tmp:0kB kernel_stack:22336kB all_unreclaimable? no [ 687.938115][T20761] Node 0 DMA free:10328kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.115285][T20761] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 688.121263][T20761] Node 0 DMA32 free:39720kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:13404kB inactive_anon:1418812kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52448kB bounce:0kB free_pcp:540kB local_pcp:420kB free_cma:0kB [ 688.305237][T20761] lowmem_reserve[]: 0 0 0 0 0 [ 688.309971][T20761] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.471298][T20761] lowmem_reserve[]: 0 0 0 0 0 [ 688.495256][T20761] Node 0 DMA: 23*4kB (UME) 17*8kB (UM) 29*16kB (UME) 15*32kB (UME) 5*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10324kB [ 688.587669][T20761] Node 0 DMA32: 661*4kB (UMEH) 1229*8kB (UMEH) 783*16kB (UMEH) 275*32kB (UEH) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 37516kB [ 688.684276][T20761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 688.744869][T20761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.791437][T20761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 688.851467][T20761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.895419][T20761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 688.937780][T20761] 14101 total pagecache pages [ 688.942475][T20761] 0 pages in swap cache [ 688.985281][T20761] Swap cache stats: add 0, delete 0, find 0/0 [ 688.991407][T20761] Free swap = 0kB [ 688.995120][T20761] Total swap = 0kB [ 689.066250][T20761] 1965979 pages RAM [ 689.070123][T20761] 0 pages HighMem/MovableOnly [ 689.074801][T20761] 349896 pages reserved [ 689.125332][T20761] 0 pages cma reserved 05:38:52 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) 05:38:52 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:38:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:38:52 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:52 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:38:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:38:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 690.103206][T20807] syz-executor.0 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 690.281742][T20807] CPU: 0 PID: 20807 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 690.290460][T20807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.300518][T20807] Call Trace: [ 690.303843][T20807] dump_stack+0x18f/0x20d [ 690.308184][T20807] dump_header+0x106/0x60f [ 690.312609][T20807] oom_kill_process.cold+0x10/0x15 [ 690.317727][T20807] out_of_memory+0x358/0x13f0 [ 690.322413][T20807] ? oom_killer_disable+0x270/0x270 [ 690.327620][T20807] ? mutex_trylock+0x246/0x2c0 [ 690.332388][T20807] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 690.339074][T20807] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 690.345694][T20807] ? warn_alloc+0x120/0x120 [ 690.350200][T20807] ? fs_reclaim_release+0x90/0xd0 [ 690.355258][T20807] ? lock_is_held_type+0xbb/0xf0 [ 690.360194][T20807] ? ion_page_pool_alloc+0xba/0x270 [ 690.365400][T20807] __alloc_pages_nodemask+0x62c/0x790 [ 690.370774][T20807] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 690.376931][T20807] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 690.383700][T20807] ? policy_node+0x83/0x140 [ 690.388211][T20807] ? wait_for_completion+0x260/0x260 [ 690.393494][T20807] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 690.399914][T20807] alloc_pages_current+0x187/0x280 [ 690.405124][T20807] ion_page_pool_alloc+0x17d/0x270 [ 690.410243][T20807] ion_system_heap_allocate+0x246/0xd10 [ 690.415800][T20807] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 690.421351][T20807] ? ion_system_heap_free+0x470/0x470 [ 690.426727][T20807] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 690.432283][T20807] ion_ioctl+0x373/0xd20 [ 690.436538][T20807] ? ion_buffer_destroy+0x2b0/0x2b0 [ 690.441766][T20807] ? _copy_to_user+0x126/0x160 [ 690.446542][T20807] ? __fget_files+0x294/0x400 [ 690.451226][T20807] ? bpf_lsm_file_ioctl+0x5/0x10 [ 690.456185][T20807] ? ion_buffer_destroy+0x2b0/0x2b0 [ 690.461386][T20807] __x64_sys_ioctl+0x193/0x200 [ 690.466183][T20807] do_syscall_64+0x2d/0x70 [ 690.470607][T20807] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 690.476508][T20807] RIP: 0033:0x45d4d9 [ 690.480400][T20807] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 690.500004][T20807] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.508413][T20807] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 690.516405][T20807] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 690.524375][T20807] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:38:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:54 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 690.532347][T20807] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 690.540316][T20807] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 692.205331][T20807] Mem-Info: [ 692.228046][T20807] active_anon:4587 inactive_anon:358824 isolated_anon:0 [ 692.228046][T20807] active_file:2264 inactive_file:6378 isolated_file:0 [ 692.228046][T20807] unevictable:0 dirty:7 writeback:0 [ 692.228046][T20807] slab_reclaimable:15646 slab_unreclaimable:112183 [ 692.228046][T20807] mapped:57822 shmem:6839 pagetables:16729 bounce:0 [ 692.228046][T20807] free:824658 free_pcp:459 free_cma:0 [ 692.440019][T20807] Node 0 active_anon:13444kB inactive_anon:1418772kB active_file:36kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212112kB dirty:8kB writeback:0kB shmem:22384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1265664kB writeback_tmp:0kB kernel_stack:22336kB all_unreclaimable? no [ 692.635228][T20807] Node 0 DMA free:10292kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.805994][T20807] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 692.811773][T20807] Node 0 DMA32 free:45764kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:13404kB inactive_anon:1416532kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52336kB bounce:0kB free_pcp:428kB local_pcp:168kB free_cma:0kB [ 693.036964][T20807] lowmem_reserve[]: 0 0 0 0 0 [ 693.041706][T20807] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.235214][T20807] lowmem_reserve[]: 0 0 0 0 0 [ 693.240015][T20807] Node 0 DMA: 9*4kB (UME) 21*8kB (UM) 29*16kB (UME) 15*32kB (UME) 5*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10300kB [ 693.335507][T20807] Node 0 DMA32: 1274*4kB (UMEH) 1717*8kB (UMEH) 914*16kB (UME) 293*32kB (UEH) 9*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44688kB [ 693.426020][T20807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 693.486256][T20807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.555253][T20807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.564567][T20807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.663119][T20807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.731267][T20807] 14148 total pagecache pages [ 693.746137][T20807] 0 pages in swap cache [ 693.750316][T20807] Swap cache stats: add 0, delete 0, find 0/0 [ 693.815268][T20807] Free swap = 0kB [ 693.819307][T20807] Total swap = 0kB [ 693.823023][T20807] 1965979 pages RAM [ 693.876952][T20807] 0 pages HighMem/MovableOnly [ 693.881666][T20807] 349896 pages reserved [ 693.925241][T20807] 0 pages cma reserved [ 693.929367][T20807] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=9615,uid=0 [ 694.027033][T20807] Out of memory: Killed process 9615 (syz-executor.3) total-vm:93548kB, anon-rss:8368kB, file-rss:34516kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:38:59 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:38:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:38:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:38:59 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:38:59 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:00 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:00 executing program 2: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:04 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:04 executing program 2: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:05 executing program 5: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:05 executing program 2: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:09 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:09 executing program 5: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:09 executing program 1: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:09 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:10 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:10 executing program 1: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:10 executing program 5: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:16 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:16 executing program 5: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:16 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:16 executing program 1: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:17 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:17 executing program 1: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:17 executing program 5: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:22 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:22 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:22 executing program 1: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:22 executing program 5: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:22 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:22 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:23 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:23 executing program 1: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:23 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:23 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:26 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:26 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:27 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:27 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:29 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:31 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:31 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:32 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:32 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:32 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:32 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:32 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:35 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:35 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:35 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:35 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:35 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:35 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:36 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:36 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:36 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:36 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:36 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:45 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:51 executing program 0: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:51 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 0: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:51 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 0: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:51 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:51 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:52 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:52 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:52 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:52 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:52 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:52 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:52 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:52 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:52 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:52 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:52 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:53 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:53 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:53 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:39:53 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:53 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:53 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:53 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:39:53 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:39:54 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:06 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:06 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:06 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:06 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:06 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:06 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:06 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:07 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:07 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:07 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:07 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:07 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) 05:40:07 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:07 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:07 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:07 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:08 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:08 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) 05:40:08 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:08 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:08 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:08 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) 05:40:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000900)="01", 0x1, r3) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r5, r4}, &(0x7f0000000540)=""/232, 0xe8, &(0x7f0000000140)={&(0x7f0000000240)={'sha224-generic\x00'}}) 05:40:08 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:09 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:09 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:40:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:13 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:13 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x40, 0x695, 0x2015, 0x3, 0x7, 0x4, 0x2, 0x7}}) 05:40:13 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:14 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:14 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:14 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:40:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 772.126892][T21373] warn_alloc: 7 callbacks suppressed [ 772.126912][T21373] syz-executor.2: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 05:40:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 772.333450][T21373] CPU: 1 PID: 21373 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 772.342181][T21373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.352236][T21373] Call Trace: [ 772.355531][T21373] dump_stack+0x18f/0x20d [ 772.359868][T21373] warn_alloc.cold+0x87/0x17a [ 772.364551][T21373] ? zone_watermark_ok_safe+0x260/0x260 [ 772.370104][T21373] ? __alloc_pages_direct_compact+0x366/0x420 [ 772.376169][T21373] ? get_page_from_freelist+0x37f0/0x37f0 [ 772.381886][T21373] ? __zone_watermark_ok+0x3f0/0x3f0 [ 772.387184][T21373] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 772.393903][T21373] ? lock_acquire+0x1f1/0xad0 [ 772.399540][T21373] ? fs_reclaim_acquire+0xa1/0xf0 [ 772.404568][T21373] ? warn_alloc+0x120/0x120 [ 772.409104][T21373] ? __zone_watermark_ok+0x3f0/0x3f0 [ 772.414660][T21373] ? lock_is_held_type+0xbb/0xf0 [ 772.419628][T21373] ? ion_page_pool_alloc+0xba/0x270 [ 772.424839][T21373] __alloc_pages_nodemask+0x62c/0x790 [ 772.430217][T21373] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 772.436987][T21373] ? wait_for_completion+0x260/0x260 [ 772.442273][T21373] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 772.448695][T21373] alloc_pages_current+0x187/0x280 [ 772.453869][T21373] ion_page_pool_alloc+0x17d/0x270 [ 772.459009][T21373] ion_system_heap_allocate+0x246/0xd10 [ 772.464664][T21373] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 772.470225][T21373] ? ion_system_heap_free+0x470/0x470 [ 772.475718][T21373] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 772.481275][T21373] ion_ioctl+0x373/0xd20 [ 772.485529][T21373] ? ion_buffer_destroy+0x2b0/0x2b0 [ 772.490733][T21373] ? _copy_to_user+0x126/0x160 [ 772.495511][T21373] ? __fget_files+0x294/0x400 [ 772.500197][T21373] ? bpf_lsm_file_ioctl+0x5/0x10 [ 772.505137][T21373] ? ion_buffer_destroy+0x2b0/0x2b0 [ 772.510344][T21373] __x64_sys_ioctl+0x193/0x200 [ 772.515113][T21373] do_syscall_64+0x2d/0x70 [ 772.519531][T21373] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 772.525424][T21373] RIP: 0033:0x45d4d9 [ 772.529320][T21373] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.549040][T21373] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.557453][T21373] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 772.565447][T21373] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 772.573440][T21373] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:40:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:16 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 772.581413][T21373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 772.589386][T21373] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c 05:40:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:16 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:16 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x40, 0x695, 0x2015, 0x3, 0x7, 0x4, 0x2, 0x7}}) 05:40:16 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 774.604990][T21373] Mem-Info: [ 774.631705][T21373] active_anon:5238 inactive_anon:323589 isolated_anon:0 [ 774.631705][T21373] active_file:2268 inactive_file:6377 isolated_file:0 [ 774.631705][T21373] unevictable:0 dirty:0 writeback:0 [ 774.631705][T21373] slab_reclaimable:15560 slab_unreclaimable:111837 [ 774.631705][T21373] mapped:57931 shmem:7485 pagetables:16777 bounce:0 [ 774.631705][T21373] free:768905 free_pcp:407 free_cma:0 [ 774.824591][T21373] Node 0 active_anon:13896kB inactive_anon:1277648kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212140kB dirty:0kB writeback:0kB shmem:22836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1101824kB writeback_tmp:0kB kernel_stack:22336kB all_unreclaimable? no [ 775.065338][T21373] Node 0 DMA free:10260kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.208588][T21373] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 775.214377][T21373] Node 0 DMA32 free:58504kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:13856kB inactive_anon:1275408kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52484kB bounce:0kB free_pcp:2000kB local_pcp:544kB free_cma:0kB [ 775.395307][T21373] lowmem_reserve[]: 0 0 0 0 0 [ 775.400144][T21373] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.565330][T21373] lowmem_reserve[]: 0 0 0 0 0 [ 775.570061][T21373] Node 0 DMA: 7*4kB (ME) 6*8kB (UME) 29*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10268kB [ 775.685344][T21373] Node 0 DMA32: 1251*4kB (MEH) 943*8kB (UMEH) 878*16kB (UMEH) 188*32kB (UMEH) 165*64kB (UMH) 24*128kB (UMH) 6*256kB (UMH) 2*512kB (UM) 7*1024kB (U) 1*2048kB (U) 0*4096kB = 58020kB [ 775.766165][T21373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 775.825340][T21373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.834908][T21373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 775.925369][T21373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.934957][T21373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 776.026192][T21373] 14789 total pagecache pages [ 776.030911][T21373] 0 pages in swap cache [ 776.035068][T21373] Swap cache stats: add 0, delete 0, find 0/0 [ 776.095346][T21373] Free swap = 0kB [ 776.099122][T21373] Total swap = 0kB [ 776.102924][T21373] 1965979 pages RAM [ 776.145331][T21373] 0 pages HighMem/MovableOnly [ 776.150034][T21373] 349896 pages reserved [ 776.154209][T21373] 0 pages cma reserved 05:40:20 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x40, 0x695, 0x2015, 0x3, 0x7, 0x4, 0x2, 0x7}}) 05:40:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:20 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:20 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x40, 0x695, 0x2015, 0x3, 0x7, 0x4, 0x2, 0x7}}) 05:40:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) 05:40:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 777.349747][T21431] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 777.510377][T21431] CPU: 0 PID: 21431 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 777.519189][T21431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.529236][T21431] Call Trace: [ 777.532532][T21431] dump_stack+0x18f/0x20d [ 777.536875][T21431] dump_header+0x106/0x60f [ 777.541297][T21431] oom_kill_process.cold+0x10/0x15 [ 777.546414][T21431] out_of_memory+0x358/0x13f0 [ 777.551106][T21431] ? oom_killer_disable+0x270/0x270 [ 777.556313][T21431] ? mutex_trylock+0x246/0x2c0 [ 777.561077][T21431] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 777.567758][T21431] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 777.574367][T21431] ? warn_alloc+0x120/0x120 [ 777.578878][T21431] ? fs_reclaim_release+0x90/0xd0 [ 777.583918][T21431] ? lock_is_held_type+0xbb/0xf0 [ 777.588886][T21431] ? ion_page_pool_alloc+0xba/0x270 [ 777.594098][T21431] __alloc_pages_nodemask+0x62c/0x790 [ 777.599477][T21431] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 777.606279][T21431] ? wait_for_completion+0x260/0x260 [ 777.611567][T21431] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 777.617989][T21431] alloc_pages_current+0x187/0x280 [ 777.623111][T21431] ion_page_pool_alloc+0x17d/0x270 [ 777.628228][T21431] ion_system_heap_allocate+0x246/0xd10 [ 777.633780][T21431] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 777.639331][T21431] ? ion_system_heap_free+0x470/0x470 [ 777.644707][T21431] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 777.650261][T21431] ion_ioctl+0x373/0xd20 [ 777.654519][T21431] ? ion_buffer_destroy+0x2b0/0x2b0 [ 777.659719][T21431] ? _copy_to_user+0x126/0x160 [ 777.664498][T21431] ? __fget_files+0x294/0x400 [ 777.669184][T21431] ? bpf_lsm_file_ioctl+0x5/0x10 [ 777.674126][T21431] ? ion_buffer_destroy+0x2b0/0x2b0 [ 777.679331][T21431] __x64_sys_ioctl+0x193/0x200 [ 777.684101][T21431] do_syscall_64+0x2d/0x70 [ 777.688521][T21431] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 777.694414][T21431] RIP: 0033:0x45d4d9 [ 777.698309][T21431] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 777.717912][T21431] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.726324][T21431] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 777.734298][T21431] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 777.742272][T21431] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 777.750244][T21431] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 777.758352][T21431] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:40:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:21 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x40, 0x695, 0x2015, 0x3, 0x7, 0x4, 0x2, 0x7}}) 05:40:21 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 05:40:22 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:40:22 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:40:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 779.775378][T21431] Mem-Info: [ 779.778556][T21431] active_anon:5271 inactive_anon:323603 isolated_anon:0 [ 779.778556][T21431] active_file:2269 inactive_file:6385 isolated_file:0 [ 779.778556][T21431] unevictable:0 dirty:64 writeback:0 [ 779.778556][T21431] slab_reclaimable:15573 slab_unreclaimable:112698 [ 779.778556][T21431] mapped:57836 shmem:7520 pagetables:16815 bounce:0 [ 779.778556][T21431] free:794016 free_pcp:167 free_cma:0 [ 780.085380][T21431] Node 0 active_anon:13992kB inactive_anon:1277888kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212168kB dirty:8kB writeback:0kB shmem:22936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1101824kB writeback_tmp:0kB kernel_stack:22336kB all_unreclaimable? no [ 780.236179][T21431] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 780.385339][T21431] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 780.391113][T21431] Node 0 DMA32 free:98696kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:13952kB inactive_anon:1275648kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52460kB bounce:0kB free_pcp:800kB local_pcp:348kB free_cma:0kB [ 780.585344][T21431] lowmem_reserve[]: 0 0 0 0 0 [ 780.590093][T21431] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 780.759143][T21431] lowmem_reserve[]: 0 0 0 0 0 [ 780.763988][T21431] Node 0 DMA: 25*4kB (UME) 3*8kB (ME) 27*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10284kB [ 780.895755][T21431] Node 0 DMA32: 1170*4kB (UMEH) 969*8kB (UMEH) 384*16kB (UMEH) 284*32kB (UMEH) 286*64kB (UMH) 153*128kB (UMH) 36*256kB (UMH) 20*512kB (UM) 11*1024kB (U) 1*2048kB (M) 0*4096kB = 98320kB [ 780.995320][T21431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 781.055466][T21431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.065051][T21431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 781.155326][T21431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 