*1024kB (U) 129*2048kB (U) 31*4096kB (U) = 1029712kB [ 2901.149715] systemd[1]: Failed to start System Logging Service. [ 2901.168815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2901.180730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2901.195905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2901.225073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2901.244296] systemd[1]: rsyslog.service: Unit entered failed state. [ 2901.260471] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 2901.262424] 20637 total pagecache pages [ 2901.271022] 0 pages in swap cache [ 2901.277699] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2901.291014] Swap cache stats: add 0, delete 0, find 0/0 [ 2901.301109] Free swap = 0kB [ 2901.314768] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2901.322660] Total swap = 0kB [ 2901.325693] 2097051 pages RAM [ 2901.328787] 0 pages HighMem/MovableOnly [ 2901.340495] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2901.342431] 363840 pages reserved [ 2901.352611] systemd[1]: Stopped Journal Service. [ 2901.356189] 0 pages cma reserved [ 2901.381870] systemd[1]: Starting Journal Service... [ 2901.807139] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2901.836652] systemd-journal cpuset=/ mems_allowed=0-1 [ 2901.842044] CPU: 1 PID: 32461 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2901.849999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2901.859347] Call Trace: [ 2901.861914] dump_stack+0x1b2/0x283 [ 2901.865519] dump_header+0x178/0x82f [ 2901.869208] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2901.874287] ? ___ratelimit+0x2cd/0x522 [ 2901.878237] oom_kill_process.cold+0x10/0xb18 [ 2901.882711] out_of_memory+0xe3e/0x1190 [ 2901.886684] ? oom_killer_disable+0x1c0/0x1c0 [ 2901.891152] ? mutex_trylock+0x152/0x1a0 [ 2901.895189] __alloc_pages_nodemask+0x23e1/0x2720 [ 2901.900014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2901.904839] ? mark_held_locks+0xa6/0xf0 [ 2901.908875] ? cache_grow_begin+0x41/0x630 [ 2901.913094] cache_grow_begin+0x91/0x630 [ 2901.917130] ? cache_grow_begin+0x91/0x630 [ 2901.921339] fallback_alloc+0x207/0x2c0 [ 2901.925293] kmem_cache_alloc+0x1e5/0x3c0 [ 2901.929416] ima_d_path+0x4d/0x1d3 [ 2901.932936] process_measurement+0x905/0xb20 [ 2901.937324] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 2901.942313] ? generic_file_open+0x68/0x90 [ 2901.946530] ? ext4_release_file+0x2d0/0x2d0 [ 2901.950916] ? apparmor_file_alloc_security+0x800/0x800 [ 2901.956254] ? lock_downgrade+0x740/0x740 [ 2901.960387] ? file_ra_state_init+0xc4/0x1e0 [ 2901.964770] ? do_dentry_open+0x698/0xec0 [ 2901.968891] ? ext4_release_file+0x2d0/0x2d0 [ 2901.973287] ? __inode_permission+0xcd/0x2f0 [ 2901.977673] ? vfs_open+0x10d/0x220 [ 2901.981276] path_openat+0x10ad/0x2970 [ 2901.985145] ? path_lookupat+0x780/0x780 [ 2901.989181] ? trace_hardirqs_on+0x10/0x10 [ 2901.993394] do_filp_open+0x179/0x3c0 [ 2901.997183] ? may_open_dev+0xe0/0xe0 [ 2902.000964] ? lock_downgrade+0x740/0x740 [ 2902.005089] ? do_raw_spin_unlock+0x164/0x220 [ 2902.009558] ? _raw_spin_unlock+0x29/0x40 [ 2902.013683] ? __alloc_fd+0x1be/0x490 [ 2902.017462] do_sys_open+0x296/0x410 [ 2902.021155] ? filp_open+0x60/0x60 [ 2902.024672] ? do_syscall_64+0x4c/0x640 [ 2902.028620] ? do_sys_open+0x410/0x410 [ 2902.032486] do_syscall_64+0x1d5/0x640 [ 2902.036366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2902.041531] RIP: 0033:0x7f38573886f0 [ 2902.045231] RSP: 002b:00007ffeefafd148 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2902.052914] RAX: ffffffffffffffda RBX: 0000556a69b124c0 RCX: 00007f38573886f0 [ 2902.060164] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007f3857dd07b7 [ 2902.067410] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 2902.074658] R10: 0000000000080000 R11: 0000000000000246 R12: 00007f3857dd07b4 [ 2902.081901] R13: 0000000000000001 R14: 00007f38580cc6c0 R15: 0000556a69b1b4e0 [ 2902.429508] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2902.451004] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2902.462352] CPU: 0 PID: 32447 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2902.467833] Mem-Info: [ 2902.470247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2902.470250] Call Trace: [ 2902.470265] dump_stack+0x1b2/0x283 [ 2902.470278] warn_alloc.cold+0x96/0x1cc [ 2902.472719] active_anon:262462 inactive_anon:16170 isolated_anon:0 [ 2902.472719] active_file:89 inactive_file:90 isolated_file:8 [ 2902.472719] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2902.472719] slab_reclaimable:20282 slab_unreclaimable:168972 [ 2902.472719] mapped:52398 shmem:19222 pagetables:71269 bounce:0 [ 2902.472719] free:13836 free_pcp:10 free_cma:0 [ 2902.482002] ? zone_watermark_ok_safe+0x220/0x220 [ 2902.484618] Node 0 active_anon:951452kB inactive_anon:64680kB active_file:196kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209336kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2902.488179] __alloc_pages_nodemask+0x2127/0x2720 [ 2902.492131] Node 1 active_anon:98396kB inactive_anon:0kB active_file:160kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:256kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2902.525514] ? _raw_spin_unlock_irq+0x24/0x80 [ 2902.525528] ? lock_acquire+0x170/0x3f0 [ 2902.525543] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2902.525557] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2902.525568] ? __mutex_unlock_slowpath+0x75/0x770 [ 2902.530429] Node 0 [ 2902.558312] alloc_pages_current+0x155/0x260 [ 2902.558326] ion_page_pool_alloc+0x118/0x1b0 [ 2902.558335] ion_system_heap_allocate+0x133/0x8c0 [ 2902.558347] ? _raw_spin_unlock+0x29/0x40 [ 2902.563287] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2902.589689] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2902.589698] ? ion_system_contig_heap_create+0x130/0x130 [ 2902.589707] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2902.589716] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2902.589728] ion_alloc+0x27a/0x810 [ 2902.594232] lowmem_reserve[]: [ 2902.598157] ? ion_dma_buf_release+0x40/0x40 [ 2902.602978] 0 [ 2902.608398] ? __might_fault+0x177/0x1b0 [ 2902.608410] ion_ioctl+0xea/0x1ee [ 2902.613255] 2717 [ 2902.615441] ? ion_alloc.cold+0x3b/0x3b [ 2902.619817] 2718 [ 2902.624216] ? lock_acquire+0x170/0x3f0 [ 2902.624225] ? lock_downgrade+0x740/0x740 [ 2902.624232] ? ion_alloc.cold+0x3b/0x3b [ 2902.624243] do_vfs_ioctl+0x75a/0xff0 [ 2902.629071] 2718 [ 2902.633185] ? ioctl_preallocate+0x1a0/0x1a0 [ 2902.633193] ? lock_downgrade+0x740/0x740 [ 2902.633206] ? __fget+0x225/0x360 [ 2902.658976] 2718 [ 2902.663845] ? do_vfs_ioctl+0xff0/0xff0 [ 2902.663856] ? security_file_ioctl+0x83/0xb0 [ 2902.663866] SyS_ioctl+0x7f/0xb0 [ 2902.674282] ? do_vfs_ioctl+0xff0/0xff0 [ 2902.674293] do_syscall_64+0x1d5/0x640 [ 2902.674310] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2902.679117] Node 0 [ 2902.682636] RIP: 0033:0x45e219 [ 2902.682641] RSP: 002b:00007f580214fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2902.682651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2902.682656] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2902.682662] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2902.685767] DMA32 free:17636kB min:36200kB low:45248kB high:54296kB active_anon:951408kB inactive_anon:64680kB active_file:700kB inactive_file:852kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39680kB pagetables:157608kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2902.690130] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2902.691901] lowmem_reserve[]: [ 2902.695946] R13: 00007ffe2c3a508f R14: 00007f58021509c0 R15: 000000000119bf8c [ 2903.042271] warn_alloc_show_mem: 2 callbacks suppressed [ 2903.042274] Mem-Info: [ 2903.050101] active_anon:262462 inactive_anon:16170 isolated_anon:0 [ 2903.050101] active_file:22 inactive_file:32 isolated_file:1 [ 2903.050101] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2903.050101] slab_reclaimable:20280 slab_unreclaimable:168968 [ 2903.050101] mapped:52250 shmem:19222 pagetables:71269 bounce:0 [ 2903.050101] free:13823 free_pcp:0 free_cma:0 [ 2903.107394] Node 0 active_anon:951452kB inactive_anon:64680kB active_file:24kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:209000kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2903.128152] 0 [ 2903.135278] Node 1 active_anon:98396kB inactive_anon:0kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2903.147198] 0 [ 2903.169049] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2903.173484] 0 0 0 [ 2903.247906] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2903.286473] lowmem_reserve[]: 0 0 0 0 0 [ 2903.290481] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:98396kB inactive_anon:0kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2903.315564] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2903.327039] Node 0 DMA32 free:17576kB min:36200kB low:45248kB high:54296kB active_anon:951408kB inactive_anon:64680kB active_file:124kB inactive_file:180kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39680kB pagetables:157608kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2903.342242] lowmem_reserve[]: 0 0 0 0 0 [ 2903.392886] Node 0 DMA: 8*4kB (UME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2903.434569] lowmem_reserve[]: 0 0 0 0 0 [ 2903.438585] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2903.441847] Node 0 DMA32: 2797*4kB (UME) 713*8kB (UME) 40*16kB (UMEH) 5*32kB (UM) 5*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 2903.512779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2903.542093] Node 1 Normal: 1368*4kB (UME) 509*8kB (ME) 148*16kB (UME) 47*32kB (UME) 13*64kB (UM) 0*128kB 1*256kB (U) 24*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 2903.564122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2903.573146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2903.578495] lowmem_reserve[]: [ 2903.581711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2903.581713] 0 0 [ 2903.602224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2903.629249] 19281 total pagecache pages [ 2903.639982] 0 pages in swap cache [ 2903.644066] Swap cache stats: add 0, delete 0, find 0/0 [ 2903.649424] Free swap = 0kB [ 2903.656033] 0 0 0 [ 2903.658206] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:98396kB inactive_anon:0kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127388kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2903.692613] Total swap = 0kB [ 2903.695703] 2097051 pages RAM [ 2903.698797] 0 pages HighMem/MovableOnly [ 2903.721096] lowmem_reserve[]: 0 0 0 0 0 [ 2903.724130] 363840 pages reserved [ 2903.728546] 0 pages cma reserved [ 2903.731571] Node 0 [ 2903.731898] Out of memory (oom_kill_allocating_task): Kill process 32461 (systemd-journal) score 0 or sacrifice child [ 2903.731905] DMA: 8*4kB (UME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2903.772487] Killed process 32461 (systemd-journal) total-vm:37900kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 2903.813877] Node 0 DMA32: 2797*4kB (UME) 715*8kB (UME) 40*16kB (UMEH) 5*32kB (UM) 5*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18028kB [ 2903.826424] oom_reaper: reaped process 32461 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2903.870790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2903.895583] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2903.925566] Node 1 Normal: 1368*4kB (UME) 509*8kB (ME) 148*16kB (UME) 47*32kB (UME) 13*64kB (UM) 0*128kB 1*256kB (U) 24*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 2903.948106] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2903.956536] CPU: 0 PID: 7984 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2903.963988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2903.973334] Call Trace: [ 2903.975927] dump_stack+0x1b2/0x283 [ 2903.979551] dump_header+0x178/0x82f [ 2903.983262] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2903.988359] ? ___ratelimit+0x2cd/0x522 [ 2903.992331] oom_kill_process.cold+0x10/0xb18 [ 2903.996856] out_of_memory+0xe3e/0x1190 [ 2904.000829] ? oom_killer_disable+0x1c0/0x1c0 [ 2904.005316] ? mutex_trylock+0x152/0x1a0 [ 2904.009370] __alloc_pages_nodemask+0x23e1/0x2720 [ 2904.014219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2904.019071] alloc_pages_current+0x155/0x260 [ 2904.023477] filemap_fault+0xea3/0x1980 [ 2904.027454] ext4_filemap_fault+0x84/0xb0 [ 2904.031598] __do_fault+0xfa/0x380 [ 2904.035131] __handle_mm_fault+0x2497/0x4620 [ 2904.039535] ? vm_insert_page+0x7c0/0x7c0 [ 2904.043687] handle_mm_fault+0x391/0x860 [ 2904.047747] __do_page_fault+0x549/0xad0 [ 2904.051810] ? spurious_fault+0x640/0x640 [ 2904.055956] ? do_page_fault+0x60/0x4f2 [ 2904.059931] ? page_fault+0x2f/0x50 [ 2904.063550] page_fault+0x45/0x50 [ 2904.066997] RIP: 0001:0x2aab93df07e [ 2904.070613] RSP: b4058:000000c00003fdb8 EFLAGS: 2aab93df07e [ 2904.082982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2904.116266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2904.142892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2904.151735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2904.184730] 19256 total pagecache pages [ 2904.188718] 0 pages in swap cache [ 2904.204732] Swap cache stats: add 0, delete 0, find 0/0 [ 2904.210098] Free swap = 0kB [ 2904.240840] Total swap = 0kB [ 2904.253440] 2097051 pages RAM [ 2904.256561] 0 pages HighMem/MovableOnly [ 2904.260519] 363840 pages reserved [ 2904.312159] 0 pages cma reserved [ 2904.345931] Mem-Info: [ 2904.348368] active_anon:262362 inactive_anon:16170 isolated_anon:0 [ 2904.348368] active_file:18 inactive_file:16 isolated_file:0 [ 2904.348368] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2904.348368] slab_reclaimable:20280 slab_unreclaimable:168968 [ 2904.348368] mapped:52225 shmem:19222 pagetables:71269 bounce:0 [ 2904.348368] free:13941 free_pcp:146 free_cma:0 [ 2904.455482] Node 0 active_anon:951452kB inactive_anon:64680kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2904.554182] Node 1 active_anon:97996kB inactive_anon:0kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2904.649722] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2904.742307] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2904.747355] Node 0 DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:951408kB inactive_anon:64680kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39680kB pagetables:157608kB bounce:0kB free_pcp:20kB local_pcp:16kB free_cma:0kB [ 2904.782189] systemd-journal: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2904.821806] systemd-journal cpuset=/ mems_allowed=0-1 [ 2904.840521] CPU: 1 PID: 32461 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2904.848496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2904.857843] Call Trace: [ 2904.860429] dump_stack+0x1b2/0x283 [ 2904.864058] warn_alloc.cold+0x96/0x1cc [ 2904.868025] ? zone_watermark_ok_safe+0x220/0x220 [ 2904.872861] ? usleep_range+0x130/0x130 [ 2904.875419] lowmem_reserve[]: [ 2904.876817] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2904.876822] 0 [ 2904.879907] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2904.891776] ? run_timer_softirq+0x5a0/0x5a0 [ 2904.896184] __alloc_pages_nodemask+0x2127/0x2720 [ 2904.901031] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2904.905877] ? mark_held_locks+0xa6/0xf0 [ 2904.909930] ? cache_grow_begin+0x41/0x630 [ 2904.914158] cache_grow_begin+0x91/0x630 [ 2904.915395] 0 0 0 [ 2904.918235] ? cache_grow_begin+0x91/0x630 [ 2904.918245] fallback_alloc+0x207/0x2c0 [ 2904.920369] 0 [ 2904.924581] kmem_cache_alloc+0x1e5/0x3c0 [ 2904.924591] ima_d_path+0x4d/0x1d3 [ 2904.924602] process_measurement+0x905/0xb20 [ 2904.924615] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 2904.947369] ? generic_file_open+0x68/0x90 [ 2904.951604] ? ext4_release_file+0x2d0/0x2d0 [ 2904.956006] ? apparmor_file_alloc_security+0x800/0x800 [ 2904.961359] ? lock_downgrade+0x740/0x740 [ 2904.965502] ? file_ra_state_init+0xc4/0x1e0 [ 2904.969903] ? do_dentry_open+0x698/0xec0 [ 2904.974042] ? ext4_release_file+0x2d0/0x2d0 [ 2904.978433] Node 0 [ 2904.978441] ? __inode_permission+0xcd/0x2f0 [ 2904.978451] ? vfs_open+0x10d/0x220 [ 2904.980673] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2904.985052] path_openat+0x10ad/0x2970 [ 2904.985065] ? path_lookupat+0x780/0x780 [ 2904.985074] ? trace_hardirqs_on+0x10/0x10 [ 2904.985086] do_filp_open+0x179/0x3c0 [ 2904.985093] ? may_open_dev+0xe0/0xe0 [ 2904.985107] ? lock_downgrade+0x740/0x740 [ 2905.011559] lowmem_reserve[]: [ 2905.013586] ? do_raw_spin_unlock+0x164/0x220 [ 2905.013596] ? _raw_spin_unlock+0x29/0x40 [ 2905.013604] ? __alloc_fd+0x1be/0x490 [ 2905.013617] do_sys_open+0x296/0x410 [ 2905.013627] ? filp_open+0x60/0x60 [ 2905.013637] ? do_syscall_64+0x4c/0x640 [ 2905.017500] 0 [ 2905.021537] ? do_sys_open+0x410/0x410 [ 2905.069739] do_syscall_64+0x1d5/0x640 [ 2905.073626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2905.078807] RIP: 0033:0x7f38573886f0 [ 2905.082505] RSP: 002b:00007ffeefafd148 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2905.087706] 0 [ 2905.090200] RAX: ffffffffffffffda RBX: 0000556a69b124c0 RCX: 00007f38573886f0 [ 2905.090205] 0 [ 2905.091981] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007f3857dd07b7 [ 2905.091986] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 2905.115522] R10: 0000000000080000 R11: 0000000000000246 R12: 00007f3857dd07b4 [ 2905.122781] R13: 0000000000000001 R14: 00007f38580cc6c0 R15: 0000556a69b1b4e0 [ 2905.128355] 0 0 [ 2905.150164] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:97956kB inactive_anon:0kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127388kB bounce:0kB free_pcp:560kB local_pcp:120kB free_cma:0kB [ 2905.280150] lowmem_reserve[]: 0 0 0 0 0 [ 2905.292072] Node 0 DMA: 8*4kB (UME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2905.332213] Node 0 DMA32: 2795*4kB (ME) 714*8kB (UME) 46*16kB (UME) 5*32kB (UM) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 2905.362066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2905.382679] Node 1 Normal: 1368*4kB (UME) 509*8kB (ME) 148*16kB (UME) 47*32kB (UME) 13*64kB (UM) 0*128kB 1*256kB (U) 24*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 2905.412064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2905.420908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2905.443944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2905.462214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2905.470903] 19256 total pagecache pages [ 2905.487843] 0 pages in swap cache [ 2905.491299] Swap cache stats: add 0, delete 0, find 0/0 [ 2905.512606] Free swap = 0kB [ 2905.515635] Total swap = 0kB [ 2905.518660] 2097051 pages RAM [ 2905.521759] 0 pages HighMem/MovableOnly [ 2905.537064] 363840 pages reserved [ 2905.540602] 0 pages cma reserved [ 2905.557053] Out of memory (oom_kill_allocating_task): Kill process 7984 (syz-fuzzer) score 0 or sacrifice child [ 2905.580097] Killed process 30596 (syz-executor.4) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2905.622097] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2905.647195] oom_reaper: reaped process 30596 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2905.659947] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2905.671321] CPU: 1 PID: 32447 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2905.679213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2905.688560] Call Trace: [ 2905.691146] dump_stack+0x1b2/0x283 [ 2905.694788] warn_alloc.cold+0x96/0x1cc [ 2905.698762] ? zone_watermark_ok_safe+0x220/0x220 [ 2905.703599] ? usleep_range+0x130/0x130 [ 2905.704298] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 2905.707565] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2905.707571] (null) [ 2905.717253] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2905.717264] ? run_timer_softirq+0x5a0/0x5a0 [ 2905.717279] __alloc_pages_nodemask+0x2127/0x2720 [ 2905.717294] ? lock_acquire+0x170/0x3f0 [ 2905.717308] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2905.717317] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2905.717330] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2905.717349] alloc_pages_current+0x155/0x260 [ 2905.761840] ion_page_pool_alloc+0x118/0x1b0 [ 2905.766244] ion_system_heap_allocate+0x133/0x8c0 [ 2905.771082] ? _raw_spin_unlock+0x29/0x40 [ 2905.775222] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2905.780147] ? ion_system_contig_heap_create+0x130/0x130 [ 2905.785590] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2905.790606] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2905.791791] , order=0, oom_score_adj=0 [ 2905.795442] ion_alloc+0x27a/0x810 [ 2905.795458] ? ion_dma_buf_release+0x40/0x40 [ 2905.795473] ? __might_fault+0x177/0x1b0 [ 2905.795484] ion_ioctl+0xea/0x1ee [ 2905.795491] ? ion_alloc.cold+0x3b/0x3b [ 2905.795501] ? lock_acquire+0x170/0x3f0 [ 2905.822748] ? lock_downgrade+0x740/0x740 [ 2905.826885] ? ion_alloc.cold+0x3b/0x3b [ 2905.829423] syz-fuzzer cpuset= [ 2905.830852] do_vfs_ioctl+0x75a/0xff0 [ 2905.830853] / mems_allowed=0-1 [ 2905.834030] ? ioctl_preallocate+0x1a0/0x1a0 [ 2905.834038] ? lock_downgrade+0x740/0x740 [ 2905.834052] ? __fget+0x225/0x360 [ 2905.834060] ? do_vfs_ioctl+0xff0/0xff0 [ 2905.834071] ? security_file_ioctl+0x83/0xb0 [ 2905.861321] SyS_ioctl+0x7f/0xb0 [ 2905.864684] ? do_vfs_ioctl+0xff0/0xff0 [ 2905.868658] do_syscall_64+0x1d5/0x640 [ 2905.872537] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2905.877715] RIP: 0033:0x45e219 [ 2905.880893] RSP: 002b:00007f580214fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2905.888591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2905.895843] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2905.903103] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2905.910362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2905.917619] R13: 00007ffe2c3a508f R14: 00007f58021509c0 R15: 000000000119bf8c [ 2905.945879] CPU: 0 PID: 22436 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2905.953134] Mem-Info: [ 2905.953441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2905.955839] active_anon:261920 inactive_anon:16170 isolated_anon:0 [ 2905.955839] active_file:17 inactive_file:17 isolated_file:0 [ 2905.955839] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2905.955839] slab_reclaimable:20277 slab_unreclaimable:168648 [ 2905.955839] mapped:43521 shmem:19222 pagetables:71245 bounce:0 [ 2905.955839] free:13976 free_pcp:360 free_cma:0 [ 2905.965155] Call Trace: [ 2905.965171] dump_stack+0x1b2/0x283 [ 2905.965183] dump_header+0x178/0x82f [ 2905.965192] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2905.965211] ? ___ratelimit+0x2cd/0x522 [ 2905.998702] Node 0 active_anon:949724kB inactive_anon:64680kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2906.001246] oom_kill_process.cold+0x10/0xb18 [ 2906.004867] Node 1 active_anon:97956kB inactive_anon:0kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2906.008535] out_of_memory+0xe3e/0x1190 [ 2906.013651] Node 0 [ 2906.017567] ? oom_killer_disable+0x1c0/0x1c0 [ 2906.045242] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2906.049694] ? mutex_trylock+0x152/0x1a0 [ 2906.075971] lowmem_reserve[]: [ 2906.079913] __alloc_pages_nodemask+0x23e1/0x2720 [ 2906.082144] 0 [ 2906.086617] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2906.112375] 2717 [ 2906.116416] alloc_pages_current+0x155/0x260 [ 2906.119491] 2718 [ 2906.124311] filemap_fault+0xea3/0x1980 [ 2906.124328] ext4_filemap_fault+0x84/0xb0 [ 2906.126101] 2718 [ 2906.130920] __do_fault+0xfa/0x380 [ 2906.132967] 2718 [ 2906.137350] __handle_mm_fault+0x2497/0x4620 [ 2906.143336] ? vm_insert_page+0x7c0/0x7c0 [ 2906.143344] ? __fsnotify_inode_delete+0x20/0x20 [ 2906.143353] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 2906.147470] Node 0 [ 2906.149529] handle_mm_fault+0x391/0x860 [ 2906.153065] DMA32 free:18104kB min:36200kB low:45248kB high:54296kB active_anon:949680kB inactive_anon:64680kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39648kB pagetables:157512kB bounce:0kB free_pcp:880kB local_pcp:736kB free_cma:0kB [ 2906.155083] __do_page_fault+0x549/0xad0 [ 2906.159456] lowmem_reserve[]: [ 2906.163582] ? spurious_fault+0x640/0x640 [ 2906.163590] ? do_page_fault+0x60/0x4f2 [ 2906.163600] ? page_fault+0x2f/0x50 [ 2906.168329] 0 [ 2906.174968] page_fault+0x45/0x50 [ 2906.174976] RIP: 0001:0x2aa9a46435c [ 2906.174979] RSP: b4008:000000c0000a5db8 EFLAGS: 2aa9a46435c [ 2906.343880] Mem-Info: [ 2906.356115] active_anon:261920 inactive_anon:16170 isolated_anon:0 [ 2906.356115] active_file:39 inactive_file:16 isolated_file:0 [ 2906.356115] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2906.356115] slab_reclaimable:20277 slab_unreclaimable:168648 [ 2906.356115] mapped:43596 shmem:19222 pagetables:71245 bounce:0 [ 2906.356115] free:107694 free_pcp:448 free_cma:0 [ 2906.391562] 0 0 0 0 [ 2906.394090] Node 0 active_anon:949724kB inactive_anon:64680kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:76888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2906.395284] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2906.425957] Node 1 active_anon:97956kB inactive_anon:0kB active_file:140kB inactive_file:460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:300kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2906.448767] lowmem_reserve[]: 0 0 0 0 0 [ 2906.479441] Node 1 Normal free:388452kB min:53696kB low:67120kB high:80544kB active_anon:97956kB inactive_anon:0kB active_file:140kB inactive_file:760kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127388kB bounce:0kB free_pcp:340kB local_pcp:128kB free_cma:0kB [ 2906.509615] lowmem_reserve[]: 0 0 0 0 0 [ 2906.514382] Node 0 DMA: 8*4kB (UME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2906.530930] Node 0 DMA32: 2805*4kB (UME) 701*8kB (UME) 35*16kB (UME) 3*32kB (UM) 139*64kB (UM) 8*128kB (U) 15*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31244kB [ 2906.535358] Node 0 [ 2906.545860] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2906.558496] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2906.559561] Node 1 Normal: 871*4kB (ME) 509*8kB (ME) 148*16kB (UME) 46*32kB (ME) 1076*64kB (UM) 277*128kB (U) 97*256kB (U) 40*512kB (U) 99*1024kB (U) 5*2048kB (U) 17*4096kB (U) = 342276kB [ 2906.603546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2906.612783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2906.621715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2906.625378] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2906.630929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2906.645314] 20069 total pagecache pages [ 2906.649617] 0 pages in swap cache [ 2906.654009] Node 0 DMA32 free:31164kB min:36200kB low:45248kB high:54296kB active_anon:949680kB inactive_anon:64680kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39648kB pagetables:157512kB bounce:0kB free_pcp:880kB local_pcp:736kB free_cma:0kB [ 2906.687022] Swap cache stats: add 0, delete 0, find 0/0 [ 2906.692448] Free swap = 0kB [ 2906.695461] Total swap = 0kB [ 2906.698856] 2097051 pages RAM [ 2906.702439] 0 pages HighMem/MovableOnly [ 2906.707484] 363840 pages reserved [ 2906.712262] 0 pages cma reserved [ 2906.717615] lowmem_reserve[]: 0 0 0 0 0 [ 2906.721856] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2906.748578] lowmem_reserve[]: 0 0 0 0 0 [ 2906.753069] Node 1 Normal free:215640kB min:53696kB low:67120kB high:80544kB active_anon:97964kB inactive_anon:0kB active_file:460kB inactive_file:5808kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54304kB pagetables:127388kB bounce:0kB free_pcp:252kB local_pcp:120kB free_cma:0kB [ 2906.783588] lowmem_reserve[]: 0 0 0 0 0 [ 2906.787906] Node 0 DMA: 8*4kB (UME) 8*8kB (UME) 27*16kB (UM) 26*32kB (UME) 8*64kB (UME) 1*128kB (E) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 2906.803880] Node 0 DMA32: 2804*4kB (UME) 704*8kB (UME) 35*16kB (UME) 3*32kB (UM) 139*64kB (UM) 8*128kB (U) 15*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31264kB [ 2906.819124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2906.830253] Node 1 Normal: 54*4kB (UE) 392*8kB (UME) 148*16kB (UME) 47*32kB (UME) 12*64kB (M) 0*128kB 0*256kB 7*512kB (U) 99*1024kB (U) 5*2048kB (U) 17*4096kB (U) = 192824kB [ 2906.846164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2906.855371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2906.864222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2906.873548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2906.882167] 20967 total pagecache pages [ 2906.886135] 0 pages in swap cache [ 2906.889583] Swap cache stats: add 0, delete 0, find 0/0 [ 2906.895005] Free swap = 0kB [ 2906.898027] Total swap = 0kB [ 2906.901036] 2097051 pages RAM [ 2906.904523] 0 pages HighMem/MovableOnly [ 2906.908797] 363840 pages reserved [ 2906.912825] 0 pages cma reserved [ 2906.916200] Out of memory (oom_kill_allocating_task): Kill process 22436 (syz-fuzzer) score 0 or sacrifice child [ 2906.926585] Killed process 30595 (syz-executor.2) total-vm:85024kB, anon-rss:1732kB, file-rss:4kB, shmem-rss:0kB [ 2906.947475] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2906.966255] systemd[1]: Failed to start Journal Service. [ 2906.976771] systemd[1]: Dependency failed for Flush Journal to Persistent Storage. [ 2906.980320] oom_reaper: reaped process 30595 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2906.986424] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'. [ 2907.013022] systemd[1]: systemd-journald.service: Unit entered failed state. [ 2907.039875] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2907.081003] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 14:14:00 executing program 3 (fault-call:1 fault-nth:0): pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:14:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c00000a1d25c0100fff8", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000006001c0000000000"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8001, @mcast2, 0xd8d, 0x4}, 0x20) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x200, 0x26, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x11, 0x8001, 0x80, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x2f}, 0x40, 0x7, 0x2, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000580000001ff0000000000071754a22a9fb2d28b6d05a5c00000000000000", @ANYRES32=r4, @ANYBLOB="000100000800020005000000080002000c0000000800020000000000080002000c00000014000100fc0100"/56], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) times(&(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) waitid(0x0, r5, &(0x7f0000000080), 0x2, &(0x7f0000000200)) 14:14:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x2004c004) 14:14:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000180)={0x0, 0x501, 0x7, &(0x7f0000000040)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x4, 0x0, &(0x7f0000000140)=0x6}) 14:14:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/time\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) [ 2907.131558] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2907.144779] systemd[1]: Stopped Journal Service. [ 2907.171614] systemd[1]: Starting Journal Service... 