781.164921][T21431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 781.245342][T21431] 14832 total pagecache pages [ 781.250051][T21431] 0 pages in swap cache [ 781.254195][T21431] Swap cache stats: add 0, delete 0, find 0/0 [ 781.325327][T21431] Free swap = 0kB [ 781.329095][T21431] Total swap = 0kB [ 781.332830][T21431] 1965979 pages RAM [ 781.385321][T21431] 0 pages HighMem/MovableOnly [ 781.390019][T21431] 349896 pages reserved [ 781.394188][T21431] 0 pages cma reserved [ 781.445396][T21431] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=9611,uid=0 [ 781.535574][T21431] Out of memory: Killed process 9611 (syz-executor.3) total-vm:93284kB, anon-rss:8352kB, file-rss:34516kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 05:40:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:25 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x40, 0x695, 0x2015, 0x3, 0x7, 0x4, 0x2, 0x7}}) 05:40:25 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:40:25 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 782.126508][T21507] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 782.268648][T21507] CPU: 1 PID: 21507 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 782.277351][T21507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.287402][T21507] Call Trace: [ 782.290699][T21507] dump_stack+0x18f/0x20d [ 782.295037][T21507] dump_header+0x106/0x60f [ 782.299458][T21507] oom_kill_process.cold+0x10/0x15 [ 782.304572][T21507] out_of_memory+0x358/0x13f0 [ 782.309263][T21507] ? oom_killer_disable+0x270/0x270 [ 782.314477][T21507] ? mutex_trylock+0x246/0x2c0 [ 782.319240][T21507] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 782.325921][T21507] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 782.332530][T21507] ? warn_alloc+0x120/0x120 [ 782.337041][T21507] ? fs_reclaim_release+0x90/0xd0 [ 782.342076][T21507] ? lock_is_held_type+0xbb/0xf0 [ 782.347016][T21507] ? ion_page_pool_alloc+0xba/0x270 [ 782.352258][T21507] __alloc_pages_nodemask+0x62c/0x790 [ 782.357639][T21507] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 782.364414][T21507] ? wait_for_completion+0x260/0x260 [ 782.369700][T21507] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 782.376118][T21507] alloc_pages_current+0x187/0x280 [ 782.381536][T21507] ion_page_pool_alloc+0x17d/0x270 [ 782.386656][T21507] ion_system_heap_allocate+0x246/0xd10 [ 782.392208][T21507] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 782.397754][T21507] ? ion_system_heap_free+0x470/0x470 [ 782.403128][T21507] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 782.408690][T21507] ion_ioctl+0x373/0xd20 [ 782.412946][T21507] ? ion_buffer_destroy+0x2b0/0x2b0 [ 782.418150][T21507] ? _copy_to_user+0x126/0x160 [ 782.422933][T21507] ? __fget_files+0x294/0x400 [ 782.427618][T21507] ? bpf_lsm_file_ioctl+0x5/0x10 [ 782.432563][T21507] ? ion_buffer_destroy+0x2b0/0x2b0 [ 782.437767][T21507] __x64_sys_ioctl+0x193/0x200 [ 782.442539][T21507] do_syscall_64+0x2d/0x70 [ 782.446956][T21507] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 782.452847][T21507] RIP: 0033:0x45d4d9 [ 782.456745][T21507] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.476442][T21507] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.484943][T21507] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 782.492916][T21507] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 782.500888][T21507] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 782.508861][T21507] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 782.516855][T21507] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:40:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:26 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:26 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:40:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 783.431650][T21525] warn_alloc: 11 callbacks suppressed [ 783.431669][T21525] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 783.662438][T21525] CPU: 1 PID: 21525 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 783.671133][T21525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.681205][T21525] Call Trace: [ 783.684499][T21525] dump_stack+0x18f/0x20d [ 783.688856][T21525] warn_alloc.cold+0x87/0x17a [ 783.693569][T21525] ? zone_watermark_ok_safe+0x260/0x260 [ 783.699143][T21525] ? __alloc_pages_direct_compact+0x366/0x420 [ 783.705214][T21525] ? get_page_from_freelist+0x37f0/0x37f0 [ 783.710941][T21525] ? psi_task_change+0x142/0x220 [ 783.715886][T21525] ? _raw_spin_unlock_irq+0x1f/0x80 [ 783.721091][T21525] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 783.727715][T21525] ? lock_acquire+0x1f1/0xad0 [ 783.732393][T21525] ? fs_reclaim_acquire+0xa1/0xf0 [ 783.737420][T21525] ? warn_alloc+0x120/0x120 [ 783.741932][T21525] ? __zone_watermark_ok+0x3f0/0x3f0 [ 783.747220][T21525] ? lock_is_held_type+0xbb/0xf0 [ 783.752166][T21525] ? ion_page_pool_alloc+0xba/0x270 [ 783.757372][T21525] __alloc_pages_nodemask+0x62c/0x790 [ 783.762746][T21525] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 783.768904][T21525] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 783.775676][T21525] ? policy_node+0x83/0x140 [ 783.780210][T21525] ? wait_for_completion+0x260/0x260 [ 783.785496][T21525] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 783.791915][T21525] alloc_pages_current+0x187/0x280 [ 783.797027][T21525] ion_page_pool_alloc+0x17d/0x270 [ 783.802144][T21525] ion_system_heap_allocate+0x246/0xd10 [ 783.807696][T21525] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 783.813272][T21525] ? ion_system_heap_free+0x470/0x470 [ 783.818647][T21525] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 783.824197][T21525] ion_ioctl+0x373/0xd20 [ 783.828454][T21525] ? ion_buffer_destroy+0x2b0/0x2b0 [ 783.833659][T21525] ? _copy_to_user+0x126/0x160 [ 783.838436][T21525] ? __fget_files+0x294/0x400 [ 783.843123][T21525] ? bpf_lsm_file_ioctl+0x5/0x10 [ 783.848062][T21525] ? ion_buffer_destroy+0x2b0/0x2b0 [ 783.853271][T21525] __x64_sys_ioctl+0x193/0x200 [ 783.858044][T21525] do_syscall_64+0x2d/0x70 [ 783.862489][T21525] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 783.868405][T21525] RIP: 0033:0x45d4d9 [ 783.872307][T21525] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.891929][T21525] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.900339][T21525] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 783.908309][T21525] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 783.916280][T21525] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 783.924348][T21525] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 783.932320][T21525] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c 05:40:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 784.800680][T21507] Mem-Info: [ 784.835379][T21507] active_anon:5305 inactive_anon:322732 isolated_anon:0 [ 784.835379][T21507] active_file:2270 inactive_file:6394 isolated_file:0 [ 784.835379][T21507] unevictable:0 dirty:10 writeback:0 [ 784.835379][T21507] slab_reclaimable:15574 slab_unreclaimable:112761 [ 784.835379][T21507] mapped:57863 shmem:7554 pagetables:16944 bounce:0 [ 784.835379][T21507] free:795729 free_pcp:548 free_cma:0 [ 785.065379][T21507] Node 0 active_anon:14096kB inactive_anon:1272136kB active_file:36kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212216kB dirty:4kB writeback:0kB shmem:23044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1099776kB writeback_tmp:0kB kernel_stack:22464kB all_unreclaimable? no [ 785.175379][T21507] Node 0 DMA free:10312kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.327911][T21507] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 785.356279][T21507] Node 0 DMA32 free:84724kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14056kB inactive_anon:1269796kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52996kB bounce:0kB free_pcp:456kB local_pcp:288kB free_cma:0kB [ 785.488492][T21507] lowmem_reserve[]: 0 0 0 0 0 [ 785.514257][T21507] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.663453][T21507] lowmem_reserve[]: 0 0 0 0 0 [ 785.668690][T21525] Mem-Info: [ 785.679821][T21525] active_anon:5310 inactive_anon:322164 isolated_anon:0 [ 785.679821][T21525] active_file:2270 inactive_file:6394 isolated_file:0 [ 785.679821][T21525] unevictable:0 dirty:22 writeback:0 [ 785.679821][T21525] slab_reclaimable:15566 slab_unreclaimable:112673 [ 785.679821][T21525] mapped:57849 shmem:7563 pagetables:16935 bounce:0 [ 785.679821][T21525] free:798728 free_pcp:143 free_cma:0 [ 785.726145][T21507] Node 0 DMA: 40*4kB (UM) 5*8kB (UM) 22*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10312kB [ 785.777079][T21507] Node 0 DMA32: 1653*4kB (UMEH) 1061*8kB (UMEH) 444*16kB (UME) 282*32kB (UMEH) 292*64kB (UMH) 100*128kB (UMH) 9*256kB (UMH) 3*512kB (U) 10*1024kB (U) 3*2048kB (UM) 0*4096kB = 82940kB [ 785.851940][T21507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 785.868126][T21525] Node 0 active_anon:14116kB inactive_anon:1272032kB active_file:36kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212220kB dirty:12kB writeback:0kB shmem:23084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1097728kB writeback_tmp:0kB kernel_stack:22464kB all_unreclaimable? no [ 786.085758][T21507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.125687][T21507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 786.134979][T21507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 786.165510][T21525] Node 0 DMA free:10312kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.225396][T21507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 786.234685][T21507] 14875 total pagecache pages [ 786.265397][T21507] 0 pages in swap cache [ 786.269564][T21507] Swap cache stats: add 0, delete 0, find 0/0 [ 786.296132][T21525] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 786.301886][T21525] Node 0 DMA32 free:81940kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14076kB inactive_anon:1269792kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52780kB bounce:0kB free_pcp:576kB local_pcp:336kB free_cma:0kB [ 786.345399][T21507] Free swap = 0kB [ 786.349165][T21507] Total swap = 0kB [ 786.352877][T21507] 1965979 pages RAM [ 786.385366][T21507] 0 pages HighMem/MovableOnly [ 786.390050][T21507] 349896 pages reserved [ 786.394196][T21507] 0 pages cma reserved [ 786.425379][T21507] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=14478,uid=0 [ 786.455386][T21525] lowmem_reserve[]: 0 0 0 0 0 [ 786.460121][T21525] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 786.516260][T21507] Out of memory: Killed process 14478 (syz-executor.1) total-vm:93284kB, anon-rss:6312kB, file-rss:34516kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 786.564760][ T1172] oom_reaper: reaped process 14478 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 786.605433][T21525] lowmem_reserve[]: 0 0 0 0 0 05:40:30 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:30 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:40:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 786.635381][T21525] Node 0 DMA: 40*4kB (UM) 6*8kB (UM) 22*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10320kB [ 786.789073][T21525] Node 0 DMA32: 1117*4kB (UMEH) 1024*8kB (UMEH) 411*16kB (UME) 254*32kB (UMEH) 293*64kB (UMH) 101*128kB (UMH) 9*256kB (UMH) 3*512kB (U) 10*1024kB (U) 3*2048kB (UM) 0*4096kB = 79268kB [ 787.028659][T21525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 787.090488][T21558] syz-executor.2 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 787.161087][T21525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 787.209109][T21558] CPU: 0 PID: 21558 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 787.217887][T21558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.227937][T21558] Call Trace: [ 787.231234][T21558] dump_stack+0x18f/0x20d [ 787.235574][T21558] dump_header+0x106/0x60f [ 787.239995][T21558] oom_kill_process.cold+0x10/0x15 [ 787.245110][T21558] out_of_memory+0x358/0x13f0 [ 787.249797][T21558] ? oom_killer_disable+0x270/0x270 [ 787.255002][T21558] ? mutex_trylock+0x246/0x2c0 [ 787.259767][T21558] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 787.266455][T21558] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 787.273064][T21558] ? warn_alloc+0x120/0x120 [ 787.277571][T21558] ? fs_reclaim_release+0x90/0xd0 [ 787.282607][T21558] ? lock_is_held_type+0xbb/0xf0 [ 787.287549][T21558] ? ion_page_pool_alloc+0xba/0x270 [ 787.292757][T21558] __alloc_pages_nodemask+0x62c/0x790 [ 787.298132][T21558] ? lock_acquire+0x1f1/0xad0 [ 787.302810][T21558] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 787.309585][T21558] ? wait_for_completion+0x260/0x260 [ 787.314868][T21558] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 787.321286][T21558] alloc_pages_current+0x187/0x280 [ 787.326407][T21558] ion_page_pool_alloc+0x17d/0x270 [ 787.331525][T21558] ion_system_heap_allocate+0x246/0xd10 [ 787.337077][T21558] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 787.342625][T21558] ? ion_system_heap_free+0x470/0x470 [ 787.350084][T21558] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 787.355634][T21558] ion_ioctl+0x373/0xd20 [ 787.359890][T21558] ? ion_buffer_destroy+0x2b0/0x2b0 [ 787.365090][T21558] ? _copy_to_user+0x126/0x160 [ 787.369864][T21558] ? __fget_files+0x294/0x400 [ 787.374548][T21558] ? bpf_lsm_file_ioctl+0x5/0x10 [ 787.379483][T21558] ? ion_buffer_destroy+0x2b0/0x2b0 [ 787.384714][T21558] __x64_sys_ioctl+0x193/0x200 [ 787.389482][T21558] do_syscall_64+0x2d/0x70 [ 787.393898][T21558] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 787.399788][T21558] RIP: 0033:0x45d4d9 [ 787.403715][T21558] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 787.423315][T21558] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.431749][T21558] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 787.439718][T21558] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 787.447684][T21558] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 787.455651][T21558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 787.463624][T21558] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c 05:40:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 787.505388][T21525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 787.514689][T21525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 787.715354][T21525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 787.724661][T21525] 14897 total pagecache pages [ 787.808266][T21525] 0 pages in swap cache [ 787.813744][T21525] Swap cache stats: add 0, delete 0, find 0/0 [ 787.905359][T21525] Free swap = 0kB [ 787.909114][T21525] Total swap = 0kB [ 787.912835][T21525] 1965979 pages RAM [ 788.005331][T21525] 0 pages HighMem/MovableOnly [ 788.010041][T21525] 349896 pages reserved [ 788.075362][T21525] 0 pages cma reserved 05:40:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:40:31 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:40:31 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 789.865395][T21558] Mem-Info: [ 789.868569][T21558] active_anon:5342 inactive_anon:320658 isolated_anon:0 [ 789.868569][T21558] active_file:2268 inactive_file:6405 isolated_file:0 [ 789.868569][T21558] unevictable:0 dirty:0 writeback:0 [ 789.868569][T21558] slab_reclaimable:15567 slab_unreclaimable:112350 [ 789.868569][T21558] mapped:57858 shmem:7589 pagetables:16944 bounce:0 [ 789.868569][T21558] free:813159 free_pcp:680 free_cma:0 [ 790.075460][T21558] Node 0 active_anon:14216kB inactive_anon:1265932kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212256kB dirty:0kB writeback:0kB shmem:23156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1093632kB writeback_tmp:0kB kernel_stack:22464kB all_unreclaimable? no [ 790.245439][T21558] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.382860][T21558] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 790.425379][T21558] Node 0 DMA32 free:107328kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14176kB inactive_anon:1263792kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52856kB bounce:0kB free_pcp:632kB local_pcp:400kB free_cma:0kB [ 790.584199][T21558] lowmem_reserve[]: 0 0 0 0 0 [ 790.595356][T21558] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.745328][T21558] lowmem_reserve[]: 0 0 0 0 0 [ 790.750072][T21558] Node 0 DMA: 29*4kB (UM) 7*8kB (UM) 22*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10284kB [ 790.855345][T21558] Node 0 DMA32: 1186*4kB (MEH) 1035*8kB (UMEH) 449*16kB (UME) 211*32kB (UMEH) 282*64kB (UMH) 125*128kB (UMH) 53*256kB (UMH) 15*512kB (UM) 11*1024kB (U) 6*2048kB (UM) 0*4096kB = 105808kB [ 790.955328][T21558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 791.015346][T21558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.024923][T21558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.119452][T21558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.175355][T21558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.184655][T21558] 14918 total pagecache pages [ 791.235335][T21558] 0 pages in swap cache [ 791.239506][T21558] Swap cache stats: add 0, delete 0, find 0/0 [ 791.285344][T21558] Free swap = 0kB [ 791.289132][T21558] Total swap = 0kB [ 791.292879][T21558] 1965979 pages RAM [ 791.345348][T21558] 0 pages HighMem/MovableOnly [ 791.350036][T21558] 349896 pages reserved [ 791.354180][T21558] 0 pages cma reserved [ 791.426168][T21558] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=21555,uid=0 [ 791.505368][T21558] Out of memory: OOM victim 21555 (syz-executor.4) is already exiting. Skip killing the task 05:40:35 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:35 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:35 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:40:35 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:40:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:36 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:40:36 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:40:36 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:36 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) [ 793.487095][T21654] warn_alloc: 10 callbacks suppressed [ 793.487114][T21654] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 05:40:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 793.745244][T21654] CPU: 0 PID: 21654 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 793.753959][T21654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.764007][T21654] Call Trace: [ 793.767305][T21654] dump_stack+0x18f/0x20d [ 793.771649][T21654] warn_alloc.cold+0x87/0x17a [ 793.776339][T21654] ? zone_watermark_ok_safe+0x260/0x260 [ 793.781892][T21654] ? __alloc_pages_direct_compact+0x366/0x420 [ 793.787960][T21654] ? get_page_from_freelist+0x37f0/0x37f0 [ 793.793677][T21654] ? psi_task_change+0x142/0x220 [ 793.798620][T21654] ? _raw_spin_unlock_irq+0x1f/0x80 [ 793.803833][T21654] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 793.810439][T21654] ? lock_acquire+0x1f1/0xad0 [ 793.815120][T21654] ? fs_reclaim_acquire+0xa1/0xf0 [ 793.820148][T21654] ? warn_alloc+0x120/0x120 [ 793.824661][T21654] ? __zone_watermark_ok+0x3f0/0x3f0 [ 793.829950][T21654] ? lock_is_held_type+0xbb/0xf0 [ 793.834894][T21654] ? ion_page_pool_alloc+0xba/0x270 [ 793.840103][T21654] __alloc_pages_nodemask+0x62c/0x790 [ 793.845512][T21654] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 793.852286][T21654] ? wait_for_completion+0x260/0x260 [ 793.857580][T21654] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 793.864005][T21654] alloc_pages_current+0x187/0x280 [ 793.869127][T21654] ion_page_pool_alloc+0x17d/0x270 [ 793.874271][T21654] ion_system_heap_allocate+0x246/0xd10 [ 793.879849][T21654] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 793.885403][T21654] ? ion_system_heap_free+0x470/0x470 [ 793.890802][T21654] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 793.896360][T21654] ion_ioctl+0x373/0xd20 [ 793.900617][T21654] ? ion_buffer_destroy+0x2b0/0x2b0 [ 793.905820][T21654] ? _copy_to_user+0x126/0x160 [ 793.910598][T21654] ? __fget_files+0x294/0x400 [ 793.915283][T21654] ? bpf_lsm_file_ioctl+0x5/0x10 [ 793.920250][T21654] ? ion_buffer_destroy+0x2b0/0x2b0 [ 793.925454][T21654] __x64_sys_ioctl+0x193/0x200 [ 793.930232][T21654] do_syscall_64+0x2d/0x70 [ 793.934673][T21654] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.940580][T21654] RIP: 0033:0x45d4d9 [ 793.944479][T21654] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.964083][T21654] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.972521][T21654] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 793.980494][T21654] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 793.988464][T21654] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 793.996467][T21654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 794.004467][T21654] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:40:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:37 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:40:38 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) 05:40:38 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 794.858914][T21688] syz-executor.5 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 795.004655][T21688] CPU: 0 PID: 21688 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 795.013383][T21688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.023442][T21688] Call Trace: [ 795.026747][T21688] dump_stack+0x18f/0x20d [ 795.031086][T21688] dump_header+0x106/0x60f [ 795.035508][T21688] oom_kill_process.cold+0x10/0x15 [ 795.040625][T21688] out_of_memory+0x358/0x13f0 [ 795.045311][T21688] ? oom_killer_disable+0x270/0x270 [ 795.050603][T21688] ? mutex_trylock+0x246/0x2c0 [ 795.055372][T21688] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 795.062052][T21688] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 795.068659][T21688] ? warn_alloc+0x120/0x120 [ 795.073177][T21688] ? fs_reclaim_release+0x90/0xd0 [ 795.078213][T21688] ? lock_is_held_type+0xbb/0xf0 [ 795.083163][T21688] __alloc_pages_nodemask+0x62c/0x790 [ 795.088543][T21688] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 795.095350][T21688] ? wait_for_completion+0x260/0x260 [ 795.100637][T21688] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 795.107056][T21688] alloc_pages_current+0x187/0x280 [ 795.112174][T21688] ion_page_pool_alloc+0x17d/0x270 [ 795.118356][T21688] ion_system_heap_allocate+0x246/0xd10 [ 795.123913][T21688] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 795.129465][T21688] ? ion_system_heap_free+0x470/0x470 [ 795.134842][T21688] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 795.140400][T21688] ion_ioctl+0x373/0xd20 [ 795.144660][T21688] ? ion_buffer_destroy+0x2b0/0x2b0 [ 795.149867][T21688] ? _copy_to_user+0x126/0x160 [ 795.154647][T21688] ? __fget_files+0x294/0x400 [ 795.159337][T21688] ? bpf_lsm_file_ioctl+0x5/0x10 [ 795.164303][T21688] ? ion_buffer_destroy+0x2b0/0x2b0 [ 795.169508][T21688] __x64_sys_ioctl+0x193/0x200 [ 795.174281][T21688] do_syscall_64+0x2d/0x70 [ 795.178709][T21688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.184606][T21688] RIP: 0033:0x45d4d9 [ 795.188507][T21688] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.208118][T21688] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.216563][T21688] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 795.224542][T21688] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 795.232516][T21688] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 795.240489][T21688] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 795.248462][T21688] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c [ 796.090800][T21654] Mem-Info: [ 796.108522][T21654] active_anon:5380 inactive_anon:320853 isolated_anon:0 [ 796.108522][T21654] active_file:2268 inactive_file:6414 isolated_file:0 [ 796.108522][T21654] unevictable:0 dirty:18 writeback:0 [ 796.108522][T21654] slab_reclaimable:15560 slab_unreclaimable:112674 [ 796.108522][T21654] mapped:57877 shmem:7628 pagetables:17219 bounce:0 [ 796.108522][T21654] free:803683 free_pcp:98 free_cma:0 [ 796.320601][T21654] Node 0 active_anon:14308kB inactive_anon:1266296kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212312kB dirty:4kB writeback:0kB shmem:23248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1091584kB writeback_tmp:0kB kernel_stack:22560kB all_unreclaimable? no [ 796.475408][T21654] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.625348][T21654] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 796.632078][T21654] Node 0 DMA32 free:43264kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14268kB inactive_anon:1264056kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53300kB bounce:0kB free_pcp:388kB local_pcp:196kB free_cma:0kB [ 796.805336][T21688] Mem-Info: [ 796.808534][T21688] active_anon:5383 inactive_anon:320853 isolated_anon:0 [ 796.808534][T21688] active_file:2269 inactive_file:6413 isolated_file:0 [ 796.808534][T21688] unevictable:0 dirty:24 writeback:0 [ 796.808534][T21688] slab_reclaimable:15560 slab_unreclaimable:113015 [ 796.808534][T21688] mapped:57873 shmem:7638 pagetables:17217 bounce:0 [ 796.808534][T21688] free:803268 free_pcp:80 free_cma:0 [ 796.857909][T21654] lowmem_reserve[]: 0 0 0 0 0 [ 796.888459][T21654] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.015412][T21688] Node 0 active_anon:14308kB inactive_anon:1266296kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212316kB dirty:4kB writeback:0kB shmem:23248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1091584kB writeback_tmp:0kB kernel_stack:22560kB all_unreclaimable? no [ 797.066202][T21654] lowmem_reserve[]: 0 0 0 0 0 [ 797.070925][T21654] Node 0 DMA: 24*4kB (UM) 2*8kB (M) 25*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10272kB [ 797.165350][T21654] Node 0 DMA32: 1175*4kB (UMEH) 1261*8kB (UMEH) 545*16kB (UMEH) 203*32kB (UME) 58*64kB (UMH) 11*128kB (UMH) 7*256kB (UMH) 