14:14:01 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40c000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109047d, 0x26}) [ 2907.336831] systemd-journald[32485]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 14:14:01 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:14:01 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261048}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x40004) 14:14:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6d33de9849966811}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 14:14:01 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 14:14:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x20000, @local, 0x9}, 0x80, 0x0}, 0x0) [ 2907.605245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2907.628468] batman_adv: batadv0: Removing interface: batadv_slave_0 14:14:01 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000280)={0x0, 0x101, 0x3f, &(0x7f0000000180)=0x9}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x3a}) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r3 = getpgrp(0x0) r4 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x5, 0x0) socketpair(0xb, 0x5, 0xffffffc1, &(0x7f0000000140)) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r6 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x288, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x20600, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000240)='ns/user\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$9p(r7, &(0x7f0000000200)="dc56023e703fe1f05995a0c25e298d579ae227d718aa37c204bb1bd0cc216f3aafa3e990678a80df396bf1c5414deda49b0473c57ea47e21ee", 0x39) 14:14:01 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 2907.660546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2907.676309] batman_adv: batadv0: Removing interface: batadv_slave_1 14:14:01 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) [ 2907.718325] device bridge_slave_1 left promiscuous mode [ 2907.755100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2907.796484] device bridge_slave_0 left promiscuous mode [ 2907.820173] bridge0: port 1(bridge_slave_0) entered disabled state [ 2907.851770] device veth1_macvtap left promiscuous mode [ 2907.871249] device veth0_macvtap left promiscuous mode [ 2907.886863] device veth1_vlan left promiscuous mode [ 2907.897733] device veth0_vlan left promiscuous mode [ 2908.146010] device hsr_slave_1 left promiscuous mode [ 2908.170584] device hsr_slave_0 left promiscuous mode [ 2908.210564] team0 (unregistering): Port device team_slave_1 removed [ 2908.236621] team0 (unregistering): Port device team_slave_0 removed [ 2908.265902] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2908.289645] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2908.397147] bond0 (unregistering): Released all slaves [ 2909.784980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2909.791931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2909.799977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2909.808096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2909.817250] device bridge_slave_1 left promiscuous mode [ 2909.823212] bridge0: port 2(bridge_slave_1) entered disabled state [ 2909.830767] device bridge_slave_0 left promiscuous mode [ 2909.837260] bridge0: port 1(bridge_slave_0) entered disabled state [ 2909.846987] device veth1_macvtap left promiscuous mode [ 2909.853077] device veth0_macvtap left promiscuous mode [ 2909.858553] device veth1_vlan left promiscuous mode [ 2909.864693] device veth0_vlan left promiscuous mode [ 2909.965824] device hsr_slave_1 left promiscuous mode [ 2909.974743] device hsr_slave_0 left promiscuous mode [ 2909.995367] team0 (unregistering): Port device team_slave_1 removed [ 2910.005563] team0 (unregistering): Port device team_slave_0 removed [ 2910.016104] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2910.028037] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2910.064807] bond0 (unregistering): Released all slaves [ 2910.691028] IPVS: ftp: loaded support on port[0] = 21 [ 2910.736489] IPVS: ftp: loaded support on port[0] = 21 [ 2910.870380] chnl_net:caif_netlink_parms(): no params data found [ 2911.009339] chnl_net:caif_netlink_parms(): no params data found [ 2911.060101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2911.066571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2911.074542] device bridge_slave_0 entered promiscuous mode [ 2911.075764] bridge0: port 2(bridge_slave_1) entered blocking state [ 2911.086752] bridge0: port 2(bridge_slave_1) entered disabled state [ 2911.094304] device bridge_slave_1 entered promiscuous mode [ 2911.122891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2911.132510] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2911.174264] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2911.181346] team0: Port device team_slave_0 added [ 2911.187012] bridge0: port 1(bridge_slave_0) entered blocking state [ 2911.194271] bridge0: port 1(bridge_slave_0) entered disabled state [ 2911.201147] device bridge_slave_0 entered promiscuous mode [ 2911.208028] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2911.217675] team0: Port device team_slave_1 added [ 2911.223162] bridge0: port 2(bridge_slave_1) entered blocking state [ 2911.229536] bridge0: port 2(bridge_slave_1) entered disabled state [ 2911.236650] device bridge_slave_1 entered promiscuous mode [ 2911.277635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2911.285841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2911.292659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2911.317892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2911.329156] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2911.346632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2911.354962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2911.381073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2911.392478] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2911.407370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2911.423942] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2911.431024] team0: Port device team_slave_0 added [ 2911.437642] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2911.445227] team0: Port device team_slave_1 added [ 2911.471258] device hsr_slave_0 entered promiscuous mode [ 2911.476945] device hsr_slave_1 entered promiscuous mode [ 2911.491215] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2911.498892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2911.505620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2911.530920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2911.543937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2911.551402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2911.557682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2911.583671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2911.601389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2911.611208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2911.655341] device hsr_slave_0 entered promiscuous mode [ 2911.662846] device hsr_slave_1 entered promiscuous mode [ 2911.673600] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2911.687123] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2911.816260] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2911.839800] bridge0: port 2(bridge_slave_1) entered blocking state [ 2911.846167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2911.852814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2911.859148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2911.896830] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2911.903271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2911.914145] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2911.920195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2911.930193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2911.937379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2911.946250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2911.954347] bridge0: port 1(bridge_slave_0) entered disabled state [ 2911.961159] bridge0: port 2(bridge_slave_1) entered disabled state [ 2911.968926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2911.975955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2911.984805] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2911.990862] 8021q: adding VLAN 0 to HW filter on device team0 [ 2911.999177] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2912.008409] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2912.014539] 8021q: adding VLAN 0 to HW filter on device team0 [ 2912.020982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2912.027997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2912.036755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2912.046694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2912.063121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2912.070794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2912.078653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2912.085033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2912.092924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2912.100662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2912.108293] bridge0: port 2(bridge_slave_1) entered blocking state [ 2912.114678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2912.121682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2912.129207] bridge0: port 1(bridge_slave_0) entered blocking state [ 2912.135573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2912.142383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2912.149984] bridge0: port 2(bridge_slave_1) entered blocking state [ 2912.156350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2912.163704] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2912.170686] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2912.177861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2912.186771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2912.194857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2912.202899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2912.210743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2912.221136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2912.230127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2912.237267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2912.245617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2912.254166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2912.265201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2912.272459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2912.279891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2912.290644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2912.303556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2912.310555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2912.318798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2912.326869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2912.335119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2912.344251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2912.352096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2912.359523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2912.369217] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2912.375810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2912.384330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2912.395388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2912.403386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2912.410947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2912.419277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2912.427540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2912.431559] Bluetooth: hci2 command 0x0409 tx timeout [ 2912.439890] Bluetooth: hci3 command 0x0409 tx timeout [ 2912.441703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2912.456171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2912.465216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2912.474597] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2912.480592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2912.490287] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2912.499734] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2912.510789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2912.519277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2912.526633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2912.540393] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2912.548578] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2912.559064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2912.566011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2912.579345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2912.624337] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2912.635708] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2912.643632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2912.652649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2912.686576] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2912.696765] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2912.705115] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2912.712605] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2912.719704] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2912.728210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2912.736431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2912.749750] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2912.762296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2912.769686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2912.778112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2912.785442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2912.798007] device veth0_vlan entered promiscuous mode [ 2912.808142] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2912.815732] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2912.822677] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2912.831280] device veth1_vlan entered promiscuous mode [ 2912.839097] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2912.847627] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2912.855858] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2912.863592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2912.870819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2912.880543] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2912.888412] device veth0_vlan entered promiscuous mode [ 2912.897652] device veth1_vlan entered promiscuous mode [ 2912.904241] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2912.910666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2912.917987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2912.925085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2912.932389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2912.946092] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2912.953458] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2912.965991] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2912.974939] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2912.981927] Bluetooth: hci1 command 0x0406 tx timeout [ 2912.989895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2912.997358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2913.005387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2913.014751] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2913.024215] device veth0_macvtap entered promiscuous mode [ 2913.030406] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2913.037777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2913.045763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2913.053477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2913.060909] device veth0_macvtap entered promiscuous mode [ 2913.067678] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2913.076960] device veth1_macvtap entered promiscuous mode [ 2913.083524] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2913.092179] device veth1_macvtap entered promiscuous mode [ 2913.098587] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2913.106774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2913.117464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2913.127412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2913.137145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.147598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.157128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.166878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.176051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.185797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.195078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.204830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.215011] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2913.222579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2913.231044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2913.238687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2913.246035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2913.253179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2913.260149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2913.268463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2913.277500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.287384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.296580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.306936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.316410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.326225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.335492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.345315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.355712] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2913.362700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2913.371123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.382107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.391199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.402655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.411845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.422066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.431151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.441422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.450523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2913.460820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.472054] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2913.478987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2913.486519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2913.494652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2913.502948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2913.510602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2913.525770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.535744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.545371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.555383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.564563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.574461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.583617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.593385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.602673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2913.612442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.623121] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2913.630037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2913.641862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2913.649778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 14:14:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000000)={0x87, 0x29, 0x1, {0x85, [{{0x1, 0x0, 0x3}, 0x0, 0x4, 0x7, './file0'}, {{0x8, 0x3, 0x2}, 0xfffffffffffffff8, 0x0, 0x7, './file0'}, {{0x20, 0x0, 0x4}, 0x5, 0x6, 0x7, './file0'}, {{0x0, 0x1}, 0x1, 0x5, 0x7, './file0'}]}}, 0x87) 14:14:07 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000040)={0x0, "3496a42eccdfd94f1ed094a5fe8e5b429e7a1de844bb425bf5deac212f76eab67b323ff6366dad99b6b1af1461a37a84560aeea50c1d0eaa77a4567900527644", {0x140f, 0x7ff}}) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) 14:14:07 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x4400, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2040, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7, 0x5}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r3}) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) 14:14:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:14:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x40000000, @local}, 0x80, 0x0}, 0x0) 14:14:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x7, 0x1d}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:14:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x20) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default]}, 0x80, 0x0}, 0x0) 14:14:07 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:14:07 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2d}) 14:14:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x7, 0x8, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1, 0x40, 0x20, 0xff, 0x7}}) socketpair(0x29, 0x800, 0x6, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:14:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'macvlan0\x00'}}, 0x1e) 14:14:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @private1, 0x9}, 0xb0, 0x0}, 0x0) 14:14:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)={0x0, 0x0, 0x4, &(0x7f0000000040)=0x1}) 14:14:07 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x8001) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 14:14:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x6, @empty, 0x1, 0x4}, 0x20) 14:14:08 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000000)) 14:14:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x218081, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) [ 2914.501686] Bluetooth: hci3 command 0x041b tx timeout [ 2914.506944] Bluetooth: hci2 command 0x041b tx timeout 14:14:08 executing program 5: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x1, @local, 0x6, 0x3}, 0x20) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:14:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7f}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xf4b0}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000000380)={0xeb8, 0x0, 0x0, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x95, 0x5, "763e241bdcb55e8a53ae7449ff2d123f32df89a0a608ba1132b41bc34e5b99b7796d576d27bfc22c64e588f028bc3efc5db7b0af8f1f530a883c9b1ccc6d68e6574db1bab114acc497ed5975f97d02ca73ef7fae0b9aa3fc1276d4d4fab52f5800c8fed87fc8182f75dee444c8bcbb5e1c3fe6a734c2e4c951bb98d091ac0e09f41b12e6c8583393e9bf057b8cee113938"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "7a45b7565ce269938edbb7709f14de57c96f68be43fdf364a50aa3aaf601518c5d156886133096d3fc0cd0f1fc18411f0c689b2594e362bf788a8e74a3c1392acc27773624ba96a24b648f16dd77d283b2c4372b40dd9f12e5d0a417c6e5bea78cdf4efe20a9fb3c536b01941582e096a8001beb9d57e767f9cc3c66eef88e31b4f29635ecd141f196457de58bebb3d99997958ed6fe521c4d2c0b941a5e8249b14031fa7befa0b057ae963ae9"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\'//\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#@#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#+,}\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xbe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbdd, 0x5, "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"}]}]}, 0xeb8}}, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f00000004c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, 0x0}, 0x24000894) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x200000c4) 14:14:08 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x218, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "5c00eee7e623dbc64df8df1726e67c65fbd5d1cab87b1b353daecda6204965e6cec26877212242fa4c66c9d75186357d1be675ea769d4dc5068861b6399948e4d50280f92928818f"}, @ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "d06b1b445c0a5eb7403268eda48f46f0f9a1ac7863fdec77249213252286a1a5034af5b99d233ed545910197747ac729739d84e88d7daceb898fc35a142dc4de13f330f3df8123f222a5fce14c4fb14560bb278ea30dd9783d97c75da60e37c87b32e9f853a4eba9c5c57d0ded0c5d4f8705c8b34b26365f97535876891cf326355403c7d64efa6a710183c07bb6b96790295292ca14e1dbf3de5eb0c48f91446272f4b8072117874e5c9450abc4c18f2f10f981a383d179b018aeea0de2779b0b99d8b206315134c7860812f722bee0244634da043b6025186722fe739e08170033f0e8b1a9"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x520}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/^&+{)\xaa\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "fcac605d9893632313bbe45c729c448cdb306fcc532ff9a3dc4f444cdc6e36c54f300999b665bcb1abef892fe0f933258735a86870f8b423eb3fa6c8ea0d90cf685b79a8c24b9e752d312d33cc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x80000001}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0x218}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 14:14:08 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x1, 0x3}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040d1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) socketpair(0x18, 0x4, 0x81, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f00000000c0)={0xcdbf}) 14:14:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x60c40, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0xfa, 0xff, 0x2, 0x44, @dev={0xfe, 0x80, [], 0x36}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40, 0x700, 0x1000, 0x8}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x8, 0x18, 0x8, 0x1c92, r2, 0x9, [], r1, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x40) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x8ae7, 0x5}) 14:14:08 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='%+\x00') pkey_alloc(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x301000, 0x0) pkey_free(0xffffffffffffffff) 14:14:08 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, 0x0}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f00000002c0)=0x5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="840100007fe0d69bb6dbd70337c2b7a179d4b9d50caea8e9b05bf277b637684d51a8379c05668af86bb9ed6bcc3f395026cb27a92e9663d3167266b5c32175dcfa1069cad0f323a3bc6ab51da7b56d5a483538f915f40da312b4bd1855e49cd3c6849fe30f2381e8cdb1cc23ba4b3200b119df298a83b183623ddd08f4f43989de19509eb84c43ca8869939980293031e0233bd22f6066c08b4219a96345d63d20f069d3bd54aa2f5dec436ecc", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x20008040) 14:14:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x20) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) 14:14:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5, 0x0, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r1, 0x3, 0x80000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)={0x16, 0x7, 0x2, {{0x9, '/dev/ion\x00'}, 0x5}}, 0x16) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0x38, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX, @ANYBLOB="000326bd7000fbdbdf250600000008441900ac1414200800090004000000050004000500000006000300080000000600010008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) connect$l2tp6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x8000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x2}, 0x20) connect$bt_rfcomm(r5, &(0x7f0000000100)={0x1f, @fixed={[], 0x10}, 0x6}, 0xa) 14:14:08 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0xe0}, 0x80, 0x0}, 0x0) 14:14:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f00000004c0)=@rc={0x1f, @fixed={[], 0x10}, 0x95}, 0x80, 0x0}, 0x8090) 14:14:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x8, 0x5, &(0x7f0000000040)=0x3f}) [ 2915.644605] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2915.645073] syz-executor.5: [ 2915.681212] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2915.690602] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2915.711231] CPU: 0 PID: 662 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2915.718957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2915.728387] Call Trace: [ 2915.730964] dump_stack+0x1b2/0x283 [ 2915.734579] warn_alloc.cold+0x96/0x1cc [ 2915.738535] ? zone_watermark_ok_safe+0x220/0x220 [ 2915.743369] __alloc_pages_nodemask+0x2127/0x2720 [ 2915.748198] ? lock_acquire+0x170/0x3f0 [ 2915.752163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2915.756995] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2915.762432] ? __mutex_unlock_slowpath+0x75/0x770 [ 2915.767262] alloc_pages_current+0x155/0x260 [ 2915.771693] ion_page_pool_alloc+0x118/0x1b0 [ 2915.776087] ion_system_heap_allocate+0x133/0x8c0 [ 2915.780916] ? ion_alloc+0x187/0x810 [ 2915.784629] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2915.790067] ? ion_system_contig_heap_create+0x130/0x130 [ 2915.795505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2915.800504] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2915.805370] ion_alloc+0x204/0x810 [ 2915.808902] ? ion_dma_buf_release+0x40/0x40 [ 2915.813327] ? __might_fault+0x177/0x1b0 [ 2915.817375] ion_ioctl+0xea/0x1ee [ 2915.820814] ? ion_alloc.cold+0x3b/0x3b [ 2915.824774] ? lock_acquire+0x170/0x3f0 [ 2915.828820] ? lock_downgrade+0x740/0x740 [ 2915.832949] ? ion_alloc.cold+0x3b/0x3b [ 2915.836911] do_vfs_ioctl+0x75a/0xff0 [ 2915.840698] ? ioctl_preallocate+0x1a0/0x1a0 [ 2915.845089] ? lock_downgrade+0x740/0x740 [ 2915.849223] ? __fget+0x225/0x360 [ 2915.852663] ? do_vfs_ioctl+0xff0/0xff0 [ 2915.856619] ? security_file_ioctl+0x83/0xb0 [ 2915.861017] SyS_ioctl+0x7f/0xb0 [ 2915.864365] ? do_vfs_ioctl+0xff0/0xff0 [ 2915.868366] do_syscall_64+0x1d5/0x640 [ 2915.872244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2915.877417] RIP: 0033:0x45e219 [ 2915.880592] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2915.888286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2915.895540] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2915.902813] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2915.910067] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2915.917322] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2915.940823] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2915.960425] CPU: 1 PID: 692 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2915.968228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2915.977581] Call Trace: [ 2915.980177] dump_stack+0x1b2/0x283 [ 2915.983814] warn_alloc.cold+0x96/0x1cc [ 2915.987797] ? zone_watermark_ok_safe+0x220/0x220 [ 2915.992653] __alloc_pages_nodemask+0x2127/0x2720 [ 2915.997495] ? __schedule+0x893/0x1de0 [ 2916.001388] ? lock_acquire+0x170/0x3f0 [ 2916.005369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2916.010343] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2916.015800] ? __mutex_unlock_slowpath+0x75/0x770 [ 2916.020644] alloc_pages_current+0x155/0x260 [ 2916.025056] ion_page_pool_alloc+0x118/0x1b0 [ 2916.029473] ion_system_heap_allocate+0x133/0x8c0 [ 2916.034319] ? ion_alloc+0x187/0x810 [ 2916.038034] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2916.043483] ? ion_system_contig_heap_create+0x130/0x130 [ 2916.048933] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2916.053950] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2916.058794] ion_alloc+0x204/0x810 [ 2916.062354] ? ion_dma_buf_release+0x40/0x40 [ 2916.066773] ? __might_fault+0x177/0x1b0 [ 2916.070848] ion_ioctl+0xea/0x1ee [ 2916.074304] ? ion_alloc.cold+0x3b/0x3b [ 2916.078278] ? lock_acquire+0x170/0x3f0 [ 2916.082250] ? lock_downgrade+0x740/0x740 [ 2916.086400] ? ion_alloc.cold+0x3b/0x3b [ 2916.090378] do_vfs_ioctl+0x75a/0xff0 [ 2916.094184] ? ioctl_preallocate+0x1a0/0x1a0 [ 2916.098594] ? lock_downgrade+0x740/0x740 [ 2916.102747] ? __fget+0x225/0x360 [ 2916.106339] ? do_vfs_ioctl+0xff0/0xff0 [ 2916.110319] ? security_file_ioctl+0x83/0xb0 [ 2916.114730] SyS_ioctl+0x7f/0xb0 [ 2916.118095] ? do_vfs_ioctl+0xff0/0xff0 [ 2916.122077] do_syscall_64+0x1d5/0x640 [ 2916.125978] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2916.131165] RIP: 0033:0x45e219 [ 2916.134360] RSP: 002b:00007fbaae81dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2916.142072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2916.149340] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2916.149349] warn_alloc_show_mem: 1 callbacks suppressed [ 2916.149352] Mem-Info: [ 2916.156614] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2916.156619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2916.156624] R13: 00007fffdc1f695f R14: 00007fbaae81e9c0 R15: 000000000119c0dc [ 2916.203118] active_anon:262405 inactive_anon:18195 isolated_anon:21 [ 2916.203118] active_file:2207 inactive_file:6348 isolated_file:2 [ 2916.203118] unevictable:0 dirty:72 writeback:0 unstable:0 [ 2916.203118] slab_reclaimable:19625 slab_unreclaimable:167988 [ 2916.203118] mapped:58029 shmem:21270 pagetables:71310 bounce:0 [ 2916.203118] free:257446 free_pcp:183 free_cma:0 [ 2916.237556] Node 0 active_anon:952936kB inactive_anon:72780kB active_file:4120kB inactive_file:19908kB unevictable:0kB isolated(anon):84kB isolated(file):8kB mapped:224424kB dirty:240kB writeback:0kB shmem:85080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2916.268281] Node 1 active_anon:96684kB inactive_anon:0kB active_file:4708kB inactive_file:5484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7692kB dirty:48kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2916.296008] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2916.341301] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2916.342307] lowmem_reserve[]: [ 2916.362964] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2916.375442] 0 2717 2718 2718 2718 [ 2916.379008] Node 0 DMA32 free:258372kB min:36200kB low:45248kB high:54296kB active_anon:952892kB inactive_anon:72780kB active_file:4624kB inactive_file:19356kB unevictable:0kB writepending:240kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39584kB pagetables:157888kB bounce:0kB free_pcp:236kB local_pcp:36kB free_cma:0kB [ 2916.394889] CPU: 1 PID: 669 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2916.416568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2916.425918] Call Trace: [ 2916.428504] dump_stack+0x1b2/0x283 [ 2916.432139] warn_alloc.cold+0x96/0x1cc [ 2916.436115] ? zone_watermark_ok_safe+0x220/0x220 [ 2916.440970] __alloc_pages_nodemask+0x2127/0x2720 [ 2916.445816] ? lock_acquire+0x170/0x3f0 [ 2916.449796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2916.454659] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2916.460115] ? __mutex_unlock_slowpath+0x75/0x770 [ 2916.461133] lowmem_reserve[]: 0 0 0 [ 2916.464962] alloc_pages_current+0x155/0x260 [ 2916.464974] ion_page_pool_alloc+0x118/0x1b0 [ 2916.468615] 0 [ 2916.473012] ion_system_heap_allocate+0x133/0x8c0 [ 2916.473023] ? ion_alloc+0x187/0x810 [ 2916.473033] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2916.473042] ? ion_system_contig_heap_create+0x130/0x130 [ 2916.473050] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2916.473059] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2916.473070] ion_alloc+0x204/0x810 [ 2916.492698] 0 [ 2916.493229] ? ion_dma_buf_release+0x40/0x40 [ 2916.503689] ? __might_fault+0x177/0x1b0 [ 2916.503701] ion_ioctl+0xea/0x1ee [ 2916.503708] ? ion_alloc.cold+0x3b/0x3b [ 2916.503718] ? lock_acquire+0x170/0x3f0 [ 2916.503726] ? lock_downgrade+0x740/0x740 [ 2916.503732] ? ion_alloc.cold+0x3b/0x3b [ 2916.503742] do_vfs_ioctl+0x75a/0xff0 [ 2916.503754] ? ioctl_preallocate+0x1a0/0x1a0 [ 2916.503761] ? lock_downgrade+0x740/0x740 [ 2916.503775] ? __fget+0x225/0x360 [ 2916.503784] ? do_vfs_ioctl+0xff0/0xff0 [ 2916.503794] ? security_file_ioctl+0x83/0xb0 [ 2916.503804] SyS_ioctl+0x7f/0xb0 [ 2916.521139] Node 0 [ 2916.522457] ? do_vfs_ioctl+0xff0/0xff0 [ 2916.525899] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2916.529854] do_syscall_64+0x1d5/0x640 [ 2916.581151] Bluetooth: hci2 command 0x040f tx timeout [ 2916.601062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2916.601071] RIP: 0033:0x45e219 [ 2916.601080] RSP: 002b:00007f7783a27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2916.601092] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2916.612616] lowmem_reserve[]: [ 2916.615331] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2916.618506] 0 [ 2916.626280] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2916.626285] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2916.626290] R13: 00007ffe6a8f603f R14: 00007f7783a289c0 R15: 000000000119c034 [ 2916.692109] Bluetooth: hci3 command 0x040f tx timeout [ 2916.729883] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2916.751349] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2916.756496] CPU: 0 PID: 656 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2916.764288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2916.773644] Call Trace: [ 2916.776242] dump_stack+0x1b2/0x283 [ 2916.779875] warn_alloc.cold+0x96/0x1cc [ 2916.783853] ? zone_watermark_ok_safe+0x220/0x220 [ 2916.788704] __alloc_pages_nodemask+0x2127/0x2720 [ 2916.793555] ? lock_acquire+0x170/0x3f0 [ 2916.797546] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2916.802401] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2916.807857] ? __mutex_unlock_slowpath+0x75/0x770 [ 2916.812716] alloc_pages_current+0x155/0x260 [ 2916.817126] ion_page_pool_alloc+0x118/0x1b0 [ 2916.821545] ion_system_heap_allocate+0x133/0x8c0 [ 2916.826503] ? ion_alloc+0x187/0x810 [ 2916.830219] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2916.835685] ? ion_system_contig_heap_create+0x130/0x130 [ 2916.841135] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2916.846158] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2916.851027] ion_alloc+0x204/0x810 [ 2916.854586] ? ion_dma_buf_release+0x40/0x40 [ 2916.859004] ? __might_fault+0x177/0x1b0 [ 2916.863071] ion_ioctl+0xea/0x1ee [ 2916.866520] ? ion_alloc.cold+0x3b/0x3b [ 2916.870512] ? lock_acquire+0x170/0x3f0 [ 2916.874497] ? lock_downgrade+0x740/0x740 [ 2916.878660] ? ion_alloc.cold+0x3b/0x3b [ 2916.882641] do_vfs_ioctl+0x75a/0xff0 [ 2916.886442] ? ioctl_preallocate+0x1a0/0x1a0 [ 2916.890847] ? lock_downgrade+0x740/0x740 [ 2916.895011] ? __fget+0x225/0x360 [ 2916.898466] ? do_vfs_ioctl+0xff0/0xff0 [ 2916.902440] ? security_file_ioctl+0x83/0xb0 [ 2916.906846] SyS_ioctl+0x7f/0xb0 [ 2916.910209] ? do_vfs_ioctl+0xff0/0xff0 [ 2916.914187] do_syscall_64+0x1d5/0x640 [ 2916.918100] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2916.923290] RIP: 0033:0x45e219 [ 2916.926564] RSP: 002b:00007f7783a48c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2916.934272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2916.941536] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2916.948815] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2916.956085] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2916.963349] R13: 00007ffe6a8f603f R14: 00007f7783a499c0 R15: 000000000119bf8c [ 2916.981370] 0 0 0 0 [ 2916.983724] Node 1 Normal free:379724kB min:53696kB low:67120kB high:80544kB active_anon:96684kB inactive_anon:0kB active_file:6092kB inactive_file:3388kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127272kB bounce:0kB free_pcp:356kB local_pcp:204kB free_cma:0kB [ 2917.049259] lowmem_reserve[]: 0 0 0 0 0 [ 2917.053359] Node 0 DMA: 44*4kB (UME) 114*8kB (UME) 59*16kB (UM) 29*32kB (UME) 3*64kB (ME) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11088kB [ 2917.080235] Node 0 DMA32: 3023*4kB (UME) 1298*8kB (ME) 225*16kB (ME) 578*32kB (UME) 6*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45212kB [ 2917.117269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2917.131308] Node 1 Normal: 114*4kB (ME) 1556*8kB (UME) 7821*16kB (UME) 4317*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 276184kB [ 2917.161057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2917.169924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2917.201061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2917.209922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2917.241042] 27316 total pagecache pages [ 2917.245133] 0 pages in swap cache [ 2917.248585] Swap cache stats: add 0, delete 0, find 0/0 [ 2917.261081] Free swap = 0kB [ 2917.264115] Total swap = 0kB [ 2917.267131] 2097051 pages RAM [ 2917.270236] 0 pages HighMem/MovableOnly [ 2917.291051] 363840 pages reserved [ 2917.294525] 0 pages cma reserved [ 2917.297924] warn_alloc_show_mem: 2 callbacks suppressed [ 2917.297926] Mem-Info: [ 2917.306546] active_anon:262402 inactive_anon:18197 isolated_anon:22 [ 2917.306546] active_file:3105 inactive_file:3230 isolated_file:64 [ 2917.306546] unevictable:0 dirty:83 writeback:0 unstable:0 [ 2917.306546] slab_reclaimable:19625 slab_unreclaimable:167898 [ 2917.306546] mapped:58017 shmem:21270 pagetables:71310 bounce:0 [ 2917.306546] free:51014 free_pcp:332 free_cma:0 [ 2917.438890] Node 0 active_anon:952924kB inactive_anon:72788kB active_file:6128kB inactive_file:9788kB unevictable:0kB isolated(anon):88kB isolated(file):128kB mapped:224280kB dirty:284kB writeback:0kB shmem:85080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2917.545133] Node 1 active_anon:96684kB inactive_anon:0kB active_file:6292kB inactive_file:3020kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:7688kB