4*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 41012kB [ 797.205365][T21688] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.295369][T21654] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 797.345364][T21654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.354935][T21654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.444602][T21688] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 797.465351][T21654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.473648][T21688] Node 0 DMA32 free:40420kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14268kB inactive_anon:1264056kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53300kB bounce:0kB free_pcp:1108kB local_pcp:708kB free_cma:0kB [ 797.474925][T21654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 797.474932][T21654] 14968 total pagecache pages [ 797.474940][T21654] 0 pages in swap cache [ 797.474956][T21654] Swap cache stats: add 0, delete 0, find 0/0 [ 797.621796][T21688] lowmem_reserve[]: 0 0 0 0 0 [ 797.642497][T21688] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 797.735401][T21688] lowmem_reserve[]: 0 0 0 0 0 [ 797.740218][T21688] Node 0 DMA: 24*4kB (UM) 2*8kB (M) 25*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10272kB [ 797.785401][T21688] Node 0 DMA32: 1174*4kB (MEH) 1182*8kB (UMEH) 552*16kB (UMEH) 215*32kB (UME) 58*64kB (UMH) 11*128kB (UMH) 7*256kB (UMH) 4*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 40872kB [ 797.807465][T21654] Free swap = 0kB [ 797.811200][T21654] Total swap = 0kB [ 797.814915][T21654] 1965979 pages RAM [ 797.845381][T21654] 0 pages HighMem/MovableOnly [ 797.850092][T21654] 349896 pages reserved [ 797.854236][T21654] 0 pages cma reserved [ 797.873512][T21688] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 05:40:41 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:41 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) 05:40:41 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 797.935616][T21688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.945205][T21688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 798.106194][T21688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 798.201526][T21688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 798.290619][T21688] 14982 total pagecache pages [ 798.343289][T21688] 0 pages in swap cache [ 798.394580][T21688] Swap cache stats: add 0, delete 0, find 0/0 [ 798.458222][T21688] Free swap = 0kB [ 798.501800][T21688] Total swap = 0kB [ 798.543042][T21688] 1965979 pages RAM 05:40:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 798.582896][T21688] 0 pages HighMem/MovableOnly [ 798.625840][T21688] 349896 pages reserved [ 798.658341][T21688] 0 pages cma reserved [ 798.709878][T21688] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=21650,uid=0 [ 798.838241][T21688] Out of memory: OOM victim 21650 (syz-executor.1) is already exiting. Skip killing the task 05:40:42 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:42 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:40:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) 05:40:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:43 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) 05:40:43 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) 05:40:43 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:44 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:40:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:44 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) dup(0xffffffffffffffff) [ 800.822189][T21764] syz-executor.2 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 801.042481][T21764] CPU: 0 PID: 21764 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 801.051196][T21764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.061254][T21764] Call Trace: [ 801.064553][T21764] dump_stack+0x18f/0x20d [ 801.068893][T21764] dump_header+0x106/0x60f [ 801.073322][T21764] oom_kill_process.cold+0x10/0x15 [ 801.078444][T21764] out_of_memory+0x358/0x13f0 [ 801.083132][T21764] ? oom_killer_disable+0x270/0x270 [ 801.088337][T21764] ? mutex_trylock+0x246/0x2c0 [ 801.093104][T21764] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 801.099785][T21764] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 801.106510][T21764] ? warn_alloc+0x120/0x120 [ 801.111022][T21764] ? fs_reclaim_release+0x90/0xd0 [ 801.116059][T21764] ? lock_is_held_type+0xbb/0xf0 [ 801.121002][T21764] ? ion_page_pool_alloc+0xba/0x270 [ 801.126210][T21764] __alloc_pages_nodemask+0x62c/0x790 [ 801.131595][T21764] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 801.138370][T21764] ? wait_for_completion+0x260/0x260 [ 801.143663][T21764] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 801.150093][T21764] alloc_pages_current+0x187/0x280 [ 801.155218][T21764] ion_page_pool_alloc+0x17d/0x270 [ 801.160346][T21764] ion_system_heap_allocate+0x246/0xd10 [ 801.165905][T21764] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 801.171464][T21764] ? ion_system_heap_free+0x470/0x470 [ 801.176842][T21764] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 801.182396][T21764] ion_ioctl+0x373/0xd20 [ 801.186652][T21764] ? ion_buffer_destroy+0x2b0/0x2b0 [ 801.191863][T21764] ? _copy_to_user+0x126/0x160 [ 801.196642][T21764] ? __fget_files+0x294/0x400 [ 801.201337][T21764] ? bpf_lsm_file_ioctl+0x5/0x10 [ 801.206277][T21764] ? ion_buffer_destroy+0x2b0/0x2b0 [ 801.211481][T21764] __x64_sys_ioctl+0x193/0x200 [ 801.216251][T21764] do_syscall_64+0x2d/0x70 [ 801.220682][T21764] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.226573][T21764] RIP: 0033:0x45d4d9 [ 801.230473][T21764] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.250087][T21764] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 801.258504][T21764] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 801.266907][T21764] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 801.274886][T21764] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 801.282867][T21764] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 801.290841][T21764] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c 05:40:45 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:45 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:45 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:40:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 803.530378][T21764] Mem-Info: [ 803.553117][T21764] active_anon:5431 inactive_anon:319994 isolated_anon:506 [ 803.553117][T21764] active_file:2269 inactive_file:6422 isolated_file:0 [ 803.553117][T21764] unevictable:0 dirty:26 writeback:0 [ 803.553117][T21764] slab_reclaimable:15559 slab_unreclaimable:111817 [ 803.553117][T21764] mapped:57895 shmem:7680 pagetables:17425 bounce:0 [ 803.553117][T21764] free:823897 free_pcp:317 free_cma:0 [ 803.805399][T21764] Node 0 active_anon:14352kB inactive_anon:1262720kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):1024kB isolated(file):0kB mapped:212344kB dirty:8kB writeback:0kB shmem:23300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1091584kB writeback_tmp:0kB kernel_stack:22624kB all_unreclaimable? no [ 803.971467][T21764] Node 0 DMA free:10320kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.115388][T21764] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 804.121196][T21764] Node 0 DMA32 free:105956kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14312kB inactive_anon:1260480kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53668kB bounce:0kB free_pcp:2108kB local_pcp:1004kB free_cma:0kB [ 804.305382][T21764] lowmem_reserve[]: 0 0 0 0 0 [ 804.310116][T21764] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.485434][T21764] lowmem_reserve[]: 0 0 0 0 0 [ 804.490179][T21764] Node 0 DMA: 24*4kB (UM) 8*8kB (UM) 25*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10320kB [ 804.605405][T21764] Node 0 DMA32: 2102*4kB (UMEH) 1084*8kB (UMEH) 496*16kB (UMEH) 352*32kB (UME) 279*64kB (UMH) 136*128kB (UMH) 48*256kB (UMH) 4*512kB (UM) 13*1024kB (U) 3*2048kB (U) 0*4096kB = 105336kB [ 804.675553][T21764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 804.755400][T21764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 804.765008][T21764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 804.855374][T21764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 804.864968][T21764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 804.959535][T21764] 15028 total pagecache pages [ 804.964272][T21764] 0 pages in swap cache [ 805.005444][T21764] Swap cache stats: add 0, delete 0, find 0/0 [ 805.011540][T21764] Free swap = 0kB [ 805.015258][T21764] Total swap = 0kB [ 805.085421][T21764] 1965979 pages RAM [ 805.089270][T21764] 0 pages HighMem/MovableOnly [ 805.093943][T21764] 349896 pages reserved [ 805.143847][T21764] 0 pages cma reserved [ 805.179221][T21764] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10681,uid=0 [ 805.245430][T21764] Out of memory: Killed process 10681 (syz-executor.0) total-vm:93812kB, anon-rss:2256kB, file-rss:34836kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 805.315697][T19654] tipc: TX() has been purged, node left! 05:40:49 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) 05:40:50 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:50 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:50 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x7}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 807.364229][T21823] warn_alloc: 16 callbacks suppressed [ 807.364369][T21823] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 807.590199][T21823] CPU: 1 PID: 21823 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 807.598900][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.608954][T21823] Call Trace: [ 807.612277][T21823] dump_stack+0x18f/0x20d [ 807.616709][T21823] warn_alloc.cold+0x87/0x17a [ 807.621391][T21823] ? zone_watermark_ok_safe+0x260/0x260 [ 807.626965][T21823] ? __alloc_pages_direct_compact+0x366/0x420 [ 807.633036][T21823] ? get_page_from_freelist+0x37f0/0x37f0 [ 807.638759][T21823] ? __zone_watermark_ok+0x3f0/0x3f0 [ 807.644056][T21823] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 807.650661][T21823] ? lock_acquire+0x1f1/0xad0 [ 807.655343][T21823] ? fs_reclaim_acquire+0xa1/0xf0 [ 807.660369][T21823] ? warn_alloc+0x120/0x120 [ 807.664882][T21823] ? __zone_watermark_ok+0x3f0/0x3f0 [ 807.670171][T21823] ? lock_is_held_type+0xbb/0xf0 [ 807.675114][T21823] ? ion_page_pool_alloc+0xba/0x270 [ 807.680346][T21823] __alloc_pages_nodemask+0x62c/0x790 [ 807.685730][T21823] ? __mutex_unlock_slowpath+0xe2/0x610 [ 807.691279][T21823] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 807.698049][T21823] ? wait_for_completion+0x260/0x260 [ 807.703333][T21823] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 807.709751][T21823] alloc_pages_current+0x187/0x280 [ 807.714866][T21823] ion_page_pool_alloc+0x17d/0x270 [ 807.720072][T21823] ion_system_heap_allocate+0x246/0xd10 [ 807.725627][T21823] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 807.731202][T21823] ? ion_system_heap_free+0x470/0x470 [ 807.736587][T21823] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 807.742138][T21823] ion_ioctl+0x373/0xd20 [ 807.746401][T21823] ? ion_buffer_destroy+0x2b0/0x2b0 [ 807.751606][T21823] ? _copy_to_user+0x126/0x160 [ 807.756401][T21823] ? __fget_files+0x294/0x400 [ 807.761083][T21823] ? bpf_lsm_file_ioctl+0x5/0x10 [ 807.766021][T21823] ? ion_buffer_destroy+0x2b0/0x2b0 [ 807.771220][T21823] __x64_sys_ioctl+0x193/0x200 [ 807.775997][T21823] do_syscall_64+0x2d/0x70 [ 807.780418][T21823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.786306][T21823] RIP: 0033:0x45d4d9 [ 807.790199][T21823] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.810145][T21823] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 807.818576][T21823] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 807.826547][T21823] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 807.834525][T21823] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 807.842494][T21823] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 807.850467][T21823] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c 05:40:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:51 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:40:51 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:52 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 809.788809][T21855] syz-executor.2 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 809.913118][T21855] CPU: 1 PID: 21855 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 809.921842][T21855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.931895][T21855] Call Trace: [ 809.935203][T21855] dump_stack+0x18f/0x20d [ 809.939542][T21855] dump_header+0x106/0x60f [ 809.943963][T21855] oom_kill_process.cold+0x10/0x15 [ 809.949083][T21855] out_of_memory+0x358/0x13f0 [ 809.954143][T21855] ? oom_killer_disable+0x270/0x270 [ 809.959357][T21855] ? mutex_trylock+0x246/0x2c0 [ 809.964121][T21855] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 809.970802][T21855] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 809.977444][T21855] ? warn_alloc+0x120/0x120 [ 809.981955][T21855] ? fs_reclaim_release+0x90/0xd0 [ 809.986994][T21855] ? lock_is_held_type+0xbb/0xf0 [ 809.991931][T21855] ? ion_page_pool_alloc+0xba/0x270 [ 809.997138][T21855] __alloc_pages_nodemask+0x62c/0x790 [ 810.002520][T21855] ? lockdep_hardirqs_on+0x76/0xf0 [ 810.007637][T21855] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 810.014406][T21855] ? policy_nodemask+0xa7/0x1a0 [ 810.019262][T21855] ? wait_for_completion+0x260/0x260 [ 810.024548][T21855] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 810.030970][T21855] alloc_pages_current+0x187/0x280 [ 810.036095][T21855] ion_page_pool_alloc+0x17d/0x270 [ 810.041217][T21855] ion_system_heap_allocate+0x246/0xd10 [ 810.046793][T21855] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 810.052344][T21855] ? ion_system_heap_free+0x470/0x470 [ 810.057718][T21855] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 810.063272][T21855] ion_ioctl+0x373/0xd20 [ 810.067524][T21855] ? ion_buffer_destroy+0x2b0/0x2b0 [ 810.072728][T21855] ? _copy_to_user+0x126/0x160 [ 810.077506][T21855] ? __fget_files+0x294/0x400 [ 810.082196][T21855] ? bpf_lsm_file_ioctl+0x5/0x10 [ 810.087139][T21855] ? ion_buffer_destroy+0x2b0/0x2b0 [ 810.092369][T21855] __x64_sys_ioctl+0x193/0x200 [ 810.097139][T21855] do_syscall_64+0x2d/0x70 [ 810.101564][T21855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.107478][T21855] RIP: 0033:0x45d4d9 [ 810.111374][T21855] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.130979][T21855] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.139395][T21855] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 810.147370][T21855] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 810.155366][T21855] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 810.163440][T21855] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 810.171415][T21855] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 810.549183][T21823] Mem-Info: [ 810.578198][T21823] active_anon:5486 inactive_anon:321107 isolated_anon:0 [ 810.578198][T21823] active_file:2268 inactive_file:6435 isolated_file:0 [ 810.578198][T21823] unevictable:0 dirty:1 writeback:0 [ 810.578198][T21823] slab_reclaimable:15555 slab_unreclaimable:112277 [ 810.578198][T21823] mapped:57907 shmem:7734 pagetables:17529 bounce:0 [ 810.578198][T21823] free:809004 free_pcp:629 free_cma:0 [ 810.835629][T21823] Node 0 active_anon:14524kB inactive_anon:1264796kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212392kB dirty:0kB writeback:0kB shmem:23464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1095680kB writeback_tmp:0kB kernel_stack:22688kB all_unreclaimable? yes [ 811.028990][T21823] Node 0 DMA free:10268kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 811.221263][T21823] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 811.258953][T21823] Node 0 DMA32 free:46412kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14484kB inactive_anon:1262556kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54040kB bounce:0kB free_pcp:1596kB local_pcp:500kB free_cma:0kB [ 811.470179][T21823] lowmem_reserve[]: 0 0 0 0 0 [ 811.501957][T21823] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 811.677319][T21823] lowmem_reserve[]: 0 0 0 0 0 [ 811.710269][T21823] Node 0 DMA: 7*4kB (UM) 9*8kB (UM) 26*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10276kB [ 811.815197][T21823] Node 0 DMA32: 1809*4kB (UMEH) 1081*8kB (UMEH) 432*16kB (UMEH) 346*32kB (UMEH) 48*64kB (UMH) 11*128kB (UMH) 17*256kB (UH) 0*512kB 3*1024kB (U) 1*2048kB (M) 0*4096kB = 47820kB [ 811.825401][T21855] Mem-Info: [ 811.885453][T21855] active_anon:5490 inactive_anon:320565 isolated_anon:0 [ 811.885453][T21855] active_file:2269 inactive_file:6434 isolated_file:0 [ 811.885453][T21855] unevictable:0 dirty:4 writeback:0 [ 811.885453][T21855] slab_reclaimable:15555 slab_unreclaimable:112307 [ 811.885453][T21855] mapped:57893 shmem:7742 pagetables:17501 bounce:0 [ 811.885453][T21855] free:809965 free_pcp:540 free_cma:0 [ 811.930218][T21823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 812.008362][T21823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.105373][T21823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 812.114696][T21823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.149242][T21855] Node 0 active_anon:14532kB inactive_anon:1264776kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212396kB dirty:0kB writeback:0kB shmem:23476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1093632kB writeback_tmp:0kB kernel_stack:22688kB all_unreclaimable? yes [ 812.205422][T21823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 812.214721][T21823] 15091 total pagecache pages [ 812.296267][T21823] 0 pages in swap cache [ 812.300466][T21823] Swap cache stats: add 0, delete 0, find 0/0 [ 812.321332][T21855] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.355385][T21823] Free swap = 0kB [ 812.359121][T21823] Total swap = 0kB [ 812.362835][T21823] 1965979 pages RAM [ 812.435378][T21823] 0 pages HighMem/MovableOnly [ 812.440291][T21823] 349896 pages reserved [ 812.444439][T21823] 0 pages cma reserved [ 812.511032][T21855] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 812.541528][T21855] Node 0 DMA32 free:50244kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14508kB inactive_anon:1260400kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54016kB bounce:0kB free_pcp:1788kB local_pcp:368kB free_cma:0kB [ 812.765357][T21855] lowmem_reserve[]: 0 0 0 0 0 [ 812.770094][T21855] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.932347][T21855] lowmem_reserve[]: 0 0 0 0 0 [ 812.938192][T21855] Node 0 DMA: 8*4kB (UM) 9*8kB (UM) 26*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10280kB [ 813.055385][T21855] Node 0 DMA32: 2182*4kB (UMEH) 1153*8kB (UMEH) 381*16kB (UMEH) 332*32kB (UMEH) 48*64kB (UMH) 11*128kB (UMH) 17*256kB (UH) 0*512kB 3*1024kB (U) 2*2048kB (M) 0*4096kB = 50672kB [ 813.135421][T21855] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 813.196153][T21855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.245409][T21855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 813.254899][T21855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.375439][T21855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 813.384836][T21855] 15102 total pagecache pages [ 813.464782][T21855] 0 pages in swap cache [ 813.495554][T21855] Swap cache stats: add 0, delete 0, find 0/0 [ 813.501630][T21855] Free swap = 0kB [ 813.545449][T21855] Total swap = 0kB [ 813.549243][T21855] 1965979 pages RAM [ 813.553045][T21855] 0 pages HighMem/MovableOnly [ 813.607871][T21855] 349896 pages reserved [ 813.625427][T21855] 0 pages cma reserved [ 813.629520][T21855] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=21818,uid=0 [ 813.735408][T21855] Out of memory: OOM victim 21818 (syz-executor.0) is already exiting. Skip killing the task 05:40:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:40:57 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x7}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:57 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:57 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:57 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:57 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x54}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:40:58 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 814.533686][T21887] syz-executor.2 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 814.662504][T21887] CPU: 0 PID: 21887 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 814.671211][T21887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.681278][T21887] Call Trace: [ 814.684576][T21887] dump_stack+0x18f/0x20d [ 814.688916][T21887] dump_header+0x106/0x60f [ 814.693344][T21887] oom_kill_process.cold+0x10/0x15 [ 814.698465][T21887] out_of_memory+0x358/0x13f0 [ 814.703155][T21887] ? oom_killer_disable+0x270/0x270 [ 814.708364][T21887] ? mutex_trylock+0x246/0x2c0 [ 814.713169][T21887] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 814.719851][T21887] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 814.726463][T21887] ? warn_alloc+0x120/0x120 [ 814.730983][T21887] ? fs_reclaim_release+0x90/0xd0 [ 814.736020][T21887] ? lock_is_held_type+0xbb/0xf0 [ 814.740964][T21887] ? ion_page_pool_alloc+0xba/0x270 [ 814.746173][T21887] __alloc_pages_nodemask+0x62c/0x790 [ 814.751586][T21887] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 814.758395][T21887] ? wait_for_completion+0x260/0x260 [ 814.763691][T21887] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 814.770114][T21887] alloc_pages_current+0x187/0x280 [ 814.775245][T21887] ion_page_pool_alloc+0x17d/0x270 [ 814.780367][T21887] ion_system_heap_allocate+0x246/0xd10 [ 814.785930][T21887] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 814.791484][T21887] ? ion_system_heap_free+0x470/0x470 [ 814.796862][T21887] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 814.802441][T21887] ion_ioctl+0x373/0xd20 [ 814.806720][T21887] ? ion_buffer_destroy+0x2b0/0x2b0 [ 814.811926][T21887] ? _copy_to_user+0x126/0x160 [ 814.816708][T21887] ? __fget_files+0x294/0x400 [ 814.821426][T21887] ? bpf_lsm_file_ioctl+0x5/0x10 [ 814.826369][T21887] ? ion_buffer_destroy+0x2b0/0x2b0 [ 814.831579][T21887] __x64_sys_ioctl+0x193/0x200 [ 814.836363][T21887] do_syscall_64+0x2d/0x70 [ 814.840809][T21887] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 814.846703][T21887] RIP: 0033:0x45d4d9 [ 814.850602][T21887] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 814.870203][T21887] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.878624][T21887] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 814.886601][T21887] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 814.894584][T21887] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 814.902555][T21887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 814.910533][T21887] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c 05:40:58 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:40:58 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 815.978680][T19654] tipc: TX() has been purged, node left! [ 816.696213][T21887] Mem-Info: [ 816.699399][T21887] active_anon:5526 inactive_anon:320506 isolated_anon:0 [ 816.699399][T21887] active_file:2272 inactive_file:6437 isolated_file:0 [ 816.699399][T21887] unevictable:0 dirty:11 writeback:0 [ 816.699399][T21887] slab_reclaimable:15551 slab_unreclaimable:112234 [ 816.699399][T21887] mapped:57902 shmem:7779 pagetables:17568 bounce:0 [ 816.699399][T21887] free:812890 free_pcp:172 free_cma:0 [ 816.955630][T21887] Node 0 active_anon:14628kB inactive_anon:1264552kB active_file:36kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212432kB dirty:8kB writeback:0kB shmem:23592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1093632kB writeback_tmp:0kB kernel_stack:22784kB all_unreclaimable? no [ 817.155385][T21887] Node 0 DMA free:10296kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.320493][T21887] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 817.345423][T21887] Node 0 DMA32 free:58700kB min:37964kB low:46940kB high:55916kB reserved_highatomic:2048KB active_anon:14588kB inactive_anon:1262312kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54220kB bounce:0kB free_pcp:624kB local_pcp:380kB free_cma:0kB [ 817.505375][T21887] lowmem_reserve[]: 0 0 0 0 0 [ 817.510230][T21887] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.695461][T21887] lowmem_reserve[]: 0 0 0 0 0 [ 817.700199][T21887] Node 0 DMA: 8*4kB (UM) 11*8kB (UM) 26*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10296kB [ 817.825381][T21887] Node 0 DMA32: 1608*4kB (MEH) 1082*8kB (UMEH) 392*16kB (MEH) 231*32kB (UMEH) 51*64kB (UMH) 11*128kB (MH) 6*256kB (UMH) 0*512kB 12*1024kB (U) 4*2048kB (UM) 0*4096kB = 55440kB [ 817.915422][T21887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 817.985426][T21887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 817.995091][T21887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.095424][T21887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 818.105007][T21887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 818.185428][T21887] 15146 total pagecache pages [ 818.190810][T21887] 0 pages in swap cache [ 818.194980][T21887] Swap cache stats: add 0, delete 0, find 0/0 [ 818.275613][T21887] Free swap = 0kB [ 818.279345][T21887] Total swap = 0kB [ 818.283060][T21887] 1965979 pages RAM [ 818.339550][T21887] 0 pages HighMem/MovableOnly [ 818.344259][T21887] 349896 pages reserved [ 818.385395][T21887] 0 pages cma reserved [ 818.389586][T21887] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=21873,uid=0 [ 818.495424][T21887] Out of memory: OOM victim 21873 (syz-executor.3) is already exiting. Skip killing the task 05:41:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:02 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x68}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:02 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:02 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:02 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1f4}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:03 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:03 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:04 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x300}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 821.664467][T21970] warn_alloc: 8 callbacks suppressed [ 821.664488][T21970] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 821.905436][T21970] CPU: 1 PID: 21970 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 821.914140][T21970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.924196][T21970] Call Trace: [ 821.927497][T21970] dump_stack+0x18f/0x20d [ 821.931857][T21970] warn_alloc.cold+0x87/0x17a [ 821.936542][T21970] ? zone_watermark_ok_safe+0x260/0x260 [ 821.942096][T21970] ? __alloc_pages_direct_compact+0x366/0x420 [ 821.948171][T21970] ? get_page_from_freelist+0x37f0/0x37f0 [ 821.953892][T21970] ? psi_task_change+0x142/0x220 [ 821.958833][T21970] ? _raw_spin_unlock_irq+0x1f/0x80 [ 821.964042][T21970] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 821.970691][T21970] ? lock_acquire+0x1f1/0xad0 [ 821.975398][T21970] ? fs_reclaim_acquire+0xa1/0xf0 [ 821.980435][T21970] ? warn_alloc+0x120/0x120 [ 821.984948][T21970] ? __zone_watermark_ok+0x3f0/0x3f0 [ 821.990261][T21970] ? lock_is_held_type+0xbb/0xf0 [ 821.995727][T21970] ? ion_page_pool_alloc+0xba/0x270 [ 822.001312][T21970] __alloc_pages_nodemask+0x62c/0x790 [ 822.006718][T21970] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 822.013495][T21970] ? wait_for_completion+0x260/0x260 [ 822.018786][T21970] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 822.025208][T21970] alloc_pages_current+0x187/0x280 [ 822.030360][T21970] ion_page_pool_alloc+0x17d/0x270 [ 822.035482][T21970] ion_system_heap_allocate+0x246/0xd10 [ 822.041038][T21970] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 822.046589][T21970] ? ion_system_heap_free+0x470/0x470 [ 822.051967][T21970] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 822.057520][T21970] ion_ioctl+0x373/0xd20 [ 822.061774][T21970] ? ion_buffer_destroy+0x2b0/0x2b0 [ 822.066979][T21970] ? _copy_to_user+0x126/0x160 [ 822.071754][T21970] ? __fget_files+0x294/0x400 [ 822.076441][T21970] ? bpf_lsm_file_ioctl+0x5/0x10 [ 822.081465][T21970] ? ion_buffer_destroy+0x2b0/0x2b0 [ 822.086665][T21970] __x64_sys_ioctl+0x193/0x200 [ 822.091441][T21970] do_syscall_64+0x2d/0x70 [ 822.095861][T21970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.101770][T21970] RIP: 0033:0x45d4d9 [ 822.105695][T21970] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.125298][T21970] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 822.133713][T21970] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 822.141681][T21970] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 822.149657][T21970] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 822.157634][T21970] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 822.165611][T21970] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:41:05 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3e8}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:05 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:06 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:07 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x500}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x54}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x68}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 824.877128][T21970] Mem-Info: [ 824.913226][T21970] active_anon:5577 inactive_anon:321292 isolated_anon:0 [ 824.913226][T21970] active_file:2271 inactive_file:6444 isolated_file:0 [ 824.913226][T21970] unevictable:0 dirty:61 writeback:0 [ 824.913226][T21970] slab_reclaimable:15560 slab_unreclaimable:110650 [ 824.913226][T21970] mapped:57914 shmem:7824 pagetables:17941 bounce:0 [ 824.913226][T21970] free:579348 free_pcp:730 free_cma:0 [ 825.264216][T21970] Node 0 active_anon:14732kB inactive_anon:1266560kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212460kB dirty:8kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1095680kB writeback_tmp:0kB kernel_stack:22848kB all_unreclaimable? yes [ 825.580661][T21970] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.815456][T21970] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 825.856370][T21970] Node 0 DMA32 free:46660kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1264320kB active_file:32kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54212kB bounce:0kB free_pcp:932kB local_pcp:532kB free_cma:0kB [ 826.078352][T21970] lowmem_reserve[]: 0 0 0 0 0 [ 826.127802][T21970] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 826.293322][T21970] lowmem_reserve[]: 0 0 0 0 0 [ 826.315393][T21970] Node 0 DMA: 8*4kB (UM) 9*8kB (UM) 26*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10280kB [ 826.401129][T21970] Node 0 DMA32: 5547*4kB (UMEH) 920*8kB (UMEH) 508*16kB (UME) 123*32kB (UMEH) 28*64kB (UMH) 4*128kB (H) 3*256kB (H) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45196kB [ 826.501026][T21970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 826.564531][T21970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 826.618984][T21970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 826.670692][T21970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 826.735543][T21970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 826.777527][T21970] 15201 total pagecache pages [ 826.808265][T21970] 0 pages in swap cache [ 826.835451][T21970] Swap cache stats: add 0, delete 0, find 0/0 [ 826.885598][T21970] Free swap = 0kB [ 826.889330][T21970] Total swap = 0kB [ 826.893043][T21970] 1965979 pages RAM [ 826.945632][T21970] 0 pages HighMem/MovableOnly [ 826.950333][T21970] 349896 pages reserved [ 826.954480][T21970] 0 pages cma reserved 05:41:10 executing program 1: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x700}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:10 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1f4}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:10 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:10 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:11 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) poll(0x0, 0x0, 0x204) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:11 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:11 executing program 1: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x300}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3e8}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3f00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x500}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:15 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 831.570910][ T1172] oom_reaper: reaped process 22065 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 05:41:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 831.930838][T22088] warn_alloc: 2 callbacks suppressed [ 831.930859][T22088] syz-executor.2: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 832.088809][T22088] CPU: 1 PID: 22088 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 832.097515][T22088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.107590][T22088] Call Trace: [ 832.110882][T22088] dump_stack+0x18f/0x20d [ 832.115216][T22088] warn_alloc.cold+0x87/0x17a [ 832.119897][T22088] ? zone_watermark_ok_safe+0x260/0x260 [ 832.125448][T22088] ? __alloc_pages_direct_compact+0x366/0x420 [ 832.131516][T22088] ? get_page_from_freelist+0x37f0/0x37f0 [ 832.137238][T22088] ? psi_task_change+0x142/0x220 [ 832.142187][T22088] ? _raw_spin_unlock_irq+0x1f/0x80 [ 832.147393][T22088] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 832.153994][T22088] ? lock_acquire+0x1f1/0xad0 [ 832.158676][T22088] ? fs_reclaim_acquire+0xa1/0xf0 [ 832.158692][T22088] ? warn_alloc+0x120/0x120 [ 832.158731][T22088] ? __zone_watermark_ok+0x3f0/0x3f0 [ 832.158748][T22088] ? lock_is_held_type+0xbb/0xf0 [ 832.158763][T22088] ? ion_page_pool_alloc+0xba/0x270 [ 832.158783][T22088] __alloc_pages_nodemask+0x62c/0x790 [ 832.189015][T22088] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 832.195793][T22088] ? wait_for_completion+0x260/0x260 [ 832.201079][T22088] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 832.207498][T22088] alloc_pages_current+0x187/0x280 [ 832.212617][T22088] ion_page_pool_alloc+0x17d/0x270 [ 832.217739][T22088] ion_system_heap_allocate+0x246/0xd10 [ 832.223293][T22088] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 832.228842][T22088] ? ion_system_heap_free+0x470/0x470 [ 832.234218][T22088] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 832.239770][T22088] ion_ioctl+0x373/0xd20 [ 832.244021][T22088] ? ion_buffer_destroy+0x2b0/0x2b0 [ 832.249226][T22088] ? _copy_to_user+0x126/0x160 [ 832.254005][T22088] ? __fget_files+0x294/0x400 [ 832.258694][T22088] ? bpf_lsm_file_ioctl+0x5/0x10 [ 832.263632][T22088] ? ion_buffer_destroy+0x2b0/0x2b0 [ 832.268833][T22088] __x64_sys_ioctl+0x193/0x200 [ 832.273599][T22088] do_syscall_64+0x2d/0x70 [ 832.278017][T22088] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 832.283907][T22088] RIP: 0033:0x45d4d9 [ 832.287807][T22088] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 832.307407][T22088] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.315819][T22088] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 832.323795][T22088] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 832.331761][T22088] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 832.339737][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 832.347710][T22088] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 834.175516][T22088] Mem-Info: [ 834.178938][T22088] active_anon:5627 inactive_anon:320164 isolated_anon:0 [ 834.178938][T22088] active_file:2270 inactive_file:6456 isolated_file:0 [ 834.178938][T22088] unevictable:0 dirty:0 writeback:0 [ 834.178938][T22088] slab_reclaimable:15551 slab_unreclaimable:111062 [ 834.178938][T22088] mapped:57918 shmem:7876 pagetables:17997 bounce:0 [ 834.178938][T22088] free:334533 free_pcp:713 free_cma:0 [ 834.423987][T22088] Node 0 active_anon:14732kB inactive_anon:1261624kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212496kB dirty:0kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1087488kB writeback_tmp:0kB kernel_stack:22848kB all_unreclaimable? yes [ 834.621175][T22088] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 834.817037][T22088] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 834.822810][T22088] Node 0 DMA32 free:28544kB min:40012kB low:48988kB high:57964kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1259384kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54212kB bounce:0kB free_pcp:2536kB local_pcp:1276kB free_cma:0kB [ 835.016233][T22088] lowmem_reserve[]: 0 0 0 0 0 [ 835.020963][T22088] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 835.195445][T22088] lowmem_reserve[]: 0 0 0 0 0 [ 835.200177][T22088] Node 0 DMA: 7*4kB (UM) 3*8kB (UM) 22*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10164kB [ 835.305570][T22088] Node 0 DMA32: 2578*4kB (UMEH) 1420*8kB (UMEH) 432*16kB (UMEH) 73*32kB (UMEH) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32584kB [ 835.378778][T22088] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 835.435456][T22088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 835.445038][T22088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 835.555412][T22088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 835.564982][T22088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 835.655405][T22088] 15266 total pagecache pages [ 835.660111][T22088] 0 pages in swap cache [ 835.664257][T22088] Swap cache stats: add 0, delete 0, find 0/0 [ 835.745445][T22088] Free swap = 0kB [ 835.749182][T22088] Total swap = 0kB [ 835.752895][T22088] 1965979 pages RAM [ 835.805477][T22088] 0 pages HighMem/MovableOnly [ 835.810172][T22088] 349896 pages reserved [ 835.814315][T22088] 0 pages cma reserved [ 835.925128][ T1172] oom_reaper: reaped process 22088 (syz-executor.2), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB 05:41:19 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x700}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5400}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:19 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:19 executing program 1: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:20 executing program 1: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 836.592117][T22107] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 836.692403][T22107] CPU: 1 PID: 22107 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 836.701107][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.711174][T22107] Call Trace: [ 836.714470][T22107] dump_stack+0x18f/0x20d [ 836.718815][T22107] dump_header+0x106/0x60f [ 836.723239][T22107] oom_kill_process.cold+0x10/0x15 [ 836.728352][T22107] out_of_memory+0x358/0x13f0 [ 836.733056][T22107] ? oom_killer_disable+0x270/0x270 [ 836.738263][T22107] ? mutex_trylock+0x246/0x2c0 [ 836.743027][T22107] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 836.749712][T22107] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 836.756319][T22107] ? warn_alloc+0x120/0x120 [ 836.760834][T22107] ? fs_reclaim_release+0x90/0xd0 [ 836.765872][T22107] ? lock_is_held_type+0xbb/0xf0 [ 836.770825][T22107] __alloc_pages_nodemask+0x62c/0x790 [ 836.776224][T22107] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 836.782992][T22107] ? mark_lock+0xbc/0x1710 05:41:20 executing program 1: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 836.787417][T22107] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 836.793846][T22107] alloc_pages_vma+0xdd/0x720 [ 836.798531][T22107] wp_page_copy+0x1fd/0x17d0 [ 836.803130][T22107] ? do_wp_page+0x699/0x1950 [ 836.807724][T22107] ? print_bad_pte+0x640/0x640 [ 836.812494][T22107] ? lock_downgrade+0x830/0x830 [ 836.817345][T22107] ? vm_normal_page+0x148/0x380 [ 836.822200][T22107] ? handle_mm_fault+0x2112/0x4590 [ 836.827319][T22107] do_wp_page+0x6a1/0x1950 [ 836.831740][T22107] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 836.837113][T22107] ? rwlock_bug.part.0+0x90/0x90 [ 836.842062][T22107] handle_mm_fault+0x3216/0x4590 [ 836.847009][T22107] ? apply_to_existing_page_range+0x40/0x40 [ 836.852914][T22107] ? vmacache_update+0xce/0x140 [ 836.857773][T22107] do_user_addr_fault+0x598/0xbf0 [ 836.862814][T22107] ? trace_hardirqs_off+0x40/0x210 [ 836.867932][T22107] exc_page_fault+0xa8/0x160 [ 836.872524][T22107] asm_exc_page_fault+0x1e/0x30 [ 836.877379][T22107] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 836.883706][T22107] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 836.903310][T22107] RSP: 0018:ffffc9019fd37bb0 EFLAGS: 00010206 [ 836.909377][T22107] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 836.917347][T22107] RDX: 0000000000000000 RSI: ffffc9019fd37c40 RDI: 0000000000743058 [ 836.925339][T22107] RBP: ffffc9019fd37c40 R08: 0000000000006f6c R09: ffffc9019fd37c67 [ 836.933312][T22107] R10: fffff52033fa6f8c R11: 0000000000000000 R12: 0000000000000028 [ 836.941284][T22107] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 836.949273][T22107] _copy_to_user+0x11e/0x160 [ 836.953943][T22107] inet_gifconf+0x24f/0x4a0 [ 836.958480][T22107] ? inet_validate_link_af+0x390/0x390 [ 836.963944][T22107] ? mutex_lock_io_nested+0xf60/0xf60 [ 836.969316][T22107] ? lock_downgrade+0x830/0x830 [ 836.974177][T22107] ? inet_validate_link_af+0x390/0x390 [ 836.979697][T22107] dev_ifconf+0xdb/0x230 [ 836.983985][T22107] sock_do_ioctl+0x202/0x2d0 [ 836.988584][T22107] ? compat_ifr_data_ioctl+0x150/0x150 [ 836.994051][T22107] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 836.999950][T22107] ? do_vfs_ioctl+0x27d/0x1090 [ 837.004722][T22107] ? generic_block_fiemap+0x60/0x60 [ 837.009929][T22107] sock_ioctl+0x3b8/0x730 [ 837.014260][T22107] ? dlci_ioctl_set+0x30/0x30 [ 837.018945][T22107] ? __fget_files+0x294/0x400 [ 837.023658][T22107] ? bpf_lsm_file_ioctl+0x5/0x10 [ 837.028601][T22107] ? dlci_ioctl_set+0x30/0x30 [ 837.033284][T22107] __x64_sys_ioctl+0x193/0x200 [ 837.038057][T22107] do_syscall_64+0x2d/0x70 [ 837.042477][T22107] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 837.048371][T22107] RIP: 0033:0x45d4d9 [ 837.052270][T22107] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 837.071880][T22107] RSP: 002b:00007f9c230cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.080296][T22107] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 837.088272][T22107] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 837.096285][T22107] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 837.104266][T22107] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 837.112236][T22107] R13: 000000000169fb6f R14: 00007f9c230ce9c0 R15: 000000000118cfec 05:41:21 executing program 1: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:21 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:22 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:22 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:23 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 839.847345][T22107] Mem-Info: [ 839.871172][T22107] active_anon:5671 inactive_anon:320226 isolated_anon:0 [ 839.871172][T22107] active_file:2265 inactive_file:6460 isolated_file:8 [ 839.871172][T22107] unevictable:0 dirty:0 writeback:0 [ 839.871172][T22107] slab_reclaimable:15549 slab_unreclaimable:112801 [ 839.871172][T22107] mapped:57959 shmem:7918 pagetables:18056 bounce:0 [ 839.871172][T22107] free:83069 free_pcp:21 free_cma:0 [ 840.133370][T22107] Node 0 active_anon:14732kB inactive_anon:1261620kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:212540kB dirty:0kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1087488kB writeback_tmp:0kB kernel_stack:22848kB all_unreclaimable? no [ 840.331187][T22107] Node 0 DMA free:10200kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.522037][T22107] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 840.573429][T22107] Node 0 DMA32 free:31688kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1259380kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.771533][T22107] lowmem_reserve[]: 0 0 0 0 0 [ 840.807834][T22107] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.989703][T22107] lowmem_reserve[]: 0 0 0 0 0 [ 841.019943][T22107] Node 0 DMA: 18*4kB (UM) 5*8kB (UM) 22*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10224kB [ 841.127006][T22107] Node 0 DMA32: 2759*4kB (UMEH) 1344*8kB (UMEH) 340*16kB (UMEH) 80*32kB (UMEH) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31452kB [ 841.235873][T22107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 841.314260][T22107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.377995][T22107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 841.443837][T22107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.510973][T22107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 841.572219][T22107] 15315 total pagecache pages [ 841.603093][T22107] 0 pages in swap cache [ 841.655512][T22107] Swap cache stats: add 0, delete 0, find 0/0 [ 841.661607][T22107] Free swap = 0kB [ 841.665327][T22107] Total swap = 0kB [ 841.735466][T22107] 1965979 pages RAM [ 841.739308][T22107] 0 pages HighMem/MovableOnly [ 841.743978][T22107] 349896 pages reserved [ 841.792273][T22107] 0 pages cma reserved [ 841.845401][T22107] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=14362,uid=0 [ 841.922506][T22107] Out of memory: Killed process 14362 (syz-executor.0) total-vm:93680kB, anon-rss:2248kB, file-rss:34836kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 842.131791][ T1172] oom_reaper: reaped process 22127 (syz-executor.2), now anon-rss:0kB, file-rss:34768kB, shmem-rss:0kB 05:41:25 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6800}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:26 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 842.624746][T22142] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 842.667532][T22140] warn_alloc: 1 callbacks suppressed [ 842.667552][T22140] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 842.742286][T22142] CPU: 1 PID: 22142 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 842.750982][T22142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.761037][T22142] Call Trace: [ 842.764336][T22142] dump_stack+0x18f/0x20d [ 842.768676][T22142] dump_header+0x106/0x60f [ 842.773106][T22142] oom_kill_process.cold+0x10/0x15 [ 842.778228][T22142] out_of_memory+0x358/0x13f0 [ 842.783046][T22142] ? oom_killer_disable+0x270/0x270 [ 842.788252][T22142] ? mutex_trylock+0x246/0x2c0 [ 842.793020][T22142] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 842.799702][T22142] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 842.806319][T22142] ? warn_alloc+0x120/0x120 [ 842.810831][T22142] ? fs_reclaim_release+0x90/0xd0 [ 842.815868][T22142] ? lock_is_held_type+0xbb/0xf0 [ 842.820812][T22142] __alloc_pages_nodemask+0x62c/0x790 [ 842.826188][T22142] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 842.832978][T22142] ? mark_lock+0xbc/0x1710 [ 842.837399][T22142] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 842.843818][T22142] alloc_pages_vma+0xdd/0x720 [ 842.848503][T22142] wp_page_copy+0x1fd/0x17d0 [ 842.853097][T22142] ? do_wp_page+0x699/0x1950 [ 842.857692][T22142] ? print_bad_pte+0x640/0x640 [ 842.862461][T22142] ? lock_downgrade+0x830/0x830 [ 842.867315][T22142] ? vm_normal_page+0x148/0x380 [ 842.872177][T22142] ? handle_mm_fault+0x2112/0x4590 [ 842.877298][T22142] do_wp_page+0x6a1/0x1950 [ 842.881722][T22142] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 842.887097][T22142] ? rwlock_bug.part.0+0x90/0x90 [ 842.892044][T22142] handle_mm_fault+0x3216/0x4590 [ 842.896994][T22142] ? apply_to_existing_page_range+0x40/0x40 [ 842.902895][T22142] ? vmacache_update+0xce/0x140 [ 842.907762][T22142] do_user_addr_fault+0x598/0xbf0 [ 842.912811][T22142] ? trace_hardirqs_off+0x40/0x210 [ 842.917928][T22142] exc_page_fault+0xa8/0x160 [ 842.922524][T22142] asm_exc_page_fault+0x1e/0x30 [ 842.927381][T22142] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 842.933705][T22142] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 842.953314][T22142] RSP: 0018:ffffc901be207bb0 EFLAGS: 00010206 [ 842.959380][T22142] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 842.967352][T22142] RDX: 0000000000000000 RSI: ffffc901be207c40 RDI: 0000000000743058 [ 842.975324][T22142] RBP: ffffc901be207c40 R08: 0000000000006f6c R09: ffffc901be207c67 [ 842.983293][T22142] R10: fffff52037c40f8c R11: 0000000000000000 R12: 0000000000000028 [ 842.991258][T22142] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 842.999247][T22142] _copy_to_user+0x11e/0x160 [ 843.003879][T22142] inet_gifconf+0x24f/0x4a0 [ 843.008387][T22142] ? inet_validate_link_af+0x390/0x390 [ 843.013858][T22142] ? mutex_lock_io_nested+0xf60/0xf60 [ 843.019577][T22142] ? lock_downgrade+0x830/0x830 [ 843.024444][T22142] ? inet_validate_link_af+0x390/0x390 [ 843.029906][T22142] dev_ifconf+0xdb/0x230 [ 843.034448][T22142] sock_do_ioctl+0x202/0x2d0 [ 843.039046][T22142] ? compat_ifr_data_ioctl+0x150/0x150 [ 843.044512][T22142] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 843.050413][T22142] ? do_vfs_ioctl+0x27d/0x1090 [ 843.055180][T22142] ? generic_block_fiemap+0x60/0x60 [ 843.060389][T22142] sock_ioctl+0x3b8/0x730 [ 843.064738][T22142] ? dlci_ioctl_set+0x30/0x30 [ 843.069450][T22142] ? __fget_files+0x294/0x400 [ 843.074149][T22142] ? bpf_lsm_file_ioctl+0x5/0x10 [ 843.079101][T22142] ? dlci_ioctl_set+0x30/0x30 [ 843.083786][T22142] __x64_sys_ioctl+0x193/0x200 [ 843.088561][T22142] do_syscall_64+0x2d/0x70 [ 843.092985][T22142] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.098877][T22142] RIP: 0033:0x45d4d9 [ 843.102774][T22142] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.122382][T22142] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.130793][T22142] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 843.138775][T22142] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 843.146747][T22142] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 843.154719][T22142] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 843.162696][T22142] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c [ 843.274665][T22140] CPU: 1 PID: 22140 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 843.283386][T22140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.293436][T22140] Call Trace: [ 843.296733][T22140] dump_stack+0x18f/0x20d [ 843.301077][T22140] warn_alloc.cold+0x87/0x17a [ 843.305756][T22140] ? zone_watermark_ok_safe+0x260/0x260 [ 843.311302][T22140] ? __alloc_pages_direct_compact+0x366/0x420 [ 843.317378][T22140] ? get_page_from_freelist+0x37f0/0x37f0 [ 843.323114][T22140] ? psi_task_change+0x142/0x220 [ 843.328058][T22140] ? _raw_spin_unlock_irq+0x1f/0x80 [ 843.333264][T22140] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 843.339868][T22140] ? lock_acquire+0x1f1/0xad0 [ 843.344548][T22140] ? fs_reclaim_acquire+0xa1/0xf0 [ 843.349573][T22140] ? warn_alloc+0x120/0x120 [ 843.354084][T22140] ? __zone_watermark_ok+0x3f0/0x3f0 [ 843.359372][T22140] ? lock_is_held_type+0xbb/0xf0 [ 843.364312][T22140] ? ion_page_pool_alloc+0xba/0x270 [ 843.369520][T22140] __alloc_pages_nodemask+0x62c/0x790 [ 843.374917][T22140] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 843.381687][T22140] ? wait_for_completion+0x260/0x260 [ 843.386976][T22140] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 