dirty:48kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2917.645257] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2917.741546] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2917.761023] Node 0 DMA32 free:35788kB min:36200kB low:45248kB high:54296kB active_anon:952880kB inactive_anon:72788kB active_file:4988kB inactive_file:4948kB unevictable:0kB writepending:284kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39584kB pagetables:157888kB bounce:0kB free_pcp:368kB local_pcp:176kB free_cma:0kB [ 2917.934778] lowmem_reserve[]: 0 0 0 0 0 [ 2917.938926] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2918.105259] lowmem_reserve[]: 0 0 0 0 0 [ 2918.109286] Node 1 Normal free:53312kB min:53696kB low:67120kB high:80544kB active_anon:96748kB inactive_anon:0kB active_file:1596kB inactive_file:2232kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127272kB bounce:0kB free_pcp:124kB local_pcp:64kB free_cma:0kB [ 2918.252825] lowmem_reserve[]: 0 0 0 0 0 [ 2918.256966] Node 0 DMA: 37*4kB (UME) 114*8kB (UME) 59*16kB (UM) 29*32kB (UME) 3*64kB (ME) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11060kB [ 2918.364818] Node 0 DMA32: 4286*4kB (UME) 1531*8kB (ME) 233*16kB (ME) 61*32kB (UME) 17*64kB (M) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36288kB [ 2918.460955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2918.461019] Node 1 Normal: 1303*4kB (ME) 379*8kB (ME) 110*16kB (UME) 1375*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54004kB [ 2918.461073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2918.461079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2918.461085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2918.461091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2918.461095] 22387 total pagecache pages [ 2918.461104] 0 pages in swap cache [ 2918.461109] Swap cache stats: add 0, delete 0, find 0/0 [ 2918.461112] Free swap = 0kB [ 2918.461115] Total swap = 0kB [ 2918.461120] 2097051 pages RAM [ 2918.461123] 0 pages HighMem/MovableOnly [ 2918.461127] 363840 pages reserved [ 2918.461129] 0 pages cma reserved [ 2918.741383] Bluetooth: hci3 command 0x0419 tx timeout [ 2918.860984] Bluetooth: hci2 command 0x0419 tx timeout [ 2920.754071] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2920.854739] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2920.859536] CPU: 0 PID: 7983 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2920.866971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2920.876314] Call Trace: [ 2920.878900] dump_stack+0x1b2/0x283 [ 2920.882526] dump_header+0x178/0x82f [ 2920.886239] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2920.891337] ? ___ratelimit+0x2cd/0x522 [ 2920.895308] oom_kill_process.cold+0x10/0xb18 [ 2920.899802] out_of_memory+0xe3e/0x1190 [ 2920.903773] ? oom_killer_disable+0x1c0/0x1c0 [ 2920.908261] ? mutex_trylock+0x152/0x1a0 [ 2920.912314] __alloc_pages_nodemask+0x23e1/0x2720 [ 2920.917164] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2920.922012] alloc_pages_current+0x155/0x260 [ 2920.926413] filemap_fault+0xea3/0x1980 [ 2920.930389] ext4_filemap_fault+0x84/0xb0 [ 2920.934534] __do_fault+0xfa/0x380 [ 2920.938068] __handle_mm_fault+0x2497/0x4620 [ 2920.942468] ? vm_insert_page+0x7c0/0x7c0 [ 2920.946611] ? lock_downgrade+0x740/0x740 [ 2920.950768] handle_mm_fault+0x391/0x860 [ 2920.954823] __do_page_fault+0x549/0xad0 [ 2920.958881] ? spurious_fault+0x640/0x640 [ 2920.963024] ? do_page_fault+0x60/0x4f2 [ 2920.966991] ? page_fault+0x2f/0x50 [ 2920.970614] page_fault+0x45/0x50 [ 2920.974063] RIP: 0000:0xb358f8 [ 2920.977243] RSP: 3b973838:000000c00003dec8 EFLAGS: 00438920 [ 2921.009563] Mem-Info: [ 2921.050747] active_anon:262792 inactive_anon:18204 isolated_anon:0 [ 2921.050747] active_file:10 inactive_file:17 isolated_file:0 [ 2921.050747] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2921.050747] slab_reclaimable:19591 slab_unreclaimable:167684 [ 2921.050747] mapped:52758 shmem:21270 pagetables:71310 bounce:0 [ 2921.050747] free:25010 free_pcp:38 free_cma:0 [ 2921.119972] Node 0 active_anon:953992kB inactive_anon:72816kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211032kB dirty:0kB writeback:0kB shmem:85080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2921.200722] Node 1 active_anon:97176kB inactive_anon:0kB active_file:16kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2921.363941] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2921.423188] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2921.428241] Node 0 DMA32 free:36120kB min:36200kB low:45248kB high:54296kB active_anon:953948kB inactive_anon:72816kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39584kB pagetables:157888kB bounce:0kB free_pcp:152kB local_pcp:120kB free_cma:0kB [ 2921.500662] lowmem_reserve[]: 0 0 0 0 0 [ 2921.504670] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2921.574253] lowmem_reserve[]: 0 0 0 0 0 [ 2921.578270] Node 1 Normal free:53220kB min:53696kB low:67120kB high:80544kB active_anon:97176kB inactive_anon:0kB active_file:16kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2921.664506] lowmem_reserve[]: 0 0 0 0 0 [ 2921.668521] Node 0 DMA: 37*4kB (UME) 114*8kB (UME) 59*16kB (UM) 29*32kB (UME) 3*64kB (ME) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11060kB [ 2921.748992] Node 0 DMA32: 4644*4kB (UME) 1505*8kB (UME) 208*16kB (ME) 50*32kB (UME) 9*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 2921.811990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2921.868658] Node 1 Normal: 1419*4kB (UME) 549*8kB (ME) 113*16kB (UME) 1292*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53220kB [ 2921.957069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2921.994812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2922.060682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2922.069535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2922.159052] 21334 total pagecache pages [ 2922.188828] 0 pages in swap cache [ 2922.203835] Swap cache stats: add 0, delete 0, find 0/0 [ 2922.209203] Free swap = 0kB [ 2922.260705] Total swap = 0kB [ 2922.263751] 2097051 pages RAM [ 2922.266847] 0 pages HighMem/MovableOnly [ 2922.310616] 363840 pages reserved [ 2922.314077] 0 pages cma reserved [ 2922.317435] Out of memory (oom_kill_allocating_task): Kill process 7983 (syz-fuzzer) score 0 or sacrifice child [ 2922.433947] Killed process 32534 (syz-executor.2) total-vm:85024kB, anon-rss:1728kB, file-rss:4kB, shmem-rss:0kB [ 2922.503175] oom_reaper: reaped process 32534 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2922.678559] oom_reaper: reaped process 662 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2922.809672] oom_reaper: reaped process 656 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2923.919721] kworker/u4:7 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2923.955568] kworker/u4:7 cpuset=/ mems_allowed=0-1 [ 2923.960584] CPU: 1 PID: 9895 Comm: kworker/u4:7 Not tainted 4.14.215-syzkaller #0 [ 2923.968197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2923.977549] Workqueue: events_unbound call_usermodehelper_exec_work [ 2923.983946] Call Trace: [ 2923.986528] dump_stack+0x1b2/0x283 [ 2923.990153] dump_header+0x178/0x82f [ 2923.993869] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2923.998962] ? ___ratelimit+0x2cd/0x522 [ 2924.002959] oom_kill_process.cold+0x10/0xb18 [ 2924.007449] ? lock_downgrade+0x740/0x740 [ 2924.011594] out_of_memory+0x2dc/0x1190 [ 2924.015564] ? oom_killer_disable+0x1c0/0x1c0 [ 2924.020050] ? mutex_trylock+0x152/0x1a0 [ 2924.024103] __alloc_pages_nodemask+0x23e1/0x2720 [ 2924.028943] ? __lock_acquire+0x5fc/0x3f20 [ 2924.033176] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2924.038012] ? fs_reclaim_release+0xd0/0x110 [ 2924.042422] ? kmem_cache_alloc_node+0x38b/0x410 [ 2924.047173] copy_process.part.0+0x265/0x71c0 [ 2924.051664] ? __lock_acquire+0x5fc/0x3f20 [ 2924.055892] ? cpuacct_charge+0x1ca/0x350 [ 2924.060027] ? static_obj+0x50/0x50 [ 2924.063645] ? lock_downgrade+0x740/0x740 [ 2924.067784] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2924.073243] ? __cleanup_sighand+0x40/0x40 [ 2924.077469] ? update_curr+0x28d/0x670 [ 2924.081352] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2924.086796] _do_fork+0x184/0xc80 [ 2924.090248] ? fork_idle+0x270/0x270 [ 2924.093951] ? lock_downgrade+0x740/0x740 [ 2924.098091] ? lock_downgrade+0x740/0x740 [ 2924.102233] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2924.107243] ? process_one_work+0x6c4/0x14a0 [ 2924.111645] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2924.117085] kernel_thread+0x2f/0x40 [ 2924.120795] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2924.126065] ? call_usermodehelper+0x80/0x80 [ 2924.130463] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2924.135909] process_one_work+0x793/0x14a0 [ 2924.140139] ? work_busy+0x320/0x320 [ 2924.143845] ? worker_thread+0x158/0xff0 [ 2924.147901] ? _raw_spin_unlock_irq+0x24/0x80 [ 2924.152390] worker_thread+0x5cc/0xff0 [ 2924.156278] ? rescuer_thread+0xc80/0xc80 [ 2924.160419] kthread+0x30d/0x420 [ 2924.163777] ? kthread_create_on_node+0xd0/0xd0 [ 2924.168445] ret_from_fork+0x24/0x30 [ 2924.309339] Mem-Info: [ 2924.320439] active_anon:262278 inactive_anon:18204 isolated_anon:0 [ 2924.320439] active_file:5 inactive_file:14 isolated_file:10 [ 2924.320439] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2924.320439] slab_reclaimable:19540 slab_unreclaimable:167040 [ 2924.320439] mapped:44056 shmem:21270 pagetables:71261 bounce:0 [ 2924.320439] free:13891 free_pcp:0 free_cma:0 [ 2924.480685] Node 0 active_anon:951936kB inactive_anon:72816kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):40kB mapped:176224kB dirty:4kB writeback:0kB shmem:85080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2924.632666] Node 1 active_anon:97176kB inactive_anon:0kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2924.706454] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2925.090396] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2925.095458] Node 0 DMA32 free:17956kB min:36200kB low:45248kB high:54296kB active_anon:951892kB inactive_anon:72816kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39520kB pagetables:157692kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2925.490315] lowmem_reserve[]: 0 0 0 0 0 [ 2925.494342] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2925.950295] lowmem_reserve[]: 0 0 0 0 0 [ 2925.954311] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:97176kB inactive_anon:0kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127272kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2926.300534] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2926.312469] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2926.324318] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2926.510874] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2926.516022] CPU: 0 PID: 656 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2926.523719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2926.533059] Call Trace: [ 2926.535641] dump_stack+0x1b2/0x283 [ 2926.539264] warn_alloc.cold+0x96/0x1cc [ 2926.543245] ? zone_watermark_ok_safe+0x220/0x220 [ 2926.548079] ? usleep_range+0x130/0x130 [ 2926.552047] ? try_to_free_pages+0x23f/0x6e0 [ 2926.556449] ? _find_next_bit+0xdb/0x100 [ 2926.560501] ? run_timer_softirq+0x5a0/0x5a0 [ 2926.564908] __alloc_pages_nodemask+0x2127/0x2720 [ 2926.569747] ? lock_acquire+0x170/0x3f0 [ 2926.573718] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2926.578550] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2926.583045] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2926.588497] alloc_pages_current+0x155/0x260 [ 2926.592899] ion_page_pool_alloc+0x118/0x1b0 [ 2926.597300] ion_system_heap_allocate+0x133/0x8c0 [ 2926.602139] ? ion_alloc+0x187/0x810 [ 2926.605848] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2926.611286] ? ion_system_contig_heap_create+0x130/0x130 [ 2926.616726] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2926.621734] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2926.626569] ion_alloc+0x204/0x810 [ 2926.630104] ? ion_dma_buf_release+0x40/0x40 [ 2926.634518] ? __might_fault+0x177/0x1b0 [ 2926.638569] ion_ioctl+0xea/0x1ee [ 2926.642011] ? ion_alloc.cold+0x3b/0x3b [ 2926.645977] ? lock_acquire+0x170/0x3f0 [ 2926.649946] ? lock_downgrade+0x740/0x740 [ 2926.654079] ? ion_alloc.cold+0x3b/0x3b [ 2926.658046] do_vfs_ioctl+0x75a/0xff0 [ 2926.661839] ? ioctl_preallocate+0x1a0/0x1a0 [ 2926.666234] ? lock_downgrade+0x740/0x740 [ 2926.670376] ? __fget+0x225/0x360 [ 2926.673819] ? do_vfs_ioctl+0xff0/0xff0 [ 2926.677788] ? security_file_ioctl+0x83/0xb0 [ 2926.682189] SyS_ioctl+0x7f/0xb0 [ 2926.685542] ? do_vfs_ioctl+0xff0/0xff0 [ 2926.689507] do_syscall_64+0x1d5/0x640 [ 2926.693389] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2926.698567] RIP: 0033:0x45e219 [ 2926.701743] RSP: 002b:00007f7783a48c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2926.709439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2926.716695] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2926.723953] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2926.731218] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2926.738477] R13: 00007ffe6a8f603f R14: 00007f7783a499c0 R15: 000000000119bf8c [ 2926.780238] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2926.785380] CPU: 0 PID: 662 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2926.793072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2926.802416] Call Trace: [ 2926.805053] dump_stack+0x1b2/0x283 [ 2926.808707] warn_alloc.cold+0x96/0x1cc [ 2926.812673] ? zone_watermark_ok_safe+0x220/0x220 [ 2926.817512] ? usleep_range+0x130/0x130 [ 2926.821482] ? try_to_free_pages+0x23f/0x6e0 [ 2926.825882] ? _find_next_bit+0xdb/0x100 [ 2926.829936] ? run_timer_softirq+0x5a0/0x5a0 [ 2926.834345] __alloc_pages_nodemask+0x2127/0x2720 [ 2926.839184] ? lock_acquire+0x170/0x3f0 [ 2926.843170] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2926.848000] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2926.852492] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2926.857942] alloc_pages_current+0x155/0x260 [ 2926.862343] ion_page_pool_alloc+0x118/0x1b0 [ 2926.866741] ion_system_heap_allocate+0x133/0x8c0 [ 2926.871577] ? ion_alloc+0x187/0x810 [ 2926.875280] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2926.880719] ? ion_system_contig_heap_create+0x130/0x130 [ 2926.886162] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2926.891175] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2926.896009] ion_alloc+0x204/0x810 [ 2926.899550] ? ion_dma_buf_release+0x40/0x40 [ 2926.903953] ? __might_fault+0x177/0x1b0 [ 2926.908003] ion_ioctl+0xea/0x1ee [ 2926.911442] ? ion_alloc.cold+0x3b/0x3b [ 2926.915405] ? lock_acquire+0x170/0x3f0 [ 2926.919369] ? lock_downgrade+0x740/0x740 [ 2926.923505] ? ion_alloc.cold+0x3b/0x3b [ 2926.927539] do_vfs_ioctl+0x75a/0xff0 [ 2926.931336] ? ioctl_preallocate+0x1a0/0x1a0 [ 2926.935733] ? lock_downgrade+0x740/0x740 [ 2926.939873] ? __fget+0x225/0x360 [ 2926.943312] ? do_vfs_ioctl+0xff0/0xff0 [ 2926.947279] ? security_file_ioctl+0x83/0xb0 [ 2926.951678] SyS_ioctl+0x7f/0xb0 [ 2926.955030] ? do_vfs_ioctl+0xff0/0xff0 [ 2926.958992] do_syscall_64+0x1d5/0x640 [ 2926.962877] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2926.968053] RIP: 0033:0x45e219 [ 2926.971234] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2926.978932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2926.986192] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2926.993452] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2927.000707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2927.007962] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2927.030213] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2927.035340] CPU: 0 PID: 669 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2927.043038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2927.052379] Call Trace: [ 2927.054967] dump_stack+0x1b2/0x283 [ 2927.058588] warn_alloc.cold+0x96/0x1cc [ 2927.062552] ? zone_watermark_ok_safe+0x220/0x220 [ 2927.067472] ? usleep_range+0x130/0x130 [ 2927.071437] ? try_to_free_pages+0x23f/0x6e0 [ 2927.075839] ? _find_next_bit+0xdb/0x100 [ 2927.079920] ? run_timer_softirq+0x5a0/0x5a0 [ 2927.084326] __alloc_pages_nodemask+0x2127/0x2720 [ 2927.089185] ? lock_acquire+0x170/0x3f0 [ 2927.093154] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2927.097988] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2927.102488] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2927.107934] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 2927.112771] alloc_pages_current+0x155/0x260 [ 2927.117173] ion_page_pool_alloc+0x118/0x1b0 [ 2927.121573] ion_system_heap_allocate+0x133/0x8c0 [ 2927.126407] ? ion_alloc+0x187/0x810 [ 2927.130110] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2927.135548] ? ion_system_contig_heap_create+0x130/0x130 [ 2927.140990] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2927.145997] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2927.150831] ion_alloc+0x204/0x810 [ 2927.154368] ? ion_dma_buf_release+0x40/0x40 [ 2927.158772] ? __might_fault+0x177/0x1b0 [ 2927.162828] ion_ioctl+0xea/0x1ee [ 2927.166267] ? ion_alloc.cold+0x3b/0x3b [ 2927.170284] ? lock_acquire+0x170/0x3f0 [ 2927.174249] ? lock_downgrade+0x740/0x740 [ 2927.178381] ? ion_alloc.cold+0x3b/0x3b [ 2927.182343] do_vfs_ioctl+0x75a/0xff0 [ 2927.186138] ? ioctl_preallocate+0x1a0/0x1a0 [ 2927.190533] ? lock_downgrade+0x740/0x740 [ 2927.194695] ? __fget+0x225/0x360 [ 2927.198138] ? do_vfs_ioctl+0xff0/0xff0 [ 2927.202110] ? security_file_ioctl+0x83/0xb0 [ 2927.206552] SyS_ioctl+0x7f/0xb0 [ 2927.209911] ? do_vfs_ioctl+0xff0/0xff0 [ 2927.213877] do_syscall_64+0x1d5/0x640 [ 2927.217759] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2927.222935] RIP: 0033:0x45e219 [ 2927.226124] RSP: 002b:00007f7783a27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2927.233832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2927.241189] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2927.248447] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2927.255707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2927.262964] R13: 00007ffe6a8f603f R14: 00007f7783a289c0 R15: 000000000119c034 [ 2927.338907] lowmem_reserve[]: 0 0 0 0 0 [ 2927.400161] Node 0 DMA: 6*4kB (ME) 110*8kB (UME) 58*16kB (UM) 29*32kB (UME) 4*64kB (UME) 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10952kB [ 2927.600221] Node 0 DMA32: 2709*4kB (UME) 699*8kB (UME) 27*16kB (UMEH) 1*32kB (M) 0*64kB 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17660kB [ 2927.788975] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2927.876644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2928.011767] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2928.016908] CPU: 0 PID: 692 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2928.024602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2928.033942] Call Trace: [ 2928.036524] dump_stack+0x1b2/0x283 [ 2928.040141] warn_alloc.cold+0x96/0x1cc [ 2928.044103] ? zone_watermark_ok_safe+0x220/0x220 [ 2928.048933] ? usleep_range+0x130/0x130 [ 2928.052896] ? try_to_free_pages+0x23f/0x6e0 [ 2928.057293] ? _find_next_bit+0xdb/0x100 [ 2928.061344] ? run_timer_softirq+0x5a0/0x5a0 [ 2928.065778] __alloc_pages_nodemask+0x2127/0x2720 [ 2928.070615] ? lock_acquire+0x170/0x3f0 [ 2928.074586] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2928.079540] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2928.084030] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2928.089488] alloc_pages_current+0x155/0x260 [ 2928.093886] ion_page_pool_alloc+0x118/0x1b0 [ 2928.098284] ion_system_heap_allocate+0x133/0x8c0 [ 2928.103119] ? ion_alloc+0x187/0x810 [ 2928.106824] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2928.112262] ? ion_system_contig_heap_create+0x130/0x130 [ 2928.117699] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2928.122707] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2928.127543] ion_alloc+0x204/0x810 [ 2928.131077] ? ion_dma_buf_release+0x40/0x40 [ 2928.135482] ? __might_fault+0x177/0x1b0 [ 2928.139534] ion_ioctl+0xea/0x1ee [ 2928.142978] ? ion_alloc.cold+0x3b/0x3b [ 2928.146939] ? lock_acquire+0x170/0x3f0 [ 2928.150902] ? lock_downgrade+0x740/0x740 [ 2928.155033] ? ion_alloc.cold+0x3b/0x3b [ 2928.159004] do_vfs_ioctl+0x75a/0xff0 [ 2928.162797] ? ioctl_preallocate+0x1a0/0x1a0 [ 2928.167192] ? lock_downgrade+0x740/0x740 [ 2928.171333] ? __fget+0x225/0x360 [ 2928.174775] ? do_vfs_ioctl+0xff0/0xff0 [ 2928.178740] ? security_file_ioctl+0x83/0xb0 [ 2928.183137] SyS_ioctl+0x7f/0xb0 [ 2928.186491] ? do_vfs_ioctl+0xff0/0xff0 [ 2928.190455] do_syscall_64+0x1d5/0x640 [ 2928.194340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2928.199515] RIP: 0033:0x45e219 [ 2928.202705] RSP: 002b:00007fbaae81dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2928.210415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2928.217675] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2928.224949] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2928.232205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2928.239464] R13: 00007fffdc1f695f R14: 00007fbaae81e9c0 R15: 000000000119c0dc [ 2928.290529] Node 1 Normal: 1419*4kB (UME) 550*8kB (UME) 112*16kB (ME) 465*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26748kB [ 2928.475003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2928.620068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2928.628662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2928.890104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2928.898688] 21296 total pagecache pages [ 2929.055460] 0 pages in swap cache [ 2929.058935] Swap cache stats: add 0, delete 0, find 0/0 [ 2929.210006] Free swap = 0kB [ 2929.213040] Total swap = 0kB [ 2929.216044] 2097051 pages RAM [ 2929.219134] 0 pages HighMem/MovableOnly [ 2929.384420] 363840 pages reserved [ 2929.387898] 0 pages cma reserved [ 2929.509982] Out of memory: Kill process 30514 (syz-executor.3) score 1005 or sacrifice child [ 2929.518610] Killed process 30514 (syz-executor.3) total-vm:93612kB, anon-rss:3884kB, file-rss:34496kB, shmem-rss:0kB [ 2929.838111] oom_reaper: reaped process 30514 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2930.096470] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2930.336340] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 2930.434983] CPU: 0 PID: 26628 Comm: kworker/u4:2 Not tainted 4.14.215-syzkaller #0 [ 2930.442709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2930.452064] Workqueue: events_unbound call_usermodehelper_exec_work [ 2930.458455] Call Trace: [ 2930.461036] dump_stack+0x1b2/0x283 [ 2930.464655] dump_header+0x178/0x82f [ 2930.468357] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2930.473448] ? ___ratelimit+0x2cd/0x522 [ 2930.477415] oom_kill_process.cold+0x10/0xb18 [ 2930.481899] ? lock_downgrade+0x740/0x740 [ 2930.486039] out_of_memory+0x2dc/0x1190 [ 2930.490006] ? oom_killer_disable+0x1c0/0x1c0 [ 2930.494487] ? mutex_trylock+0x152/0x1a0 [ 2930.498538] __alloc_pages_nodemask+0x23e1/0x2720 [ 2930.503381] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2930.508222] ? fs_reclaim_release+0xd0/0x110 [ 2930.512640] ? kmem_cache_alloc_node+0x38b/0x410 [ 2930.517388] copy_process.part.0+0x265/0x71c0 [ 2930.521874] ? __lock_acquire+0x5fc/0x3f20 [ 2930.526100] ? check_preemption_disabled+0x35/0x240 [ 2930.531118] ? trace_hardirqs_on+0x10/0x10 [ 2930.535386] ? static_obj+0x50/0x50 [ 2930.539009] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2930.544453] ? __cleanup_sighand+0x40/0x40 [ 2930.548920] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2930.554389] _do_fork+0x184/0xc80 [ 2930.557840] ? fork_idle+0x270/0x270 [ 2930.561550] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2930.566639] ? process_one_work+0x6c4/0x14a0 [ 2930.571036] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2930.576475] kernel_thread+0x2f/0x40 [ 2930.580185] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2930.585450] ? call_usermodehelper+0x80/0x80 [ 2930.589852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2930.595293] process_one_work+0x793/0x14a0 [ 2930.599519] ? work_busy+0x320/0x320 [ 2930.603221] ? worker_thread+0x158/0xff0 [ 2930.607270] ? _raw_spin_unlock_irq+0x24/0x80 [ 2930.611764] worker_thread+0x5cc/0xff0 [ 2930.615651] ? rescuer_thread+0xc80/0xc80 [ 2930.619788] kthread+0x30d/0x420 [ 2930.623144] ? kthread_create_on_node+0xd0/0xd0 [ 2930.627803] ret_from_fork+0x24/0x30 [ 2931.219828] Mem-Info: [ 2931.222279] active_anon:261740 inactive_anon:18204 isolated_anon:0 [ 2931.222279] active_file:13 inactive_file:13 isolated_file:0 [ 2931.222279] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2931.222279] slab_reclaimable:19482 slab_unreclaimable:166759 [ 2931.222279] mapped:44054 shmem:21270 pagetables:71233 bounce:0 [ 2931.222279] free:14413 free_pcp:139 free_cma:0 [ 2931.729914] Node 0 active_anon:949784kB inactive_anon:72816kB active_file:24kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176616kB dirty:0kB writeback:0kB shmem:85080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 751616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2932.119772] Node 1 active_anon:97176kB inactive_anon:0kB active_file:64kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2932.369778] Node 0 DMA free:11868kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2932.429933] Mem-Info: [ 2932.432373] active_anon:261740 inactive_anon:18204 isolated_anon:0 [ 2932.432373] active_file:58 inactive_file:181 isolated_file:0 [ 2932.432373] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2932.432373] slab_reclaimable:19455 slab_unreclaimable:166182 [ 2932.432373] mapped:44218 shmem:21270 pagetables:71233 bounce:0 [ 2932.432373] free:386782 free_pcp:675 free_cma:0 [ 2932.466093] Node 0 active_anon:949784kB inactive_anon:72816kB active_file:168kB inactive_file:476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176672kB dirty:0kB writeback:0kB shmem:85080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 751616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2932.494335] Node 1 active_anon:97176kB inactive_anon:0kB active_file:64kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2932.593469] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2932.599756] Node 0 DMA free:11868kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2932.639941] Node 0 DMA32 free:339004kB min:36200kB low:45248kB high:54296kB active_anon:949740kB inactive_anon:72816kB active_file:104kB inactive_file:172kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39488kB pagetables:157580kB bounce:0kB free_pcp:1316kB local_pcp:656kB free_cma:0kB [ 2932.687521] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2932.694173] Node 0 DMA32 free:359004kB min:36200kB low:45248kB high:54296kB active_anon:949740kB inactive_anon:72816kB active_file:104kB inactive_file:260kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39488kB pagetables:157580kB bounce:0kB free_pcp:952kB local_pcp:452kB free_cma:0kB [ 2932.724681] lowmem_reserve[]: 0 0 0 0 0 [ 2932.729079] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2932.755691] lowmem_reserve[]: 0 0 0 0 0 [ 2932.763133] lowmem_reserve[]: 0 0 0 0 0 [ 2932.779964] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2932.819918] Node 1 Normal free:1056936kB min:53696kB low:67120kB high:80544kB active_anon:97176kB inactive_anon:0kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127272kB bounce:0kB free_pcp:1312kB local_pcp:692kB free_cma:0kB [ 2932.902301] lowmem_reserve[]: 0 0 0 0 0 [ 2932.906405] Node 1 Normal free:852192kB min:53696kB low:67120kB high:80544kB active_anon:97176kB inactive_anon:0kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127272kB bounce:0kB free_pcp:1436kB local_pcp:692kB free_cma:0kB [ 2932.958055] lowmem_reserve[]: 0 0 0 0 0 [ 2932.984125] Node 0 DMA: 44*4kB (UME) 111*8kB (UME) 58*16kB (UM) 29*32kB (UME) 16*64kB (UME) 3*128kB (UE) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10984kB [ 2933.061631] Node 0 DMA32: 10911*4kB (UME) 5740*8kB (UMEH) 6757*16kB (UMEH) 2644*32kB (UMEH) 7*64kB (H) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 282860kB [ 2933.101716] lowmem_reserve[]: 0 0 0 0 0 [ 2933.105737] Node 0 DMA: 44*4kB (UME) 111*8kB (UME) 58*16kB (UM) 29*32kB (UME) 16*64kB (UME) 3*128kB (UE) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10984kB [ 2933.133985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2933.169788] Node 1 Normal: 13624*4kB (UME) 14115*8kB (UME) 7819*16kB (UME) 3986*32kB (UME) 13*64kB (M) 2*128kB (M) 0*256kB 43*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 443176kB [ 2933.186757] Node 0 DMA32: 10608*4kB (UME) 5573*8kB (UMEH) 6770*16kB (UMEH) 2647*32kB (UMEH) 13*64kB (UH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 281000kB [ 2933.188948] syz-executor.5: [ 2933.208701] syz-executor.5: [ 2933.209744] syz-executor.4: [ 2933.212049] page allocation failure: order:4 [ 2933.218978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2933.221812] page allocation failure: order:4 [ 2933.224147] Node 0 [ 2933.237641] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2933.242155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2933.248867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2933.255330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2933.264608] Normal: [ 2933.270830] syz-executor.5 cpuset= [ 2933.271924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2933.273599] / [ 2933.276693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2933.283669] 0*4kB [ 2933.292013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2933.307281] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2933.315468] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2933.316927] mems_allowed=0-1 [ 2933.326560] page allocation failure: order:4 [ 2933.330012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2933.339638] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2933.345917] CPU: 0 PID: 692 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2933.352601] device bridge_slave_1 left promiscuous mode [ 2933.358272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2933.358278] Call Trace: [ 2933.363861] bridge0: port 2(bridge_slave_1) entered disabled state [ 2933.372962] dump_stack+0x1b2/0x283 [ 2933.372975] warn_alloc.cold+0x96/0x1cc [ 2933.372985] ? zone_watermark_ok_safe+0x220/0x220 [ 2933.389639] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2933.394252] __alloc_pages_nodemask+0x2127/0x2720 [ 2933.394264] ? retint_kernel+0x2d/0x2d [ 2933.399627] syz-executor.5 cpuset= [ 2933.404164] ? lock_acquire+0x170/0x3f0 [ 2933.408015] / [ 2933.411538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2933.422010] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2933.427565] ? __mutex_unlock_slowpath+0x75/0x770 [ 2933.432400] alloc_pages_current+0x155/0x260 [ 2933.436790] ion_page_pool_alloc+0x118/0x1b0 [ 2933.441184] ion_system_heap_allocate+0x133/0x8c0 [ 2933.446021] ? _raw_spin_unlock+0x29/0x40 [ 2933.450159] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2933.455065] ? ion_system_contig_heap_create+0x130/0x130 [ 2933.459617] mems_allowed=0-1 [ 2933.460497] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2933.468656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2933.473501] ion_alloc+0x27a/0x810 [ 2933.477045] ? ion_dma_buf_release+0x40/0x40 [ 2933.481446] ? __might_fault+0x177/0x1b0 [ 2933.485492] ion_ioctl+0xea/0x1ee [ 2933.488923] ? ion_alloc.cold+0x3b/0x3b [ 2933.492878] ? lock_acquire+0x170/0x3f0 [ 2933.496830] ? lock_downgrade+0x740/0x740 [ 2933.500962] ? ion_alloc.cold+0x3b/0x3b [ 2933.504930] do_vfs_ioctl+0x75a/0xff0 [ 2933.508726] ? ioctl_preallocate+0x1a0/0x1a0 [ 2933.513129] ? lock_downgrade+0x740/0x740 [ 2933.517258] ? __fget+0x225/0x360 [ 2933.520694] ? do_vfs_ioctl+0xff0/0xff0 [ 2933.524648] ? security_file_ioctl+0x83/0xb0 [ 2933.529036] SyS_ioctl+0x7f/0xb0 [ 2933.532393] ? do_vfs_ioctl+0xff0/0xff0 [ 2933.536363] do_syscall_64+0x1d5/0x640 [ 2933.540248] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2933.545426] RIP: 0033:0x45e219 [ 2933.548600] RSP: 002b:00007fbaae81dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2933.556289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2933.563546] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2933.570805] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2933.578055] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2933.585303] R13: 00007fffdc1f695f R14: 00007fbaae81e9c0 R15: 000000000119c0dc [ 2933.592565] CPU: 1 PID: 669 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2933.600273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2933.601905] Node 1 [ 2933.609612] Call Trace: [ 2933.609627] dump_stack+0x1b2/0x283 [ 2933.609641] warn_alloc.cold+0x96/0x1cc [ 2933.609650] ? zone_watermark_ok_safe+0x220/0x220 [ 2933.609673] __alloc_pages_nodemask+0x2127/0x2720 [ 2933.609682] ? trace_hardirqs_on+0x10/0x10 [ 2933.609689] ? lock_acquire+0x170/0x3f0 [ 2933.609705] ? lock_acquire+0x170/0x3f0 [ 2933.615195] Normal: [ 2933.618100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2933.622375] 23635 total pagecache pages [ 2933.626899] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2933.635150] 13602*4kB [ 2933.635921] ? __mutex_unlock_slowpath+0x75/0x770 [ 2933.640147] (UME) [ 2933.643841] alloc_pages_current+0x155/0x260 [ 2933.646129] 14111*8kB [ 2933.650955] ion_page_pool_alloc+0x118/0x1b0 [ 2933.650965] ion_system_heap_allocate+0x133/0x8c0 [ 2933.650977] ? _raw_spin_unlock+0x29/0x40 [ 2933.650984] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2933.650993] ? ion_system_contig_heap_create+0x130/0x130 [ 2933.651002] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2933.651013] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2933.651025] ion_alloc+0x27a/0x810 [ 2933.651038] ? ion_dma_buf_release+0x40/0x40 [ 2933.651053] ? __might_fault+0x177/0x1b0 [ 2933.658290] 0 pages in swap cache [ 2933.660426] ion_ioctl+0xea/0x1ee [ 2933.660434] ? ion_alloc.cold+0x3b/0x3b [ 2933.660444] ? lock_acquire+0x170/0x3f0 [ 2933.660452] ? lock_downgrade+0x740/0x740 [ 2933.660458] ? ion_alloc.cold+0x3b/0x3b [ 2933.660471] do_vfs_ioctl+0x75a/0xff0 [ 2933.664353] Swap cache stats: add 0, delete 0, find 0/0 [ 2933.667767] ? ioctl_preallocate+0x1a0/0x1a0 [ 2933.673383] Free swap = 0kB [ 2933.674297] ? lock_downgrade+0x740/0x740 [ 2933.676765] Total swap = 0kB [ 2933.681154] ? __fget+0x225/0x360 [ 2933.681163] ? do_vfs_ioctl+0xff0/0xff0 [ 2933.681174] ? security_file_ioctl+0x83/0xb0 [ 2933.681184] SyS_ioctl+0x7f/0xb0 [ 2933.681192] ? do_vfs_ioctl+0xff0/0xff0 [ 2933.681204] do_syscall_64+0x1d5/0x640 [ 2933.686876] (UME) [ 2933.690170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2933.690179] RIP: 0033:0x45e219 [ 2933.690184] RSP: 002b:00007f7783a27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2933.690193] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2933.690199] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2933.690205] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2933.690210] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2933.690216] R13: 00007ffe6a8f603f R14: 00007f7783a289c0 R15: 000000000119c034 [ 2933.692933] CPU: 1 PID: 662 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2933.698740] 7852*16kB [ 2933.700591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2933.700595] Call Trace: [ 2933.700607] dump_stack+0x1b2/0x283 [ 2933.700620] warn_alloc.cold+0x96/0x1cc [ 2933.700629] ? zone_watermark_ok_safe+0x220/0x220 [ 2933.700650] __alloc_pages_nodemask+0x2127/0x2720 [ 2933.705631] (UME) [ 2933.710450] ? lock_acquire+0x170/0x3f0 [ 2933.710463] ? lock_acquire+0x170/0x3f0 [ 2933.710478] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2933.710495] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2933.710508] ? __mutex_unlock_slowpath+0x75/0x770 [ 2933.710522] alloc_pages_current+0x155/0x260 [ 2933.710533] ion_page_pool_alloc+0x118/0x1b0 [ 2933.710542] ion_system_heap_allocate+0x133/0x8c0 [ 2933.722961] 2097051 pages RAM [ 2933.725928] ? _raw_spin_unlock+0x29/0x40 [ 2933.725939] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2933.725948] ? ion_system_contig_heap_create+0x130/0x130 [ 2933.725958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2933.725969] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2933.725983] ion_alloc+0x27a/0x810 [ 2933.725998] ? ion_dma_buf_release+0x40/0x40 [ 2933.726013] ? __might_fault+0x177/0x1b0 [ 2933.726024] ion_ioctl+0xea/0x1ee [ 2933.726033] ? ion_alloc.cold+0x3b/0x3b [ 2933.733295] 0 pages HighMem/MovableOnly [ 2933.733421] ? lock_acquire+0x170/0x3f0 [ 2933.737364] 363840 pages reserved [ 2933.741498] ? lock_downgrade+0x740/0x740 [ 2933.741505] ? ion_alloc.cold+0x3b/0x3b [ 2933.741516] do_vfs_ioctl+0x75a/0xff0 [ 2933.741527] ? ioctl_preallocate+0x1a0/0x1a0 [ 2933.741534] ? lock_downgrade+0x740/0x740 [ 2933.741548] ? __fget+0x225/0x360 [ 2933.746290] 4018*32kB [ 2933.749273] ? do_vfs_ioctl+0xff0/0xff0 [ 2933.758212] 0 pages cma reserved [ 2933.759099] ? security_file_ioctl+0x83/0xb0 [ 2933.773136] (UME) [ 2933.776595] SyS_ioctl+0x7f/0xb0 [ 2933.793360] 0*64kB [ 2933.794277] ? do_vfs_ioctl+0xff0/0xff0 [ 2933.794288] do_syscall_64+0x1d5/0x640 [ 2933.794304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2933.794311] RIP: 0033:0x45e219 [ 2933.794315] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2933.794324] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2933.794329] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2933.794333] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2933.794340] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2933.813211] 0*128kB [ 2933.817629] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2933.818803] device bridge_slave_0 left promiscuous mode [ 2933.871079] 0*256kB [ 2933.875949] bridge0: port 1(bridge_slave_0) entered disabled state [ 2933.878443] syz-executor.4: [ 2933.896727] device veth1_macvtap left promiscuous mode [ 2933.902028] 0*512kB [ 2933.906982] device veth0_macvtap left promiscuous mode [ 2933.919633] 0*1024kB [ 2933.924316] device veth1_vlan left promiscuous mode [ 2933.925507] 0*2048kB [ 2933.928623] device veth0_vlan left promiscuous mode [ 2933.959644] page allocation failure: order:4 [ 2934.042145] warn_alloc_show_mem: 3 callbacks suppressed [ 2934.042148] Mem-Info: [ 2934.043109] 0*4096kB [ 2934.056467] active_anon:261762 inactive_anon:18201 isolated_anon:12 [ 2934.056467] active_file:1178 inactive_file:1312 isolated_file:26 [ 2934.056467] unevictable:0 dirty:17 writeback:0 unstable:0 [ 2934.056467] slab_reclaimable:19246 slab_unreclaimable:168699 [ 2934.056467] mapped:46051 shmem:21266 pagetables:71242 bounce:0 [ 2934.056467] free:175920 free_pcp:124 free_cma:0 [ 2934.061448] = 421504kB [ 2934.080938] Node 0 active_anon:949920kB inactive_anon:72804kB active_file:4700kB inactive_file:5240kB unevictable:0kB isolated(anon):48kB isolated(file):104kB mapped:184204kB dirty:60kB writeback:0kB shmem:85064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 751616kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2934.084236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.115277] Node 1 active_anon:97128kB inactive_anon:0kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2934.115591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.120782] Node 0 [ 2934.123380] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2934.126640] device hsr_slave_1 left promiscuous mode [ 2934.131295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2934.143765] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.148509] (null) [ 2934.154252] device hsr_slave_0 left promiscuous mode [ 2934.187704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2934.194180] lowmem_reserve[]: [ 2934.218750] 23835 total pagecache pages [ 2934.253577] team0 (unregistering): Port device team_slave_1 removed [ 2934.262810] syz-executor.4 cpuset= [ 2934.293379] 0 [ 2934.311798] 0 pages in swap cache [ 2934.343417] 2717 [ 2934.344996] / [ 2934.346089] 2718 [ 2934.353756] mems_allowed=0-1 [ 2934.359063] CPU: 0 PID: 656 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2934.360994] team0 (unregistering): Port device team_slave_0 removed [ 2934.366759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2934.377943] 2718 [ 2934.382481] Call Trace: [ 2934.382498] dump_stack+0x1b2/0x283 [ 2934.382511] warn_alloc.cold+0x96/0x1cc [ 2934.382520] ? zone_watermark_ok_safe+0x220/0x220 [ 2934.382540] __alloc_pages_nodemask+0x2127/0x2720 [ 2934.399542] 2718 [ 2934.404348] ? io_schedule_timeout+0x140/0x140 [ 2934.404363] ? lock_acquire+0x170/0x3f0 [ 2934.406401] Node 0 [ 2934.410967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2934.410981] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2934.410992] ? __mutex_unlock_slowpath+0x75/0x770 [ 2934.411003] ? ion_page_pool_alloc+0x28/0x1b0 [ 2934.436765] alloc_pages_current+0x155/0x260 [ 2934.439558] DMA32 free:178432kB min:36200kB low:45248kB high:54296kB active_anon:950076kB inactive_anon:72804kB active_file:4812kB inactive_file:6172kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39552kB pagetables:157616kB bounce:0kB free_pcp:436kB local_pcp:96kB free_cma:0kB [ 2934.441172] ion_page_pool_alloc+0x118/0x1b0 [ 2934.474604] ion_system_heap_allocate+0x133/0x8c0 [ 2934.479444] ? _raw_spin_unlock+0x29/0x40 [ 2934.483591] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2934.488514] ? ion_system_contig_heap_create+0x130/0x130 [ 2934.493958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2934.498970] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2934.503818] ion_alloc+0x27a/0x810 [ 2934.507359] ? ion_dma_buf_release+0x40/0x40 [ 2934.511768] ? __might_fault+0x177/0x1b0 [ 2934.515839] ion_ioctl+0xea/0x1ee [ 2934.519290] ? ion_alloc.cold+0x3b/0x3b [ 2934.523265] ? lock_acquire+0x170/0x3f0 [ 2934.527236] ? lock_downgrade+0x740/0x740 [ 2934.529538] lowmem_reserve[]: 0 [ 2934.531385] ? ion_alloc.cold+0x3b/0x3b [ 2934.531404] do_vfs_ioctl+0x75a/0xff0 [ 2934.534662] 0 [ 2934.538626] ? ioctl_preallocate+0x1a0/0x1a0 [ 2934.548580] ? lock_downgrade+0x740/0x740 [ 2934.552731] ? __fget+0x225/0x360 [ 2934.556177] ? do_vfs_ioctl+0xff0/0xff0 [ 2934.560147] ? security_file_ioctl+0x83/0xb0 [ 2934.564549] SyS_ioctl+0x7f/0xb0 [ 2934.567910] ? do_vfs_ioctl+0xff0/0xff0 [ 2934.569528] 0 0 [ 2934.571879] do_syscall_64+0x1d5/0x640 [ 2934.571895] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2934.573844] 0 [ 2934.577710] RIP: 0033:0x45e219 [ 2934.587846] RSP: 002b:00007f7783a48c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2934.595551] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2934.602817] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2934.610073] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2934.610080] Node 0 [ 2934.617324] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2934.617342] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2934.619541] R13: 00007ffe6a8f603f R14: 00007f7783a499c0 R15: 000000000119bf8c [ 2934.639674] Swap cache stats: add 0, delete 0, find 0/0 [ 2934.657183] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2934.660511] Free swap = 0kB [ 2934.674936] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2934.675014] Total swap = 0kB [ 2934.685463] 2097051 pages RAM [ 2934.689614] 0 pages HighMem/MovableOnly [ 2934.693589] 363840 pages reserved [ 2934.697045] 0 pages cma reserved [ 2934.701731] Out of memory: Kill process 30473 (syz-executor.3) score 1005 or sacrifice child [ 2934.710749] Killed process 30473 (syz-executor.3) total-vm:93348kB, anon-rss:3868kB, file-rss:34496kB, shmem-rss:0kB [ 2934.713911] bond0 (unregistering): Released all slaves [ 2934.819528] lowmem_reserve[]: 0 0 0 0 0 [ 2934.823552] Node 1 Normal free:324796kB min:53696kB low:67120kB high:80544kB active_anon:97144kB inactive_anon:0kB active_file:700kB inactive_file:108kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127276kB bounce:0kB free_pcp:320kB local_pcp:152kB free_cma:0kB [ 2935.032146] lowmem_reserve[]: 0 0 0 0 0 [ 2935.036171] Node 0 DMA: 44*4kB (UME) 111*8kB (UME) 58*16kB (UM) 29*32kB (UME) 16*64kB (UME) 3*128kB (UE) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10984kB [ 2935.139527] Node 0 DMA32: 4298*4kB (UME) 1405*8kB (MEH) 246*16kB (UMEH) 264*32kB (UMEH) 32*64kB (UH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 45040kB [ 2935.192850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2935.272941] Node 1 Normal: 54*4kB (ME) 320*8kB (UME) 119*16kB (ME) 2536*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85832kB [ 2935.359490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2935.368364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2935.439492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2935.448352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2935.474532] 21401 total pagecache pages [ 2935.478533] 0 pages in swap cache [ 2935.483342] Swap cache stats: add 0, delete 0, find 0/0 [ 2935.488701] Free swap = 0kB [ 2935.491769] Total swap = 0kB [ 2935.494777] 2097051 pages RAM [ 2935.497854] 0 pages HighMem/MovableOnly [ 2935.501869] 363840 pages reserved [ 2935.505302] 0 pages cma reserved [ 2935.598787] netns invoked oom-killer: gfp_mask=0x14002c0(GFP_KERNEL|__GFP_NOWARN), nodemask=(null), order=2, oom_score_adj=0 [ 2935.629810] netns cpuset=/ mems_allowed=0-1 [ 2935.634458] CPU: 1 PID: 21 Comm: netns Not tainted 4.14.215-syzkaller #0 [ 2935.641292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2935.650647] Workqueue: netns cleanup_net [ 2935.654699] Call Trace: [ 2935.657291] dump_stack+0x1b2/0x283 [ 2935.660916] dump_header+0x178/0x82f [ 2935.664625] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2935.669727] ? ___ratelimit+0x2cd/0x522 [ 2935.673698] oom_kill_process.cold+0x10/0xb18 [ 2935.678282] ? lock_downgrade+0x740/0x740 [ 2935.682428] out_of_memory+0x2dc/0x1190 [ 2935.686400] ? oom_killer_disable+0x1c0/0x1c0 [ 2935.690887] ? mutex_trylock+0x152/0x1a0 [ 2935.694953] __alloc_pages_nodemask+0x23e1/0x2720 [ 2935.699795] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2935.705680] ? __save_stack_trace+0x63/0x160 [ 2935.710084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2935.714930] ? unwind_next_frame+0x404/0x17d0 [ 2935.719415] ? kthread+0x30d/0x420 [ 2935.722954] ? ret_from_fork+0x24/0x30 [ 2935.726836] alloc_pages_current+0x155/0x260 [ 2935.731241] depot_save_stack+0x3ae/0x3e3 [ 2935.735387] kasan_kmalloc+0x139/0x160 [ 2935.739270] ? kasan_kmalloc+0xeb/0x160 [ 2935.743235] ? kmem_cache_alloc_node_trace+0x13d/0x400 [ 2935.748502] ? __kmalloc_node+0x38/0x70 [ 2935.752466] ? kvmalloc_node+0x46/0xd0 [ 2935.756349] ? __nf_hook_entries_try_shrink+0x16c/0x420 [ 2935.761709] ? nf_unregister_net_hooks+0x261/0x540 [ 2935.766632] ? ipt_unregister_table+0x49/0x60 [ 2935.771133] ? iptable_security_net_exit+0x4d/0x90 [ 2935.776166] ? ops_exit_list+0xa5/0x150 [ 2935.780134] ? cleanup_net+0x3b3/0x840 [ 2935.784011] ? process_one_work+0x793/0x14a0 [ 2935.788516] ? rescuer_thread+0x581/0xc80 [ 2935.792657] ? kthread+0x30d/0x420 [ 2935.796191] ? ret_from_fork+0x24/0x30 [ 2935.800071] ? trace_hardirqs_on+0x10/0x10 [ 2935.804302] ? __lock_acquire+0x5fc/0x3f20 [ 2935.808532] ? kasan_slab_free+0x12d/0x1a0 [ 2935.812757] ? kasan_slab_free+0xc3/0x1a0 [ 2935.816894] ? kfree+0xc9/0x250 [ 2935.820161] ? pde_put+0x95/0xf0 [ 2935.823520] ? lock_acquire+0x170/0x3f0 [ 2935.827492] ? fs_reclaim_release+0xd0/0x110 [ 2935.831895] ? mark_held_locks+0xa6/0xf0 [ 2935.835952] ? kmem_cache_alloc_node_trace+0x2f0/0x400 [ 2935.841224] kmem_cache_alloc_node_trace+0x13d/0x400 [ 2935.846322] __kmalloc_node+0x38/0x70 [ 2935.850116] kvmalloc_node+0x46/0xd0 [ 2935.853826] __nf_hook_entries_try_shrink+0x16c/0x420 [ 2935.859007] ? wait_for_completion_io+0x10/0x10 [ 2935.863676] nf_unregister_net_hooks+0x261/0x540 [ 2935.868428] ? nf_hook_entry_head.isra.0+0xc0/0xc0 [ 2935.873350] ? proc_readdir+0x70/0x70 [ 2935.877144] ? memcpy+0x35/0x50 [ 2935.880416] ? strlcat+0x52/0xa0 [ 2935.883788] ? xt_proto_fini+0x237/0x2c0 [ 2935.887843] ? xt_proto_init+0x810/0x810 [ 2935.891901] ipt_unregister_table+0x49/0x60 [ 2935.896216] iptable_security_net_exit+0x4d/0x90 [ 2935.900964] ? iptable_raw_table_init+0xc0/0xc0 [ 2935.905631] ops_exit_list+0xa5/0x150 [ 2935.909424] cleanup_net+0x3b3/0x840 [ 2935.913130] ? net_drop_ns+0x70/0x70 [ 2935.916833] ? lock_acquire+0x170/0x3f0 [ 2935.920804] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2935.926252] process_one_work+0x793/0x14a0 [ 2935.930485] ? work_busy+0x320/0x320 [ 2935.934188] ? rescuer_thread+0x399/0xc80 [ 2935.938334] rescuer_thread+0x581/0xc80 [ 2935.942309] ? process_one_work+0x14a0/0x14a0 [ 2935.946795] ? kthread_flush_work_fn+0x20/0x20 [ 2935.951370] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2935.956463] ? process_one_work+0x14a0/0x14a0 [ 2935.960979] kthread+0x30d/0x420 [ 2935.964339] ? kthread_create_on_node+0xd0/0xd0 [ 2935.969002] ret_from_fork+0x24/0x30 [ 2935.973936] Mem-Info: [ 2935.976356] active_anon:261305 inactive_anon:18202 isolated_anon:0 [ 2935.976356] active_file:16 inactive_file:16 isolated_file:0 [ 2935.976356] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2935.976356] slab_reclaimable:19205 slab_unreclaimable:167211 [ 2935.976356] mapped:44130 shmem:21267 pagetables:71227 bounce:0 [ 2935.976356] free:14010 free_pcp:68 free_cma:0 [ 2936.009811] Node 0 active_anon:948052kB inactive_anon:72808kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176520kB dirty:0kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 749568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2936.038021] Node 1 active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2936.064273] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.090701] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2936.095739] Node 0 DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:948008kB inactive_anon:72808kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39488kB pagetables:157552kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 2936.125874] lowmem_reserve[]: 0 0 0 0 0 [ 2936.129912] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.155610] lowmem_reserve[]: 0 0 0 0 0 [ 2936.169417] Node 1 Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127276kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2936.202063] lowmem_reserve[]: 0 0 0 0 0 [ 2936.206065] Node 0 DMA: 39*4kB (UME) 111*8kB (UME) 58*16kB (UM) 29*32kB (UME) 16*64kB (UME) 3*128kB (UE) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 2936.222236] Node 0 DMA32: 2657*4kB (UME) 712*8kB (MEH) 55*16kB (UMEH) 5*32kB (UMH) 8*64kB (UH) 2*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18132kB [ 2936.236887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2936.247671] Node 1 Normal: 970*4kB (UME) 428*8kB (UME) 120*16kB (UME) 547*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26728kB [ 2936.264871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2936.273778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2936.282449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2936.291337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2936.299988] 21299 total pagecache pages [ 2936.303957] 0 pages in swap cache [ 2936.307398] Swap cache stats: add 0, delete 0, find 0/0 [ 2936.312796] Free swap = 0kB [ 2936.315801] Total swap = 0kB [ 2936.318900] 2097051 pages RAM [ 2936.322051] 0 pages HighMem/MovableOnly [ 2936.326010] 363840 pages reserved [ 2936.329528] 0 pages cma reserved [ 2936.332885] Out of memory: Kill process 22171 (syz-executor.3) score 1005 or sacrifice child [ 2936.342069] Killed process 22171 (syz-executor.3) total-vm:93612kB, anon-rss:3884kB, file-rss:34432kB, shmem-rss:0kB [ 2936.390673] oom_reaper: reaped process 22171 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2936.439393] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2936.451780] netns invoked oom-killer: gfp_mask=0x14002c0(GFP_KERNEL|__GFP_NOWARN), nodemask=(null), order=2, oom_score_adj=0 [ 2936.456087] syz-executor.4 cpuset= [ 2936.463288] netns cpuset=/ mems_allowed=0-1 [ 2936.470618] / mems_allowed=0-1 [ 2936.471218] CPU: 0 PID: 21 Comm: netns Not tainted 4.14.215-syzkaller #0 [ 2936.479383] syz-executor.5: [ 2936.481137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2936.481151] Workqueue: netns cleanup_net [ 2936.484147] page allocation failure: order:0 [ 2936.493482] Call Trace: [ 2936.493500] dump_stack+0x1b2/0x283 [ 2936.493511] dump_header+0x178/0x82f [ 2936.493521] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2936.493529] ? ___ratelimit+0x2cd/0x522 [ 2936.493541] oom_kill_process.cold+0x10/0xb18 [ 2936.519365] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2936.520860] ? lock_downgrade+0x740/0x740 [ 2936.525324] (null) [ 2936.532418] out_of_memory+0x2dc/0x1190 [ 2936.532431] ? oom_killer_disable+0x1c0/0x1c0 [ 2936.532440] ? mutex_trylock+0x152/0x1a0 [ 2936.532451] __alloc_pages_nodemask+0x23e1/0x2720 [ 2936.549384] syz-executor.5 cpuset= [ 2936.551186] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 2936.555995] / [ 2936.559519] ? __save_stack_trace+0x63/0x160 [ 2936.571447] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2936.576271] ? unwind_next_frame+0x404/0x17d0 [ 2936.579349] mems_allowed=0-1 [ 2936.580772] ? kthread+0x30d/0x420 [ 2936.587380] ? ret_from_fork+0x24/0x30 [ 2936.591245] alloc_pages_current+0x155/0x260 [ 2936.595635] depot_save_stack+0x3ae/0x3e3 [ 2936.599774] kasan_kmalloc+0x139/0x160 [ 2936.603639] ? kasan_kmalloc+0xeb/0x160 [ 2936.607588] ? kmem_cache_alloc_node_trace+0x13d/0x400 [ 2936.612841] ? __kmalloc_node+0x38/0x70 [ 2936.616791] ? kvmalloc_node+0x46/0xd0 [ 2936.620656] ? __nf_hook_entries_try_shrink+0x16c/0x420 [ 2936.625999] ? nf_unregister_net_hooks+0x261/0x540 [ 2936.630905] ? ipt_unregister_table+0x49/0x60 [ 2936.635377] ? iptable_security_net_exit+0x4d/0x90 [ 2936.640280] ? ops_exit_list+0xa5/0x150 [ 2936.644233] ? cleanup_net+0x3b3/0x840 [ 2936.648097] ? process_one_work+0x793/0x14a0 [ 2936.652483] ? rescuer_thread+0x581/0xc80 [ 2936.656605] ? kthread+0x30d/0x420 [ 2936.660125] ? ret_from_fork+0x24/0x30 [ 2936.663989] ? trace_hardirqs_on+0x10/0x10 [ 2936.668205] ? __lock_acquire+0x5fc/0x3f20 [ 2936.672417] ? kasan_slab_free+0x12d/0x1a0 [ 2936.676627] ? kasan_slab_free+0xc3/0x1a0 [ 2936.680750] ? kfree+0xc9/0x250 [ 2936.684004] ? pde_put+0x95/0xf0 [ 2936.687349] ? lock_acquire+0x170/0x3f0 [ 2936.691300] ? fs_reclaim_release+0xd0/0x110 [ 2936.695777] ? mark_held_locks+0xa6/0xf0 [ 2936.699815] ? kmem_cache_alloc_node_trace+0x2f0/0x400 [ 2936.705069] kmem_cache_alloc_node_trace+0x13d/0x400 [ 2936.710150] __kmalloc_node+0x38/0x70 [ 2936.713925] kvmalloc_node+0x46/0xd0 [ 2936.717619] __nf_hook_entries_try_shrink+0x16c/0x420 [ 2936.722795] ? wait_for_completion_io+0x10/0x10 [ 2936.727441] nf_unregister_net_hooks+0x261/0x540 [ 2936.732183] ? nf_hook_entry_head.isra.0+0xc0/0xc0 [ 2936.737085] ? proc_readdir+0x70/0x70 [ 2936.740863] ? memcpy+0x35/0x50 [ 2936.744118] ? strlcat+0x52/0xa0 [ 2936.747461] ? xt_proto_fini+0x237/0x2c0 [ 2936.751498] ? xt_proto_init+0x810/0x810 [ 2936.755538] ipt_unregister_table+0x49/0x60 [ 2936.759836] iptable_security_net_exit+0x4d/0x90 [ 2936.764580] ? iptable_raw_table_init+0xc0/0xc0 [ 2936.769227] ops_exit_list+0xa5/0x150 [ 2936.773004] cleanup_net+0x3b3/0x840 [ 2936.776693] ? net_drop_ns+0x70/0x70 [ 2936.780380] ? lock_acquire+0x170/0x3f0 [ 2936.784332] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2936.789759] process_one_work+0x793/0x14a0 [ 2936.793972] ? work_busy+0x320/0x320 [ 2936.797658] ? rescuer_thread+0x399/0xc80 [ 2936.801799] rescuer_thread+0x581/0xc80 [ 2936.805758] ? process_one_work+0x14a0/0x14a0 [ 2936.810230] ? kthread_flush_work_fn+0x20/0x20 [ 2936.814796] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2936.819900] ? process_one_work+0x14a0/0x14a0 [ 2936.824370] kthread+0x30d/0x420 [ 2936.827713] ? kthread_create_on_node+0xd0/0xd0 [ 2936.832357] ret_from_fork+0x24/0x30 [ 2936.836056] CPU: 1 PID: 656 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2936.839341] Mem-Info: [ 2936.843763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2936.846160] active_anon:260788 inactive_anon:18202 isolated_anon:0 [ 2936.846160] active_file:6 inactive_file:26 isolated_file:0 [ 2936.846160] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2936.846160] slab_reclaimable:19196 slab_unreclaimable:167203 [ 2936.846160] mapped:44130 shmem:21267 pagetables:71227 bounce:0 [ 2936.846160] free:13848 free_pcp:142 free_cma:0 [ 2936.855477] Call Trace: [ 2936.855494] dump_stack+0x1b2/0x283 [ 2936.855507] warn_alloc.cold+0x96/0x1cc [ 2936.855515] ? zone_watermark_ok_safe+0x220/0x220 [ 2936.855524] ? usleep_range+0x130/0x130 [ 2936.855543] ? try_to_free_pages+0x23f/0x6e0 [ 2936.899458] Node 0 active_anon:945984kB inactive_anon:72808kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176520kB dirty:0kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 749568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2936.903864] ? _find_next_bit+0xdb/0x100 [ 2936.907818] Node 1 active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2936.912198] ? run_timer_softirq+0x5a0/0x5a0 [ 2936.912215] __alloc_pages_nodemask+0x2127/0x2720 [ 2936.912231] ? lock_acquire+0x170/0x3f0 [ 2936.912244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2936.912255] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2936.939957] Node 0 [ 2936.943951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2936.989357] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2936.992588] ? policy_node+0x7e/0x110 [ 2936.994787] lowmem_reserve[]: [ 2937.000217] alloc_pages_current+0x155/0x260 [ 2937.000230] ion_page_pool_alloc+0x118/0x1b0 [ 2937.000239] ion_system_heap_allocate+0x133/0x8c0 [ 2937.000253] ? _raw_spin_unlock+0x29/0x40 [ 2937.029346] 0 [ 2937.029764] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2937.032836] 2717 [ 2937.037223] ? ion_system_contig_heap_create+0x130/0x130 [ 2937.041681] 2718 [ 2937.046422] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2937.050564] 2718 [ 2937.052334] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2937.057249] 2718 [ 2937.059316] ion_alloc+0x27a/0x810 [ 2937.059331] ? ion_dma_buf_release+0x40/0x40 [ 2937.059345] ? __might_fault+0x177/0x1b0 [ 2937.059357] ion_ioctl+0xea/0x1ee [ 2937.059365] ? ion_alloc.cold+0x3b/0x3b [ 2937.059375] ? lock_acquire+0x170/0x3f0 [ 2937.071836] ? lock_downgrade+0x740/0x740 [ 2937.071844] ? ion_alloc.cold+0x3b/0x3b [ 2937.071854] do_vfs_ioctl+0x75a/0xff0 [ 2937.071865] ? ioctl_preallocate+0x1a0/0x1a0 [ 2937.071872] ? lock_downgrade+0x740/0x740 [ 2937.071888] ? __fget+0x225/0x360 [ 2937.073926] Node 0 [ 2937.078745] ? do_vfs_ioctl+0xff0/0xff0 [ 2937.080826] DMA32 free:17700kB min:36200kB low:45248kB high:54296kB active_anon:945940kB inactive_anon:72808kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39488kB pagetables:157552kB bounce:0kB free_pcp:448kB local_pcp:152kB free_cma:0kB [ 2937.084301] ? security_file_ioctl+0x83/0xb0 [ 2937.088676] lowmem_reserve[]: [ 2937.092714] SyS_ioctl+0x7f/0xb0 [ 2937.092740] ? do_vfs_ioctl+0xff0/0xff0 [ 2937.092751] do_syscall_64+0x1d5/0x640 [ 2937.092766] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2937.092775] RIP: 0033:0x45e219 [ 2937.096199] 0 [ 2937.100143] RSP: 002b:00007f7783a48c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2937.100153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2937.100158] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2937.100163] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.100169] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2937.100174] R13: 00007ffe6a8f603f R14: 00007f7783a499c0 R15: 000000000119bf8c [ 2937.100403] syz-executor.5: [ 2937.104140] 0 [ 2937.108259] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2937.112251] 0 [ 2937.117094] CPU: 1 PID: 692 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2937.120440] 0 [ 2937.124521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2937.127961] 0 [ 2937.130170] Call Trace: [ 2937.130185] dump_stack+0x1b2/0x283 [ 2937.130198] warn_alloc.cold+0x96/0x1cc [ 2937.130207] ? zone_watermark_ok_safe+0x220/0x220 [ 2937.130218] ? usleep_range+0x130/0x130 [ 2937.162705] ? try_to_free_pages+0x23f/0x6e0 [ 2937.162716] ? _find_next_bit+0xdb/0x100 [ 2937.162726] ? run_timer_softirq+0x5a0/0x5a0 [ 2937.162739] __alloc_pages_nodemask+0x2127/0x2720 [ 2937.162753] ? lock_acquire+0x170/0x3f0 [ 2937.162767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2937.162778] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2937.167194] Node 0 [ 2937.170259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2937.170279] alloc_pages_current+0x155/0x260 [ 2937.173623] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2937.177569] ion_page_pool_alloc+0x118/0x1b0 [ 2937.181471] lowmem_reserve[]: [ 2937.186607] ion_system_heap_allocate+0x133/0x8c0 [ 2937.189804] 0 [ 2937.191576] ? _raw_spin_unlock+0x29/0x40 [ 2937.199248] 0 [ 2937.206497] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2937.206516] ? ion_system_contig_heap_create+0x130/0x130 [ 2937.206524] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2937.206535] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2937.206547] ion_alloc+0x27a/0x810 [ 2937.206565] ? ion_dma_buf_release+0x40/0x40 [ 2937.213830] 0 [ 2937.221061] ? __might_fault+0x177/0x1b0 [ 2937.221074] ion_ioctl+0xea/0x1ee [ 2937.221082] ? ion_alloc.cold+0x3b/0x3b [ 2937.221092] ? lock_acquire+0x170/0x3f0 [ 2937.221102] ? lock_downgrade+0x740/0x740 [ 2937.228345] 0 [ 2937.235594] ? ion_alloc.cold+0x3b/0x3b [ 2937.235605] do_vfs_ioctl+0x75a/0xff0 [ 2937.235617] ? ioctl_preallocate+0x1a0/0x1a0 [ 2937.235623] ? lock_downgrade+0x740/0x740 [ 2937.235636] ? __fget+0x225/0x360 [ 2937.238628] 0 [ 2937.240438] ? do_vfs_ioctl+0xff0/0xff0 [ 2937.240448] ? security_file_ioctl+0x83/0xb0 [ 2937.240458] SyS_ioctl+0x7f/0xb0 [ 2937.240468] ? do_vfs_ioctl+0xff0/0xff0 [ 2937.252100] do_syscall_64+0x1d5/0x640 [ 2937.262285] Node 1 [ 2937.270918] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2937.270926] RIP: 0033:0x45e219 [ 2937.270931] RSP: 002b:00007fbaae81dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2937.270940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2937.270946] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2937.272735] Normal free:26728kB min:53696kB low:67120kB high:80544kB active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127276kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2937.275287] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 2937.278885] lowmem_reserve[]: [ 2937.282834] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 2937.282840] R13: 00007fffdc1f695f R14: 00007fbaae81e9c0 R15: 000000000119c0dc [ 2937.329638] (null) [ 2937.330419] 0 [ 2937.334764] syz-executor.5 cpuset= [ 2937.359695] 0 [ 2937.484518] / [ 2937.490851] 0 0 0 [ 2937.571985] Node 0 DMA: 39*4kB (UME) 111*8kB (UME) 58*16kB (UM) 29*32kB (UME) 16*64kB (UME) 3*128kB (UE) 2*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 2937.588111] Node 0 DMA32: 2609*4kB (UME) 718*8kB (UMEH) 54*16kB (UMEH) 5*32kB (UH) 7*64kB (H) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17780kB [ 2937.601140] mems_allowed=0-1 [ 2937.602559] Node 0 Normal: [ 2937.605601] CPU: 1 PID: 662 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2937.605608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2937.608514] 0*4kB [ 2937.616190] Call Trace: [ 2937.616209] dump_stack+0x1b2/0x283 [ 2937.616223] warn_alloc.cold+0x96/0x1cc [ 2937.616233] ? zone_watermark_ok_safe+0x220/0x220 [ 2937.625633] 0*8kB [ 2937.627695] ? usleep_range+0x130/0x130 [ 2937.630269] 0*16kB [ 2937.633858] ? try_to_free_pages+0x23f/0x6e0 [ 2937.637799] 0*32kB [ 2937.642623] ? _find_next_bit+0xdb/0x100 [ 2937.642634] ? run_timer_softirq+0x5a0/0x5a0 [ 2937.642649] __alloc_pages_nodemask+0x2127/0x2720 [ 2937.642665] ? lock_acquire+0x170/0x3f0 [ 2937.644781] 0*64kB [ 2937.648737] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2937.650966] 0*128kB [ 2937.655330] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2937.657545] 0*256kB [ 2937.661590] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2937.661604] ? retint_kernel+0x2d/0x2d [ 2937.661617] alloc_pages_current+0x155/0x260 [ 2937.661628] ion_page_pool_alloc+0x118/0x1b0 [ 2937.666005] 0*512kB [ 2937.670838] ion_system_heap_allocate+0x133/0x8c0 [ 2937.670849] ? _raw_spin_unlock+0x29/0x40 [ 2937.670856] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2937.670864] ? ion_system_contig_heap_create+0x130/0x130 [ 2937.670874] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2937.674816] 0*1024kB [ 2937.677054] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2937.681903] 0*2048kB [ 2937.684182] ion_alloc+0x27a/0x810 [ 2937.688729] 0*4096kB [ 2937.691037] ? ion_dma_buf_release+0x40/0x40 [ 2937.691050] ? __might_fault+0x177/0x1b0 [ 2937.691061] ion_ioctl+0xea/0x1ee [ 2937.691069] ? ion_alloc.cold+0x3b/0x3b [ 2937.696492] = 0kB [ 2937.700371] ? lock_acquire+0x170/0x3f0 [ 2937.700380] ? lock_downgrade+0x740/0x740 [ 2937.700386] ? ion_alloc.cold+0x3b/0x3b [ 2937.700395] do_vfs_ioctl+0x75a/0xff0 [ 2937.700405] ? ioctl_preallocate+0x1a0/0x1a0 [ 2937.700412] ? lock_downgrade+0x740/0x740 [ 2937.700424] ? __fget+0x225/0x360 [ 2937.700432] ? do_vfs_ioctl+0xff0/0xff0 [ 2937.700442] ? security_file_ioctl+0x83/0xb0 [ 2937.700452] SyS_ioctl+0x7f/0xb0 [ 2937.700460] ? do_vfs_ioctl+0xff0/0xff0 [ 2937.700470] do_syscall_64+0x1d5/0x640 [ 2937.700491] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2937.700499] RIP: 0033:0x45e219 [ 2937.700504] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2937.700515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2937.700520] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2937.700524] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.700529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2937.700534] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2937.870949] Node 1 Normal: 970*4kB (UME) 431*8kB (UME) 122*16kB (UME) 547*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26784kB [ 2937.884898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2937.893785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2937.902414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2937.911301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2937.919911] 21299 total pagecache pages [ 2937.923883] 0 pages in swap cache [ 2937.927324] Swap cache stats: add 0, delete 0, find 0/0 [ 2937.932713] Free swap = 0kB [ 2937.935718] Total swap = 0kB [ 2937.938726] 2097051 pages RAM [ 2937.942026] 0 pages HighMem/MovableOnly [ 2937.945992] 363840 pages reserved [ 2937.949468] 0 pages cma reserved [ 2937.952823] Out of memory: Kill process 22096 (syz-executor.3) score 1005 or sacrifice child [ 2937.961882] Killed process 22096 (syz-executor.3) total-vm:93348kB, anon-rss:3868kB, file-rss:34432kB, shmem-rss:0kB [ 2937.993504] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2938.006560] systemd-journal cpuset=/ mems_allowed=0-1 [ 2938.011787] CPU: 1 PID: 32485 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2938.019739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2938.029693] Call Trace: [ 2938.032280] dump_stack+0x1b2/0x283 [ 2938.035904] dump_header+0x178/0x82f [ 2938.039608] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2938.044701] ? ___ratelimit+0x2cd/0x522 [ 2938.048672] oom_kill_process.cold+0x10/0xb18 [ 2938.053166] out_of_memory+0xe3e/0x1190 [ 2938.057135] ? oom_killer_disable+0x1c0/0x1c0 [ 2938.061622] ? mutex_trylock+0x152/0x1a0 [ 2938.065677] __alloc_pages_nodemask+0x23e1/0x2720 [ 2938.070526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2938.075377] alloc_pages_current+0x155/0x260 [ 2938.079778] filemap_fault+0xea3/0x1980 [ 2938.083754] ext4_filemap_fault+0x84/0xb0 [ 2938.087895] __do_fault+0xfa/0x380 [ 2938.091426] __handle_mm_fault+0x2497/0x4620 [ 2938.095825] ? ep_poll+0x1ab/0xa50 [ 2938.099347] ? vm_insert_page+0x7c0/0x7c0 [ 2938.103497] handle_mm_fault+0x391/0x860 [ 2938.107556] __do_page_fault+0x549/0xad0 [ 2938.111613] ? spurious_fault+0x640/0x640 [ 2938.115760] ? do_page_fault+0x60/0x4f2 [ 2938.119731] ? page_fault+0x2f/0x50 [ 2938.123354] page_fault+0x45/0x50 [ 2938.126802] RIP: 0001:0x1 [ 2938.129546] RSP: d32791e0:00007ffc36981b30 EFLAGS: 7ffc36981940 [ 2938.130814] warn_alloc_show_mem: 3 callbacks suppressed [ 2938.130817] Mem-Info: [ 2938.169671] active_anon:260782 inactive_anon:18202 isolated_anon:0 [ 2938.169671] active_file:16 inactive_file:16 isolated_file:0 [ 2938.169671] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2938.169671] slab_reclaimable:19192 slab_unreclaimable:167101 [ 2938.169671] mapped:44130 shmem:21267 pagetables:71199 bounce:0 [ 2938.169671] free:36356 free_pcp:152 free_cma:0 [ 2938.377666] Node 0 active_anon:945960kB inactive_anon:72808kB active_file:828kB inactive_file:1904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178320kB dirty:100kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 747520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2938.439231] Mem-Info: [ 2938.441671] active_anon:260782 inactive_anon:18202 isolated_anon:0 [ 2938.441671] active_file:291 inactive_file:352 isolated_file:0 [ 2938.441671] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2938.441671] slab_reclaimable:19192 slab_unreclaimable:167101 [ 2938.441671] mapped:44580 shmem:21267 pagetables:71199 bounce:0 [ 2938.441671] free:131472 free_pcp:674 free_cma:0 [ 2938.472003] Node 1 active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2938.509239] Node 0 active_anon:945960kB inactive_anon:72808kB active_file:1128kB inactive_file:1476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178320kB dirty:100kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 747520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2938.546870] Node 1 active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2938.572024] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2938.573344] Node 0 [ 2938.602589] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2938.609915] Node 0 DMA32 free:223964kB min:36200kB low:45248kB high:54296kB active_anon:945916kB inactive_anon:72808kB active_file:1228kB inactive_file:1476kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39392kB pagetables:157440kB bounce:0kB free_pcp:1288kB local_pcp:576kB free_cma:0kB [ 2938.629188] DMA free:11412kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2938.665975] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2938.671180] lowmem_reserve[]: 0 0 0 0 0 [ 2938.671669] Node 0 [ 2938.675175] Node 0 [ 2938.675193] DMA32 free:257372kB min:36200kB low:45248kB high:54296kB active_anon:945916kB inactive_anon:72808kB active_file:1228kB inactive_file:1476kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39392kB pagetables:157440kB bounce:0kB free_pcp:1284kB local_pcp:708kB free_cma:0kB [ 2938.677404] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2938.679655] lowmem_reserve[]: 0 0 0 0 0 [ 2938.679674] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2938.679689] lowmem_reserve[]: 0 0 [ 2938.759187] lowmem_reserve[]: [ 2938.763818] 0 [ 2938.766991] 0 [ 2938.770114] 0 0 [ 2938.770125] Node 1 Normal free:927000kB min:53696kB low:67120kB high:80544kB active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127276kB bounce:0kB free_pcp:1348kB local_pcp:704kB free_cma:0kB [ 2938.770144] lowmem_reserve[]: 0 [ 2938.774764] 0 [ 2938.789161] 0 [ 2938.807623] 0 0 0 [ 2938.813831] Node 1 Normal free:992408kB min:53696kB low:67120kB high:80544kB active_anon:97168kB inactive_anon:0kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127276kB bounce:0kB free_pcp:1348kB local_pcp:644kB free_cma:0kB [ 2938.819197] 0 [ 2938.846315] lowmem_reserve[]: 0 0 0 0 0 [ 2938.852355] Node 0 DMA: 39*4kB (UME) 111*8kB (UME) 58*16kB (UM) 29*32kB (UME) 19*64kB (UME) 4*128kB (UE) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 12052kB [ 2938.869163] 0 0 [ 2938.871145] Node 0 DMA: 39*4kB (UME) 111*8kB (UME) 58*16kB (UM) 29*32kB (UME) 19*64kB (UME) 4*128kB (UE) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 12052kB [ 2938.871878] Node 0 DMA32: 2177*4kB (UME) 1287*8kB (UMEH) 3178*16kB (UMEH) 1130*32kB (UMEH) 1726*64kB (UMEH) 287*128kB (UMH) 37*256kB (UH) 1*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 267292kB [ 2938.899171] Node 0 DMA32: 2193*4kB (UME) 1300*8kB (UMEH) 3179*16kB (UMEH) 1225*32kB (UMEH) 1726*64kB (UMEH) 287*128kB (UMH) 37*256kB (UH) 1*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 270516kB [ 2938.907979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2938.936667] Node 1 Normal: 5172*4kB (UME) 4409*8kB (UME) 2795*16kB (UME) 1434*32kB (UME) 3233*64kB (UM) 840*128kB (U) 340*256kB (U) 213*512kB (U) 286*1024kB (U) 69*2048kB (U) 2*4096kB (U) = 1099464kB [ 2938.957974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2938.968917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2938.981067] Node 1 Normal: 10583*4kB (UME) 8589*8kB (UME) 2802*16kB (UME) 1449*32kB (UME) 3233*64kB (UM) 840*128kB (U) 340*256kB (U) 213*512kB (U) 286*1024kB (U) 69*2048kB (U) 2*4096kB (U) = 1155140kB [ 2939.002231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2939.010865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2939.022800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2939.031686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2939.043368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2939.051991] 21978 total pagecache pages [ 2939.055960] 0 pages in swap cache [ 2939.059579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2939.059584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2939.059588] 21978 total pagecache pages [ 2939.059595] 0 pages in swap cache [ 2939.059598] Swap cache stats: add 0, delete 0, find 0/0 [ 2939.059602] Free swap = 0kB [ 2939.059604] Total swap = 0kB [ 2939.059610] 2097051 pages RAM [ 2939.059612] 0 pages HighMem/MovableOnly [ 2939.059614] 363840 pages reserved [ 2939.059616] 0 pages cma reserved [ 2939.059623] Out of memory (oom_kill_allocating_task): Kill process 32485 (systemd-journal) score 0 or sacrifice child [ 2939.059649] Killed process 32485 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2436kB [ 2939.136341] Swap cache stats: add 0, delete 0, find 0/0 [ 2939.136817] oom_reaper: reaped process 22096 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2939.142673] Free swap = 0kB [ 2939.157646] Total swap = 0kB [ 2939.160749] 2097051 pages RAM [ 2939.163840] 0 pages HighMem/MovableOnly [ 2939.167799] 363840 pages reserved [ 2939.169853] oom_reaper: reaped process 32485 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2440kB [ 2939.181867] 0 pages cma reserved [ 2939.266183] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2939.283490] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2939.312219] systemd[1]: Stopped Journal Service. [ 2939.330552] systemd[1]: Starting Journal Service... [ 2939.498328] systemd-journald[705]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 14:14:33 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 14:14:33 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x5, 0x3, 0x4d}, 0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000000)) sendmsg$nl_route(r2, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000140)={r5, 0x0, r6, 0x8000}) write$P9_RWALK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="16fdc38cc9c74ec5e100006fc7463956080100000003"], 0x16) 14:14:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x448000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0xfd, 0x14, &(0x7f0000000140)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)={0x0, 0x6, 0x4b5, &(0x7f0000000040)=0x10000}) [ 2940.037180] systemd[1]: Started Journal Service. 14:14:33 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:14:33 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) 14:14:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xeec, &(0x7f0000000140)=0x8}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none, 0xff}, 0xa) sendto(0xffffffffffffffff, &(0x7f0000000080)="6ac4530116cbf0f3569e800b5fe7ae0447d9a314626eb55e1775fd239869ed0aa992", 0x22, 0x40000, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xe8, 0x5}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000001c0)={0x300, 0x1e40, 0xa00, 0x140, 0x2dd1, 0x1, 0x18, 0x1, {0x0, 0x2e3b, 0x1}, {0x3, 0x1}, {0xab85, 0x2}, {0x8, 0x8}, 0x0, 0x1, 0x2, 0x69, 0x0, 0x140, 0x8, 0x7fff, 0x6, 0x4, 0x7, 0x7, 0x14, 0x200, 0x3, 0x1}) 14:14:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x92}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa5b}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x811) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="68ff7f00", @ANYRES16=r5, @ANYBLOB="000627bd7000fedbdf2507000000050012000000000008001800ac1e00011400200020010000000000000000000000000000050013000800000006000e00000000000600020001000000080009000200000006001a004e21000008000b0001000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000090) 14:14:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@isdn={0x22, 0x0, 0x8, 0x1}, 0x80, 0x0}, 0x50) 14:14:34 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0xcd, 0x0, 0x19c, 0x0, @mcast1, @mcast1, 0x7800, 0x7800, 0x0, 0x7102}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3, 0x38, 0x11, @empty, @empty, 0x10, 0x7, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0xff, 0x8dd, 0xc, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x8000, 0x8, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x570, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x86d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x286, 0x6, 0x5, 0x7f}, {0x100, 0x0, 0x3, 0x8}, {0x8, 0x20, 0x9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xbd7b}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0xd3, 0xff}, {0x1ff, 0x5, 0x40, 0x8}, {0x81, 0xad, 0x9, 0x7a7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x570}}, 0x44800) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008085}, 0x84) 14:14:34 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f0000000000)=@can, 0x80, 0x0}, 0x0) 14:14:34 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x301081, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x5109046d, 0x6}) 14:14:34 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='\x00') r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000004c0)=@hci={0x1f, 0x0, 0x1}, 0x80, 0x0}, 0x0) [ 2941.030360] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2941.043369] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2941.059482] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2941.064696] CPU: 1 PID: 727 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2941.072394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2941.081740] Call Trace: [ 2941.084328] dump_stack+0x1b2/0x283 [ 2941.087955] warn_alloc.cold+0x96/0x1cc [ 2941.089029] syz-executor.4 cpuset=/ [ 2941.091920] ? zone_watermark_ok_safe+0x220/0x220 [ 2941.091940] __alloc_pages_nodemask+0x2127/0x2720 [ 2941.102109] mems_allowed=0-1 [ 2941.105191] ? __schedule+0x893/0x1de0 [ 2941.112147] ? lock_acquire+0x170/0x3f0 [ 2941.116121] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2941.120977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2941.126423] ? __mutex_unlock_slowpath+0x75/0x770 [ 2941.131260] alloc_pages_current+0x155/0x260 [ 2941.135648] ion_page_pool_alloc+0x118/0x1b0 [ 2941.140051] ion_system_heap_allocate+0x133/0x8c0 [ 2941.144887] ? ion_alloc+0x187/0x810 [ 2941.148594] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2941.154039] ? ion_system_contig_heap_create+0x130/0x130 [ 2941.159483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2941.164486] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2941.169587] ion_alloc+0x204/0x810 [ 2941.173127] ? ion_dma_buf_release+0x40/0x40 [ 2941.177528] ? __might_fault+0x177/0x1b0 [ 2941.181581] ion_ioctl+0xea/0x1ee [ 2941.185025] ? ion_alloc.cold+0x3b/0x3b [ 2941.188994] ? lock_acquire+0x170/0x3f0 [ 2941.192951] ? lock_downgrade+0x740/0x740 [ 2941.197072] ? ion_alloc.cold+0x3b/0x3b [ 2941.201029] do_vfs_ioctl+0x75a/0xff0 [ 2941.204825] ? ioctl_preallocate+0x1a0/0x1a0 [ 2941.209222] ? lock_downgrade+0x740/0x740 [ 2941.213362] ? __fget+0x225/0x360 [ 2941.216804] ? do_vfs_ioctl+0xff0/0xff0 [ 2941.220773] ? security_file_ioctl+0x83/0xb0 [ 2941.225191] SyS_ioctl+0x7f/0xb0 [ 2941.228535] ? do_vfs_ioctl+0xff0/0xff0 [ 2941.232501] do_syscall_64+0x1d5/0x640 [ 2941.236387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2941.241566] RIP: 0033:0x45e219 [ 2941.244747] RSP: 002b:00007f7783a48c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2941.252445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2941.259698] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2941.266958] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2941.274219] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2941.281475] R13: 00007ffe6a8f603f R14: 00007f7783a499c0 R15: 000000000119bf8c [ 2941.308974] CPU: 0 PID: 734 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2941.316714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2941.326060] Call Trace: [ 2941.328650] dump_stack+0x1b2/0x283 [ 2941.332274] warn_alloc.cold+0x96/0x1cc [ 2941.336242] ? zone_watermark_ok_safe+0x220/0x220 [ 2941.341092] __alloc_pages_nodemask+0x2127/0x2720 [ 2941.345940] ? lock_acquire+0x170/0x3f0 [ 2941.349915] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2941.354755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2941.360199] ? __mutex_unlock_slowpath+0x75/0x770 [ 2941.365038] alloc_pages_current+0x155/0x260 [ 2941.369439] ion_page_pool_alloc+0x118/0x1b0 [ 2941.372179] warn_alloc_show_mem: 2 callbacks suppressed [ 2941.372182] Mem-Info: [ 2941.373837] ion_system_heap_allocate+0x133/0x8c0 [ 2941.373848] ? ion_alloc+0x187/0x810 [ 2941.373861] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2941.379266] active_anon:260374 inactive_anon:20224 isolated_anon:16 [ 2941.379266] active_file:2082 inactive_file:2100 isolated_file:38 [ 2941.379266] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2941.379266] slab_reclaimable:18832 slab_unreclaimable:167847 [ 2941.379266] mapped:46932 shmem:23314 pagetables:71150 bounce:0 [ 2941.379266] free:40255 free_pcp:146 free_cma:0 [ 2941.381586] ? ion_system_contig_heap_create+0x130/0x130 [ 2941.381594] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2941.381609] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2941.381624] ion_alloc+0x204/0x810 [ 2941.387029] Node 0 active_anon:944756kB inactive_anon:72704kB active_file:5888kB inactive_file:5980kB unevictable:0kB isolated(anon):64kB isolated(file):24kB mapped:182616kB dirty:0kB writeback:0kB shmem:85064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 747520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2941.390684] ? ion_dma_buf_release+0x40/0x40 [ 2941.390700] ? __might_fault+0x177/0x1b0 [ 2941.390710] ion_ioctl+0xea/0x1ee [ 2941.390718] ? ion_alloc.cold+0x3b/0x3b [ 2941.390728] ? lock_acquire+0x170/0x3f0 [ 2941.390736] ? lock_downgrade+0x740/0x740 [ 2941.390745] ? ion_alloc.cold+0x3b/0x3b [ 2941.405250] Node 1 active_anon:96740kB inactive_anon:8192kB active_file:2440kB inactive_file:2420kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:5112kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2941.430180] do_vfs_ioctl+0x75a/0xff0 [ 2941.430193] ? ioctl_preallocate+0x1a0/0x1a0 [ 2941.430202] ? lock_downgrade+0x740/0x740 [ 2941.430216] ? __fget+0x225/0x360 [ 2941.435694] Node 0 [ 2941.440643] ? do_vfs_ioctl+0xff0/0xff0 [ 2941.440655] ? security_file_ioctl+0x83/0xb0 [ 2941.440666] SyS_ioctl+0x7f/0xb0 [ 2941.440674] ? do_vfs_ioctl+0xff0/0xff0 [ 2941.440684] do_syscall_64+0x1d5/0x640 [ 2941.440700] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2941.448732] DMA free:11104kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2941.449027] RIP: 0033:0x45e219 [ 2941.449032] RSP: 002b:00007f7783a27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2941.449041] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2941.449046] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2941.449051] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2941.449059] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2941.479404] lowmem_reserve[]: [ 2941.481719] R13: 00007ffe6a8f603f R14: 00007f7783a289c0 R15: 000000000119c034 [ 2941.662156] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2941.683585] 0 2717 2718 2718 2718 [ 2941.687457] Node 0 DMA32 free:58776kB min:36200kB low:45248kB high:54296kB active_anon:944712kB inactive_anon:72704kB active_file:5788kB inactive_file:5768kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39424kB pagetables:157240kB bounce:0kB free_pcp:132kB local_pcp:120kB free_cma:0kB [ 2941.690983] syz-executor.5 cpuset= [ 2941.717369] lowmem_reserve[]: 0 0 0 0 0 [ 2941.733179] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2941.759827] lowmem_reserve[]: 0 0 0 0 0 [ 2941.761753] / mems_allowed=0-1 [ 2941.763901] Node 1 [ 2941.767054] CPU: 0 PID: 735 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2941.767061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2941.771858] Normal free:54364kB min:53696kB low:67120kB high:80544kB active_anon:96740kB inactive_anon:8192kB active_file:2440kB inactive_file:2548kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2941.776955] Call Trace: [ 2941.776971] dump_stack+0x1b2/0x283 [ 2941.776988] warn_alloc.cold+0x96/0x1cc [ 2941.787530] lowmem_reserve[]: [ 2941.814847] ? zone_watermark_ok_safe+0x220/0x220 [ 2941.814869] __alloc_pages_nodemask+0x2127/0x2720 [ 2941.814883] ? lock_acquire+0x170/0x3f0 [ 2941.814896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2941.818909] 0 [ 2941.821074] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2941.821087] ? __mutex_unlock_slowpath+0x75/0x770 [ 2941.825068] 0 [ 2941.828123] ? ion_page_pool_remove+0x111/0x280 [ 2941.828136] alloc_pages_current+0x155/0x260 [ 2941.828147] ion_page_pool_alloc+0x118/0x1b0 [ 2941.834914] 0 [ 2941.837786] ion_system_heap_allocate+0x133/0x8c0 [ 2941.837798] ? ion_alloc+0x187/0x810 [ 2941.837810] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2941.842918] 0 [ 2941.846585] ? ion_system_contig_heap_create+0x130/0x130 [ 2941.846593] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2941.846606] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2941.848408] 0 [ 2941.853811] ion_alloc+0x204/0x810 [ 2941.853826] ? ion_dma_buf_release+0x40/0x40 [ 2941.853842] ? __might_fault+0x177/0x1b0 [ 2941.853853] ion_ioctl+0xea/0x1ee [ 2941.860454] ? ion_alloc.cold+0x3b/0x3b [ 2941.866602] Node 0 [ 2941.869492] ? lock_acquire+0x170/0x3f0 [ 2941.869501] ? lock_downgrade+0x740/0x740 [ 2941.869508] ? ion_alloc.cold+0x3b/0x3b [ 2941.869518] do_vfs_ioctl+0x75a/0xff0 [ 2941.869529] ? ioctl_preallocate+0x1a0/0x1a0 [ 2941.873944] DMA: [ 2941.875688] ? lock_downgrade+0x740/0x740 [ 2941.875703] ? __fget+0x225/0x360 [ 2941.875713] ? do_vfs_ioctl+0xff0/0xff0 [ 2941.884151] 6*4kB [ 2941.884228] ? security_file_ioctl+0x83/0xb0 [ 2941.890269] (ME) [ 2941.891434] SyS_ioctl+0x7f/0xb0 [ 2941.891443] ? do_vfs_ioctl+0xff0/0xff0 [ 2941.891455] do_syscall_64+0x1d5/0x640 [ 2941.896913] 9*8kB [ 2941.901879] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2941.901887] RIP: 0033:0x45e219 [ 2941.901892] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2941.901901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2941.901906] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2941.901913] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2941.909593] (UME) [ 2941.912033] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2941.912039] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2942.041881] 58*16kB (UM) 29*32kB (UME) 19*64kB (UME) 4*128kB (UE) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11104kB [ 2942.054651] Node 0 DMA32: 1898*4kB (ME) 492*8kB (UMEH) 270*16kB (UMEH) 573*32kB (UMEH) 8*64kB (H) 7*128kB (UH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35848kB [ 2942.069969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2942.080874] Node 1 Normal: 430*4kB (UME) 153*8kB (ME) 93*16kB (ME) 43*32kB (UME) 16*64kB (UM) 13*128kB (M) 7*256kB (UM) 80*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 54320kB [ 2942.097288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2942.107281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2942.116320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2942.125616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2942.134803] 26208 total pagecache pages [ 2942.138817] 0 pages in swap cache [ 2942.142951] Swap cache stats: add 0, delete 0, find 0/0 [ 2942.148351] Free swap = 0kB [ 2942.152044] Total swap = 0kB [ 2942.155113] 2097051 pages RAM [ 2942.158240] 0 pages HighMem/MovableOnly [ 2942.163116] 363840 pages reserved [ 2942.166609] 0 pages cma reserved [ 2945.934058] oom_reaper: reaped process 735 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2946.145003] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2946.245984] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 2946.289220] CPU: 0 PID: 26628 Comm: kworker/u4:2 Not tainted 4.14.215-syzkaller #0 [ 2946.296943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2946.306304] Workqueue: events_unbound call_usermodehelper_exec_work [ 2946.312701] Call Trace: [ 2946.315379] dump_stack+0x1b2/0x283 [ 2946.319006] dump_header+0x178/0x82f [ 2946.322717] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2946.327817] ? ___ratelimit+0x2cd/0x522 [ 2946.331787] oom_kill_process.cold+0x10/0xb18 [ 2946.336284] ? lock_downgrade+0x740/0x740 [ 2946.340433] out_of_memory+0x2dc/0x1190 [ 2946.344406] ? oom_killer_disable+0x1c0/0x1c0 [ 2946.348896] ? mutex_trylock+0x152/0x1a0 [ 2946.352956] __alloc_pages_nodemask+0x23e1/0x2720 [ 2946.357800] ? deref_stack_reg+0x124/0x1a0 [ 2946.362049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2946.366897] ? kmem_cache_alloc_node+0x38b/0x410 [ 2946.371649] copy_process.part.0+0x265/0x71c0 [ 2946.376140] ? __lock_acquire+0x5fc/0x3f20 [ 2946.380369] ? cpuacct_charge+0x1ca/0x350 [ 2946.384517] ? static_obj+0x50/0x50 [ 2946.388141] ? lock_downgrade+0x740/0x740 [ 2946.392288] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2946.397731] ? __cleanup_sighand+0x40/0x40 [ 2946.401962] ? update_curr+0x28d/0x670 [ 2946.405843] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2946.411289] _do_fork+0x184/0xc80 [ 2946.414739] ? fork_idle+0x270/0x270 [ 2946.418446] ? lock_downgrade+0x740/0x740 [ 2946.422582] ? lock_downgrade+0x740/0x740 [ 2946.426725] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2946.431736] ? process_one_work+0x6c4/0x14a0 [ 2946.436137] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 2946.441578] kernel_thread+0x2f/0x40 [ 2946.445402] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 2946.450675] ? call_usermodehelper+0x80/0x80 [ 2946.455080] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2946.460578] process_one_work+0x793/0x14a0 [ 2946.464813] ? work_busy+0x320/0x320 [ 2946.468521] ? worker_thread+0x158/0xff0 [ 2946.472577] ? _raw_spin_unlock_irq+0x24/0x80 [ 2946.477072] worker_thread+0x5cc/0xff0 [ 2946.480961] ? rescuer_thread+0xc80/0xc80 [ 2946.485100] kthread+0x30d/0x420 [ 2946.488460] ? kthread_create_on_node+0xd0/0xd0 [ 2946.493133] ret_from_fork+0x24/0x30 [ 2946.502193] Mem-Info: [ 2946.504628] active_anon:260509 inactive_anon:20233 isolated_anon:0 [ 2946.504628] active_file:0 inactive_file:15 isolated_file:0 [ 2946.504628] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2946.504628] slab_reclaimable:18817 slab_unreclaimable:167818 [ 2946.504628] mapped:52637 shmem:23314 pagetables:71200 bounce:0 [ 2946.504628] free:13879 free_pcp:95 free_cma:0 [ 2946.541517] Node 0 active_anon:945188kB inactive_anon:72740kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:85064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 747520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2946.572998] Node 1 active_anon:96848kB inactive_anon:8192kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1644kB dirty:4kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2946.603498] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.640737] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2946.645790] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:945144kB inactive_anon:72740kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39392kB pagetables:157436kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 2946.826382] lowmem_reserve[]: 0 0 0 0 0 [ 2946.835631] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.944555] lowmem_reserve[]: 0 0 0 0 0 [ 2946.957944] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:96848kB inactive_anon:8192kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2947.028044] lowmem_reserve[]: 0 0 0 0 0 [ 2947.034025] Node 0 DMA: 6*4kB (ME) 7*8kB (ME) 51*16kB (UM) 29*32kB (UME) 19*64kB (UME) 4*128kB (UE) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10976kB [ 2947.071732] Node 0 DMA32: 3082*4kB (UME) 461*8kB (UMEH) 57*16kB (UMEH) 6*32kB (UH) 8*64kB (H) 3*128kB (H) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18272kB [ 2947.106605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2947.131211] Node 1 Normal: 448*4kB (ME) 211*8kB (ME) 111*16kB (UME) 51*32kB (ME) 9*64kB (M) 6*128kB (UM) 3*256kB (M) 19*512kB (UM) 4*1024kB (M) 2*2048kB (M) 0*4096kB = 26920kB [ 2947.171055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2947.183798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2947.198468] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2947.256492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2947.270397] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2947.275523] CPU: 1 PID: 735 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2947.283226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2947.292570] Call Trace: [ 2947.295155] dump_stack+0x1b2/0x283 [ 2947.298787] warn_alloc.cold+0x96/0x1cc [ 2947.302761] ? zone_watermark_ok_safe+0x220/0x220 [ 2947.307598] ? usleep_range+0x130/0x130 [ 2947.311571] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2947.316673] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2947.321694] ? run_timer_softirq+0x5a0/0x5a0 [ 2947.326104] __alloc_pages_nodemask+0x2127/0x2720 [ 2947.330949] ? lock_acquire+0x170/0x3f0 [ 2947.334934] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2947.339770] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2947.344266] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2947.349720] alloc_pages_current+0x155/0x260 [ 2947.354122] ion_page_pool_alloc+0x118/0x1b0 [ 2947.358527] ion_system_heap_allocate+0x133/0x8c0 [ 2947.363389] ? ion_alloc+0x187/0x810 [ 2947.367106] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2947.372553] ? ion_system_contig_heap_create+0x130/0x130 [ 2947.378081] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2947.383093] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2947.387934] ion_alloc+0x204/0x810 [ 2947.391476] ? ion_dma_buf_release+0x40/0x40 [ 2947.395883] ? __might_fault+0x177/0x1b0 [ 2947.399948] ion_ioctl+0xea/0x1ee [ 2947.403395] ? ion_alloc.cold+0x3b/0x3b [ 2947.407364] ? lock_acquire+0x170/0x3f0 [ 2947.411330] ? lock_downgrade+0x740/0x740 [ 2947.415469] ? ion_alloc.cold+0x3b/0x3b [ 2947.419441] do_vfs_ioctl+0x75a/0xff0 [ 2947.423240] ? ioctl_preallocate+0x1a0/0x1a0 [ 2947.427638] ? lock_downgrade+0x740/0x740 [ 2947.431782] ? __fget+0x225/0x360 [ 2947.435228] ? do_vfs_ioctl+0xff0/0xff0 [ 2947.439194] ? security_file_ioctl+0x83/0xb0 [ 2947.443604] SyS_ioctl+0x7f/0xb0 [ 2947.446962] ? do_vfs_ioctl+0xff0/0xff0 [ 2947.450932] do_syscall_64+0x1d5/0x640 [ 2947.454821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2947.460003] RIP: 0033:0x45e219 [ 2947.463185] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2947.470886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2947.478144] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2947.485403] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2947.492666] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2947.499932] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2947.512956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2947.536986] 23339 total pagecache pages [ 2947.541018] 0 pages in swap cache [ 2947.544459] Swap cache stats: add 0, delete 0, find 0/0 [ 2947.588407] Free swap = 0kB [ 2947.591438] Total swap = 0kB [ 2947.594465] 2097051 pages RAM [ 2947.597558] 0 pages HighMem/MovableOnly [ 2947.641618] 363840 pages reserved [ 2947.645088] 0 pages cma reserved [ 2947.676402] Out of memory: Kill process 26991 (syz-executor.3) score 1005 or sacrifice child [ 2947.721612] Killed process 26991 (syz-executor.3) total-vm:93348kB, anon-rss:3868kB, file-rss:34432kB, shmem-rss:0kB [ 2947.752216] warn_alloc_show_mem: 2 callbacks suppressed [ 2947.752219] Mem-Info: [ 2947.795514] oom_reaper: reaped process 26991 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2947.818409] active_anon:259970 inactive_anon:20233 isolated_anon:0 [ 2947.818409] active_file:12 inactive_file:13 isolated_file:0 [ 2947.818409] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2947.818409] slab_reclaimable:18763 slab_unreclaimable:167690 [ 2947.818409] mapped:52617 shmem:23314 pagetables:71200 bounce:0 [ 2947.818409] free:14658 free_pcp:97 free_cma:0 [ 2947.845341] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2947.902116] Node 0 active_anon:943032kB inactive_anon:72740kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:85064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 747520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2947.986504] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2948.016514] CPU: 0 PID: 7995 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2948.023973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2948.030460] Node 1 active_anon:96848kB inactive_anon:8192kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1564kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2948.033315] Call Trace: [ 2948.060302] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2948.062852] dump_stack+0x1b2/0x283 [ 2948.062865] dump_header+0x178/0x82f [ 2948.089228] lowmem_reserve[]: [ 2948.092820] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2948.096500] 0 [ 2948.099587] ? ___ratelimit+0x2cd/0x522 [ 2948.099598] oom_kill_process.cold+0x10/0xb18 [ 2948.099613] out_of_memory+0xe3e/0x1190 [ 2948.104681] 2717 [ 2948.106467] ? oom_killer_disable+0x1c0/0x1c0 [ 2948.110424] 2718 [ 2948.114882] ? mutex_trylock+0x152/0x1a0 [ 2948.118843] 2718 [ 2948.120872] __alloc_pages_nodemask+0x23e1/0x2720 [ 2948.125335] 2718 [ 2948.127390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2948.133467] alloc_pages_current+0x155/0x260 [ 2948.138267] Node 0 [ 2948.140312] filemap_fault+0xea3/0x1980 [ 2948.140329] ext4_filemap_fault+0x84/0xb0 [ 2948.145165] DMA32 free:20736kB min:36200kB low:45248kB high:54296kB active_anon:942988kB inactive_anon:72740kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39360kB pagetables:157288kB bounce:0kB free_pcp:520kB local_pcp:0kB free_cma:0kB [ 2948.149552] __do_fault+0xfa/0x380 [ 2948.149561] __handle_mm_fault+0x2497/0x4620 [ 2948.149570] ? vm_insert_page+0x7c0/0x7c0 [ 2948.149589] handle_mm_fault+0x391/0x860 [ 2948.151797] lowmem_reserve[]: [ 2948.155759] __do_page_fault+0x549/0xad0 [ 2948.159910] 0 [ 2948.188330] ? spurious_fault+0x640/0x640 [ 2948.188339] ? do_page_fault+0x60/0x4f2 [ 2948.188348] ? page_fault+0x2f/0x50 [ 2948.188357] page_fault+0x45/0x50 [ 2948.191870] 0 [ 2948.196257] RIP: 94a80:0xc00006f0e0 [ 2948.200393] 0 [ 2948.204412] RSP: 01ce:000000c0004bfe40 EFLAGS: 00000003 [ 2948.207511] 0 [ 2948.302205] Mem-Info: [ 2948.306433] active_anon:259970 inactive_anon:20233 isolated_anon:0 [ 2948.306433] active_file:12 inactive_file:13 isolated_file:0 [ 2948.306433] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2948.306433] slab_reclaimable:18763 slab_unreclaimable:167690 [ 2948.306433] mapped:52617 shmem:23314 pagetables:71163 bounce:0 [ 2948.306433] free:14658 free_pcp:130 free_cma:0 [ 2948.354601] 0 [ 2948.356421] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2948.371536] Node 0 active_anon:943032kB inactive_anon:72740kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:85064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 747520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2948.422453] lowmem_reserve[]: 0 0 0 0 0 [ 2948.426464] Node 1 Normal free:26920kB min:53696kB low:67120kB high:80544kB active_anon:96848kB inactive_anon:8192kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2948.511205] lowmem_reserve[]: 0 0 0 0 0 [ 2948.515220] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 51*16kB (UM) 29*32kB (UME) 19*64kB (UME) 4*128kB (UE) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10984kB [ 2948.566898] Node 1 active_anon:96848kB inactive_anon:8192kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1564kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2948.568786] Node 0 DMA32: 3082*4kB (UME) 465*8kB (UME) 57*16kB (UME) 6*32kB (U) 8*64kB (U) 6*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20736kB [ 2948.732042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2948.732475] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2948.793991] Node 1 Normal: 448*4kB (ME) 211*8kB (ME) 111*16kB (UME) 52*32kB (UME) 9*64kB (M) 6*128kB (UM) 3*256kB (M) 19*512kB (UM) 4*1024kB (M) 2*2048kB (M) 0*4096kB = 26952kB [ 2948.968295] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2948.973349] Node 0 DMA32 free:21264kB min:36200kB low:45248kB high:54296kB active_anon:942972kB inactive_anon:72740kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:39360kB pagetables:157324kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2949.006676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2949.074027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2949.158101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2949.176378] lowmem_reserve[]: 0 0 0 0 0 [ 2949.186936] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2949.204780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2949.328858] 23339 total pagecache pages [ 2949.332867] 0 pages in swap cache [ 2949.336310] Swap cache stats: add 0, delete 0, find 0/0 [ 2949.352685] lowmem_reserve[]: 0 0 0 0 0 [ 2949.356696] Node 1 Normal free:26920kB min:53696kB low:67120kB high:80544kB active_anon:96848kB inactive_anon:8192kB active_file:60kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:54240kB pagetables:127284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2949.377061] Free swap = 0kB [ 2949.491516] Total swap = 0kB [ 2949.494555] 2097051 pages RAM [ 2949.497647] 0 pages HighMem/MovableOnly [ 2949.551598] lowmem_reserve[]: 0 0 0 0 0 [ 2949.555616] Node 0 DMA: 6*4kB (ME) 8*8kB (UME) 51*16kB (UM) 29*32kB (UME) 19*64kB (UME) 4*128kB (UE) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10984kB [ 2949.562927] 363840 pages reserved [ 2949.622783] 0 pages cma reserved [ 2949.678268] Node 0 DMA32: 3198*4kB (UME) 480*8kB (UME) 57*16kB (UME) 6*32kB (U) 8*64kB (U) 6*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 21320kB [ 2949.768257] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2949.798247] Node 1 Normal: 448*4kB (ME) 211*8kB (ME) 111*16kB (UME) 52*32kB (UME) 3593*64kB (UM) 205*128kB (UM) 97*256kB (UM) 110*512kB (UM) 379*1024kB (UM) 17*2048kB (UM) 1*4096kB (U) = 771272kB [ 2949.908594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2949.928267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2949.968272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2949.977218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2950.022708] 23657 total pagecache pages [ 2950.041440] 0 pages in swap cache [ 2950.045708] Swap cache stats: add 0, delete 0, find 0/0 [ 2950.052385] Free swap = 0kB [ 2950.067054] Total swap = 0kB [ 2950.073402] 2097051 pages RAM [ 2950.076582] 0 pages HighMem/MovableOnly [ 2950.095809] 363840 pages reserved [ 2950.100329] 0 pages cma reserved [ 2950.104160] Out of memory (oom_kill_allocating_task): Kill process 7995 (syz-fuzzer) score 0 or sacrifice child [ 2950.161331] IPVS: ftp: loaded support on port[0] = 21 [ 2950.161692] Killed process 8001 (syz-executor.0) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 2950.234008] oom_reaper: reaped process 8001 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2953.158069] Bluetooth: hci2 command 0x0409 tx timeout [ 2955.098282] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2955.137774] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2955.142925] CPU: 1 PID: 735 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2955.150628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2955.159974] Call Trace: [ 2955.162592] dump_stack+0x1b2/0x283 [ 2955.166218] warn_alloc.cold+0x96/0x1cc [ 2955.170189] ? zone_watermark_ok_safe+0x220/0x220 [ 2955.175036] __alloc_pages_nodemask+0x2127/0x2720 [ 2955.179879] ? lock_acquire+0x170/0x3f0 [ 2955.183851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2955.188696] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2955.194142] ? __mutex_unlock_slowpath+0x75/0x770 [ 2955.198983] alloc_pages_current+0x155/0x260 [ 2955.203388] ion_page_pool_alloc+0x118/0x1b0 [ 2955.207791] ion_system_heap_allocate+0x133/0x8c0 [ 2955.212627] ? _raw_spin_unlock+0x29/0x40 [ 2955.216765] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2955.221687] ? ion_system_contig_heap_create+0x130/0x130 [ 2955.227129] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2955.232140] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2955.236982] ion_alloc+0x27a/0x810 [ 2955.240524] ? ion_dma_buf_release+0x40/0x40 [ 2955.244933] ? __might_fault+0x177/0x1b0 [ 2955.248988] ion_ioctl+0xea/0x1ee [ 2955.252431] ? ion_alloc.cold+0x3b/0x3b [ 2955.256398] ? lock_acquire+0x170/0x3f0 [ 2955.260364] ? lock_downgrade+0x740/0x740 [ 2955.264501] ? ion_alloc.cold+0x3b/0x3b [ 2955.268471] do_vfs_ioctl+0x75a/0xff0 [ 2955.272269] ? ioctl_preallocate+0x1a0/0x1a0 [ 2955.276668] ? lock_downgrade+0x740/0x740 [ 2955.280816] ? __fget+0x225/0x360 [ 2955.284261] ? do_vfs_ioctl+0xff0/0xff0 [ 2955.288232] ? security_file_ioctl+0x83/0xb0 [ 2955.292632] SyS_ioctl+0x7f/0xb0 [ 2955.295989] ? do_vfs_ioctl+0xff0/0xff0 [ 2955.299962] do_syscall_64+0x1d5/0x640 [ 2955.303854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2955.309034] RIP: 0033:0x45e219 [ 2955.312215] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2955.319914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2955.327178] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2955.334793] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.342053] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2955.349332] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2955.481549] Mem-Info: [ 2955.484000] active_anon:187838 inactive_anon:20237 isolated_anon:0 [ 2955.484000] active_file:1165 inactive_file:1138 isolated_file:32 [ 2955.484000] unevictable:0 dirty:27 writeback:0 unstable:0 [ 2955.484000] slab_reclaimable:18475 slab_unreclaimable:154455 [ 2955.484000] mapped:45559 shmem:23319 pagetables:41195 bounce:0 [ 2955.484000] free:25087 free_pcp:314 free_cma:0 [ 2955.550269] Node 0 active_anon:700920kB inactive_anon:72756kB active_file:3732kB inactive_file:3856kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:180484kB dirty:72kB writeback:0kB shmem:85084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 552960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2955.621591] Node 1 active_anon:50432kB inactive_anon:8192kB active_file:52kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:36kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2955.677734] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2955.727756] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2955.738155] Node 0 DMA32 free:35584kB min:36200kB low:45248kB high:54296kB active_anon:700888kB inactive_anon:72756kB active_file:2740kB inactive_file:3224kB unevictable:0kB writepending:316kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:31328kB pagetables:97988kB bounce:0kB free_pcp:1088kB local_pcp:376kB free_cma:0kB [ 2955.747575] Bluetooth: hci2 command 0x041b tx timeout [ 2955.768293] lowmem_reserve[]: 0 0 0 0 0 [ 2955.777219] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2955.804480] lowmem_reserve[]: 0 0 0 0 0 [ 2955.808552] Node 1 Normal free:53268kB min:53696kB low:67120kB high:80544kB active_anon:50432kB inactive_anon:8192kB active_file:52kB inactive_file:20kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:29184kB pagetables:66712kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2955.877756] lowmem_reserve[]: 0 0 0 0 0 [ 2955.881773] Node 0 DMA: 10*4kB (UME) 12*8kB (UME) 54*16kB (UM) 27*32kB (UME) 17*64kB (UME) 5*128kB (UME) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11016kB [ 2955.927701] Node 0 DMA32: 4521*4kB (UME) 1719*8kB (UME) 253*16kB (UME) 18*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36460kB [ 2955.946592] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2955.998005] Node 1 Normal: 692*4kB (UME) 286*8kB (UME) 160*16kB (UME) 1432*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53440kB [ 2956.026431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2956.035307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2956.044151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2956.053205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2956.061990] 