843.393416][T22140] alloc_pages_current+0x187/0x280 [ 843.398535][T22140] ion_page_pool_alloc+0x17d/0x270 [ 843.403650][T22140] ion_system_heap_allocate+0x246/0xd10 [ 843.409207][T22140] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 843.414760][T22140] ? ion_system_heap_free+0x470/0x470 [ 843.420131][T22140] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 843.425713][T22140] ion_ioctl+0x373/0xd20 [ 843.429966][T22140] ? ion_buffer_destroy+0x2b0/0x2b0 [ 843.435167][T22140] ? _copy_to_user+0x126/0x160 [ 843.439947][T22140] ? __fget_files+0x294/0x400 [ 843.444631][T22140] ? bpf_lsm_file_ioctl+0x5/0x10 [ 843.449568][T22140] ? ion_buffer_destroy+0x2b0/0x2b0 [ 843.454771][T22140] __x64_sys_ioctl+0x193/0x200 [ 843.459544][T22140] do_syscall_64+0x2d/0x70 [ 843.463964][T22140] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.469850][T22140] RIP: 0033:0x45d4d9 [ 843.473747][T22140] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.493359][T22140] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.501771][T22140] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 843.509742][T22140] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 843.517712][T22140] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 843.525686][T22140] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 843.533656][T22140] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 844.927605][T22140] Mem-Info: [ 844.946475][T22140] active_anon:5695 inactive_anon:319653 isolated_anon:0 [ 844.946475][T22140] active_file:2271 inactive_file:6467 isolated_file:0 [ 844.946475][T22140] unevictable:0 dirty:76 writeback:0 [ 844.946475][T22140] slab_reclaimable:15547 slab_unreclaimable:112624 [ 844.946475][T22140] mapped:57973 shmem:7953 pagetables:18054 bounce:0 [ 844.946475][T22140] free:28954 free_pcp:257 free_cma:0 [ 845.164296][T22140] Node 0 active_anon:14732kB inactive_anon:1259432kB active_file:32kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212596kB dirty:8kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1085440kB writeback_tmp:0kB kernel_stack:22816kB all_unreclaimable? no [ 845.348405][T22140] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 845.570005][T22140] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 845.605459][T22140] Node 0 DMA32 free:22148kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1257192kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54100kB bounce:0kB free_pcp:1184kB local_pcp:936kB free_cma:0kB [ 845.791418][T22140] lowmem_reserve[]: 0 0 0 0 0 [ 845.796601][T22142] Mem-Info: [ 845.799744][T22142] active_anon:5701 inactive_anon:319649 isolated_anon:0 [ 845.799744][T22142] active_file:3248 inactive_file:3048 isolated_file:32 [ 845.799744][T22142] unevictable:0 dirty:76 writeback:0 [ 845.799744][T22142] slab_reclaimable:15547 slab_unreclaimable:112813 [ 845.799744][T22142] mapped:57974 shmem:7958 pagetables:18028 bounce:0 [ 845.799744][T22142] free:24824 free_pcp:298 free_cma:0 [ 845.866268][T22140] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 846.021029][T22140] lowmem_reserve[]: 0 0 0 0 0 [ 846.054337][T22140] Node 0 DMA: 16*4kB (UM) 4*8kB (UM) 19*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10160kB [ 846.086328][T22142] Node 0 active_anon:14732kB inactive_anon:1259432kB active_file:36kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212600kB dirty:8kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1085440kB writeback_tmp:0kB kernel_stack:22816kB all_unreclaimable? no [ 846.196305][T22140] Node 0 DMA32: 1433*4kB (UMEH) 906*8kB (UMEH) 341*16kB (UMEH) 64*32kB (UMEH) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22148kB [ 846.272012][T22140] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 846.295423][T22142] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 846.385512][T22140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 846.395099][T22140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 846.515424][T22142] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 846.521200][T22142] Node 0 DMA32 free:21708kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1257192kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54100kB bounce:0kB free_pcp:164kB local_pcp:64kB free_cma:0kB [ 846.552859][T22140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 846.625464][T22140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 846.634813][T22140] 11779 total pagecache pages [ 846.715413][T22140] 0 pages in swap cache [ 846.719597][T22140] Swap cache stats: add 0, delete 0, find 0/0 [ 846.795413][T22140] Free swap = 0kB [ 846.799249][T22140] Total swap = 0kB [ 846.802968][T22140] 1965979 pages RAM [ 846.825407][T22142] lowmem_reserve[]: 0 0 0 0 0 [ 846.830134][T22142] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 846.872714][T22140] 0 pages HighMem/MovableOnly [ 846.905434][T22140] 349896 pages reserved [ 846.909608][T22140] 0 pages cma reserved [ 847.075467][T22142] lowmem_reserve[]: 0 0 0 0 0 [ 847.080459][T22142] Node 0 DMA: 16*4kB (UM) 4*8kB (UM) 19*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10160kB [ 847.191467][T22142] Node 0 DMA32: 1406*4kB (UMEH) 781*8kB (UMEH) 195*16kB (UMEH) 44*32kB (UMH) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 847.271182][T22142] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 847.326466][T22142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 847.355477][T22142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 847.364816][T22142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 847.436359][T22142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 847.458274][T22142] 8554 total pagecache pages [ 847.462883][T22142] 0 pages in swap cache [ 847.495416][T22142] Swap cache stats: add 0, delete 0, find 0/0 [ 847.501529][T22142] Free swap = 0kB [ 847.505248][T22142] Total swap = 0kB [ 847.557812][T22142] 1965979 pages RAM [ 847.561761][T22142] 0 pages HighMem/MovableOnly [ 847.577823][T22142] 349896 pages reserved [ 847.581993][T22142] 0 pages cma reserved [ 847.595798][T22142] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=12030,uid=0 [ 847.645520][T22142] Out of memory: Killed process 12030 (syz-executor.0) total-vm:93680kB, anon-rss:2248kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 847.686546][ T1172] oom_reaper: reaped process 22142 (syz-executor.5), now anon-rss:0kB, file-rss:34756kB, shmem-rss:0kB [ 847.766802][ T1172] oom_reaper: reaped process 22132 (syz-executor.1), now anon-rss:0kB, file-rss:34756kB, shmem-rss:0kB [ 847.808928][ T1172] oom_reaper: reaped process 22140 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 848.934657][ T3907] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 848.993975][ T3907] CPU: 1 PID: 3907 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 [ 849.002508][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.012563][ T3907] Call Trace: [ 849.015854][ T3907] dump_stack+0x18f/0x20d [ 849.020213][ T3907] dump_header+0x106/0x60f [ 849.024633][ T3907] oom_kill_process.cold+0x10/0x15 [ 849.029744][ T3907] out_of_memory+0x358/0x13f0 [ 849.034429][ T3907] ? oom_killer_disable+0x270/0x270 [ 849.039632][ T3907] ? mutex_trylock+0x246/0x2c0 [ 849.044391][ T3907] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 849.051064][ T3907] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 849.057670][ T3907] ? warn_alloc+0x120/0x120 [ 849.062181][ T3907] ? fs_reclaim_release+0x90/0xd0 [ 849.067240][ T3907] ? lock_is_held_type+0xbb/0xf0 [ 849.072179][ T3907] ? find_get_entry+0x3b2/0x8a0 [ 849.077055][ T3907] __alloc_pages_nodemask+0x62c/0x790 [ 849.082427][ T3907] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 849.089205][ T3907] ? page_cache_readahead_unbounded+0x572/0x850 [ 849.095445][ T3907] ? __lock_page_or_retry+0x650/0x650 [ 849.100821][ T3907] alloc_pages_current+0x187/0x280 [ 849.105934][ T3907] __page_cache_alloc+0x31e/0x450 [ 849.110958][ T3907] pagecache_get_page+0x2a6/0xf70 [ 849.116001][ T3907] ? __do_page_cache_readahead+0xc2/0xf0 [ 849.121639][ T3907] filemap_fault+0x1a94/0x2ab0 [ 849.126413][ T3907] ext4_filemap_fault+0x87/0xb6 [ 849.131285][ T3907] __do_fault+0x10d/0x4d0 [ 849.135619][ T3907] handle_mm_fault+0x3477/0x4590 [ 849.140568][ T3907] ? apply_to_existing_page_range+0x40/0x40 [ 849.146483][ T3907] do_user_addr_fault+0x598/0xbf0 [ 849.151513][ T3907] exc_page_fault+0xa8/0x160 [ 849.156110][ T3907] ? asm_exc_page_fault+0x8/0x30 [ 849.161056][ T3907] asm_exc_page_fault+0x1e/0x30 [ 849.165915][ T3907] RIP: 0033:0x564ed7e7be78 [ 849.170350][ T3907] Code: Bad RIP value. [ 849.174432][ T3907] RSP: 002b:00007ffe1cfe28c0 EFLAGS: 00010246 [ 849.180498][ T3907] RAX: 0000564ed7fb1ec0 RBX: 0000564ed7fb1ec0 RCX: 0000564ed7fb1e01 [ 849.188468][ T3907] RDX: 00007ffe1cfe2820 RSI: 0000564ed7e94266 RDI: 0000564ed7fb1ec0 [ 849.196432][ T3907] RBP: 0000564ed7e94266 R08: 00007f4d777ae298 R09: 0000000000001010 [ 849.204395][ T3907] R10: 0000000000000020 R11: 0000000000000246 R12: 0000564ed7e91856 [ 849.212367][ T3907] R13: 0000564ed7fad730 R14: 00000000ffffffea R15: 0000564ed7fad500 [ 849.225324][ T3907] Mem-Info: [ 849.229259][ T3907] active_anon:5724 inactive_anon:318955 isolated_anon:0 [ 849.229259][ T3907] active_file:22 inactive_file:95 isolated_file:11 [ 849.229259][ T3907] unevictable:0 dirty:4 writeback:0 [ 849.229259][ T3907] slab_reclaimable:15544 slab_unreclaimable:113172 [ 849.229259][ T3907] mapped:53207 shmem:7971 pagetables:17915 bounce:0 [ 849.229259][ T3907] free:37323 free_pcp:266 free_cma:0 [ 849.268513][ T3907] Node 0 active_anon:14732kB inactive_anon:1257232kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212584kB dirty:0kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1083392kB writeback_tmp:0kB kernel_stack:22784kB all_unreclaimable? yes [ 849.299127][ T3907] Node 1 active_anon:8164kB inactive_anon:18588kB active_file:80kB inactive_file:1376kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:644kB dirty:16kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5344kB all_unreclaimable? yes [ 849.376265][ T3907] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 849.605430][ T3907] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 849.642382][ T3907] Node 0 DMA32 free:17756kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1254992kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53988kB bounce:0kB free_pcp:536kB local_pcp:248kB free_cma:0kB 05:41:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:33 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe803}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:33 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 849.841368][ T3907] lowmem_reserve[]: 0 0 0 0 0 05:41:33 executing program 2: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 849.888645][ T3907] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 850.128961][ T3907] lowmem_reserve[]: 0 0 0 0 0 05:41:33 executing program 2: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 850.175061][ T3907] Node 1 Normal free:234732kB min:60116kB low:73608kB high:87100kB reserved_highatomic:0KB active_anon:8176kB inactive_anon:19092kB active_file:1844kB inactive_file:10208kB unevictable:0kB writepending:28kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:17956kB bounce:0kB free_pcp:1804kB local_pcp:420kB free_cma:0kB 05:41:34 executing program 2: set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 850.435907][ T3907] lowmem_reserve[]: 0 0 0 0 0 [ 850.474352][ T3907] Node 0 DMA: 19*4kB (UM) 4*8kB (UM) 19*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10172kB [ 850.614861][ T3907] Node 0 DMA32: 1448*4kB (MEH) 1008*8kB (UMEH) 195*16kB (UMEH) 39*32kB (UMH) 6*64kB (H) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20016kB [ 850.794313][ T3907] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 850.862984][ T3907] Node 1 Normal: 9*4kB (UME) 4*8kB (UME) 6*16kB (E) 33*32kB (ME) 54*64kB (M) 23*128kB (UME) 14*256kB (UM) 7*512kB (M) 1*1024kB (U) 3*2048kB (U) 50*4096kB (U) = 226756kB [ 850.982002][ T3907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 851.030967][ T3907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 851.082752][ T3907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 851.136357][ T3907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 851.194366][ T3907] 11039 total pagecache pages [ 851.220884][ T3907] 0 pages in swap cache [ 851.244842][ T3907] Swap cache stats: add 0, delete 0, find 0/0 [ 851.281129][ T3907] Free swap = 0kB [ 851.302369][ T3907] Total swap = 0kB [ 851.328052][ T3907] 1965979 pages RAM [ 851.347786][ T3907] 0 pages HighMem/MovableOnly [ 851.380256][ T3907] 349896 pages reserved [ 851.393197][ T3907] 0 pages cma reserved [ 851.412780][ T3907] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=11584,uid=0 [ 851.499186][ T3907] Out of memory: Killed process 11584 (syz-executor.0) total-vm:93680kB, anon-rss:2248kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 851.687390][ T1172] oom_reaper: reaped process 22158 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 05:41:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5400}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:41 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:41 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xf401}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:41 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 858.326060][T22182] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:41:42 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 858.436482][T22182] CPU: 0 PID: 22182 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 858.446152][T22182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.456204][T22182] Call Trace: [ 858.459510][T22182] dump_stack+0x18f/0x20d [ 858.463853][T22182] dump_header+0x106/0x60f [ 858.468283][T22182] oom_kill_process.cold+0x10/0x15 [ 858.473432][T22182] out_of_memory+0x358/0x13f0 [ 858.478125][T22182] ? oom_killer_disable+0x270/0x270 [ 858.483333][T22182] ? mutex_trylock+0x246/0x2c0 [ 858.488100][T22182] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 858.494784][T22182] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 858.501408][T22182] ? warn_alloc+0x120/0x120 [ 858.505922][T22182] ? fs_reclaim_release+0x90/0xd0 [ 858.510961][T22182] ? lock_is_held_type+0xbb/0xf0 [ 858.515901][T22182] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.521979][T22182] __alloc_pages_nodemask+0x62c/0x790 [ 858.527361][T22182] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 858.534127][T22182] ? fs_reclaim_acquire+0xa1/0xf0 [ 858.539161][T22182] ? fs_reclaim_release+0x90/0xd0 [ 858.544190][T22182] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 858.550617][T22182] alloc_pages_current+0x187/0x280 [ 858.555732][T22182] __get_free_pages+0x8/0x40 [ 858.560326][T22182] sg_kmalloc+0x52/0x70 [ 858.565004][T22182] __sg_alloc_table+0x244/0x380 [ 858.569863][T22182] sg_alloc_table+0x37/0x270 [ 858.574454][T22182] ? sg_alloc_table_from_pages+0x50/0x50 [ 858.580095][T22182] ion_system_heap_allocate+0x4a9/0xd10 [ 858.585650][T22182] ? ion_system_heap_free+0x470/0x470 [ 858.591023][T22182] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 858.596599][T22182] ion_ioctl+0x373/0xd20 [ 858.600856][T22182] ? ion_buffer_destroy+0x2b0/0x2b0 [ 858.606058][T22182] ? _copy_to_user+0x126/0x160 [ 858.610835][T22182] ? __fget_files+0x294/0x400 [ 858.615520][T22182] ? bpf_lsm_file_ioctl+0x5/0x10 [ 858.620458][T22182] ? ion_buffer_destroy+0x2b0/0x2b0 [ 858.625661][T22182] __x64_sys_ioctl+0x193/0x200 [ 858.630519][T22182] do_syscall_64+0x2d/0x70 [ 858.634938][T22182] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.640830][T22182] RIP: 0033:0x45d4d9 [ 858.644728][T22182] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 858.664354][T22182] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.672766][T22182] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 05:41:42 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 858.680735][T22182] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 858.688706][T22182] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 858.696674][T22182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 858.704674][T22182] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c 05:41:42 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:42 executing program 2: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:42 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:42 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6800}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 860.522232][T22182] Mem-Info: [ 860.544560][T22182] active_anon:5813 inactive_anon:318673 isolated_anon:0 [ 860.544560][T22182] active_file:114 inactive_file:205 isolated_file:38 [ 860.544560][T22182] unevictable:0 dirty:17 writeback:0 [ 860.544560][T22182] slab_reclaimable:15537 slab_unreclaimable:112797 [ 860.544560][T22182] mapped:53453 shmem:8059 pagetables:18068 bounce:0 [ 860.544560][T22182] free:22066 free_pcp:39 free_cma:0 [ 860.772389][T22182] Node 0 active_anon:14732kB inactive_anon:1255028kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212644kB dirty:0kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1081344kB writeback_tmp:0kB kernel_stack:22720kB all_unreclaimable? yes [ 860.881442][T22182] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.925200][T22182] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 860.932668][T22182] Node 0 DMA32 free:20840kB min:37964kB low:46940kB high:55916kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1252788kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53876kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 860.963995][T22182] lowmem_reserve[]: 0 0 0 0 0 [ 860.969215][T22182] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.996823][T22182] lowmem_reserve[]: 0 0 0 0 0 [ 861.012038][T22182] Node 0 DMA: 25*4kB (UM) 4*8kB (UM) 17*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10164kB [ 861.051637][T22182] Node 0 DMA32: 2115*4kB (UMEH) 821*8kB (UMEH) 187*16kB (UME) 39*32kB (MH) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20932kB [ 861.086159][T22182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 861.098659][T22182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.109896][T22182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.120907][T22182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.132074][T22182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.143427][T22182] 8210 total pagecache pages [ 861.149719][T22182] 0 pages in swap cache [ 861.154253][T22182] Swap cache stats: add 0, delete 0, find 0/0 [ 861.160646][T22182] Free swap = 0kB [ 861.164705][T22182] Total swap = 0kB [ 861.169492][T22182] 1965979 pages RAM [ 861.173593][T22182] 0 pages HighMem/MovableOnly [ 861.178571][T22182] 349896 pages reserved [ 861.183020][T22182] 0 pages cma reserved [ 861.187444][T22182] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=11839,uid=0 [ 861.203828][T22182] Out of memory: Killed process 11839 (syz-executor.3) total-vm:93680kB, anon-rss:2240kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 861.222298][ T1172] oom_reaper: reaped process 11839 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:41:45 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:45 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 861.873467][T22221] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 05:41:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 862.058587][T22221] CPU: 1 PID: 22221 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 862.067317][T22221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.077374][T22221] Call Trace: [ 862.080671][T22221] dump_stack+0x18f/0x20d [ 862.085008][T22221] warn_alloc.cold+0x87/0x17a [ 862.089692][T22221] ? zone_watermark_ok_safe+0x260/0x260 [ 862.095249][T22221] ? __alloc_pages_direct_compact+0x366/0x420 [ 862.101324][T22221] ? get_page_from_freelist+0x37f0/0x37f0 [ 862.107047][T22221] ? psi_task_change+0x142/0x220 [ 862.112018][T22221] ? _raw_spin_unlock_irq+0x1f/0x80 [ 862.117229][T22221] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 862.123838][T22221] ? lock_acquire+0x1f1/0xad0 [ 862.128523][T22221] ? fs_reclaim_acquire+0xa1/0xf0 [ 862.133556][T22221] ? warn_alloc+0x120/0x120 [ 862.138072][T22221] ? __zone_watermark_ok+0x3f0/0x3f0 [ 862.143389][T22221] ? lock_is_held_type+0xbb/0xf0 [ 862.148326][T22221] ? ion_page_pool_alloc+0xba/0x270 [ 862.153534][T22221] __alloc_pages_nodemask+0x62c/0x790 [ 862.158918][T22221] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 862.165711][T22221] ? wait_for_completion+0x260/0x260 [ 862.171023][T22221] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 862.177448][T22221] alloc_pages_current+0x187/0x280 [ 862.182565][T22221] ion_page_pool_alloc+0x17d/0x270 [ 862.188220][T22221] ion_system_heap_allocate+0x246/0xd10 [ 862.193774][T22221] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 862.199325][T22221] ? ion_system_heap_free+0x470/0x470 [ 862.204707][T22221] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 862.210264][T22221] ion_ioctl+0x373/0xd20 [ 862.214517][T22221] ? ion_buffer_destroy+0x2b0/0x2b0 [ 862.219729][T22221] ? _copy_to_user+0x126/0x160 [ 862.224514][T22221] ? __fget_files+0x294/0x400 [ 862.229203][T22221] ? bpf_lsm_file_ioctl+0x5/0x10 [ 862.234144][T22221] ? ion_buffer_destroy+0x2b0/0x2b0 [ 862.239347][T22221] __x64_sys_ioctl+0x193/0x200 [ 862.244119][T22221] do_syscall_64+0x2d/0x70 [ 862.248538][T22221] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 862.254433][T22221] RIP: 0033:0x45d4d9 [ 862.258329][T22221] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 862.278229][T22221] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.286643][T22221] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 862.294661][T22221] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 862.302630][T22221] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 862.310599][T22221] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 862.318570][T22221] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c 05:41:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe803}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 863.760176][T22221] Mem-Info: [ 863.763615][T22221] active_anon:5825 inactive_anon:318098 isolated_anon:0 [ 863.763615][T22221] active_file:675 inactive_file:590 isolated_file:75 [ 863.763615][T22221] unevictable:0 dirty:4 writeback:0 [ 863.763615][T22221] slab_reclaimable:15537 slab_unreclaimable:112575 [ 863.763615][T22221] mapped:54435 shmem:8072 pagetables:18049 bounce:0 [ 863.763615][T22221] free:21228 free_pcp:4 free_cma:0 [ 864.105474][T22221] Node 0 active_anon:14732kB inactive_anon:1252828kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212676kB dirty:0kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1079296kB writeback_tmp:0kB kernel_stack:22720kB all_unreclaimable? yes 05:41:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xf401}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 864.369029][T22221] Node 0 DMA free:10176kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.571732][T22221] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 864.630764][T22221] Node 0 DMA32 free:21040kB min:37964kB low:46940kB high:55916kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1250588kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.781541][T22221] lowmem_reserve[]: 0 0 0 0 0 [ 864.787166][T22221] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.825110][T22221] lowmem_reserve[]: 0 0 0 0 0 [ 864.830912][T22221] Node 0 DMA: 26*4kB (UM) 7*8kB (UM) 17*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10192kB [ 864.852913][T22221] Node 0 DMA32: 1815*4kB (UMEH) 913*8kB (UMEH) 215*16kB (UME) 41*32kB (UMH) 8*64kB (UH) 5*128kB (UH) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21492kB [ 864.945462][T22221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 864.995512][T22221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.005097][T22221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.065461][T22221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.075057][T22221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.105455][T22221] 8461 total pagecache pages [ 865.110071][T22221] 0 pages in swap cache [ 865.114217][T22221] Swap cache stats: add 0, delete 0, find 0/0 [ 865.136362][T22221] Free swap = 0kB [ 865.140095][T22221] Total swap = 0kB [ 865.143806][T22221] 1965979 pages RAM [ 865.165473][T22221] 0 pages HighMem/MovableOnly [ 865.170168][T22221] 349896 pages reserved [ 865.174316][T22221] 0 pages cma reserved [ 865.188580][ T1172] oom_reaper: reaped process 22221 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:41:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:50 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:54 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:41:54 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:54 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:54 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:54 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:41:55 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 871.287769][T22266] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:41:55 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 871.444190][T22266] CPU: 0 PID: 22266 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 871.453210][T22266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.463281][T22266] Call Trace: [ 871.466935][T22266] dump_stack+0x18f/0x20d [ 871.471306][T22266] dump_header+0x106/0x60f [ 871.475838][T22266] oom_kill_process.cold+0x10/0x15 [ 871.481099][T22266] out_of_memory+0x358/0x13f0 [ 871.485890][T22266] ? oom_killer_disable+0x270/0x270 [ 871.491118][T22266] ? mutex_trylock+0x246/0x2c0 [ 871.495903][T22266] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 871.502775][T22266] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 871.509589][T22266] ? warn_alloc+0x120/0x120 [ 871.514369][T22266] ? fs_reclaim_release+0x90/0xd0 [ 871.519427][T22266] ? lock_is_held_type+0xbb/0xf0 [ 871.524385][T22266] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 871.530668][T22266] __alloc_pages_nodemask+0x62c/0x790 [ 871.536066][T22266] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 871.543280][T22266] ? fs_reclaim_acquire+0xa1/0xf0 [ 871.548343][T22266] ? fs_reclaim_release+0x90/0xd0 [ 871.553386][T22266] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 871.560041][T22266] alloc_pages_current+0x187/0x280 [ 871.565413][T22266] __get_free_pages+0x8/0x40 [ 871.570182][T22266] sg_kmalloc+0x52/0x70 [ 871.574445][T22266] __sg_alloc_table+0x244/0x380 [ 871.579327][T22266] sg_alloc_table+0x37/0x270 [ 871.583932][T22266] ? sg_alloc_table_from_pages+0x50/0x50 [ 871.589687][T22266] ion_system_heap_allocate+0x4a9/0xd10 [ 871.595529][T22266] ? ion_system_heap_free+0x470/0x470 [ 871.601161][T22266] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 871.606879][T22266] ion_ioctl+0x373/0xd20 [ 871.611356][T22266] ? ion_buffer_destroy+0x2b0/0x2b0 [ 871.616932][T22266] ? _copy_to_user+0x126/0x160 [ 871.621718][T22266] ? __fget_files+0x294/0x400 [ 871.626798][T22266] ? bpf_lsm_file_ioctl+0x5/0x10 [ 871.631758][T22266] ? ion_buffer_destroy+0x2b0/0x2b0 [ 871.636977][T22266] __x64_sys_ioctl+0x193/0x200 [ 871.641767][T22266] do_syscall_64+0x2d/0x70 [ 871.646200][T22266] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 871.652200][T22266] RIP: 0033:0x45d4d9 [ 871.656112][T22266] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 871.676452][T22266] RSP: 002b:00007f9c230cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.685022][T22266] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 05:41:55 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 871.693100][T22266] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 871.701348][T22266] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 871.709451][T22266] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 871.717438][T22266] R13: 000000000169fb6f R14: 00007f9c230ce9c0 R15: 000000000118cfec 05:41:55 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:41:55 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:41:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 872.182102][T22281] syz-executor.2: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 872.369964][T22281] CPU: 1 PID: 22281 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 872.379004][T22281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.389378][T22281] Call Trace: [ 872.392692][T22281] dump_stack+0x18f/0x20d [ 872.397211][T22281] warn_alloc.cold+0x87/0x17a [ 872.401910][T22281] ? zone_watermark_ok_safe+0x260/0x260 [ 872.407476][T22281] ? __alloc_pages_direct_compact+0x366/0x420 [ 872.413564][T22281] ? get_page_from_freelist+0x37f0/0x37f0 [ 872.419394][T22281] ? __zone_watermark_ok+0x3f0/0x3f0 [ 872.424708][T22281] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 872.431504][T22281] ? lock_acquire+0x1f1/0xad0 [ 872.436204][T22281] ? fs_reclaim_acquire+0xa1/0xf0 [ 872.441464][T22281] ? warn_alloc+0x120/0x120 [ 872.445993][T22281] ? __zone_watermark_ok+0x3f0/0x3f0 [ 872.451320][T22281] ? lock_is_held_type+0xbb/0xf0 [ 872.456400][T22281] ? ion_page_pool_alloc+0xba/0x270 [ 872.461799][T22281] __alloc_pages_nodemask+0x62c/0x790 [ 872.467264][T22281] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 872.474052][T22281] ? wait_for_completion+0x260/0x260 [ 872.479361][T22281] alloc_pages_current+0x187/0x280 [ 872.484670][T22281] ion_page_pool_alloc+0x17d/0x270 [ 872.489940][T22281] ion_system_heap_allocate+0x246/0xd10 [ 872.495510][T22281] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 872.501072][T22281] ? ion_system_heap_free+0x470/0x470 [ 872.506671][T22281] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 872.512240][T22281] ion_ioctl+0x373/0xd20 [ 872.516663][T22281] ? ion_buffer_destroy+0x2b0/0x2b0 [ 872.522044][T22281] ? preempt_schedule_irq+0x88/0x150 [ 872.527361][T22281] ? __fget_files+0x294/0x400 [ 872.532160][T22281] ? bpf_lsm_file_ioctl+0x5/0x10 [ 872.537115][T22281] ? ion_buffer_destroy+0x2b0/0x2b0 [ 872.542347][T22281] __x64_sys_ioctl+0x193/0x200 [ 872.547271][T22281] do_syscall_64+0x2d/0x70 [ 872.551707][T22281] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 872.557612][T22281] RIP: 0033:0x45d4d9 [ 872.561657][T22281] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 872.580052][T22266] Mem-Info: [ 872.581740][T22281] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.581757][T22281] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 872.581775][T22281] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 872.584961][T22266] active_anon:5873 inactive_anon:318094 isolated_anon:0 [ 872.584961][T22266] active_file:1209 inactive_file:1120 isolated_file:102 [ 872.584961][T22266] unevictable:0 dirty:59 writeback:0 [ 872.584961][T22266] slab_reclaimable:15534 slab_unreclaimable:112537 [ 872.584961][T22266] mapped:55351 shmem:8120 pagetables:18042 bounce:0 [ 872.584961][T22266] free:22658 free_pcp:15 free_cma:0 [ 872.593871][T22281] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 872.593879][T22281] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 05:41:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 872.593888][T22281] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 872.889725][T22281] Mem-Info: [ 872.893483][T22281] active_anon:5878 inactive_anon:318078 isolated_anon:0 [ 872.893483][T22281] active_file:1216 inactive_file:1012 isolated_file:148 [ 872.893483][T22281] unevictable:0 dirty:65 writeback:0 [ 872.893483][T22281] slab_reclaimable:15532 slab_unreclaimable:112621 [ 872.893483][T22281] mapped:55337 shmem:8124 pagetables:18039 bounce:0 [ 872.893483][T22281] free:70009 free_pcp:706 free_cma:0 [ 875.815104][T22281] Node 0 active_anon:14732kB inactive_anon:1252828kB active_file:12kB inactive_file:244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212788kB dirty:12kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1079296kB writeback_tmp:0kB kernel_stack:22656kB all_unreclaimable? no [ 875.857090][T22266] Node 0 active_anon:14732kB inactive_anon:1252828kB active_file:12kB inactive_file:344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212788kB dirty:12kB writeback:0kB shmem:23672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1079296kB writeback_tmp:0kB kernel_stack:22656kB all_unreclaimable? no 05:41:59 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 876.030061][T22281] Node 1 active_anon:8780kB inactive_anon:19384kB active_file:3592kB inactive_file:3288kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:6304kB dirty:76kB writeback:0kB shmem:8824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5696kB all_unreclaimable? no [ 876.068490][T22266] Node 0 DMA free:10556kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 05:41:59 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 876.279885][T22266] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 876.289304][T22281] Node 0 DMA free:10556kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.342097][T22266] Node 0 DMA32 free:286840kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1250888kB active_file:812kB inactive_file:2836kB unevictable:0kB writepending:12kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54056kB bounce:0kB free_pcp:2076kB local_pcp:1260kB free_cma:0kB [ 876.514567][T22281] lowmem_reserve[]: 0 2515 2515 2515 2515 05:42:00 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 876.557832][T22281] Node 0 DMA32 free:285904kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:14692kB inactive_anon:1250988kB active_file:812kB inactive_file:2936kB unevictable:0kB writepending:12kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54056kB bounce:0kB free_pcp:1864kB local_pcp:1324kB free_cma:0kB [ 876.615642][T22266] lowmem_reserve[]: 0 0 0 0 0 [ 876.658777][T22266] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.879240][T22281] lowmem_reserve[]: 0 0 0 0 0 [ 876.896351][T22266] lowmem_reserve[]: 0 0 0 0 0 [ 876.901063][T22266] Node 0 DMA: 67*4kB (UM) 26*8kB (UM) 21*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10572kB [ 876.904056][T22281] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 877.015609][T22266] Node 0 DMA32: 13473*4kB (UMEH) 10055*8kB (UMEH) 3762*16kB (UMEH) 1259*32kB (UMEH) 484*64kB (UMH) 99*128kB (UH) 17*256kB (UH) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 284860kB [ 877.125506][T22266] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 877.135483][T22281] lowmem_reserve[]: 0 0 0 0 0 [ 877.141684][T22281] Node 1 Normal free:1497344kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:8780kB inactive_anon:19284kB active_file:3788kB inactive_file:3144kB unevictable:0kB writepending:44kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:18084kB bounce:0kB free_pcp:2660kB local_pcp:1328kB free_cma:0kB [ 877.205467][T22266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.215027][T22266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.319860][T22266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.325096][T22281] lowmem_reserve[]: 0 0 0 0 0 [ 877.355521][T22281] Node 0 DMA: 67*4kB (UM) 26*8kB (UM) 21*16kB (UM) 15*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (UME) 0*4096kB = 10572kB [ 877.375535][T22266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.384836][T22266] 10919 total pagecache pages [ 877.441739][T22281] Node 0 DMA32: 12591*4kB (UMEH) 9750*8kB (UMEH) 3768*16kB (UMEH) 1264*32kB (UMEH) 484*64kB (UMH) 99*128kB (UH) 17*256kB (UH) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 279148kB [ 877.475515][T22266] 0 pages in swap cache [ 877.479695][T22266] Swap cache stats: add 0, delete 0, find 0/0 [ 877.541619][T22281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 877.545456][T22266] Free swap = 0kB [ 877.601526][T22281] Node 1 Normal: 10193*4kB (UME) 9456*8kB (UME) 7968*16kB (UME) 7083*32kB (UME) 5502*64kB (UM) 3451*128kB (UME) 218*256kB (UM) 24*512kB (UM) 17*1024kB (U) 18*2048kB (U) 31*4096kB (U) = 1513764kB [ 877.608774][T22266] Total swap = 0kB [ 877.705522][T22281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.705535][T22281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.705546][T22281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.705557][T22281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.705563][T22281] 10903 total pagecache pages [ 877.705571][T22281] 0 pages in swap cache [ 877.705580][T22281] Swap cache stats: add 0, delete 0, find 0/0 [ 877.705585][T22281] Free swap = 0kB [ 877.705591][T22281] Total swap = 0kB [ 877.705607][T22281] 1965979 pages RAM [ 877.715154][T22266] 1965979 pages RAM [ 877.805697][T22281] 0 pages HighMem/MovableOnly [ 877.810409][T22281] 349896 pages reserved [ 877.814554][T22281] 0 pages cma reserved [ 877.985517][T22266] 0 pages HighMem/MovableOnly [ 877.990232][T22266] 349896 pages reserved [ 877.994379][T22266] 0 pages cma reserved [ 878.045513][T22266] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=11828,uid=0 [ 878.135554][T22266] Out of memory: Killed process 11828 (syz-executor.1) total-vm:93680kB, anon-rss:2240kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:42:01 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:01 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:42:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x7000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:06 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:17 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:17 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:42:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:17 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:17 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:17 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:18 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:18 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:42:18 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:18 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:18 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:42:18 executing program 5: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:18 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:18 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:42:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:18 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:19 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:19 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) [ 895.530447][T22355] syz-executor.5: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 895.700552][T22355] CPU: 0 PID: 22355 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 895.709287][T22355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.719351][T22355] Call Trace: [ 895.722651][T22355] dump_stack+0x18f/0x20d [ 895.726991][T22355] warn_alloc.cold+0x87/0x17a [ 895.731675][T22355] ? zone_watermark_ok_safe+0x260/0x260 [ 895.737228][T22355] ? __alloc_pages_direct_compact+0x366/0x420 [ 895.743358][T22355] ? get_page_from_freelist+0x37f0/0x37f0 [ 895.749076][T22355] ? __zone_watermark_ok+0x3f0/0x3f0 [ 895.754377][T22355] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 895.760987][T22355] ? lock_acquire+0x1f1/0xad0 [ 895.765670][T22355] ? fs_reclaim_acquire+0xa1/0xf0 [ 895.770697][T22355] ? warn_alloc+0x120/0x120 [ 895.775208][T22355] ? __zone_watermark_ok+0x3f0/0x3f0 [ 895.780497][T22355] ? lock_is_held_type+0xbb/0xf0 [ 895.785441][T22355] ? ion_page_pool_alloc+0xba/0x270 [ 895.790650][T22355] __alloc_pages_nodemask+0x62c/0x790 [ 895.796027][T22355] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 895.802801][T22355] ? wait_for_completion+0x260/0x260 [ 895.808087][T22355] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 895.814534][T22355] alloc_pages_current+0x187/0x280 [ 895.819652][T22355] ion_page_pool_alloc+0x17d/0x270 [ 895.824769][T22355] ion_system_heap_allocate+0x246/0xd10 [ 895.830332][T22355] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 895.835881][T22355] ? ion_system_heap_free+0x470/0x470 [ 895.841254][T22355] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 895.846808][T22355] ion_ioctl+0x373/0xd20 [ 895.851081][T22355] ? ion_buffer_destroy+0x2b0/0x2b0 [ 895.856288][T22355] ? _copy_to_user+0x126/0x160 [ 895.861064][T22355] ? __fget_files+0x294/0x400 [ 895.865774][T22355] ? bpf_lsm_file_ioctl+0x5/0x10 [ 895.870711][T22355] ? ion_buffer_destroy+0x2b0/0x2b0 [ 895.875931][T22355] __x64_sys_ioctl+0x193/0x200 [ 895.880719][T22355] do_syscall_64+0x2d/0x70 [ 895.885136][T22355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 895.891027][T22355] RIP: 0033:0x45d4d9 05:42:19 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) [ 895.894924][T22355] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 895.914527][T22355] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 895.922940][T22355] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 895.930933][T22355] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 895.938907][T22355] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 895.946898][T22355] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 895.954867][T22355] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:42:19 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:19 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:42:19 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 897.454242][T22355] Mem-Info: [ 897.471466][T22355] active_anon:6078 inactive_anon:317982 isolated_anon:0 [ 897.471466][T22355] active_file:1496 inactive_file:1107 isolated_file:0 [ 897.471466][T22355] unevictable:0 dirty:57 writeback:0 [ 897.471466][T22355] slab_reclaimable:15520 slab_unreclaimable:110703 [ 897.471466][T22355] mapped:55265 shmem:8325 pagetables:17923 bounce:0 [ 897.471466][T22355] free:380296 free_pcp:227 free_cma:0 [ 897.684681][T22355] Node 0 active_anon:15336kB inactive_anon:1252836kB active_file:212kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212984kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1079296kB writeback_tmp:0kB kernel_stack:22656kB all_unreclaimable? no [ 897.860003][T22355] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.015564][T22355] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 898.046865][T22355] Node 0 DMA32 free:48756kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:15296kB inactive_anon:1250596kB active_file:212kB inactive_file:76kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53856kB bounce:0kB free_pcp:1452kB local_pcp:128kB free_cma:0kB [ 898.220054][T22355] lowmem_reserve[]: 0 0 0 0 0 [ 898.245889][T22355] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 898.396180][T22355] lowmem_reserve[]: 0 0 0 0 0 [ 898.435482][T22355] Node 0 DMA: 8*4kB (UM) 4*8kB (UME) 30*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10272kB [ 898.541624][T22355] Node 0 DMA32: 2978*4kB (UMEH) 970*8kB (UME) 307*16kB (UMEH) 182*32kB (UMEH) 29*64kB (UMH) 70*128kB (UH) 19*256kB (UH) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 48136kB [ 898.636367][T22355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 898.725491][T22355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.735084][T22355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 898.805493][T22355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 898.815066][T22355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 898.905492][T22355] 10949 total pagecache pages [ 898.910192][T22355] 0 pages in swap cache [ 898.914338][T22355] Swap cache stats: add 0, delete 0, find 0/0 [ 898.995534][T22355] Free swap = 0kB [ 898.999287][T22355] Total swap = 0kB [ 899.002996][T22355] 1965979 pages RAM [ 899.065527][T22355] 0 pages HighMem/MovableOnly [ 899.070239][T22355] 349896 pages reserved [ 899.074384][T22355] 0 pages cma reserved [ 899.347851][ T1172] oom_reaper: reaped process 22355 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 05:42:26 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:42:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x7000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:28 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:42:28 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:28 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:28 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:28 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 904.642213][T22403] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:42:28 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 904.777329][T22403] CPU: 0 PID: 22403 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 904.786064][T22403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.796118][T22403] Call Trace: [ 904.799418][T22403] dump_stack+0x18f/0x20d [ 904.803786][T22403] dump_header+0x106/0x60f [ 904.808217][T22403] oom_kill_process.cold+0x10/0x15 [ 904.813342][T22403] out_of_memory+0x358/0x13f0 [ 904.818064][T22403] ? oom_killer_disable+0x270/0x270 [ 904.823274][T22403] ? mutex_trylock+0x246/0x2c0 [ 904.828055][T22403] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 904.834742][T22403] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 904.841370][T22403] ? warn_alloc+0x120/0x120 [ 904.845883][T22403] ? fs_reclaim_release+0x90/0xd0 [ 904.850925][T22403] ? lock_is_held_type+0xbb/0xf0 [ 904.855880][T22403] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.861965][T22403] __alloc_pages_nodemask+0x62c/0x790 [ 904.867356][T22403] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 904.874134][T22403] ? fs_reclaim_acquire+0xa1/0xf0 [ 904.879168][T22403] ? fs_reclaim_release+0x90/0xd0 [ 904.884196][T22403] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 904.890620][T22403] alloc_pages_current+0x187/0x280 [ 904.895873][T22403] __get_free_pages+0x8/0x40 [ 904.900486][T22403] sg_kmalloc+0x52/0x70 [ 904.904662][T22403] __sg_alloc_table+0x244/0x380 [ 904.909525][T22403] sg_alloc_table+0x37/0x270 [ 904.914145][T22403] ? sg_alloc_table_from_pages+0x50/0x50 [ 904.919789][T22403] ion_system_heap_allocate+0x4a9/0xd10 [ 904.925346][T22403] ? ion_system_heap_free+0x470/0x470 [ 904.930720][T22403] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 904.936272][T22403] ion_ioctl+0x373/0xd20 [ 904.940532][T22403] ? ion_buffer_destroy+0x2b0/0x2b0 [ 904.945736][T22403] ? _copy_to_user+0x126/0x160 [ 904.950512][T22403] ? __fget_files+0x294/0x400 [ 904.955198][T22403] ? bpf_lsm_file_ioctl+0x5/0x10 [ 904.960139][T22403] ? ion_buffer_destroy+0x2b0/0x2b0 [ 904.965382][T22403] __x64_sys_ioctl+0x193/0x200 [ 904.970154][T22403] do_syscall_64+0x2d/0x70 [ 904.974575][T22403] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.980470][T22403] RIP: 0033:0x45d4d9 [ 904.984370][T22403] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 905.003973][T22403] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.012402][T22403] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 905.020391][T22403] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 905.028373][T22403] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 905.036363][T22403] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 905.044359][T22403] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:42:28 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:28 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:42:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3f000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:29 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:29 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xa000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:29 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 907.035712][T22403] Mem-Info: [ 907.052897][T22403] active_anon:6140 inactive_anon:317460 isolated_anon:26 [ 907.052897][T22403] active_file:2069 inactive_file:1791 isolated_file:15 [ 907.052897][T22403] unevictable:1 dirty:78 writeback:0 [ 907.052897][T22403] slab_reclaimable:15585 slab_unreclaimable:110747 [ 907.052897][T22403] mapped:55568 shmem:8406 pagetables:17948 bounce:0 [ 907.052897][T22403] free:279827 free_pcp:120 free_cma:0 [ 907.259922][T22403] Node 0 active_anon:15332kB inactive_anon:1250576kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212796kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1077248kB writeback_tmp:0kB kernel_stack:22656kB all_unreclaimable? no [ 907.421751][T22403] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.585487][T22403] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 907.591260][T22403] Node 0 DMA32 free:49976kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1248336kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53856kB bounce:0kB free_pcp:492kB local_pcp:452kB free_cma:0kB [ 907.766231][T22403] lowmem_reserve[]: 0 0 0 0 0 [ 907.770955][T22403] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.935519][T22403] lowmem_reserve[]: 0 0 0 0 0 [ 907.940258][T22403] Node 0 DMA: 10*4kB (UM) 4*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10168kB [ 908.045525][T22403] Node 0 DMA32: 4158*4kB (UMEH) 937*8kB (UMEH) 883*16kB (UME) 230*32kB (UMEH) 40*64kB (UH) 9*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50096kB [ 908.045600][T22403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 908.045675][T22403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 908.245499][T22403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 908.254817][T22403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 908.335566][T22403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 908.344859][T22403] 12316 total pagecache pages [ 908.415661][T22403] 0 pages in swap cache [ 908.419854][T22403] Swap cache stats: add 0, delete 0, find 0/0 [ 908.475541][T22403] Free swap = 0kB [ 908.475547][T22403] Total swap = 0kB [ 908.475554][T22403] 1965979 pages RAM [ 908.475560][T22403] 0 pages HighMem/MovableOnly [ 908.475565][T22403] 349896 pages reserved [ 908.475571][T22403] 0 pages cma reserved [ 908.475582][T22403] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10812,uid=0 [ 908.475676][T22403] Out of memory: Killed process 10812 (syz-executor.0) total-vm:93548kB, anon-rss:2240kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 908.726828][ T1172] oom_reaper: reaped process 10812 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:42:32 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:32 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:32 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x40000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:32 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 909.160791][T22455] syz-executor.5: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 909.341693][T22455] CPU: 1 PID: 22455 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 909.350505][T22455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.360611][T22455] Call Trace: [ 909.363910][T22455] dump_stack+0x18f/0x20d [ 909.368253][T22455] warn_alloc.cold+0x87/0x17a [ 909.372943][T22455] ? zone_watermark_ok_safe+0x260/0x260 [ 909.378500][T22455] ? __alloc_pages_direct_compact+0x366/0x420 [ 909.384773][T22455] ? get_page_from_freelist+0x37f0/0x37f0 [ 909.390502][T22455] ? __zone_watermark_ok+0x3f0/0x3f0 [ 909.395806][T22455] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 909.402415][T22455] ? lock_acquire+0x1f1/0xad0 [ 909.407099][T22455] ? fs_reclaim_acquire+0xa1/0xf0 [ 909.412129][T22455] ? warn_alloc+0x120/0x120 [ 909.416825][T22455] ? __zone_watermark_ok+0x3f0/0x3f0 [ 909.422117][T22455] ? lock_is_held_type+0xbb/0xf0 [ 909.427060][T22455] ? ion_page_pool_alloc+0xba/0x270 [ 909.432265][T22455] __alloc_pages_nodemask+0x62c/0x790 [ 909.437666][T22455] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 909.444438][T22455] ? wait_for_completion+0x260/0x260 [ 