24122 total pagecache pages [ 2956.065972] 0 pages in swap cache [ 2956.069631] Swap cache stats: add 0, delete 0, find 0/0 [ 2956.074986] Free swap = 0kB [ 2956.078222] Total swap = 0kB [ 2956.081234] 2097051 pages RAM [ 2956.084338] 0 pages HighMem/MovableOnly [ 2956.088536] 363840 pages reserved [ 2956.091983] 0 pages cma reserved [ 2956.142723] oom_reaper: reaped process 734 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2956.249141] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2956.277678] systemd-journal cpuset=/ mems_allowed=0-1 [ 2956.282900] CPU: 1 PID: 705 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2956.290682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2956.300011] Call Trace: [ 2956.302581] dump_stack+0x1b2/0x283 [ 2956.306188] dump_header+0x178/0x82f [ 2956.309882] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2956.314959] ? ___ratelimit+0x2cd/0x522 [ 2956.318910] oom_kill_process.cold+0x10/0xb18 [ 2956.323385] out_of_memory+0xe3e/0x1190 [ 2956.327350] ? oom_killer_disable+0x1c0/0x1c0 [ 2956.331822] ? mutex_trylock+0x152/0x1a0 [ 2956.335860] __alloc_pages_nodemask+0x23e1/0x2720 [ 2956.340687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2956.345512] ? cache_grow_begin+0x41/0x630 [ 2956.349724] cache_grow_begin+0x91/0x630 [ 2956.353775] ? cache_grow_begin+0x91/0x630 [ 2956.357988] fallback_alloc+0x207/0x2c0 [ 2956.361953] kmem_cache_alloc+0x1e5/0x3c0 [ 2956.366097] getname_flags+0xc8/0x550 [ 2956.369893] do_sys_open+0x1ce/0x410 [ 2956.373588] ? filp_open+0x60/0x60 [ 2956.377132] ? do_syscall_64+0x4c/0x640 [ 2956.381094] ? do_sys_open+0x410/0x410 [ 2956.384962] do_syscall_64+0x1d5/0x640 [ 2956.388834] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2956.394012] RIP: 0033:0x7f0982cb3840 [ 2956.397698] RSP: 002b:00007ffcde640d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2956.405381] RAX: ffffffffffffffda RBX: 00007ffcde641070 RCX: 00007f0982cb3840 [ 2956.412631] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000557f312b9780 [ 2956.419881] RBP: 000000000000000d R08: 0000000000000000 R09: 00000000ffffffff [ 2956.427125] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 2956.434372] R13: 0000557f312b4040 R14: 00007ffcde641030 R15: 0000557f312b90d0 [ 2956.515026] Mem-Info: [ 2956.517590] active_anon:187306 inactive_anon:20236 isolated_anon:0 [ 2956.517590] active_file:80 inactive_file:100 isolated_file:18 [ 2956.517590] unevictable:0 dirty:10 writeback:0 unstable:0 [ 2956.517590] slab_reclaimable:18457 slab_unreclaimable:153799 [ 2956.517590] mapped:44078 shmem:23319 pagetables:41200 bounce:0 [ 2956.517590] free:13850 free_pcp:293 free_cma:0 [ 2956.560838] Node 0 active_anon:698832kB inactive_anon:72752kB active_file:304kB inactive_file:296kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:174560kB dirty:32kB writeback:0kB shmem:85084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 552960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2956.591501] Node 1 active_anon:50392kB inactive_anon:8192kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1652kB dirty:8kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2956.618848] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2956.646979] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2956.652094] Node 0 DMA32 free:18672kB min:36200kB low:45248kB high:54296kB active_anon:698800kB inactive_anon:72752kB active_file:512kB inactive_file:500kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:31488kB pagetables:98004kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2956.702430] lowmem_reserve[]: 0 0 0 0 0 [ 2956.706428] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2956.731967] lowmem_reserve[]: 0 0 0 0 0 [ 2956.735974] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:50392kB inactive_anon:8192kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:29184kB pagetables:66716kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2956.765064] lowmem_reserve[]: 0 0 0 0 0 [ 2956.769105] Node 0 DMA: 4*4kB (UME) 8*8kB (UME) 54*16kB (UM) 27*32kB (UME) 17*64kB (UME) 5*128kB (UME) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 2956.785028] Node 0 DMA32: 2911*4kB (UME) 684*8kB (UME) 64*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 2956.798491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2956.810884] Node 1 Normal: 552*4kB (UME) 286*8kB (UME) 160*16kB (UME) 616*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26768kB [ 2956.855186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2956.875983] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 2956.887954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2956.902353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2956.934722] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2956.939906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2956.948540] CPU: 1 PID: 734 Comm: syz-executor.4 Not tainted 4.14.215-syzkaller #0 [ 2956.956239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2956.965582] Call Trace: [ 2956.968169] dump_stack+0x1b2/0x283 [ 2956.971796] warn_alloc.cold+0x96/0x1cc [ 2956.975764] ? zone_watermark_ok_safe+0x220/0x220 [ 2956.980600] ? usleep_range+0x130/0x130 [ 2956.984580] ? try_to_free_pages+0x23f/0x6e0 [ 2956.988987] ? _find_next_bit+0xdb/0x100 [ 2956.993044] ? run_timer_softirq+0x5a0/0x5a0 [ 2956.997454] __alloc_pages_nodemask+0x2127/0x2720 [ 2957.002300] ? lock_acquire+0x170/0x3f0 [ 2957.006275] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2957.011112] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2957.015616] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2957.021072] alloc_pages_current+0x155/0x260 [ 2957.025474] ion_page_pool_alloc+0x118/0x1b0 [ 2957.029886] ion_system_heap_allocate+0x133/0x8c0 [ 2957.034723] ? ion_alloc+0x187/0x810 [ 2957.038431] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2957.043884] ? ion_system_contig_heap_create+0x130/0x130 [ 2957.049326] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2957.054337] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2957.059177] ion_alloc+0x204/0x810 [ 2957.062718] ? ion_dma_buf_release+0x40/0x40 [ 2957.067128] ? __might_fault+0x177/0x1b0 [ 2957.071186] ion_ioctl+0xea/0x1ee [ 2957.074631] ? ion_alloc.cold+0x3b/0x3b [ 2957.078600] ? lock_acquire+0x170/0x3f0 [ 2957.082567] ? lock_downgrade+0x740/0x740 [ 2957.086702] ? ion_alloc.cold+0x3b/0x3b [ 2957.090674] do_vfs_ioctl+0x75a/0xff0 [ 2957.094473] ? ioctl_preallocate+0x1a0/0x1a0 [ 2957.098873] ? lock_downgrade+0x740/0x740 [ 2957.103017] ? __fget+0x225/0x360 [ 2957.106466] ? do_vfs_ioctl+0xff0/0xff0 [ 2957.110432] ? security_file_ioctl+0x83/0xb0 [ 2957.114946] SyS_ioctl+0x7f/0xb0 [ 2957.118308] ? do_vfs_ioctl+0xff0/0xff0 [ 2957.122277] do_syscall_64+0x1d5/0x640 [ 2957.126165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2957.131345] RIP: 0033:0x45e219 [ 2957.134523] RSP: 002b:00007f7783a27c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2957.142224] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2957.149484] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2957.156745] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 2957.164007] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 2957.171267] R13: 00007ffe6a8f603f R14: 00007f7783a289c0 R15: 000000000119c034 [ 2957.197590] 23364 total pagecache pages [ 2957.201571] 0 pages in swap cache [ 2957.205011] Swap cache stats: add 0, delete 0, find 0/0 [ 2957.217586] Free swap = 0kB [ 2957.220602] Total swap = 0kB [ 2957.223616] 2097051 pages RAM [ 2957.226710] 0 pages HighMem/MovableOnly [ 2957.240516] 363840 pages reserved [ 2957.243963] 0 pages cma reserved [ 2957.247315] Out of memory (oom_kill_allocating_task): Kill process 705 (systemd-journal) score 0 or sacrifice child [ 2957.267600] Killed process 705 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1632kB [ 2957.295686] oom_reaper: reaped process 705 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1632kB [ 2957.323736] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 2957.401096] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2957.406014] CPU: 0 PID: 7995 Comm: syz-fuzzer Not tainted 4.14.215-syzkaller #0 [ 2957.413451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2957.422793] Call Trace: [ 2957.425378] dump_stack+0x1b2/0x283 [ 2957.429007] dump_header+0x178/0x82f [ 2957.432714] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2957.437810] ? ___ratelimit+0x2cd/0x522 [ 2957.441778] oom_kill_process.cold+0x10/0xb18 [ 2957.446273] out_of_memory+0xe3e/0x1190 [ 2957.450246] ? oom_killer_disable+0x1c0/0x1c0 [ 2957.454733] ? mutex_trylock+0x152/0x1a0 [ 2957.458787] __alloc_pages_nodemask+0x23e1/0x2720 [ 2957.463641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2957.468495] alloc_pages_current+0x155/0x260 [ 2957.472898] filemap_fault+0xea3/0x1980 [ 2957.476873] ext4_filemap_fault+0x84/0xb0 [ 2957.481013] __do_fault+0xfa/0x380 [ 2957.484546] __handle_mm_fault+0x2497/0x4620 [ 2957.488952] ? vm_insert_page+0x7c0/0x7c0 [ 2957.493108] handle_mm_fault+0x391/0x860 [ 2957.497171] __do_page_fault+0x549/0xad0 [ 2957.501229] ? spurious_fault+0x640/0x640 [ 2957.505368] ? do_page_fault+0x60/0x4f2 [ 2957.509343] ? page_fault+0x2f/0x50 [ 2957.512963] page_fault+0x45/0x50 [ 2957.516405] RIP: 94a80:0x2b844160b95 [ 2957.520104] RSP: 03e7:000000c0004bfe40 EFLAGS: 00000003 [ 2957.587557] Mem-Info: [ 2957.595346] active_anon:187192 inactive_anon:20236 isolated_anon:0 [ 2957.595346] active_file:30 inactive_file:1 isolated_file:0 [ 2957.595346] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2957.595346] slab_reclaimable:18457 slab_unreclaimable:153817 [ 2957.595346] mapped:43946 shmem:23319 pagetables:41199 bounce:0 [ 2957.595346] free:13882 free_pcp:175 free_cma:0 [ 2957.767555] Node 0 active_anon:698376kB inactive_anon:72752kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174108kB dirty:36kB writeback:0kB shmem:85084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 550912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2957.857557] Bluetooth: hci2 command 0x040f tx timeout [ 2957.862856] Mem-Info: [ 2957.865275] active_anon:187174 inactive_anon:20236 isolated_anon:0 [ 2957.865275] active_file:17 inactive_file:14 isolated_file:0 [ 2957.865275] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2957.865275] slab_reclaimable:18457 slab_unreclaimable:153812 [ 2957.865275] mapped:43941 shmem:23319 pagetables:41199 bounce:0 [ 2957.865275] free:13944 free_pcp:175 free_cma:0 [ 2957.871714] Node 1 active_anon:50336kB inactive_anon:8192kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1676kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2957.967532] Node 0 active_anon:698360kB inactive_anon:72752kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:85084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 550912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2958.045099] Node 1 active_anon:50336kB inactive_anon:8192kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1676kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2958.100758] systemd-journal: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 2958.130781] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.137498] Node 0 [ 2958.167511] systemd-journal cpuset=/ mems_allowed=0-1 [ 2958.174962] CPU: 0 PID: 705 Comm: systemd-journal Not tainted 4.14.215-syzkaller #0 [ 2958.176030] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.182738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2958.182742] Call Trace: [ 2958.182757] dump_stack+0x1b2/0x283 [ 2958.182770] warn_alloc.cold+0x96/0x1cc [ 2958.208526] lowmem_reserve[]: [ 2958.217848] ? zone_watermark_ok_safe+0x220/0x220 [ 2958.217856] ? usleep_range+0x130/0x130 [ 2958.217863] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2958.217873] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2958.220428] 0 [ 2958.224033] ? run_timer_softirq+0x5a0/0x5a0 [ 2958.227999] 2717 [ 2958.231074] __alloc_pages_nodemask+0x2127/0x2720 [ 2958.235883] 2718 [ 2958.239850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2958.239871] ? cache_grow_begin+0x41/0x630 [ 2958.244932] 2718 [ 2958.249926] cache_grow_begin+0x91/0x630 [ 2958.249936] ? cache_grow_begin+0x91/0x630 [ 2958.249945] fallback_alloc+0x207/0x2c0 [ 2958.251718] 2718 [ 2958.256104] kmem_cache_alloc+0x1e5/0x3c0 [ 2958.262954] getname_flags+0xc8/0x550 [ 2958.264987] Node 0 [ 2958.269808] do_sys_open+0x1ce/0x410 [ 2958.269817] ? filp_open+0x60/0x60 [ 2958.269827] ? do_syscall_64+0x4c/0x640 [ 2958.274049] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:698328kB inactive_anon:72752kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:31488kB pagetables:98000kB bounce:0kB free_pcp:524kB local_pcp:0kB free_cma:0kB [ 2958.276088] ? do_sys_open+0x410/0x410 [ 2958.280144] lowmem_reserve[]: [ 2958.284343] do_syscall_64+0x1d5/0x640 [ 2958.288300] 0 [ 2958.290344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2958.294457] 0 [ 2958.298231] RIP: 0033:0x7f0982cb3840 [ 2958.298235] RSP: 002b:00007ffcde640d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2958.298247] RAX: ffffffffffffffda RBX: 00007ffcde641070 RCX: 00007f0982cb3840 [ 2958.300455] 0 [ 2958.304139] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000557f312b9780 [ 2958.304145] RBP: 000000000000000d R08: 0000000000000000 R09: 00000000ffffffff [ 2958.307672] 0 [ 2958.311609] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 2958.339965] 0 [ 2958.343811] R13: 0000557f312b4040 R14: 00007ffcde641030 R15: 0000557f312b90d0 [ 2958.353998] syz-executor.5: [ 2958.391371] Node 0 [ 2958.396710] lowmem_reserve[]: [ 2958.425920] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.434422] page allocation failure: order:0 [ 2958.454056] 0 2717 2718 2718 2718 [ 2958.462077] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:698328kB inactive_anon:72752kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:31488kB pagetables:98000kB bounce:0kB free_pcp:524kB local_pcp:524kB free_cma:0kB [ 2958.503236] lowmem_reserve[]: 0 0 0 0 0 [ 2958.507242] Node 1 Normal free:26764kB min:53696kB low:67120kB high:80544kB active_anon:50336kB inactive_anon:8192kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:29184kB pagetables:66716kB bounce:0kB free_pcp:176kB local_pcp:120kB free_cma:0kB [ 2958.513856] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2958.557486] lowmem_reserve[]: [ 2958.560453] lowmem_reserve[]: [ 2958.564600] 0 [ 2958.570830] (null) [ 2958.574755] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2958.585673] 0 0 0 0 0 [ 2958.593575] Node 0 DMA: 4*4kB (UME) 8*8kB (UME) 54*16kB (UM) 27*32kB (UME) 17*64kB (UME) 5*128kB (UME) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 2958.595012] CPU: 0 PID: 735 Comm: syz-executor.5 Not tainted 4.14.215-syzkaller #0 [ 2958.617173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2958.625432] Node 0 [ 2958.626514] Call Trace: [ 2958.626516] DMA32: 2925*4kB [ 2958.628753] dump_stack+0x1b2/0x283 [ 2958.628766] warn_alloc.cold+0x96/0x1cc [ 2958.628776] ? zone_watermark_ok_safe+0x220/0x220 [ 2958.631335] (UME) [ 2958.634332] ? usleep_range+0x130/0x130 [ 2958.637959] 668*8kB [ 2958.641899] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2958.646708] (UME) [ 2958.648850] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2958.648859] ? run_timer_softirq+0x5a0/0x5a0 [ 2958.648875] __alloc_pages_nodemask+0x2127/0x2720 [ 2958.652815] 63*16kB [ 2958.655122] ? lock_acquire+0x170/0x3f0 [ 2958.660208] (UM) [ 2958.662328] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2958.667308] 0*32kB [ 2958.671694] ? ion_page_pool_alloc+0x9e/0x1b0 [ 2958.671707] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2958.671726] alloc_pages_current+0x155/0x260 [ 2958.676535] 0*64kB [ 2958.678846] ion_page_pool_alloc+0x118/0x1b0 [ 2958.678856] ion_system_heap_allocate+0x133/0x8c0 [ 2958.678866] ? _raw_spin_unlock+0x29/0x40 [ 2958.682810] 0*128kB [ 2958.684852] ? _ion_heap_freelist_drain+0x6e/0x410 [ 2958.689683] 0*256kB [ 2958.691881] ? ion_system_contig_heap_create+0x130/0x130 [ 2958.696359] 0*512kB [ 2958.701784] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2958.701795] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 2958.701807] ion_alloc+0x27a/0x810 [ 2958.706355] 0*1024kB [ 2958.708404] ? ion_dma_buf_release+0x40/0x40 [ 2958.708420] ? __might_fault+0x177/0x1b0 [ 2958.712796] 0*2048kB [ 2958.717617] ion_ioctl+0xea/0x1ee [ 2958.717625] ? ion_alloc.cold+0x3b/0x3b [ 2958.717635] ? lock_acquire+0x170/0x3f0 [ 2958.721753] 0*4096kB [ 2958.724060] ? lock_downgrade+0x740/0x740 [ 2958.728993] = 18052kB [ 2958.731283] ? ion_alloc.cold+0x3b/0x3b [ 2958.736703] Node 0 [ 2958.739004] do_vfs_ioctl+0x75a/0xff0 [ 2958.739015] ? ioctl_preallocate+0x1a0/0x1a0 [ 2958.739025] ? lock_downgrade+0x740/0x740 [ 2958.744012] Normal: [ 2958.748858] ? __fget+0x225/0x360 [ 2958.748867] ? do_vfs_ioctl+0xff0/0xff0 [ 2958.748879] ? security_file_ioctl+0x83/0xb0 [ 2958.752389] 0*4kB [ 2958.754776] SyS_ioctl+0x7f/0xb0 [ 2958.759165] 0*8kB [ 2958.763192] ? do_vfs_ioctl+0xff0/0xff0 [ 2958.765572] 0*16kB [ 2958.769004] do_syscall_64+0x1d5/0x640 [ 2958.769021] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2958.772963] 0*32kB [ 2958.776913] RIP: 0033:0x45e219 [ 2958.779307] 0*64kB [ 2958.783418] RSP: 002b:00007fbaae85fc68 EFLAGS: 00000246 [ 2958.785814] 0*128kB [ 2958.789759] ORIG_RAX: 0000000000000010 [ 2958.789766] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 2958.789771] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 2958.789775] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.789782] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 2958.791996] 0*256kB [ 2958.795789] R13: 00007fffdc1f695f R14: 00007fbaae8609c0 R15: 000000000119bf8c [ 2958.800182] 0*512kB [ 2958.818555] 0 [ 2958.875177] 0*1024kB [ 2958.878717] 0 [ 2958.920742] 0*2048kB 0*4096kB = 0kB [ 2958.924792] 0 [ 2958.926173] Node 1 [ 2958.926180] 0 [ 2958.928002] Normal: 561*4kB [ 2958.932005] (UME) [ 2958.934995] Node 0 [ 2958.934998] 286*8kB (UME) [ 2958.937135] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2958.942162] 159*16kB (UME) 617*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26820kB [ 2958.980592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2958.992725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2959.001334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2959.013410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2959.013776] lowmem_reserve[]: [ 2959.022017] 23350 total pagecache pages [ 2959.032698] 0 pages in swap cache [ 2959.036147] Swap cache stats: add 0, delete 0, find 0/0 [ 2959.041535] Free swap = 0kB [ 2959.044542] Total swap = 0kB [ 2959.050786] 2097051 pages RAM [ 2959.053887] 0 pages HighMem/MovableOnly [ 2959.057894] 363840 pages reserved [ 2959.061331] 0 pages cma reserved [ 2959.067753] 0 0 0 0 0 [ 2959.087438] Node 1 Normal free:26864kB min:53696kB low:67120kB high:80544kB active_anon:50336kB inactive_anon:8192kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:29184kB pagetables:66716kB bounce:0kB free_pcp:492kB local_pcp:492kB free_cma:0kB [ 2959.127426] warn_alloc_show_mem: 1 callbacks suppressed [ 2959.127429] Mem-Info: [ 2959.127469] lowmem_reserve[]: [ 2959.132808] active_anon:187174 inactive_anon:20236 isolated_anon:0 [ 2959.132808] active_file:15 inactive_file:16 isolated_file:0 [ 2959.132808] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2959.132808] slab_reclaimable:18407 slab_unreclaimable:153697 [ 2959.132808] mapped:43941 shmem:23319 pagetables:41199 bounce:0 [ 2959.132808] free:28566 free_pcp:606 free_cma:0 [ 2959.135186] 0 [ 2959.157421] Node 0 active_anon:698360kB inactive_anon:72752kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:85084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 550912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2959.172034] 0 [ 2959.197414] Node 1 active_anon:50336kB inactive_anon:8192kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1676kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2959.277428] 0 0 0 [ 2959.279605] Node 0 DMA: 120*4kB (UME) 11*8kB (UME) 54*16kB (UM) 27*32kB (UME) 17*64kB (UME) 5*128kB (UME) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11448kB [ 2959.280206] Node 0 DMA free:11436kB min:204kB low:252kB high:300kB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:96kB pagetables:80kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2959.327425] Node 0 DMA32: 8745*4kB (UME) 2576*8kB (UME) 2936*16kB (UM) 957*32kB (UE) 357*64kB (U) 71*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 166660kB [ 2959.330375] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 2959.343132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2959.377760] Node 1 Normal: 5834*4kB (UME) 5158*8kB (UME) 2294*16kB (UME) 789*32kB (UME) 3*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 127256kB [ 2959.379700] Node 0 [ 2959.392726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2959.392734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2959.396638] DMA32 free:166544kB min:36200kB low:45248kB high:54296kB active_anon:698328kB inactive_anon:72752kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:31488kB pagetables:98000kB bounce:0kB free_pcp:1308kB local_pcp:636kB free_cma:0kB [ 2959.417419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2959.443866] lowmem_reserve[]: 0 0 0 0 0 [ 2959.453979] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2959.497437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2959.517404] 23350 total pagecache pages [ 2959.521389] 0 pages in swap cache [ 2959.524828] Swap cache stats: add 0, delete 0, find 0/0 [ 2959.547397] Free swap = 0kB [ 2959.547412] lowmem_reserve[]: [ 2959.550417] Total swap = 0kB [ 2959.550422] 0 [ 2959.553590] 2097051 pages RAM [ 2959.556589] 0 [ 2959.587417] 0 pages HighMem/MovableOnly [ 2959.587439] 0 [ 2959.589224] 363840 pages reserved [ 2959.593177] 0 [ 2959.594962] 0 pages cma reserved [ 2959.598900] 0 [ 2959.619951] Node 1 Normal free:305564kB min:53696kB low:67120kB high:80544kB active_anon:50336kB inactive_anon:8192kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:29184kB pagetables:66716kB bounce:0kB free_pcp:1412kB local_pcp:720kB free_cma:0kB [ 2959.641520] Out of memory (oom_kill_allocating_task): Kill process 7995 (syz-fuzzer) score 0 or sacrifice child [ 2959.649719] lowmem_reserve[]: 0 0 0 0 0 [ 2959.680780] Node 0 DMA: 120*4kB (UME) 16*8kB (UME) 55*16kB (UM) 27*32kB (UME) 17*64kB (UME) 5*128kB (UME) 5*256kB (UE) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11504kB [ 2959.707441] Killed process 8004 (syz-executor.3) total-vm:85024kB, anon-rss:1724kB, file-rss:4kB, shmem-rss:0kB [ 2959.710379] Node 0 DMA32: 9553*4kB (UME) 2877*8kB (UME) 3023*16kB (UME) 987*32kB (UME) 390*64kB (UM) 106*128kB (U) 6*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 182780kB [ 2959.747389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2959.764446] Node 1 Normal: 6979*4kB (UME) 6325*8kB (UME) 4678*16kB (UME) 2723*32kB (UME) 1830*64kB (U) 6*128kB (U) 2*256kB (U) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 378356kB [ 2959.768959] oom_reaper: reaped process 8004 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2959.785887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2964.771654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2964.800077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2964.847019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2964.855613] 25900 total pagecache pages [ 2965.061357] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2965.356095] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2965.423204] 0 pages in swap cache [ 2965.433521] Swap cache stats: add 0, delete 0, find 0/0 [ 2965.454918] Free swap = 0kB [ 2965.466635] Total swap = 0kB [ 2965.476013] 2097051 pages RAM [ 2965.536895] 0 pages HighMem/MovableOnly [ 2965.540887] 363840 pages reserved [ 2965.556861] 0 pages cma reserved [ 2965.609467] systemd[1]: Stopped Journal Service. [ 2965.652185] systemd[1]: Starting Journal Service... [ 2966.016309] systemd-journald[880]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2966.497750] systemd[1]: Started Journal Service. [ 2966.707160] Bluetooth: hci2 command 0x0419 tx timeout [ 2984.655272] Bluetooth: hci5 command 0x0406 tx timeout [ 3035.850928] Bluetooth: hci3 command 0x0406 tx timeout [ 3151.522062] INFO: task syz-executor.0:17565 blocked for more than 140 seconds. [ 3151.529715] Not tainted 4.14.215-syzkaller #0 [ 3151.536095] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3151.544508] syz-executor.0 D28552 17565 8008 0x80000002 [ 3151.550123] Call Trace: [ 3151.553216] __schedule+0x88b/0x1de0 [ 3151.556917] ? io_schedule_timeout+0x140/0x140 [ 3151.562134] ? lock_downgrade+0x740/0x740 [ 3151.566276] schedule+0x8d/0x1b0 [ 3151.569623] schedule_preempt_disabled+0xf/0x20 [ 3151.574932] __mutex_lock+0x669/0x1310 [ 3151.578860] ? _synchronize_rcu_expedited+0x32d/0x770 [ 3151.584591] ? is_bpf_text_address+0x91/0x150 [ 3151.589072] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3151.595030] ? lock_acquire+0x170/0x3f0 [ 3151.598993] _synchronize_rcu_expedited+0x32d/0x770 [ 3151.604492] ? call_rcu_sched+0x10/0x10 [ 3151.608450] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3151.614117] ? __lock_acquire+0x5fc/0x3f20 [ 3151.618353] ? switch_task_namespaces+0x8f/0xb0 [ 3151.623534] ? do_exit+0xa3f/0x2850 [ 3151.627143] ? do_group_exit+0x100/0x2e0 [ 3151.631861] ? get_signal+0x38d/0x1ca0 [ 3151.635740] ? do_signal+0x7c/0x1550 [ 3151.639429] ? exit_to_usermode_loop+0x160/0x200 [ 3151.644382] ? do_syscall_64+0x4a3/0x640 [ 3151.648443] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3151.654012] ? debug_check_no_obj_freed+0x2c0/0x674 [ 3151.659062] ? debug_check_no_obj_freed+0x2c0/0x674 [ 3151.664098] ? trace_hardirqs_on+0x10/0x10 [ 3151.668323] ? lock_acquire+0x170/0x3f0 [ 3151.672372] ? lock_downgrade+0x740/0x740 [ 3151.676510] synchronize_rcu+0x98/0x130 [ 3151.680462] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3151.685405] ? put_ipc_ns.part.0+0x1f/0x120 [ 3151.689724] ? lock_downgrade+0x740/0x740 [ 3151.693942] ? do_raw_spin_unlock+0x164/0x220 [ 3151.698423] kern_unmount+0x53/0xc0 [ 3151.702071] put_ipc_ns.part.0+0x27/0x120 [ 3151.706305] put_ipc_ns+0x2f/0x40 [ 3151.709734] free_nsproxy+0xbd/0x1f0 [ 3151.713526] switch_task_namespaces+0x8f/0xb0 [ 3151.718039] do_exit+0xa3f/0x2850 [ 3151.721515] ? mm_update_next_owner+0x5b0/0x5b0 [ 3151.726173] ? get_signal+0x323/0x1ca0 [ 3151.730035] ? lock_acquire+0x170/0x3f0 [ 3151.734124] ? lock_downgrade+0x740/0x740 [ 3151.738259] do_group_exit+0x100/0x2e0 [ 3151.742174] get_signal+0x38d/0x1ca0 [ 3151.745878] ? trace_hardirqs_on+0x10/0x10 [ 3151.750087] do_signal+0x7c/0x1550 [ 3151.753711] ? __might_fault+0x104/0x1b0 [ 3151.757763] ? setup_sigcontext+0x820/0x820 [ 3151.762225] ? lock_downgrade+0x740/0x740 [ 3151.766368] ? __might_fault+0x177/0x1b0 [ 3151.770405] ? _copy_to_user+0x82/0xd0 [ 3151.774367] ? SyS_futex+0x1da/0x290 [ 3151.778068] ? SyS_futex+0x1e3/0x290 [ 3151.781803] ? exit_to_usermode_loop+0x41/0x200 [ 3151.786459] exit_to_usermode_loop+0x160/0x200 [ 3151.791022] do_syscall_64+0x4a3/0x640 [ 3151.794975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3151.800150] RIP: 0033:0x45e219 [ 3151.803375] RSP: 002b:00007f41bc77bcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3151.811067] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3151.818398] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3151.825700] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3151.833070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3151.840325] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 3151.847835] INFO: task syz-executor.0:18622 blocked for more than 140 seconds. [ 3151.855323] Not tainted 4.14.215-syzkaller #0 [ 3151.860320] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3151.868313] syz-executor.0 D28552 18622 8008 0x80000002 [ 3151.873995] Call Trace: [ 3151.876570] __schedule+0x88b/0x1de0 [ 3151.880260] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3151.885308] ? io_schedule_timeout+0x140/0x140 [ 3151.889883] schedule+0x8d/0x1b0 [ 3151.893295] _synchronize_rcu_expedited+0x5f6/0x770 [ 3151.898298] ? call_rcu_sched+0x10/0x10 [ 3151.902298] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3151.907300] ? __lock_acquire+0x5fc/0x3f20 [ 3151.911574] ? wait_woken+0x230/0x230 [ 3151.915364] ? trace_hardirqs_on+0x10/0x10 [ 3151.919573] ? flush_workqueue+0x49b/0x1310 [ 3151.923919] ? trace_hardirqs_on+0x10/0x10 [ 3151.928142] ? lock_acquire+0x170/0x3f0 [ 3151.932156] ? l2cap_conn_del+0x2aa/0x690 [ 3151.936292] ? l2cap_conn_del+0x2aa/0x690 [ 3151.940417] synchronize_rcu+0x98/0x130 [ 3151.944422] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3151.949337] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 3151.954817] ? __mutex_unlock_slowpath+0x75/0x770 [ 3151.959649] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3151.964692] ? wait_for_completion_io+0x10/0x10 [ 3151.969349] hci_chan_del+0x112/0x1e0 [ 3151.973200] l2cap_conn_del+0x426/0x690 [ 3151.977163] ? __mutex_unlock_slowpath+0x75/0x770 [ 3151.982030] ? l2cap_conn_del+0x690/0x690 [ 3151.986163] l2cap_disconn_cfm+0x7c/0xb0 [ 3151.990199] hci_conn_hash_flush+0x127/0x260 [ 3151.994663] hci_dev_do_close+0x535/0xca0 [ 3151.998799] ? __fsnotify_inode_delete+0x20/0x20 [ 3152.003599] hci_unregister_dev+0x17f/0x8c0 [ 3152.007926] ? fcntl_setlk+0xdb0/0xdb0 [ 3152.011890] ? vhci_close_dev+0x50/0x50 [ 3152.015849] vhci_release+0x70/0xe0 [ 3152.019452] __fput+0x25f/0x7a0 [ 3152.022770] task_work_run+0x11f/0x190 [ 3152.026664] do_exit+0xa44/0x2850 [ 3152.030092] ? mm_update_next_owner+0x5b0/0x5b0 [ 3152.034785] ? get_signal+0x323/0x1ca0 [ 3152.038661] ? lock_acquire+0x170/0x3f0 [ 3152.042677] ? lock_downgrade+0x740/0x740 [ 3152.046817] do_group_exit+0x100/0x2e0 [ 3152.050701] get_signal+0x38d/0x1ca0 [ 3152.054470] ? trace_hardirqs_on+0x10/0x10 [ 3152.058711] do_signal+0x7c/0x1550 [ 3152.062286] ? __might_fault+0x104/0x1b0 [ 3152.066336] ? setup_sigcontext+0x820/0x820 [ 3152.070647] ? lock_downgrade+0x740/0x740 [ 3152.074844] ? __might_fault+0x177/0x1b0 [ 3152.078976] ? _copy_to_user+0x82/0xd0 [ 3152.082906] ? SyS_futex+0x1da/0x290 [ 3152.086621] ? SyS_futex+0x1e3/0x290 [ 3152.090326] ? exit_to_usermode_loop+0x41/0x200 [ 3152.095032] exit_to_usermode_loop+0x160/0x200 [ 3152.099601] do_syscall_64+0x4a3/0x640 [ 3152.103512] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.108687] RIP: 0033:0x45e219 [ 3152.111917] RSP: 002b:00007f41bc77bcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3152.119614] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3152.126909] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3152.134213] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3152.141525] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3152.148782] R13: 00007fff7220f41f R14: 00007f41bc77c9c0 R15: 000000000119bf8c [ 3152.156137] INFO: task syz-executor.3:21775 blocked for more than 140 seconds. [ 3152.163549] Not tainted 4.14.215-syzkaller #0 [ 3152.168547] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3152.176544] syz-executor.3 D28552 21775 8010 0x80000000 [ 3152.182214] Call Trace: [ 3152.184790] __schedule+0x88b/0x1de0 [ 3152.188493] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3152.193557] ? io_schedule_timeout+0x140/0x140 [ 3152.198130] schedule+0x8d/0x1b0 [ 3152.201536] _synchronize_rcu_expedited+0x5f6/0x770 [ 3152.206572] ? call_rcu_sched+0x10/0x10 [ 3152.210524] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3152.215560] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.220913] ? trace_hardirqs_on+0x10/0x10 [ 3152.225189] ? wait_woken+0x230/0x230 [ 3152.228980] ? mark_held_locks+0xa6/0xf0 [ 3152.233079] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3152.238291] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3152.243332] ? umount_tree+0x3d0/0xb60 [ 3152.247213] synchronize_rcu+0x98/0x130 [ 3152.251230] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3152.256160] ? lock_downgrade+0x740/0x740 [ 3152.260285] ? up_write+0x17/0x60 [ 3152.263765] drop_collected_mounts+0x147/0x160 [ 3152.268336] ? collect_mounts+0x270/0x270 [ 3152.272529] ? exit_fs+0x113/0x160 [ 3152.276052] put_mnt_ns+0x42/0x60 [ 3152.279480] free_nsproxy+0x40/0x1f0 [ 3152.283246] switch_task_namespaces+0x8f/0xb0 [ 3152.287736] do_exit+0xa3f/0x2850 [ 3152.291244] ? mm_update_next_owner+0x5b0/0x5b0 [ 3152.295900] ? get_signal+0x323/0x1ca0 [ 3152.299780] ? lock_acquire+0x170/0x3f0 [ 3152.303774] ? lock_downgrade+0x740/0x740 [ 3152.307914] do_group_exit+0x100/0x2e0 [ 3152.311837] get_signal+0x38d/0x1ca0 [ 3152.315540] ? trace_hardirqs_on+0x10/0x10 [ 3152.319754] do_signal+0x7c/0x1550 [ 3152.323335] ? __might_fault+0x104/0x1b0 [ 3152.327385] ? setup_sigcontext+0x820/0x820 [ 3152.331740] ? lock_downgrade+0x740/0x740 [ 3152.335875] ? __might_fault+0x177/0x1b0 [ 3152.339923] ? _copy_to_user+0x82/0xd0 [ 3152.343848] ? SyS_futex+0x1da/0x290 [ 3152.347547] ? SyS_futex+0x1e3/0x290 [ 3152.351302] ? exit_to_usermode_loop+0x41/0x200 [ 3152.355961] exit_to_usermode_loop+0x160/0x200 [ 3152.360516] do_syscall_64+0x4a3/0x640 [ 3152.364446] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.369620] RIP: 0033:0x45e219 [ 3152.372849] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3152.380553] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3152.387878] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3152.395191] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3152.402491] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3152.409747] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3152.417074] INFO: task syz-executor.3:22879 blocked for more than 140 seconds. [ 3152.424460] Not tainted 4.14.215-syzkaller #0 [ 3152.429456] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3152.437451] syz-executor.3 D27808 22879 8010 0x80000000 [ 3152.443107] Call Trace: [ 3152.445734] __schedule+0x88b/0x1de0 [ 3152.449423] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3152.454489] ? io_schedule_timeout+0x140/0x140 [ 3152.459060] schedule+0x8d/0x1b0 [ 3152.462460] _synchronize_rcu_expedited+0x5f6/0x770 [ 3152.467464] ? call_rcu_sched+0x10/0x10 [ 3152.471472] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3152.476475] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.481915] ? trace_hardirqs_on+0x10/0x10 [ 3152.486139] ? wait_woken+0x230/0x230 [ 3152.489926] ? mark_held_locks+0xa6/0xf0 [ 3152.494034] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3152.499123] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3152.504175] ? umount_tree+0x3d0/0xb60 [ 3152.508064] synchronize_rcu+0x98/0x130 [ 3152.512072] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3152.516989] ? lock_downgrade+0x740/0x740 [ 3152.521178] ? up_write+0x17/0x60 [ 3152.524618] drop_collected_mounts+0x147/0x160 [ 3152.529267] ? collect_mounts+0x270/0x270 [ 3152.533492] ? exit_fs+0x113/0x160 [ 3152.537020] put_mnt_ns+0x42/0x60 [ 3152.540472] free_nsproxy+0x40/0x1f0 [ 3152.544215] switch_task_namespaces+0x8f/0xb0 [ 3152.548701] do_exit+0xa3f/0x2850 [ 3152.552200] ? mm_update_next_owner+0x5b0/0x5b0 [ 3152.556854] ? get_signal+0x323/0x1ca0 [ 3152.560716] ? lock_acquire+0x170/0x3f0 [ 3152.564703] ? lock_downgrade+0x740/0x740 [ 3152.568840] do_group_exit+0x100/0x2e0 [ 3152.572894] get_signal+0x38d/0x1ca0 [ 3152.576612] ? trace_hardirqs_on+0x10/0x10 [ 3152.580827] do_signal+0x7c/0x1550 [ 3152.584402] ? __might_fault+0x104/0x1b0 [ 3152.588451] ? setup_sigcontext+0x820/0x820 [ 3152.592837] ? lock_downgrade+0x740/0x740 [ 3152.596979] ? __might_fault+0x177/0x1b0 [ 3152.601017] ? _copy_to_user+0x82/0xd0 [ 3152.604957] ? SyS_futex+0x1da/0x290 [ 3152.608657] ? SyS_futex+0x1e3/0x290 [ 3152.612435] ? exit_to_usermode_loop+0x41/0x200 [ 3152.617092] exit_to_usermode_loop+0x160/0x200 [ 3152.621702] do_syscall_64+0x4a3/0x640 [ 3152.625580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.630745] RIP: 0033:0x45e219 [ 3152.633956] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3152.641701] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3152.648955] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3152.656248] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3152.663552] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3152.670807] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3152.678127] INFO: task syz-executor.3:23688 blocked for more than 140 seconds. [ 3152.685528] Not tainted 4.14.215-syzkaller #0 [ 3152.690520] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3152.698533] syz-executor.3 D28264 23688 8010 0x80000000 [ 3152.704189] Call Trace: [ 3152.706869] __schedule+0x88b/0x1de0 [ 3152.710563] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3152.715624] ? io_schedule_timeout+0x140/0x140 [ 3152.720196] schedule+0x8d/0x1b0 [ 3152.723602] _synchronize_rcu_expedited+0x5f6/0x770 [ 3152.728608] ? call_rcu_sched+0x10/0x10 [ 3152.732628] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3152.737664] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.743074] ? trace_hardirqs_on+0x10/0x10 [ 3152.747309] ? wait_woken+0x230/0x230 [ 3152.751138] ? mark_held_locks+0xa6/0xf0 [ 3152.755186] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3152.760283] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3152.765347] ? umount_tree+0x3d0/0xb60 [ 3152.769224] synchronize_rcu+0x98/0x130 [ 3152.773238] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3152.778157] ? lock_downgrade+0x740/0x740 [ 3152.782321] ? up_write+0x17/0x60 [ 3152.785762] drop_collected_mounts+0x147/0x160 [ 3152.790317] ? collect_mounts+0x270/0x270 [ 3152.794500] ? exit_fs+0x113/0x160 [ 3152.798027] put_mnt_ns+0x42/0x60 [ 3152.802275] free_nsproxy+0x40/0x1f0 [ 3152.805988] switch_task_namespaces+0x8f/0xb0 [ 3152.810548] do_exit+0xa3f/0x2850 [ 3152.814048] ? mm_update_next_owner+0x5b0/0x5b0 [ 3152.818703] ? get_signal+0x323/0x1ca0 [ 3152.822631] ? lock_acquire+0x170/0x3f0 [ 3152.826608] ? lock_downgrade+0x740/0x740 [ 3152.830732] do_group_exit+0x100/0x2e0 [ 3152.834656] get_signal+0x38d/0x1ca0 [ 3152.838360] ? trace_hardirqs_on+0x10/0x10 [ 3152.842632] do_signal+0x7c/0x1550 [ 3152.846162] ? __might_fault+0x104/0x1b0 [ 3152.850198] ? setup_sigcontext+0x820/0x820 [ 3152.854550] ? lock_downgrade+0x740/0x740 [ 3152.858684] ? __might_fault+0x177/0x1b0 [ 3152.862761] ? _copy_to_user+0x82/0xd0 [ 3152.866642] ? SyS_futex+0x1da/0x290 [ 3152.870329] ? SyS_futex+0x1e3/0x290 [ 3152.874075] ? exit_to_usermode_loop+0x41/0x200 [ 3152.878733] exit_to_usermode_loop+0x160/0x200 [ 3152.883456] do_syscall_64+0x4a3/0x640 [ 3152.887338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3152.892562] RIP: 0033:0x45e219 [ 3152.895734] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3152.903474] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3152.910729] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3152.918033] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3152.925413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3152.932734] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3152.940012] INFO: task syz-executor.3:23693 blocked for more than 140 seconds. [ 3152.947408] Not tainted 4.14.215-syzkaller #0 [ 3152.952473] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3152.960424] syz-executor.3 D29072 23693 8010 0x80000000 [ 3152.966096] Call Trace: [ 3152.968678] __schedule+0x88b/0x1de0 [ 3152.972431] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3152.977439] ? io_schedule_timeout+0x140/0x140 [ 3152.982060] schedule+0x8d/0x1b0 [ 3152.985417] _synchronize_rcu_expedited+0x5f6/0x770 [ 3152.990424] ? call_rcu_sched+0x10/0x10 [ 3152.994431] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3152.999435] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.004833] ? trace_hardirqs_on+0x10/0x10 [ 3153.009057] ? wait_woken+0x230/0x230 [ 3153.012902] ? mark_held_locks+0xa6/0xf0 [ 3153.016951] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3153.022084] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3153.027087] ? umount_tree+0x3d0/0xb60 [ 3153.030955] synchronize_rcu+0x98/0x130 [ 3153.034963] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3153.039933] ? lock_downgrade+0x740/0x740 [ 3153.044115] ? up_write+0x17/0x60 [ 3153.047559] drop_collected_mounts+0x147/0x160 [ 3153.052182] ? collect_mounts+0x270/0x270 [ 3153.056316] ? exit_fs+0x113/0x160 [ 3153.059857] put_mnt_ns+0x42/0x60 [ 3153.063345] free_nsproxy+0x40/0x1f0 [ 3153.067047] switch_task_namespaces+0x8f/0xb0 [ 3153.071576] do_exit+0xa3f/0x2850 [ 3153.075023] ? futex_lock_pi_atomic+0x221/0x2e0 [ 3153.079704] ? mm_update_next_owner+0x5b0/0x5b0 [ 3153.084403] ? get_signal+0x323/0x1ca0 [ 3153.088281] ? lock_acquire+0x170/0x3f0 [ 3153.092294] ? lock_downgrade+0x740/0x740 [ 3153.096428] do_group_exit+0x100/0x2e0 [ 3153.100292] get_signal+0x38d/0x1ca0 [ 3153.104049] ? trace_hardirqs_on+0x10/0x10 [ 3153.108293] do_signal+0x7c/0x1550 [ 3153.111878] ? __might_fault+0x104/0x1b0 [ 3153.115927] ? setup_sigcontext+0x820/0x820 [ 3153.120222] ? lock_downgrade+0x740/0x740 [ 3153.124410] ? __might_fault+0x177/0x1b0 [ 3153.128458] ? _copy_to_user+0x82/0xd0 [ 3153.132393] ? SyS_futex+0x1da/0x290 [ 3153.136092] ? SyS_futex+0x1e3/0x290 [ 3153.139782] ? exit_to_usermode_loop+0x41/0x200 [ 3153.144475] exit_to_usermode_loop+0x160/0x200 [ 3153.149044] do_syscall_64+0x4a3/0x640 [ 3153.152974] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.158148] RIP: 0033:0x45e219 [ 3153.161367] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3153.169060] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3153.176362] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3153.183708] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3153.190960] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3153.198253] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3153.205593] INFO: task syz-executor.3:23760 blocked for more than 140 seconds. [ 3153.212995] Not tainted 4.14.215-syzkaller #0 [ 3153.217999] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3153.225975] syz-executor.3 D28552 23760 8010 0x80000002 [ 3153.231662] Call Trace: [ 3153.234235] __schedule+0x88b/0x1de0 [ 3153.237924] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3153.242985] ? io_schedule_timeout+0x140/0x140 [ 3153.247553] schedule+0x8d/0x1b0 [ 3153.250911] _synchronize_rcu_expedited+0x5f6/0x770 [ 3153.255964] ? call_rcu_sched+0x10/0x10 [ 3153.259947] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3153.265003] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.270354] ? trace_hardirqs_on+0x10/0x10 [ 3153.274624] ? wait_woken+0x230/0x230 [ 3153.278415] ? mark_held_locks+0xa6/0xf0 [ 3153.282524] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3153.287628] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3153.292691] ? umount_tree+0x3d0/0xb60 [ 3153.296571] synchronize_rcu+0x98/0x130 [ 3153.300521] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3153.305497] ? lock_downgrade+0x740/0x740 [ 3153.309632] ? up_write+0x17/0x60 [ 3153.313123] drop_collected_mounts+0x147/0x160 [ 3153.317692] ? collect_mounts+0x270/0x270 [ 3153.321866] ? exit_fs+0x113/0x160 [ 3153.325393] put_mnt_ns+0x42/0x60 [ 3153.328823] free_nsproxy+0x40/0x1f0 [ 3153.332576] switch_task_namespaces+0x8f/0xb0 [ 3153.337058] do_exit+0xa3f/0x2850 [ 3153.340488] ? mm_update_next_owner+0x5b0/0x5b0 [ 3153.345192] ? get_signal+0x323/0x1ca0 [ 3153.349069] ? lock_acquire+0x170/0x3f0 [ 3153.353093] ? lock_downgrade+0x740/0x740 [ 3153.357231] do_group_exit+0x100/0x2e0 [ 3153.361137] get_signal+0x38d/0x1ca0 [ 3153.364842] ? trace_hardirqs_on+0x10/0x10 [ 3153.369052] do_signal+0x7c/0x1550 [ 3153.372641] ? __might_fault+0x104/0x1b0 [ 3153.376690] ? setup_sigcontext+0x820/0x820 [ 3153.380990] ? lock_downgrade+0x740/0x740 [ 3153.385175] ? __might_fault+0x177/0x1b0 [ 3153.389213] ? _copy_to_user+0x82/0xd0 [ 3153.393183] ? SyS_futex+0x1da/0x290 [ 3153.396886] ? SyS_futex+0x1e3/0x290 [ 3153.400578] ? exit_to_usermode_loop+0x41/0x200 [ 3153.405280] exit_to_usermode_loop+0x160/0x200 [ 3153.409857] do_syscall_64+0x4a3/0x640 [ 3153.413794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.419106] RIP: 0033:0x45e219 [ 3153.422309] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3153.430006] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3153.437298] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3153.444635] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3153.451947] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3153.459222] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3153.466532] INFO: task syz-executor.3:23764 blocked for more than 140 seconds. [ 3153.473947] Not tainted 4.14.215-syzkaller #0 [ 3153.478948] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3153.486948] syz-executor.3 D29072 23764 8010 0x80000002 [ 3153.492644] Call Trace: [ 3153.495354] __schedule+0x88b/0x1de0 [ 3153.499046] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3153.504100] ? io_schedule_timeout+0x140/0x140 [ 3153.508673] schedule+0x8d/0x1b0 [ 3153.512128] _synchronize_rcu_expedited+0x5f6/0x770 [ 3153.517149] ? call_rcu_sched+0x10/0x10 [ 3153.521156] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3153.526162] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.531574] ? trace_hardirqs_on+0x10/0x10 [ 3153.535796] ? wait_woken+0x230/0x230 [ 3153.539571] ? mark_held_locks+0xa6/0xf0 [ 3153.543654] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 3153.548747] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3153.553804] ? umount_tree+0x3d0/0xb60 [ 3153.557694] synchronize_rcu+0x98/0x130 [ 3153.561706] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3153.566637] ? lock_downgrade+0x740/0x740 [ 3153.570760] ? up_write+0x17/0x60 [ 3153.574250] drop_collected_mounts+0x147/0x160 [ 3153.578821] ? collect_mounts+0x270/0x270 [ 3153.582984] ? exit_fs+0x113/0x160 [ 3153.586513] put_mnt_ns+0x42/0x60 [ 3153.589943] free_nsproxy+0x40/0x1f0 [ 3153.593706] switch_task_namespaces+0x8f/0xb0 [ 3153.598188] do_exit+0xa3f/0x2850 [ 3153.601669] ? futex_lock_pi_atomic+0x221/0x2e0 [ 3153.606328] ? mm_update_next_owner+0x5b0/0x5b0 [ 3153.611021] ? get_signal+0x323/0x1ca0 [ 3153.614901] ? lock_acquire+0x170/0x3f0 [ 3153.618906] ? lock_downgrade+0x740/0x740 [ 3153.623089] do_group_exit+0x100/0x2e0 [ 3153.626967] get_signal+0x38d/0x1ca0 [ 3153.630658] ? trace_hardirqs_on+0x10/0x10 [ 3153.634933] do_signal+0x7c/0x1550 [ 3153.638462] ? __might_fault+0x104/0x1b0 [ 3153.642565] ? setup_sigcontext+0x820/0x820 [ 3153.646873] ? lock_downgrade+0x740/0x740 [ 3153.651067] ? __might_fault+0x177/0x1b0 [ 3153.655187] ? _copy_to_user+0x82/0xd0 [ 3153.659085] ? SyS_futex+0x1da/0x290 [ 3153.662848] ? SyS_futex+0x1e3/0x290 [ 3153.666550] ? exit_to_usermode_loop+0x41/0x200 [ 3153.671251] exit_to_usermode_loop+0x160/0x200 [ 3153.675824] do_syscall_64+0x4a3/0x640 [ 3153.679691] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.684916] RIP: 0033:0x45e219 [ 3153.688088] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3153.695812] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3153.703124] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3153.710472] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3153.717769] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3153.725089] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3153.732414] INFO: task syz-executor.3:24689 blocked for more than 140 seconds. [ 3153.739759] Not tainted 4.14.215-syzkaller #0 [ 3153.744810] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3153.752806] syz-executor.3 D27808 24689 8010 0x80000002 [ 3153.758424] Call Trace: [ 3153.761123] __schedule+0x88b/0x1de0 [ 3153.764827] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3153.769819] ? io_schedule_timeout+0x140/0x140 [ 3153.774427] schedule+0x8d/0x1b0 [ 3153.777783] _synchronize_rcu_expedited+0x5f6/0x770 [ 3153.782845] ? call_rcu_sched+0x10/0x10 [ 3153.786822] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3153.791876] ? check_preemption_disabled+0x35/0x240 [ 3153.796880] ? wait_woken+0x230/0x230 [ 3153.800658] ? __lock_acquire+0x5fc/0x3f20 [ 3153.804918] ? trace_hardirqs_on+0x10/0x10 [ 3153.809140] ? trace_hardirqs_on+0x10/0x10 [ 3153.813427] ? lock_acquire+0x170/0x3f0 [ 3153.817390] ? trace_hardirqs_on+0x10/0x10 [ 3153.821665] synchronize_rcu+0x98/0x130 [ 3153.825630] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3153.830534] ? put_ipc_ns.part.0+0x1f/0x120 [ 3153.834884] ? lock_downgrade+0x740/0x740 [ 3153.839022] ? do_raw_spin_unlock+0x164/0x220 [ 3153.843549] kern_unmount+0x53/0xc0 [ 3153.847165] put_ipc_ns.part.0+0x27/0x120 [ 3153.851343] put_ipc_ns+0x2f/0x40 [ 3153.854794] free_nsproxy+0xbd/0x1f0 [ 3153.858527] switch_task_namespaces+0x8f/0xb0 [ 3153.863050] do_exit+0xa3f/0x2850 [ 3153.866494] ? mm_update_next_owner+0x5b0/0x5b0 [ 3153.871196] ? get_signal+0x323/0x1ca0 [ 3153.875072] ? lock_acquire+0x170/0x3f0 [ 3153.879020] ? lock_downgrade+0x740/0x740 [ 3153.883201] do_group_exit+0x100/0x2e0 [ 3153.887076] get_signal+0x38d/0x1ca0 [ 3153.890768] ? _raw_spin_unlock+0x29/0x40 [ 3153.894937] ? do_wp_page+0x24d/0x1db0 [ 3153.898814] ? __handle_mm_fault+0x129c/0x4620 [ 3153.903438] do_signal+0x7c/0x1550 [ 3153.906965] ? __handle_mm_fault+0x80f/0x4620 [ 3153.911506] ? setup_sigcontext+0x820/0x820 [ 3153.915814] ? vm_insert_page+0x7c0/0x7c0 [ 3153.919938] ? lock_downgrade+0x740/0x740 [ 3153.924239] ? __do_page_fault+0x571/0xad0 [ 3153.928469] ? SyS_futex+0x1da/0x290 [ 3153.932212] ? SyS_futex+0x1e3/0x290 [ 3153.935919] ? exit_to_usermode_loop+0x41/0x200 [ 3153.940561] exit_to_usermode_loop+0x160/0x200 [ 3153.945185] do_syscall_64+0x4a3/0x640 [ 3153.949062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3153.954283] RIP: 0033:0x45e219 [ 3153.957460] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3153.965194] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3153.972511] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3153.979766] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3153.987071] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3153.994366] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3154.001695] INFO: task syz-executor.3:32243 blocked for more than 140 seconds. [ 3154.009047] Not tainted 4.14.215-syzkaller #0 [ 3154.014112] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3154.022109] syz-executor.3 D29072 32243 8010 0x80000002 [ 3154.027722] Call Trace: [ 3154.030288] __schedule+0x88b/0x1de0 [ 3154.034024] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 3154.039034] ? io_schedule_timeout+0x140/0x140 [ 3154.043651] schedule+0x8d/0x1b0 [ 3154.047004] _synchronize_rcu_expedited+0x5f6/0x770 [ 3154.052065] ? call_rcu_sched+0x10/0x10 [ 3154.056055] ? sync_rcu_exp_select_cpus+0xd40/0xd40 [ 3154.061099] ? __lock_acquire+0x5fc/0x3f20 [ 3154.065333] ? wait_woken+0x230/0x230 [ 3154.069111] ? lock_acquire+0x170/0x3f0 [ 3154.073114] ? packet_release+0x544/0xa80 [ 3154.077255] ? packet_release+0x544/0xa80 [ 3154.081453] ? packet_release+0x73b/0xa80 [ 3154.085594] synchronize_rcu+0x98/0x130 [ 3154.089562] ? synchronize_rcu_expedited+0xa0/0xa0 [ 3154.094517] ? __mutex_unlock_slowpath+0x75/0x770 [ 3154.099349] ? __local_bh_enable_ip+0xc1/0x170 [ 3154.103968] synchronize_net+0x3a/0x40 [ 3154.107842] packet_release+0x740/0xa80 [ 3154.111858] ? packet_set_ring+0x1a20/0x1a20 [ 3154.116259] __sock_release+0xcd/0x2b0 [ 3154.120122] ? __sock_release+0x2b0/0x2b0 [ 3154.124323] sock_close+0x15/0x20 [ 3154.127774] __fput+0x25f/0x7a0 [ 3154.131096] task_work_run+0x11f/0x190 [ 3154.134974] do_exit+0xa44/0x2850 [ 3154.138404] ? mm_update_next_owner+0x5b0/0x5b0 [ 3154.143102] ? get_signal+0x323/0x1ca0 [ 3154.146979] ? lock_acquire+0x170/0x3f0 [ 3154.150974] ? lock_downgrade+0x740/0x740 [ 3154.155109] do_group_exit+0x100/0x2e0 [ 3154.158972] get_signal+0x38d/0x1ca0 [ 3154.162720] ? trace_hardirqs_on+0x10/0x10 [ 3154.166941] do_signal+0x7c/0x1550 [ 3154.170459] ? __might_fault+0x104/0x1b0 [ 3154.174574] ? setup_sigcontext+0x820/0x820 [ 3154.178880] ? lock_downgrade+0x740/0x740 [ 3154.183061] ? __might_fault+0x177/0x1b0 [ 3154.187109] ? _copy_to_user+0x82/0xd0 [ 3154.191023] ? SyS_futex+0x1da/0x290 [ 3154.194719] ? SyS_futex+0x1e3/0x290 [ 3154.198410] ? exit_to_usermode_loop+0x41/0x200 [ 3154.203223] exit_to_usermode_loop+0x160/0x200 [ 3154.207792] do_syscall_64+0x4a3/0x640 [ 3154.211743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3154.216919] RIP: 0033:0x45e219 [ 3154.220089] RSP: 002b:00007f0d8dffecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3154.227825] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 3154.235129] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 3154.242443] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 3154.249699] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 3154.257004] R13: 00007ffc5e439e8f R14: 00007f0d8dfff9c0 R15: 000000000119bf8c [ 3154.264716] [ 3154.264716] Showing all locks held in the system: [ 3154.271066] 1 lock held by khungtaskd/1530: [ 3154.275537] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 3154.284630] 1 lock held by syz-executor.0/17565: [ 3154.289368] #0: (rcu_preempt_state.exp_mutex){+.+.}, at: [] _synchronize_rcu_expedited+0x32d/0x770 [ 3154.300259] 3 locks held by syz-executor.0/18622: [ 3154.305168] #0: (&hdev->req_lock){+.+.}, at: [] hci_dev_do_close+0x109/0xca0 [ 3154.314148] #1: (&hdev->lock){+.+.}, at: [] hci_dev_do_close+0x21c/0xca0 [ 3154.322783] #2: (hci_cb_list_lock){+.+.}, at: [] hci_conn_hash_flush+0xda/0x260 [ 3154.332040] 1 lock held by syz-executor.3/32243: [ 3154.336785] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.346542] 1 lock held by syz-executor.3/32249: [ 3154.351341] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.361114] 1 lock held by syz-executor.3/32285: [ 3154.366125] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.375864] 1 lock held by syz-executor.3/32304: [ 3154.380601] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.390361] 1 lock held by syz-executor.3/32327: [ 3154.395153] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.404910] 1 lock held by syz-executor.3/32349: [ 3154.409649] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.419386] 1 lock held by syz-executor.3/32376: [ 3154.424306] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.434191] 1 lock held by syz-executor.3/32395: [ 3154.438982] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.448747] 2 locks held by kworker/0:21/4466: [ 3154.453365] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.461830] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.470985] 1 lock held by syz-executor.3/13758: [ 3154.475724] #0: (&sb->s_type->i_mutex_key#13){+.+.}, at: [] __sock_release+0x86/0x2b0 [ 3154.485497] 2 locks held by kworker/1:2/14510: [ 3154.490062] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.498501] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.507683] 2 locks held by kworker/0:49/14648: [ 3154.512390] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.521004] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.530121] 3 locks held by kworker/u4:4/1599: [ 3154.534748] #0: ("%s""netns"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.543490] #1: (net_cleanup_work){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.552641] #2: (net_mutex){+.+.}, at: [] cleanup_net+0x110/0x840 [ 3154.560613] 2 locks held by kworker/0:0/6572: [ 3154.565154] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.573620] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.582787] 2 locks held by kworker/1:0/16124: [ 3154.587371] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.595888] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.605101] 2 locks held by kworker/1:1/7250: [ 3154.609582] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.618032] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.627200] 2 locks held by kworker/0:1/7251: [ 3154.631729] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.640129] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.649289] 2 locks held by kworker/0:2/7252: [ 3154.653874] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.662335] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.671486] 2 locks held by kworker/1:3/7254: [ 3154.675962] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.684436] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.693601] 2 locks held by kworker/0:3/7255: [ 3154.698074] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.706563] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.715753] 2 locks held by kworker/1:4/7256: [ 3154.720236] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.728699] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.737855] 2 locks held by kworker/0:4/7258: [ 3154.742378] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.750784] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.759987] 2 locks held by kworker/0:5/7260: [ 3154.764526] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.773028] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.782198] 2 locks held by kworker/1:5/7263: [ 3154.786695] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.795125] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.804339] 2 locks held by kworker/1:6/7267: [ 3154.808865] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.817306] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.826483] 2 locks held by kworker/0:6/7268: [ 3154.831013] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.839414] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.848574] 2 locks held by kworker/1:7/7270: [ 3154.853107] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.861568] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.870666] 2 locks held by kworker/0:7/7273: [ 3154.875193] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.883862] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.893020] 2 locks held by kworker/1:8/7275: [ 3154.897494] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.905918] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.915061] 2 locks held by kworker/1:9/7281: [ 3154.919536] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.928218] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.937354] 2 locks held by kworker/0:8/7282: [ 3154.941861] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.950266] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.959385] 2 locks held by kworker/1:10/7286: [ 3154.964024] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.972477] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3154.981608] 2 locks held by kworker/1:11/7289: [ 3154.986176] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3154.994722] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.003856] 2 locks held by kworker/0:9/7290: [ 3155.008331] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.016750] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.025900] 2 locks held by kworker/1:12/7292: [ 3155.030460] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.038883] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.048035] 2 locks held by kworker/0:10/7294: [ 3155.052645] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.061096] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.070194] 2 locks held by kworker/1:13/7296: [ 3155.074781] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.083218] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.092357] 2 locks held by kworker/0:11/7301: [ 3155.096922] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.105360] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.114498] 2 locks held by kworker/0:12/7303: [ 3155.119058] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.127480] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.136617] 2 locks held by kworker/0:13/7305: [ 3155.141209] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.149626] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.158753] 2 locks held by kworker/1:14/7306: [ 3155.163348] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.171794] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.180938] 2 locks held by kworker/1:15/7309: [ 3155.185497] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.193915] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.203077] 2 locks held by kworker/0:14/7310: [ 3155.207640] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.216060] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.225195] 2 locks held by kworker/0:15/7313: [ 3155.229757] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.238192] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.247327] 2 locks held by kworker/1:16/7314: [ 3155.251939] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.260358] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.269476] 2 locks held by kworker/1:17/7317: [ 3155.274075] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.282510] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.291828] 2 locks held by kworker/0:16/7319: [ 3155.296396] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.304933] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.314071] 2 locks held by kworker/1:18/7320: [ 3155.318634] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.327069] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.336207] 2 locks held by kworker/1:19/7321: [ 3155.340770] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.349215] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.358364] 2 locks held by kworker/1:20/7322: [ 3155.362973] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.371430] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.380528] 2 locks held by kworker/1:21/7323: [ 3155.385111] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.393567] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.402704] 2 locks held by kworker/0:17/7324: [ 3155.407267] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.415750] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.424899] 2 locks held by kworker/0:18/7326: [ 3155.429457] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.437895] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.447039] 2 locks held by kworker/0:19/7329: [ 3155.451652] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.460056] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.469210] 2 locks held by kworker/0:20/7331: [ 3155.473807] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.482240] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.492347] 2 locks held by kworker/0:22/7333: [ 3155.496907] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.505350] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.514489] 2 locks held by kworker/0:23/7335: [ 3155.519050] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.527604] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.536785] 2 locks held by kworker/0:24/7338: [ 3155.541403] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.549808] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.558935] 2 locks held by kworker/1:30/7341: [ 3155.563531] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.571975] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.581121] 2 locks held by kworker/1:31/7342: [ 3155.585700] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.594120] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.603257] 2 locks held by kworker/0:25/7343: [ 3155.607818] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.616240] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.625397] 2 locks held by kworker/1:32/7344: [ 3155.629958] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.638390] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.647526] 2 locks held by kworker/0:26/7345: [ 3155.652138] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.660539] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.669661] 2 locks held by kworker/1:33/7347: [ 3155.674278] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.682712] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.691855] 2 locks held by kworker/0:27/7349: [ 3155.696415] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.704846] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.713982] 2 locks held by kworker/1:34/7350: [ 3155.718546] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.726965] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.736102] 2 locks held by kworker/0:28/7352: [ 3155.740664] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.749085] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.758222] 2 locks held by kworker/1:35/7353: [ 3155.762904] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.771353] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.780454] 2 locks held by kworker/0:29/7354: [ 3155.785039] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.793493] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.803671] 2 locks held by kworker/1:36/7356: [ 3155.808235] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.816761] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.825897] 2 locks held by kworker/0:30/7357: [ 3155.830458] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.838879] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.848015] 2 locks held by kworker/1:37/7358: [ 3155.852626] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.861064] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.870158] 2 locks held by kworker/0:31/7359: [ 3155.874743] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.883181] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.892324] 2 locks held by kworker/1:38/7360: [ 3155.896886] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.905307] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.914448] 2 locks held by kworker/1:39/7361: [ 3155.919038] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.927465] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.936623] 2 locks held by kworker/1:40/7362: [ 3155.941219] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.949626] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.958747] 2 locks held by kworker/1:41/7363: [ 3155.963343] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.971787] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3155.980922] 2 locks held by kworker/1:42/7364: [ 3155.985497] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3155.993920] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.003066] 2 locks held by kworker/1:43/7366: [ 3156.007630] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.016054] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.025192] 2 locks held by kworker/1:44/7367: [ 3156.029755] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.038177] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.047314] 2 locks held by kworker/1:45/7368: [ 3156.051923] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.060328] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.069448] 2 locks held by kworker/0:32/7370: [ 3156.074066] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.082517] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.091667] 2 locks held by kworker/0:33/7374: [ 3156.096227] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.104644] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.113778] 2 locks held by kworker/0:34/7375: [ 3156.118340] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.126760] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.135896] 2 locks held by kworker/0:35/7376: [ 3156.140458] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.148896] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.158029] 2 locks held by kworker/0:36/7377: [ 3156.162624] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.171077] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.180175] 2 locks held by kworker/1:46/7378: [ 3156.184759] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.193214] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.202345] 2 locks held by kworker/0:37/7380: [ 3156.206905] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.215325] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.224476] 2 locks held by kworker/1:47/7383: [ 3156.229036] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.237558] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.246693] 2 locks held by kworker/0:38/7384: [ 3156.251304] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.259704] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.268825] 2 locks held by kworker/1:49/7385: [ 3156.273439] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.281900] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.291048] 2 locks held by kworker/1:50/7386: [ 3156.295725] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.304150] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.313392] 2 locks held by kworker/1:51/7387: [ 3156.317954] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.326401] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.335542] 2 locks held by kworker/1:52/7388: [ 3156.340105] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.348531] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.357807] 2 locks held by kworker/0:39/7390: [ 3156.362446] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.370902] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.380040] 2 locks held by kworker/1:54/7391: [ 3156.384629] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.393085] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.402219] 2 locks held by kworker/0:40/7392: [ 3156.406807] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.415577] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.424713] 2 locks held by kworker/1:55/7394: [ 3156.429274] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.437696] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.446879] 2 locks held by kworker/0:41/30531: [ 3156.451576] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.459979] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.469101] 2 locks held by kworker/0:42/30532: [ 3156.473787] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.482231] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.491384] 1 lock held by in:imklog/32484: [ 3156.495707] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x1fb/0x2b0 [ 3156.504188] 1 lock held by syz-executor.2/754: [ 3156.508749] #0: (net_mutex){+.+.