909.449764][T22455] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 909.456185][T22455] alloc_pages_current+0x187/0x280 [ 909.461313][T22455] ion_page_pool_alloc+0x17d/0x270 [ 909.466490][T22455] ion_system_heap_allocate+0x246/0xd10 [ 909.472056][T22455] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 909.477618][T22455] ? ion_system_heap_free+0x470/0x470 [ 909.483014][T22455] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 909.488566][T22455] ion_ioctl+0x373/0xd20 [ 909.492821][T22455] ? ion_buffer_destroy+0x2b0/0x2b0 [ 909.498025][T22455] ? _copy_to_user+0x126/0x160 [ 909.502803][T22455] ? __fget_files+0x294/0x400 [ 909.507489][T22455] ? bpf_lsm_file_ioctl+0x5/0x10 [ 909.512429][T22455] ? ion_buffer_destroy+0x2b0/0x2b0 [ 909.517721][T22455] __x64_sys_ioctl+0x193/0x200 [ 909.522501][T22455] do_syscall_64+0x2d/0x70 [ 909.526920][T22455] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.532810][T22455] RIP: 0033:0x45d4d9 [ 909.536704][T22455] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.556308][T22455] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.564720][T22455] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 909.572695][T22455] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 909.580671][T22455] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:42:33 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) [ 909.588816][T22455] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 909.596787][T22455] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:42:33 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x54000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x54000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 911.695574][T22455] Mem-Info: [ 911.698780][T22455] active_anon:6190 inactive_anon:316957 isolated_anon:0 [ 911.698780][T22455] active_file:2078 inactive_file:1949 isolated_file:0 [ 911.698780][T22455] unevictable:3 dirty:87 writeback:0 [ 911.698780][T22455] slab_reclaimable:15592 slab_unreclaimable:110692 [ 911.698780][T22455] mapped:55726 shmem:8441 pagetables:17956 bounce:0 [ 911.698780][T22455] free:248090 free_pcp:158 free_cma:0 [ 911.956325][T22455] Node 0 active_anon:15332kB inactive_anon:1248380kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212824kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1075200kB writeback_tmp:0kB kernel_stack:22624kB all_unreclaimable? no [ 912.141625][T22455] Node 0 DMA free:10200kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.329641][T22455] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 912.335415][T22455] Node 0 DMA32 free:39388kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1246140kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53744kB bounce:0kB free_pcp:908kB local_pcp:324kB free_cma:0kB [ 912.535515][T22455] lowmem_reserve[]: 0 0 0 0 0 [ 912.540243][T22455] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.695505][T22455] lowmem_reserve[]: 0 0 0 0 0 [ 912.700236][T22455] Node 0 DMA: 13*4kB (UME) 6*8kB (UME) 24*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10212kB [ 912.805709][T22455] Node 0 DMA32: 3229*4kB (UMEH) 961*8kB (UMEH) 318*16kB (UMEH) 193*32kB (UMEH) 44*64kB (UH) 15*128kB (UH) 5*256kB (UH) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 39932kB [ 912.905502][T22455] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 912.965576][T22455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.975231][T22455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 913.065539][T22455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.075255][T22455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 913.185509][T22455] 12480 total pagecache pages [ 913.190216][T22455] 0 pages in swap cache [ 913.194370][T22455] Swap cache stats: add 0, delete 0, find 0/0 [ 913.275520][T22455] Free swap = 0kB [ 913.279266][T22455] Total swap = 0kB [ 913.282982][T22455] 1965979 pages RAM [ 913.339278][T22455] 0 pages HighMem/MovableOnly [ 913.343980][T22455] 349896 pages reserved [ 913.385499][T22455] 0 pages cma reserved [ 913.397732][ T1172] oom_reaper: reaped process 22455 (syz-executor.5), now anon-rss:0kB, file-rss:34780kB, shmem-rss:0kB 05:42:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x68000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:43 executing program 1: set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socket$netlink(0x10, 0x3, 0x0) 05:42:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x68000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:43 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:43 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:43 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 920.038320][T22493] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 920.156997][T22493] CPU: 0 PID: 22493 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 920.165809][T22493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.175891][T22493] Call Trace: [ 920.179192][T22493] dump_stack+0x18f/0x20d [ 920.183539][T22493] dump_header+0x106/0x60f [ 920.187968][T22493] oom_kill_process.cold+0x10/0x15 [ 920.193093][T22493] out_of_memory+0x358/0x13f0 [ 920.197787][T22493] ? oom_killer_disable+0x270/0x270 [ 920.202998][T22493] ? mutex_trylock+0x246/0x2c0 [ 920.207804][T22493] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 920.214580][T22493] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 920.221200][T22493] ? warn_alloc+0x120/0x120 [ 920.225732][T22493] ? fs_reclaim_release+0x90/0xd0 [ 920.230776][T22493] ? lock_is_held_type+0xbb/0xf0 [ 920.235717][T22493] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 920.241799][T22493] __alloc_pages_nodemask+0x62c/0x790 [ 920.247186][T22493] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 920.253954][T22493] ? fs_reclaim_acquire+0xa1/0xf0 [ 920.258987][T22493] ? fs_reclaim_release+0x90/0xd0 [ 920.264017][T22493] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 920.270439][T22493] alloc_pages_current+0x187/0x280 [ 920.275561][T22493] __get_free_pages+0x8/0x40 [ 920.280156][T22493] sg_kmalloc+0x52/0x70 [ 920.284317][T22493] __sg_alloc_table+0x244/0x380 [ 920.289178][T22493] sg_alloc_table+0x37/0x270 [ 920.293801][T22493] ? sg_alloc_table_from_pages+0x50/0x50 [ 920.299447][T22493] ion_system_heap_allocate+0x4a9/0xd10 [ 920.305002][T22493] ? ion_system_heap_free+0x470/0x470 [ 920.310378][T22493] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 920.315934][T22493] ion_ioctl+0x373/0xd20 [ 920.320188][T22493] ? ion_buffer_destroy+0x2b0/0x2b0 [ 920.325393][T22493] ? _copy_to_user+0x126/0x160 [ 920.330172][T22493] ? __fget_files+0x294/0x400 [ 920.334854][T22493] ? bpf_lsm_file_ioctl+0x5/0x10 [ 920.339791][T22493] ? ion_buffer_destroy+0x2b0/0x2b0 [ 920.345429][T22493] __x64_sys_ioctl+0x193/0x200 [ 920.350201][T22493] do_syscall_64+0x2d/0x70 [ 920.354623][T22493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 920.360517][T22493] RIP: 0033:0x45d4d9 [ 920.364415][T22493] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.384017][T22493] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.392611][T22493] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 920.400669][T22493] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 920.408643][T22493] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 920.417134][T22493] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 920.425104][T22493] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:42:44 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8dffffff}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff00}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:44 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8dffffff}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:44 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 922.346422][T22493] Mem-Info: [ 922.349619][T22493] active_anon:6277 inactive_anon:316975 isolated_anon:0 [ 922.349619][T22493] active_file:2078 inactive_file:1980 isolated_file:0 [ 922.349619][T22493] unevictable:3 dirty:0 writeback:0 [ 922.349619][T22493] slab_reclaimable:15593 slab_unreclaimable:111086 [ 922.349619][T22493] mapped:55790 shmem:8527 pagetables:17967 bounce:0 [ 922.349619][T22493] free:207387 free_pcp:317 free_cma:0 [ 922.561544][T22493] Node 0 active_anon:15332kB inactive_anon:1248380kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212856kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1075200kB writeback_tmp:0kB kernel_stack:22624kB all_unreclaimable? no [ 922.725218][T22493] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.885811][T22493] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 922.922134][T22493] Node 0 DMA32 free:26072kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1246140kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53744kB bounce:0kB free_pcp:1352kB local_pcp:212kB free_cma:0kB [ 923.091065][T22493] lowmem_reserve[]: 0 0 0 0 0 [ 923.116159][T22493] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 923.367310][T22493] lowmem_reserve[]: 0 0 0 0 0 [ 923.372058][T22493] Node 0 DMA: 14*4kB (UME) 3*8kB (ME) 22*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10160kB [ 923.462549][T22493] Node 0 DMA32: 1774*4kB (UMEH) 965*8kB (UMEH) 357*16kB (UMEH) 109*32kB (UMEH) 12*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26064kB [ 923.556391][T22493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 923.605573][T22493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.665532][T22493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 923.674835][T22493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 923.765583][T22493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 923.774880][T22493] 12605 total pagecache pages [ 923.835525][T22493] 0 pages in swap cache [ 923.839691][T22493] Swap cache stats: add 0, delete 0, find 0/0 [ 923.895538][T22493] Free swap = 0kB [ 923.899267][T22493] Total swap = 0kB [ 923.902982][T22493] 1965979 pages RAM [ 923.956477][T22493] 0 pages HighMem/MovableOnly [ 923.961167][T22493] 349896 pages reserved [ 923.965323][T22493] 0 pages cma reserved [ 924.028246][T22493] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=9664,uid=0 [ 924.105579][T22493] Out of memory: Killed process 9664 (syz-executor.4) total-vm:93548kB, anon-rss:2244kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 924.208124][ T1172] oom_reaper: reaped process 22493 (syz-executor.5), now anon-rss:0kB, file-rss:34780kB, shmem-rss:0kB 05:42:47 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:42:47 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe8030000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xe8030000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:47 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 924.419500][T22530] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 924.555471][T22535] syz-executor.5: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 924.593556][T22530] CPU: 0 PID: 22530 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 924.602271][T22530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.612326][T22530] Call Trace: [ 924.615623][T22530] dump_stack+0x18f/0x20d [ 924.619965][T22530] dump_header+0x106/0x60f [ 924.624393][T22530] oom_kill_process.cold+0x10/0x15 [ 924.629515][T22530] out_of_memory+0x358/0x13f0 [ 924.634206][T22530] ? oom_killer_disable+0x270/0x270 [ 924.639417][T22530] ? mutex_trylock+0x246/0x2c0 [ 924.644185][T22530] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 924.650864][T22530] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 924.657481][T22530] ? warn_alloc+0x120/0x120 [ 924.661983][T22530] ? fs_reclaim_release+0x90/0xd0 [ 924.667016][T22530] ? lock_is_held_type+0xbb/0xf0 [ 924.671955][T22530] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 924.678168][T22530] __alloc_pages_nodemask+0x62c/0x790 [ 924.683548][T22530] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 924.690331][T22530] ? fs_reclaim_acquire+0xa1/0xf0 [ 924.695384][T22530] ? fs_reclaim_release+0x90/0xd0 [ 924.700413][T22530] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 924.706838][T22530] alloc_pages_current+0x187/0x280 [ 924.711971][T22530] __get_free_pages+0x8/0x40 [ 924.716568][T22530] sg_kmalloc+0x52/0x70 [ 924.720728][T22530] __sg_alloc_table+0x244/0x380 [ 924.725587][T22530] sg_alloc_table+0x37/0x270 [ 924.730179][T22530] ? sg_alloc_table_from_pages+0x50/0x50 [ 924.735821][T22530] ion_system_heap_allocate+0x4a9/0xd10 [ 924.741380][T22530] ? ion_system_heap_free+0x470/0x470 [ 924.746756][T22530] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 924.752309][T22530] ion_ioctl+0x373/0xd20 [ 924.756580][T22530] ? ion_buffer_destroy+0x2b0/0x2b0 [ 924.761786][T22530] ? _copy_to_user+0x126/0x160 [ 924.766580][T22530] ? __fget_files+0x294/0x400 [ 924.771270][T22530] ? bpf_lsm_file_ioctl+0x5/0x10 [ 924.776230][T22530] ? ion_buffer_destroy+0x2b0/0x2b0 [ 924.781431][T22530] __x64_sys_ioctl+0x193/0x200 [ 924.786200][T22530] do_syscall_64+0x2d/0x70 [ 924.790618][T22530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 924.796507][T22530] RIP: 0033:0x45d4d9 [ 924.800406][T22530] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.820010][T22530] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.828447][T22530] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 924.836418][T22530] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 924.844386][T22530] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:42:48 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 924.852356][T22530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 924.860326][T22530] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 925.038189][T22535] CPU: 0 PID: 22535 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 925.046900][T22535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.056959][T22535] Call Trace: [ 925.060267][T22535] dump_stack+0x18f/0x20d [ 925.064614][T22535] warn_alloc.cold+0x87/0x17a [ 925.069367][T22535] ? zone_watermark_ok_safe+0x260/0x260 [ 925.074929][T22535] ? __alloc_pages_direct_compact+0x366/0x420 [ 925.081042][T22535] ? get_page_from_freelist+0x37f0/0x37f0 [ 925.086771][T22535] ? psi_task_change+0x142/0x220 [ 925.091744][T22535] ? _raw_spin_unlock_irq+0x1f/0x80 [ 925.096961][T22535] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 925.103570][T22535] ? lock_acquire+0x1f1/0xad0 [ 925.108253][T22535] ? fs_reclaim_acquire+0xa1/0xf0 [ 925.113281][T22535] ? warn_alloc+0x120/0x120 [ 925.117798][T22535] ? __zone_watermark_ok+0x3f0/0x3f0 [ 925.123088][T22535] ? lock_is_held_type+0xbb/0xf0 [ 925.128030][T22535] ? ion_page_pool_alloc+0xba/0x270 [ 925.133240][T22535] __alloc_pages_nodemask+0x62c/0x790 [ 925.138621][T22535] ? __mutex_unlock_slowpath+0xe2/0x610 [ 925.144175][T22535] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 925.150964][T22535] ? wait_for_completion+0x260/0x260 [ 925.156285][T22535] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 925.162708][T22535] alloc_pages_current+0x187/0x280 [ 925.167853][T22535] ion_page_pool_alloc+0x17d/0x270 [ 925.172988][T22535] ion_system_heap_allocate+0x246/0xd10 [ 925.178550][T22535] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 925.184111][T22535] ? ion_system_heap_free+0x470/0x470 [ 925.189489][T22535] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 925.195042][T22535] ion_ioctl+0x373/0xd20 [ 925.199299][T22535] ? ion_buffer_destroy+0x2b0/0x2b0 [ 925.204505][T22535] ? _copy_to_user+0x126/0x160 [ 925.209282][T22535] ? __fget_files+0x294/0x400 [ 925.213968][T22535] ? bpf_lsm_file_ioctl+0x5/0x10 [ 925.218915][T22535] ? ion_buffer_destroy+0x2b0/0x2b0 [ 925.224145][T22535] __x64_sys_ioctl+0x193/0x200 [ 925.228934][T22535] do_syscall_64+0x2d/0x70 [ 925.233355][T22535] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 925.239251][T22535] RIP: 0033:0x45d4d9 [ 925.243147][T22535] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 925.263533][T22535] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.271947][T22535] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 925.279920][T22535] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 925.287895][T22535] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 925.295865][T22535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 925.303843][T22535] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:42:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xf4010000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 926.651736][T22530] Mem-Info: [ 926.674294][T22530] active_anon:6309 inactive_anon:316535 isolated_anon:0 [ 926.674294][T22530] active_file:2079 inactive_file:1990 isolated_file:0 [ 926.674294][T22530] unevictable:3 dirty:0 writeback:0 [ 926.674294][T22530] slab_reclaimable:15598 slab_unreclaimable:111924 [ 926.674294][T22530] mapped:55817 shmem:8563 pagetables:18067 bounce:0 [ 926.674294][T22530] free:213980 free_pcp:267 free_cma:0 [ 926.868215][T22535] Mem-Info: [ 926.885588][T22535] active_anon:6309 inactive_anon:316535 isolated_anon:0 [ 926.885588][T22535] active_file:2079 inactive_file:1990 isolated_file:0 [ 926.885588][T22535] unevictable:3 dirty:0 writeback:0 [ 926.885588][T22535] slab_reclaimable:15598 slab_unreclaimable:111776 [ 926.885588][T22535] mapped:55817 shmem:8563 pagetables:18067 bounce:0 [ 926.885588][T22535] free:214226 free_pcp:282 free_cma:0 [ 926.944040][T22530] Node 0 active_anon:15332kB inactive_anon:1246192kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212904kB dirty:0kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1073152kB writeback_tmp:0kB kernel_stack:22560kB all_unreclaimable? no [ 927.119376][T22530] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.160639][T22535] Node 0 active_anon:15332kB inactive_anon:1246192kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212904kB dirty:0kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1073152kB writeback_tmp:0kB kernel_stack:22560kB all_unreclaimable? no [ 927.330785][T22530] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 927.352426][T22535] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.414341][T22530] Node 0 DMA32 free:25928kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1243952kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53632kB bounce:0kB free_pcp:1176kB local_pcp:248kB free_cma:0kB [ 927.559193][T22535] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 927.583484][T22530] lowmem_reserve[]: 0 0 0 0 0 [ 927.592166][T22535] Node 0 DMA32 free:26024kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1243952kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53632kB bounce:0kB free_pcp:1216kB local_pcp:952kB free_cma:0kB [ 927.607247][T22530] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.782650][T22535] lowmem_reserve[]: 0 0 0 0 0 [ 927.809430][T22530] lowmem_reserve[]: 0 0 0 0 0 [ 927.815328][T22530] Node 0 DMA: 14*4kB (UME) 3*8kB (ME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10176kB [ 927.844985][T22535] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.935578][T22530] Node 0 DMA32: 1790*4kB (MEH) 948*8kB (UME) 316*16kB (UMEH) 89*32kB (UMEH) 6*64kB (H) 4*128kB (H) 4*256kB (UH) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26104kB [ 927.989902][T22535] lowmem_reserve[]: 0 0 0 0 0 [ 928.027350][T22535] Node 0 DMA: 14*4kB (UME) 3*8kB (ME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10176kB [ 928.055532][T22530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 928.115546][T22530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.120934][T22535] Node 0 DMA32: 1790*4kB (MEH) 953*8kB (UME) 318*16kB (UMEH) 89*32kB (UMEH) 6*64kB (H) 4*128kB (H) 4*256kB (UH) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26176kB [ 928.125116][T22530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 928.125129][T22530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.125140][T22530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 928.125152][T22530] 12641 total pagecache pages [ 928.377512][T22535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 928.424851][T22535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.472634][T22535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 928.475566][T22530] 0 pages in swap cache [ 928.513853][T22535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 928.535534][T22530] Swap cache stats: add 0, delete 0, find 0/0 [ 928.541608][T22530] Free swap = 0kB [ 928.545325][T22530] Total swap = 0kB [ 928.553101][T22535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 928.606374][T22535] 12652 total pagecache pages [ 928.607954][T22530] 1965979 pages RAM [ 928.614886][T22530] 0 pages HighMem/MovableOnly [ 928.623942][T22535] 0 pages in swap cache [ 928.653917][T22535] Swap cache stats: add 0, delete 0, find 0/0 [ 928.665570][T22530] 349896 pages reserved [ 928.669732][T22530] 0 pages cma reserved [ 928.673818][T22530] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=9640,uid=0 [ 928.686969][T22535] Free swap = 0kB [ 928.707715][T22535] Total swap = 0kB [ 928.755843][T22535] 1965979 pages RAM [ 928.759666][T22535] 0 pages HighMem/MovableOnly [ 928.764332][T22535] 349896 pages reserved [ 928.785584][T22530] Out of memory: Killed process 9640 (syz-executor.0) total-vm:93548kB, anon-rss:2240kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 928.836497][T22535] 0 pages cma reserved [ 928.888574][ T1172] oom_reaper: reaped process 22530 (syz-executor.1), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 05:42:52 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xf4010000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:42:52 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 928.987706][ T1172] oom_reaper: reaped process 22535 (syz-executor.5), now anon-rss:0kB, file-rss:34768kB, shmem-rss:0kB [ 929.060707][ T1172] oom_reaper: reaped process 9640 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 929.237765][T22564] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 929.371148][T22564] CPU: 0 PID: 22564 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 929.379870][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.390098][T22564] Call Trace: [ 929.393425][T22564] dump_stack+0x18f/0x20d [ 929.397767][T22564] dump_header+0x106/0x60f [ 929.402196][T22564] oom_kill_process.cold+0x10/0x15 [ 929.407318][T22564] out_of_memory+0x358/0x13f0 [ 929.412009][T22564] ? oom_killer_disable+0x270/0x270 [ 929.417221][T22564] ? mutex_trylock+0x246/0x2c0 [ 929.422005][T22564] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 929.428692][T22564] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 929.435312][T22564] ? warn_alloc+0x120/0x120 [ 929.439854][T22564] ? fs_reclaim_release+0x90/0xd0 [ 929.444922][T22564] ? lock_is_held_type+0xbb/0xf0 [ 929.449871][T22564] __alloc_pages_nodemask+0x62c/0x790 [ 929.455302][T22564] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 929.462092][T22564] ? mark_lock+0xbc/0x1710 [ 929.466532][T22564] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 929.472958][T22564] alloc_pages_vma+0xdd/0x720 [ 929.477644][T22564] wp_page_copy+0x1fd/0x17d0 [ 929.482243][T22564] ? do_wp_page+0x699/0x1950 [ 929.486845][T22564] ? print_bad_pte+0x640/0x640 [ 929.491615][T22564] ? lock_downgrade+0x830/0x830 [ 929.496468][T22564] ? vm_normal_page+0x148/0x380 [ 929.501339][T22564] ? handle_mm_fault+0x2112/0x4590 [ 929.506469][T22564] do_wp_page+0x6a1/0x1950 [ 929.510916][T22564] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 929.516289][T22564] ? rwlock_bug.part.0+0x90/0x90 [ 929.521236][T22564] handle_mm_fault+0x3216/0x4590 [ 929.526193][T22564] ? apply_to_existing_page_range+0x40/0x40 [ 929.532094][T22564] ? vmacache_update+0xce/0x140 [ 929.536954][T22564] do_user_addr_fault+0x598/0xbf0 [ 929.541987][T22564] ? trace_hardirqs_off+0x40/0x210 [ 929.547129][T22564] exc_page_fault+0xa8/0x160 [ 929.551723][T22564] asm_exc_page_fault+0x1e/0x30 [ 929.556580][T22564] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 929.562909][T22564] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 929.582515][T22564] RSP: 0018:ffffc90105ebfbb0 EFLAGS: 00010206 [ 929.588585][T22564] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 929.596557][T22564] RDX: 0000000000000000 RSI: ffffc90105ebfc40 RDI: 0000000000743058 [ 929.604525][T22564] RBP: ffffc90105ebfc40 R08: 0000000000006f6c R09: ffffc90105ebfc67 [ 929.612496][T22564] R10: fffff52020bd7f8c R11: 0000000000000000 R12: 0000000000000028 [ 929.620468][T22564] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 929.628484][T22564] _copy_to_user+0x11e/0x160 [ 929.633096][T22564] inet_gifconf+0x24f/0x4a0 [ 929.637629][T22564] ? inet_validate_link_af+0x390/0x390 [ 929.643104][T22564] ? mutex_lock_io_nested+0xf60/0xf60 [ 929.648481][T22564] ? lock_downgrade+0x830/0x830 [ 929.653359][T22564] ? inet_validate_link_af+0x390/0x390 [ 929.658842][T22564] dev_ifconf+0xdb/0x230 [ 929.663098][T22564] sock_do_ioctl+0x202/0x2d0 [ 929.667692][T22564] ? compat_ifr_data_ioctl+0x150/0x150 [ 929.673155][T22564] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 929.679085][T22564] ? do_vfs_ioctl+0x27d/0x1090 [ 929.683856][T22564] ? generic_block_fiemap+0x60/0x60 [ 929.689067][T22564] sock_ioctl+0x3b8/0x730 [ 929.693405][T22564] ? dlci_ioctl_set+0x30/0x30 [ 929.698086][T22564] ? __fget_files+0x294/0x400 [ 929.702776][T22564] ? bpf_lsm_file_ioctl+0x5/0x10 [ 929.707714][T22564] ? dlci_ioctl_set+0x30/0x30 [ 929.712396][T22564] __x64_sys_ioctl+0x193/0x200 [ 929.717168][T22564] do_syscall_64+0x2d/0x70 [ 929.721588][T22564] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 929.727480][T22564] RIP: 0033:0x45d4d9 [ 929.731379][T22564] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.751071][T22564] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.759483][T22564] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 929.767454][T22564] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 929.775424][T22564] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 