}, at: [] copy_net_ns+0x156/0x440 [ 3156.516745] 2 locks held by kworker/1:22/768: [ 3156.521261] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.529661] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.538780] 2 locks held by kworker/0:43/769: [ 3156.543291] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.551738] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.560879] 2 locks held by kworker/1:23/770: [ 3156.565359] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.573781] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.582927] 2 locks held by kworker/0:44/771: [ 3156.587401] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.595824] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.604972] 2 locks held by kworker/1:24/773: [ 3156.609495] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.617940] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.627079] 2 locks held by kworker/1:25/775: [ 3156.631605] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.640011] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.649141] 2 locks held by kworker/0:45/776: [ 3156.653716] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.662188] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.671334] 2 locks held by kworker/1:26/777: [ 3156.675805] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.684221] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.693372] 2 locks held by kworker/1:27/778: [ 3156.697891] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.706309] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.715446] 2 locks held by kworker/0:46/779: [ 3156.719935] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.728358] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.737518] 2 locks held by kworker/1:28/780: [ 3156.742029] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.750434] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.759556] 2 locks held by kworker/0:47/781: [ 3156.764082] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.772529] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.781658] 2 locks held by kworker/1:29/782: [ 3156.786134] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.794555] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.803696] 2 locks held by kworker/0:48/784: [ 3156.808170] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.816616] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.825755] 2 locks held by kworker/1:48/785: [ 3156.830230] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.838745] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.847901] 2 locks held by kworker/0:50/786: [ 3156.852426] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.860867] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.869962] 2 locks held by kworker/1:53/787: [ 3156.874483] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.882930] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.892075] 2 locks held by kworker/0:51/788: [ 3156.896554] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.904990] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.914129] 2 locks held by kworker/0:52/790: [ 3156.918626] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.927061] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.936199] 2 locks held by kworker/0:53/791: [ 3156.940673] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.949105] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.958242] 2 locks held by kworker/1:56/792: [ 3156.962751] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.971198] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3156.980298] 2 locks held by kworker/0:54/794: [ 3156.984811] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3156.993268] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.002400] 2 locks held by kworker/0:55/797: [ 3157.006876] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.015299] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.024447] 2 locks held by kworker/1:57/798: [ 3157.028934] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.037355] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.046493] 2 locks held by kworker/0:56/799: [ 3157.051017] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.059417] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.068550] 2 locks held by kworker/1:58/801: [ 3157.073076] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.081515] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.090627] 2 locks held by kworker/1:59/802: [ 3157.095132] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.103574] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.112717] 2 locks held by kworker/1:60/803: [ 3157.117194] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.125615] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.134874] 2 locks held by kworker/0:57/804: [ 3157.139345] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.147774] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.156928] 2 locks held by kworker/0:58/805: [ 3157.161438] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.169849] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.178968] 2 locks held by kworker/1:61/806: [ 3157.183480] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.191927] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.201071] 2 locks held by kworker/0:59/807: [ 3157.205547] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.213971] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.223108] 2 locks held by kworker/0:60/808: [ 3157.227584] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.236025] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.245164] 2 locks held by kworker/1:62/809: [ 3157.249640] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.258067] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.267204] 2 locks held by kworker/0:61/810: [ 3157.271727] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.280128] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.289260] 2 locks held by kworker/1:63/811: [ 3157.293771] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.302200] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.311345] 2 locks held by kworker/1:64/812: [ 3157.315827] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.324246] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.333393] 2 locks held by kworker/0:62/813: [ 3157.337868] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.346284] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.355416] 2 locks held by kworker/1:65/814: [ 3157.359894] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.368314] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.377477] 2 locks held by kworker/0:63/815: [ 3157.381985] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.390389] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.399512] 2 locks held by kworker/1:66/816: [ 3157.404021] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.412467] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.421600] 2 locks held by kworker/0:64/817: [ 3157.426076] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.434503] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.443639] 2 locks held by kworker/1:67/818: [ 3157.448113] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.456535] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.465676] 2 locks held by kworker/0:65/819: [ 3157.470150] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.478837] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.487982] 2 locks held by kworker/1:68/821: [ 3157.492526] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.500972] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.510109] 2 locks held by kworker/0:66/823: [ 3157.514612] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.523057] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.532294] 2 locks held by kworker/1:69/824: [ 3157.536777] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.545204] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.554342] 2 locks held by kworker/0:67/825: [ 3157.558827] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.567284] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.576436] 2 locks held by kworker/1:70/826: [ 3157.581044] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.589485] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.598604] 2 locks held by kworker/0:68/827: [ 3157.603114] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.611573] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.620819] 2 locks held by kworker/1:71/828: [ 3157.625296] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.633766] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.642905] 2 locks held by kworker/0:69/829: [ 3157.647380] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.655799] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.664944] 2 locks held by kworker/0:70/830: [ 3157.669417] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.677837] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.686988] 2 locks held by kworker/1:72/831: [ 3157.691516] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.700006] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.709123] 2 locks held by kworker/0:71/832: [ 3157.713632] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.722064] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.731213] 2 locks held by kworker/1:73/833: [ 3157.735688] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.744110] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.753258] 2 locks held by kworker/1:74/834: [ 3157.757733] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.766153] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.775285] 2 locks held by kworker/0:72/835: [ 3157.779807] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.788249] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.797386] 2 locks held by kworker/0:73/836: [ 3157.801895] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.810300] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.819417] 2 locks held by kworker/1:75/837: [ 3157.823928] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.832375] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.841510] 2 locks held by kworker/0:74/838: [ 3157.845983] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.854418] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.863555] 2 locks held by kworker/0:75/839: [ 3157.868029] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.876449] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.885586] 2 locks held by kworker/1:76/840: [ 3157.890060] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.898500] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.907651] 2 locks held by kworker/0:76/841: [ 3157.912176] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.920576] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.929695] 2 locks held by kworker/1:77/842: [ 3157.934208] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.942644] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.951792] 2 locks held by kworker/0:77/843: [ 3157.956266] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.964684] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.973822] 2 locks held by kworker/0:78/844: [ 3157.978299] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3157.986717] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3157.995855] 2 locks held by kworker/1:78/845: [ 3158.000330] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.008756] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.017893] 2 locks held by kworker/0:79/846: [ 3158.022404] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.030942] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.040058] 2 locks held by kworker/0:80/847: [ 3158.044556] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.053019] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.062171] 2 locks held by kworker/0:81/848: [ 3158.066646] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.075084] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.084236] 2 locks held by kworker/1:79/849: [ 3158.088713] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.097134] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.106272] 2 locks held by kworker/1:80/850: [ 3158.110794] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.119194] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.128314] 2 locks held by kworker/0:82/851: [ 3158.132834] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.141268] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.150368] 3 locks held by kworker/1:81/852: [ 3158.154869] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.163310] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.172451] #2: (rcu_preempt_state.exp_mutex){+.+.}, at: [] _synchronize_rcu_expedited+0x32d/0x770 [ 3158.183324] 2 locks held by kworker/0:83/853: [ 3158.187798] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.196237] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.205375] 2 locks held by kworker/0:84/854: [ 3158.209855] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.218285] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.227441] 2 locks held by kworker/1:82/855: [ 3158.231965] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.240365] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.249489] 2 locks held by kworker/0:85/856: [ 3158.253999] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.262429] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.271579] 2 locks held by kworker/1:83/857: [ 3158.276248] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.284681] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.293822] 2 locks held by kworker/0:86/858: [ 3158.298296] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.306739] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.315881] 2 locks held by kworker/1:84/859: [ 3158.320357] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.328896] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.338032] 2 locks held by kworker/0:87/860: [ 3158.342541] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.350998] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.360104] 2 locks held by kworker/1:85/861: [ 3158.364625] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.373083] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.382347] 2 locks held by kworker/0:88/862: [ 3158.386941] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.395458] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.404608] 2 locks held by kworker/1:86/863: [ 3158.409083] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.417514] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.426671] 2 locks held by kworker/0:89/864: [ 3158.431207] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.439626] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.448835] 2 locks held by kworker/0:90/865: [ 3158.453360] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.461813] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.470964] 2 locks held by kworker/1:87/866: [ 3158.475456] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.483907] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.493062] 2 locks held by kworker/0:91/867: [ 3158.497577] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.506002] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.515138] 2 locks held by kworker/1:88/868: [ 3158.519618] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.528044] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.537424] 2 locks held by kworker/1:89/869: [ 3158.541952] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.550357] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.559475] 2 locks held by kworker/1:90/870: [ 3158.564019] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.572474] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.581611] 2 locks held by kworker/0:92/871: [ 3158.586087] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.594509] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.603655] 2 locks held by kworker/1:91/872: [ 3158.608132] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.616610] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.625760] 2 locks held by kworker/1:92/873: [ 3158.630234] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.638656] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.647823] 2 locks held by kworker/1:93/874: [ 3158.652363] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.660809] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.669925] 2 locks held by kworker/1:94/875: [ 3158.674430] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.682870] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.692013] 2 locks held by kworker/1:95/876: [ 3158.696509] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.704930] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.714065] 2 locks held by kworker/1:96/877: [ 3158.718555] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.726975] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.736116] 2 locks held by kworker/1:97/878: [ 3158.740633] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.749057] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.758177] 2 locks held by kworker/1:98/881: [ 3158.762692] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.771137] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.780251] 2 locks held by kworker/0:93/882: [ 3158.784752] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.793205] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.802355] 2 locks held by kworker/1:99/883: [ 3158.806833] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.815257] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.824394] 2 locks held by kworker/1:100/884: [ 3158.828954] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.837390] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.846527] 2 locks held by kworker/1:101/885: [ 3158.851140] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.859542] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.868696] 2 locks held by kworker/1:102/886: [ 3158.873306] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.881753] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.890898] 2 locks held by kworker/1:103/887: [ 3158.895458] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.903877] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.913026] 2 locks held by kworker/1:104/888: [ 3158.917588] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.926014] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.935149] 2 locks held by kworker/1:105/890: [ 3158.939726] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.948147] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.957298] 2 locks held by kworker/0:94/891: [ 3158.961806] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.970297] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3158.979416] 2 locks held by kworker/1:106/892: [ 3158.984013] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3158.992461] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.001591] 2 locks held by kworker/0:95/893: [ 3159.006065] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.014485] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.023625] 2 locks held by kworker/0:96/894: [ 3159.028127] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.036551] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.045716] 2 locks held by kworker/1:107/895: [ 3159.050296] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.058719] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.067873] 2 locks held by kworker/0:97/896: [ 3159.072397] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.080832] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.089931] 2 locks held by kworker/1:108/897: [ 3159.094516] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.102953] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.112096] 2 locks held by kworker/1:109/898: [ 3159.116656] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.125102] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.134236] 2 locks held by kworker/1:110/899: [ 3159.138798] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.147218] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.156358] 2 locks held by kworker/1:111/900: [ 3159.160952] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.169356] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.178474] 2 locks held by kworker/1:112/901: [ 3159.183070] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.191528] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.200778] 2 locks held by kworker/1:113/902: [ 3159.205353] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.213776] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.222913] 2 locks held by kworker/1:114/903: [ 3159.227474] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.235914] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.245058] 2 locks held by kworker/1:115/904: [ 3159.249620] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.258040] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.267178] 2 locks held by kworker/1:116/905: [ 3159.271789] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.280190] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.289321] 2 locks held by kworker/1:117/906: [ 3159.293918] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.302347] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.311495] 2 locks held by kworker/1:118/907: [ 3159.316056] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.324485] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.333635] 2 locks held by kworker/1:119/908: [ 3159.338195] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.346614] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.355771] 2 locks held by kworker/1:120/909: [ 3159.360348] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.368782] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.377919] 2 locks held by kworker/1:121/910: [ 3159.382514] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.390966] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.400413] 2 locks held by kworker/1:122/911: [ 3159.405013] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.413450] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.422578] 2 locks held by kworker/1:123/912: [ 3159.427140] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.435561] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.444716] 2 locks held by kworker/1:124/913: [ 3159.449276] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.457694] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.466827] 2 locks held by kworker/1:125/914: [ 3159.471438] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.479950] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.489077] 2 locks held by kworker/1:126/915: [ 3159.493678] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.502113] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.511266] 2 locks held by kworker/1:127/916: [ 3159.515832] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.524253] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.533393] 2 locks held by kworker/1:128/917: [ 3159.537958] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.546385] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.555526] 2 locks held by kworker/1:129/918: [ 3159.560088] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.568514] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.577655] 2 locks held by kworker/1:130/919: [ 3159.582296] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.590748] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.599854] 2 locks held by kworker/1:131/920: [ 3159.604456] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.612910] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.622090] 2 locks held by kworker/1:132/921: [ 3159.626654] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.635120] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.644274] 2 locks held by kworker/1:133/922: [ 3159.648836] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.657258] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.666397] 2 locks held by kworker/1:134/923: [ 3159.671007] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.679409] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.688527] 2 locks held by kworker/1:135/924: [ 3159.693138] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.701581] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.710732] 2 locks held by kworker/1:136/925: [ 3159.715304] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.723727] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.732885] 2 locks held by kworker/1:137/926: [ 3159.737445] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.745878] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.755021] 2 locks held by kworker/1:138/927: [ 3159.759582] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.768026] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.777171] 2 locks held by kworker/1:139/928: [ 3159.781770] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.790176] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.799312] 2 locks held by kworker/1:140/929: [ 3159.803916] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.812362] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.821497] 2 locks held by kworker/1:141/930: [ 3159.826059] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.834484] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.843633] 2 locks held by kworker/1:142/931: [ 3159.848196] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.856620] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.865763] 2 locks held by kworker/1:143/932: [ 3159.870322] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.878741] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.887886] 2 locks held by kworker/0:98/933: [ 3159.892410] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.900847] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.909960] 2 locks held by kworker/1:144/934: [ 3159.914575] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.923020] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.932165] 2 locks held by kworker/0:99/935: [ 3159.936643] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.945065] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.954203] 2 locks held by kworker/1:145/936: [ 3159.958764] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.967189] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.976331] 2 locks held by kworker/1:146/937: [ 3159.980927] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3159.989332] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3159.998453] 2 locks held by kworker/1:147/938: [ 3160.003065] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.011512] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.020664] 2 locks held by kworker/1:148/939: [ 3160.025227] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.033651] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.042789] 2 locks held by kworker/1:149/940: [ 3160.047367] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.055881] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.065017] 2 locks held by kworker/1:150/941: [ 3160.069578] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.078020] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.087166] 2 locks held by kworker/1:151/942: [ 3160.091890] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.100290] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.109410] 2 locks held by kworker/1:152/943: [ 3160.114039] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.122469] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.131619] 2 locks held by kworker/1:153/944: [ 3160.136181] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.144602] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.153744] 2 locks held by kworker/1:154/945: [ 3160.158305] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.166748] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.175885] 2 locks held by kworker/1:155/946: [ 3160.180489] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.188895] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.198013] 2 locks held by kworker/1:156/947: [ 3160.202612] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.211076] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.220174] 2 locks held by kworker/1:157/948: [ 3160.224765] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.233221] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.242351] 2 locks held by kworker/1:158/949: [ 3160.246913] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.255338] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.264475] 2 locks held by kworker/1:159/950: [ 3160.269036] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.277456] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.286621] 2 locks held by kworker/1:160/951: [ 3160.291238] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.299665] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.308792] 2 locks held by kworker/1:161/952: [ 3160.313392] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.321842] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.330996] 2 locks held by kworker/1:162/953: [ 3160.335574] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.344001] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.353524] 2 locks held by kworker/1:163/954: [ 3160.358084] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.366506] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.375643] 2 locks held by kworker/1:164/955: [ 3160.380205] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.388627] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.397780] 2 locks held by kworker/1:165/956: [ 3160.402376] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.410826] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.420115] 2 locks held by kworker/1:166/957: [ 3160.424700] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.433151] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.442287] 2 locks held by kworker/1:167/958: [ 3160.446850] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.455272] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.464418] 2 locks held by kworker/1:168/959: [ 3160.468982] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.477400] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.486538] 2 locks held by kworker/1:169/960: [ 3160.491147] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.499602] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.508741] 2 locks held by kworker/1:170/961: [ 3160.513340] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.521783] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.530931] 2 locks held by kworker/1:171/962: [ 3160.535495] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.543920] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.553071] 2 locks held by kworker/1:172/963: [ 3160.557724] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.566196] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.575335] 2 locks held by kworker/1:173/964: [ 3160.579901] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.588329] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.597605] 2 locks held by kworker/1:174/965: [ 3160.602201] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.610672] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.619776] 2 locks held by kworker/1:175/966: [ 3160.624398] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.632905] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.642054] 2 locks held by kworker/0:100/967: [ 3160.646619] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.655047] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.664188] 2 locks held by kworker/1:176/968: [ 3160.668749] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.677174] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.686371] 2 locks held by kworker/0:101/969: [ 3160.690993] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.699408] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.708524] 2 locks held by kworker/1:177/970: [ 3160.713136] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.721575] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.730724] 2 locks held by kworker/0:102/971: [ 3160.735283] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.743701] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.752851] 2 locks held by kworker/1:178/972: [ 3160.757411] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.765833] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.774990] 2 locks held by kworker/0:103/973: [ 3160.779602] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.788031] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.797172] 2 locks held by kworker/1:179/974: [ 3160.801775] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.810180] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.819310] 2 locks held by kworker/1:180/975: [ 3160.823911] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.832367] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.841511] 2 locks held by kworker/1:181/976: [ 3160.846132] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.854560] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.863700] 2 locks held by kworker/1:182/977: [ 3160.868262] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.876684] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.885949] 2 locks held by kworker/1:183/978: [ 3160.890565] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.898964] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.908085] 2 locks held by kworker/1:184/979: [ 3160.912696] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.921130] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.930231] 2 locks held by kworker/1:185/980: [ 3160.934821] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.943262] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.952405] 2 locks held by kworker/1:186/981: [ 3160.956966] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.965391] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.974529] 2 locks held by kworker/1:187/982: [ 3160.979088] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3160.987508] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3160.996643] 2 locks held by kworker/1:188/983: [ 3161.001238] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.009643] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.018786] 2 locks held by kworker/1:189/984: [ 3161.023387] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.031833] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.041054] 2 locks held by kworker/0:104/985: [ 3161.045617] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.054055] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.063194] 2 locks held by kworker/1:190/986: [ 3161.067758] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.076192] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.085341] 2 locks held by kworker/0:105/987: [ 3161.089921] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.098367] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.107520] 2 locks held by kworker/1:191/988: [ 3161.112133] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.120584] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.129689] 2 locks held by kworker/0:106/989: [ 3161.134278] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.142724] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.151867] 2 locks held by kworker/1:192/990: [ 3161.156430] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.164851] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.174072] 2 locks held by kworker/0:107/991: [ 3161.178634] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.187054] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.196188] 2 locks held by kworker/0:108/992: [ 3161.200802] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.209201] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.218334] 2 locks held by kworker/0:109/993: [ 3161.222934] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.231382] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.240511] 2 locks held by kworker/0:110/994: [ 3161.245160] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.253581] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.262738] 2 locks held by kworker/0:111/995: [ 3161.267302] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.275726] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.284869] 2 locks held by kworker/0:112/996: [ 3161.289428] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.297851] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.306987] 2 locks held by kworker/0:113/997: [ 3161.311598] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.320000] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.329130] 2 locks held by kworker/0:114/998: [ 3161.333729] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.342161] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.351371] 2 locks held by kworker/0:115/999: [ 3161.355952] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.364517] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.373667] 2 locks held by kworker/1:193/1000: [ 3161.378411] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.386872] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.396029] 2 locks held by kworker/1:194/1001: [ 3161.400713] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.409186] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.418312] 2 locks held by kworker/1:195/1002: [ 3161.422999] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.431446] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.440580] 2 locks held by kworker/1:196/1003: [ 3161.445227] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.453645] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.462781] 2 locks held by kworker/1:197/1004: [ 3161.467426] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.475847] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.484984] 2 locks held by kworker/1:198/1005: [ 3161.489633] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.498145] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.507362] 2 locks held by kworker/1:199/1006: [ 3161.512068] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.520517] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.529761] 2 locks held by kworker/1:200/1007: [ 3161.534443] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 3161.542888] #1: ((&ns->proc_work)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 3161.552034] 2 locks held by kworker/1:201/1008: [ 3161.556682] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0