929.783419][T22564] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 929.791397][T22564] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 932.205535][T22564] Mem-Info: [ 932.208721][T22564] active_anon:6341 inactive_anon:315892 isolated_anon:0 [ 932.208721][T22564] active_file:2084 inactive_file:1997 isolated_file:0 [ 932.208721][T22564] unevictable:3 dirty:57 writeback:0 [ 932.208721][T22564] slab_reclaimable:15598 slab_unreclaimable:112563 [ 932.208721][T22564] mapped:55800 shmem:8600 pagetables:17947 bounce:0 [ 932.208721][T22564] free:206383 free_pcp:184 free_cma:0 [ 932.496406][T22564] Node 0 active_anon:15332kB inactive_anon:1243988kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212956kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1071104kB writeback_tmp:0kB kernel_stack:22496kB all_unreclaimable? no [ 932.665541][T22564] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.815545][T22564] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 932.821318][T22564] Node 0 DMA32 free:24560kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1241748kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53628kB bounce:0kB free_pcp:756kB local_pcp:488kB free_cma:0kB [ 933.029780][T22564] lowmem_reserve[]: 0 0 0 0 0 [ 933.034526][T22564] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 933.195519][T22564] lowmem_reserve[]: 0 0 0 0 0 [ 933.200250][T22564] Node 0 DMA: 8*4kB (UME) 3*8kB (ME) 24*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10168kB [ 933.341608][T22564] Node 0 DMA32: 1791*4kB (UMEH) 925*8kB (UMEH) 303*16kB (UMEH) 90*32kB (UMEH) 7*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24020kB [ 933.425521][T22564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 933.485575][T22564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 933.495166][T22564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 933.605631][T22564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 933.615224][T22564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 933.705589][T22564] 12700 total pagecache pages [ 933.710320][T22564] 0 pages in swap cache [ 933.714470][T22564] Swap cache stats: add 0, delete 0, find 0/0 [ 933.796302][T22564] Free swap = 0kB [ 933.800069][T22564] Total swap = 0kB [ 933.803784][T22564] 1965979 pages RAM [ 933.855601][T22564] 0 pages HighMem/MovableOnly [ 933.860318][T22564] 349896 pages reserved [ 933.864508][T22564] 0 pages cma reserved [ 933.915585][T22564] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=9345,uid=0 [ 933.985622][T22564] Out of memory: Killed process 9345 (syz-executor.4) total-vm:93548kB, anon-rss:2244kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 934.116985][ T1172] oom_reaper: reaped process 22564 (syz-executor.2), now anon-rss:0kB, file-rss:34784kB, shmem-rss:0kB 05:43:02 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:02 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:02 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xffffff8d}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xff000000}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 939.445789][T22581] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:43:03 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 939.585864][T22581] CPU: 0 PID: 22581 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 939.594569][T22581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.604652][T22581] Call Trace: [ 939.607954][T22581] dump_stack+0x18f/0x20d [ 939.612299][T22581] dump_header+0x106/0x60f [ 939.616732][T22581] oom_kill_process.cold+0x10/0x15 [ 939.621865][T22581] out_of_memory+0x358/0x13f0 [ 939.626573][T22581] ? oom_killer_disable+0x270/0x270 [ 939.631785][T22581] ? mutex_trylock+0x246/0x2c0 [ 939.636556][T22581] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 939.643248][T22581] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 939.650018][T22581] ? warn_alloc+0x120/0x120 [ 939.654535][T22581] ? fs_reclaim_release+0x90/0xd0 [ 939.659579][T22581] ? lock_is_held_type+0xbb/0xf0 [ 939.664550][T22581] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 939.670658][T22581] __alloc_pages_nodemask+0x62c/0x790 [ 939.676042][T22581] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 939.682834][T22581] ? fs_reclaim_acquire+0xa1/0xf0 [ 939.687880][T22581] ? fs_reclaim_release+0x90/0xd0 [ 939.692925][T22581] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 939.699348][T22581] alloc_pages_current+0x187/0x280 [ 939.704471][T22581] __get_free_pages+0x8/0x40 [ 939.709064][T22581] sg_kmalloc+0x52/0x70 [ 939.713228][T22581] __sg_alloc_table+0x244/0x380 [ 939.718091][T22581] sg_alloc_table+0x37/0x270 [ 939.722710][T22581] ? sg_alloc_table_from_pages+0x50/0x50 [ 939.728354][T22581] ion_system_heap_allocate+0x4a9/0xd10 [ 939.733932][T22581] ? ion_system_heap_free+0x470/0x470 [ 939.739306][T22581] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 939.744867][T22581] ion_ioctl+0x373/0xd20 [ 939.749124][T22581] ? ion_buffer_destroy+0x2b0/0x2b0 [ 939.754334][T22581] ? _copy_to_user+0x126/0x160 [ 939.759112][T22581] ? __fget_files+0x294/0x400 [ 939.763800][T22581] ? bpf_lsm_file_ioctl+0x5/0x10 [ 939.768746][T22581] ? ion_buffer_destroy+0x2b0/0x2b0 [ 939.773951][T22581] __x64_sys_ioctl+0x193/0x200 [ 939.778723][T22581] do_syscall_64+0x2d/0x70 [ 939.783925][T22581] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 939.789819][T22581] RIP: 0033:0x45d4d9 [ 939.793721][T22581] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.813935][T22581] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.822347][T22581] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 939.830320][T22581] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 939.838293][T22581] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 939.846264][T22581] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 939.854237][T22581] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 941.481638][T22581] Mem-Info: [ 941.498904][T22581] active_anon:6429 inactive_anon:315438 isolated_anon:0 [ 941.498904][T22581] active_file:2083 inactive_file:2017 isolated_file:0 [ 941.498904][T22581] unevictable:3 dirty:0 writeback:0 [ 941.498904][T22581] slab_reclaimable:15594 slab_unreclaimable:111996 [ 941.498904][T22581] mapped:55850 shmem:8680 pagetables:18038 bounce:0 [ 941.498904][T22581] free:189278 free_pcp:500 free_cma:0 [ 941.718599][T22581] Node 0 active_anon:15332kB inactive_anon:1241796kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212992kB dirty:0kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1069056kB writeback_tmp:0kB kernel_stack:22432kB all_unreclaimable? yes [ 941.894193][T22581] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.209092][T22581] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 942.237454][T22581] Node 0 DMA32 free:21980kB min:40012kB low:48988kB high:57964kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1239556kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53516kB bounce:0kB free_pcp:2028kB local_pcp:568kB free_cma:0kB [ 942.455612][T22581] lowmem_reserve[]: 0 0 0 0 0 [ 942.460460][T22581] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.582433][T22581] lowmem_reserve[]: 0 0 0 0 0 [ 942.605761][T22581] Node 0 DMA: 7*4kB (ME) 6*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10172kB [ 942.705554][T22581] Node 0 DMA32: 1853*4kB (UMEH) 796*8kB (UMEH) 271*16kB (UMEH) 72*32kB (MH) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22084kB [ 942.781578][T22581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 942.860251][T22581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 942.891743][T22581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 942.951593][T22581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 943.015551][T22581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 943.024861][T22581] 12795 total pagecache pages [ 943.071513][T22581] 0 pages in swap cache [ 943.105571][T22581] Swap cache stats: add 0, delete 0, find 0/0 [ 943.111642][T22581] Free swap = 0kB [ 943.115355][T22581] Total swap = 0kB [ 943.171565][T22581] 1965979 pages RAM [ 943.175423][T22581] 0 pages HighMem/MovableOnly [ 943.234876][T22581] 349896 pages reserved [ 943.245594][T22581] 0 pages cma reserved [ 943.249671][T22581] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=11972,uid=0 [ 943.355596][T22581] Out of memory: Killed process 11972 (syz-executor.3) total-vm:93548kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 943.442959][ T1172] oom_reaper: reaped process 11972 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:43:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xffffff8d}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:07 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:07 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:07 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:43:07 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:43:07 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:07 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 943.791540][T22612] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 943.929136][T22612] CPU: 1 PID: 22612 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 943.937844][T22612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.947897][T22612] Call Trace: [ 943.951195][T22612] dump_stack+0x18f/0x20d [ 943.955538][T22612] dump_header+0x106/0x60f [ 943.959968][T22612] oom_kill_process.cold+0x10/0x15 [ 943.965091][T22612] out_of_memory+0x358/0x13f0 [ 943.969788][T22612] ? oom_killer_disable+0x270/0x270 05:43:07 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) [ 943.974998][T22612] ? mutex_trylock+0x246/0x2c0 [ 943.979770][T22612] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 943.986460][T22612] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 943.993070][T22612] ? warn_alloc+0x120/0x120 [ 943.997939][T22612] ? fs_reclaim_release+0x90/0xd0 [ 944.002983][T22612] ? lock_is_held_type+0xbb/0xf0 [ 944.007929][T22612] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 944.014011][T22612] __alloc_pages_nodemask+0x62c/0x790 [ 944.019396][T22612] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 944.026295][T22612] ? fs_reclaim_acquire+0xa1/0xf0 [ 944.031331][T22612] ? fs_reclaim_release+0x90/0xd0 [ 944.036373][T22612] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 944.042795][T22612] alloc_pages_current+0x187/0x280 [ 944.047914][T22612] __get_free_pages+0x8/0x40 [ 944.052510][T22612] sg_kmalloc+0x52/0x70 [ 944.056675][T22612] __sg_alloc_table+0x244/0x380 [ 944.061533][T22612] sg_alloc_table+0x37/0x270 [ 944.066126][T22612] ? sg_alloc_table_from_pages+0x50/0x50 [ 944.071775][T22612] ion_system_heap_allocate+0x4a9/0xd10 [ 944.077355][T22612] ? ion_system_heap_free+0x470/0x470 [ 944.082729][T22612] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 944.088293][T22612] ion_ioctl+0x373/0xd20 [ 944.092549][T22612] ? ion_buffer_destroy+0x2b0/0x2b0 [ 944.097757][T22612] ? _copy_to_user+0x126/0x160 [ 944.102536][T22612] ? __fget_files+0x294/0x400 [ 944.107224][T22612] ? bpf_lsm_file_ioctl+0x5/0x10 [ 944.112163][T22612] ? ion_buffer_destroy+0x2b0/0x2b0 [ 944.117393][T22612] __x64_sys_ioctl+0x193/0x200 [ 944.122166][T22612] do_syscall_64+0x2d/0x70 [ 944.126587][T22612] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 944.132476][T22612] RIP: 0033:0x45d4d9 [ 944.136399][T22612] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 944.156008][T22612] RSP: 002b:00007f9c230cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.164424][T22612] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 944.172403][T22612] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 05:43:07 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 944.180374][T22612] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 944.188349][T22612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 944.196323][T22612] R13: 000000000169fb6f R14: 00007f9c230ce9c0 R15: 000000000118cfec 05:43:08 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:43:08 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:08 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 945.963863][T22612] Mem-Info: [ 945.981740][T22612] active_anon:6464 inactive_anon:314822 isolated_anon:0 [ 945.981740][T22612] active_file:2084 inactive_file:2029 isolated_file:0 [ 945.981740][T22612] unevictable:3 dirty:0 writeback:0 [ 945.981740][T22612] slab_reclaimable:15596 slab_unreclaimable:112016 [ 945.981740][T22612] mapped:55831 shmem:8714 pagetables:17996 bounce:0 [ 945.981740][T22612] free:198064 free_pcp:254 free_cma:0 [ 946.186889][T22612] Node 0 active_anon:15332kB inactive_anon:1239604kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213036kB dirty:0kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1067008kB writeback_tmp:0kB kernel_stack:22400kB all_unreclaimable? yes [ 946.358249][T22612] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.557718][T22612] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 946.563479][T22612] Node 0 DMA32 free:22424kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1237364kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53512kB bounce:0kB free_pcp:1056kB local_pcp:524kB free_cma:0kB [ 946.765542][T22612] lowmem_reserve[]: 0 0 0 0 0 [ 946.770258][T22612] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.975919][T22612] lowmem_reserve[]: 0 0 0 0 0 [ 946.980639][T22612] Node 0 DMA: 7*4kB (ME) 5*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10164kB [ 947.105939][T22612] Node 0 DMA32: 1664*4kB (UMEH) 832*8kB (UMEH) 250*16kB (UMEH) 64*32kB (UMH) 7*64kB (UH) 4*128kB (H) 3*256kB (H) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 22624kB [ 947.205936][T22612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 947.295611][T22612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.305212][T22612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.425589][T22612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 947.435168][T22612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 947.545939][T22612] 15483 total pagecache pages [ 947.550664][T22612] 0 pages in swap cache [ 947.554899][T22612] Swap cache stats: add 0, delete 0, find 0/0 [ 947.635620][T22612] Free swap = 0kB [ 947.639416][T22612] Total swap = 0kB [ 947.643126][T22612] 1965979 pages RAM [ 947.705942][T22612] 0 pages HighMem/MovableOnly [ 947.710648][T22612] 349896 pages reserved [ 947.714793][T22612] 0 pages cma reserved [ 947.785933][T22612] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=14390,uid=0 [ 947.896065][T22612] Out of memory: Killed process 14390 (syz-executor.0) total-vm:93416kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 948.017646][ T1172] oom_reaper: reaped process 22612 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 05:43:11 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:43:11 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:11 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:43:11 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 948.429928][T22652] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 05:43:12 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:12 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 948.621686][T22652] CPU: 1 PID: 22652 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 948.630400][T22652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.640454][T22652] Call Trace: [ 948.643759][T22652] dump_stack+0x18f/0x20d [ 948.648103][T22652] warn_alloc.cold+0x87/0x17a [ 948.652786][T22652] ? zone_watermark_ok_safe+0x260/0x260 [ 948.658353][T22652] ? __alloc_pages_direct_compact+0x366/0x420 [ 948.664429][T22652] ? get_page_from_freelist+0x37f0/0x37f0 [ 948.670155][T22652] ? psi_task_change+0x142/0x220 [ 948.675129][T22652] ? _raw_spin_unlock_irq+0x1f/0x80 [ 948.680338][T22652] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 948.686946][T22652] ? lock_acquire+0x1f1/0xad0 [ 948.691633][T22652] ? fs_reclaim_acquire+0xa1/0xf0 [ 948.696668][T22652] ? warn_alloc+0x120/0x120 [ 948.701183][T22652] ? __zone_watermark_ok+0x3f0/0x3f0 [ 948.706474][T22652] ? lock_is_held_type+0xbb/0xf0 [ 948.711416][T22652] ? ion_page_pool_alloc+0xba/0x270 [ 948.716624][T22652] __alloc_pages_nodemask+0x62c/0x790 [ 948.722001][T22652] ? trace_hardirqs_on+0x5f/0x220 [ 948.727024][T22652] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 948.733795][T22652] ? wait_for_completion+0x260/0x260 [ 948.739088][T22652] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 948.745508][T22652] alloc_pages_current+0x187/0x280 [ 948.750629][T22652] ion_page_pool_alloc+0x17d/0x270 [ 948.755748][T22652] ion_system_heap_allocate+0x246/0xd10 [ 948.761308][T22652] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 948.766862][T22652] ? ion_system_heap_free+0x470/0x470 [ 948.772236][T22652] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 948.777787][T22652] ion_ioctl+0x373/0xd20 [ 948.782046][T22652] ? ion_buffer_destroy+0x2b0/0x2b0 [ 948.787276][T22652] ? _copy_to_user+0x126/0x160 [ 948.792055][T22652] ? __fget_files+0x294/0x400 [ 948.796755][T22652] ? bpf_lsm_file_ioctl+0x5/0x10 [ 948.801695][T22652] ? ion_buffer_destroy+0x2b0/0x2b0 [ 948.806899][T22652] __x64_sys_ioctl+0x193/0x200 [ 948.811678][T22652] do_syscall_64+0x2d/0x70 [ 948.816099][T22652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 948.821988][T22652] RIP: 0033:0x45d4d9 [ 948.825884][T22652] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 948.845490][T22652] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.853902][T22652] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 948.861873][T22652] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 948.869847][T22652] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 948.877813][T22652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 948.885785][T22652] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:43:12 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:12 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:43:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:13 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:13 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 949.864609][T22684] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 950.043664][T22684] CPU: 0 PID: 22684 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 950.052385][T22684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.062448][T22684] Call Trace: [ 950.065753][T22684] dump_stack+0x18f/0x20d [ 950.070107][T22684] dump_header+0x106/0x60f [ 950.074639][T22684] oom_kill_process.cold+0x10/0x15 [ 950.079762][T22684] out_of_memory+0x358/0x13f0 [ 950.084491][T22684] ? oom_killer_disable+0x270/0x270 [ 950.089703][T22684] ? mutex_trylock+0x246/0x2c0 [ 950.094473][T22684] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 950.101161][T22684] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 950.107783][T22684] ? warn_alloc+0x120/0x120 [ 950.112303][T22684] ? fs_reclaim_release+0x90/0xd0 [ 950.117351][T22684] ? lock_is_held_type+0xbb/0xf0 [ 950.122307][T22684] __alloc_pages_nodemask+0x62c/0x790 [ 950.127716][T22684] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 950.134516][T22684] ? mark_lock+0xbc/0x1710 [ 950.138942][T22684] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 950.145364][T22684] alloc_pages_vma+0xdd/0x720 [ 950.150053][T22684] wp_page_copy+0x1fd/0x17d0 [ 950.154654][T22684] ? do_wp_page+0x699/0x1950 [ 950.159251][T22684] ? print_bad_pte+0x640/0x640 [ 950.164026][T22684] ? lock_downgrade+0x830/0x830 [ 950.168886][T22684] ? vm_normal_page+0x148/0x380 [ 950.173746][T22684] ? handle_mm_fault+0x2112/0x4590 [ 950.178895][T22684] do_wp_page+0x6a1/0x1950 [ 950.183345][T22684] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 950.188727][T22684] ? rwlock_bug.part.0+0x90/0x90 [ 950.193704][T22684] handle_mm_fault+0x3216/0x4590 [ 950.198656][T22684] ? apply_to_existing_page_range+0x40/0x40 [ 950.204563][T22684] ? vmacache_update+0xce/0x140 [ 950.209421][T22684] do_user_addr_fault+0x598/0xbf0 [ 950.214479][T22684] ? trace_hardirqs_off+0x40/0x210 [ 950.219609][T22684] exc_page_fault+0xa8/0x160 [ 950.224206][T22684] asm_exc_page_fault+0x1e/0x30 [ 950.229065][T22684] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 950.235397][T22684] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 950.255003][T22684] RSP: 0018:ffffc901f072fbb0 EFLAGS: 00010206 [ 950.261071][T22684] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 950.269043][T22684] RDX: 0000000000000000 RSI: ffffc901f072fc40 RDI: 0000000000743058 [ 950.277016][T22684] RBP: ffffc901f072fc40 R08: 0000000000006f6c R09: ffffc901f072fc67 [ 950.284987][T22684] R10: fffff5203e0e5f8c R11: 0000000000000000 R12: 0000000000000028 [ 950.292958][T22684] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 950.300955][T22684] _copy_to_user+0x11e/0x160 [ 950.305554][T22684] inet_gifconf+0x24f/0x4a0 [ 950.310067][T22684] ? inet_validate_link_af+0x390/0x390 [ 950.315530][T22684] ? mutex_lock_io_nested+0xf60/0xf60 [ 950.320902][T22684] ? lock_downgrade+0x830/0x830 [ 950.325767][T22684] ? inet_validate_link_af+0x390/0x390 [ 950.331230][T22684] dev_ifconf+0xdb/0x230 [ 950.335484][T22684] sock_do_ioctl+0x202/0x2d0 [ 950.340171][T22684] ? compat_ifr_data_ioctl+0x150/0x150 [ 950.345635][T22684] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 950.351534][T22684] ? do_vfs_ioctl+0x27d/0x1090 [ 950.356301][T22684] ? generic_block_fiemap+0x60/0x60 [ 950.361507][T22684] sock_ioctl+0x3b8/0x730 [ 950.365841][T22684] ? dlci_ioctl_set+0x30/0x30 [ 950.370525][T22684] ? __fget_files+0x294/0x400 [ 950.375209][T22684] ? bpf_lsm_file_ioctl+0x5/0x10 [ 950.380148][T22684] ? dlci_ioctl_set+0x30/0x30 [ 950.384828][T22684] __x64_sys_ioctl+0x193/0x200 [ 950.389602][T22684] do_syscall_64+0x2d/0x70 [ 950.394042][T22684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 950.399941][T22684] RIP: 0033:0x45d4d9 [ 950.403860][T22684] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 950.423734][T22684] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.432177][T22684] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 950.440154][T22684] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 950.448156][T22684] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 950.456132][T22684] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 950.464105][T22684] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 951.643594][T22652] Mem-Info: [ 951.669309][T22652] active_anon:6501 inactive_anon:314085 isolated_anon:0 [ 951.669309][T22652] active_file:2089 inactive_file:5043 isolated_file:0 [ 951.669309][T22652] unevictable:3 dirty:38 writeback:0 [ 951.669309][T22652] slab_reclaimable:15605 slab_unreclaimable:112181 [ 951.669309][T22652] mapped:57638 shmem:8752 pagetables:18139 bounce:0 [ 951.669309][T22652] free:102964 free_pcp:301 free_cma:0 [ 951.953383][T22652] Node 0 active_anon:15332kB inactive_anon:1235932kB active_file:8kB inactive_file:1484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213092kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1062912kB writeback_tmp:0kB kernel_stack:22368kB all_unreclaimable? yes [ 952.291448][T22652] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.534344][T22652] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 952.569173][T22652] Node 0 DMA32 free:22704kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1233340kB active_file:8kB inactive_file:1836kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53400kB bounce:0kB free_pcp:1220kB local_pcp:644kB free_cma:0kB [ 952.738662][T22652] lowmem_reserve[]: 0 0 0 0 0 [ 952.767664][T22652] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.945567][T22652] lowmem_reserve[]: 0 0 0 0 0 [ 952.951081][T22652] Node 0 DMA: 9*4kB (UME) 5*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10172kB [ 953.085556][T22652] Node 0 DMA32: 1502*4kB (UMEH) 929*8kB (UMEH) 301*16kB (UMEH) 76*32kB (UME) 8*64kB (UH) 5*128kB (UH) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22864kB [ 953.185576][T22652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 953.255625][T22652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 953.265207][T22652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 953.389795][T22652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 953.412256][T22684] Mem-Info: [ 953.435606][T22684] active_anon:6502 inactive_anon:313997 isolated_anon:0 [ 953.435606][T22684] active_file:2089 inactive_file:5161 isolated_file:0 [ 953.435606][T22684] unevictable:3 dirty:39 writeback:0 [ 953.435606][T22684] slab_reclaimable:15605 slab_unreclaimable:112200 [ 953.435606][T22684] mapped:57668 shmem:8758 pagetables:18102 bounce:0 [ 953.435606][T22684] free:96439 free_pcp:534 free_cma:0 [ 953.455559][T22652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 953.616228][T22652] 15560 total pagecache pages [ 953.621045][T22652] 0 pages in swap cache [ 953.625194][T22652] Swap cache stats: add 0, delete 0, find 0/0 [ 953.685676][T22684] Node 0 active_anon:15332kB inactive_anon:1235572kB active_file:8kB inactive_file:1844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213100kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1060864kB writeback_tmp:0kB kernel_stack:22368kB all_unreclaimable? yes [ 953.735604][T22652] Free swap = 0kB [ 953.739343][T22652] Total swap = 0kB [ 953.743054][T22652] 1965979 pages RAM [ 953.805574][T22652] 0 pages HighMem/MovableOnly [ 953.810281][T22652] 349896 pages reserved [ 953.814429][T22652] 0 pages cma reserved [ 953.882156][T22684] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 954.051218][T22684] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 954.107061][T22684] Node 0 DMA32 free:26276kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1233332kB active_file:8kB inactive_file:300kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53400kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 954.296879][T22684] lowmem_reserve[]: 0 0 0 0 0 [ 954.301616][T22684] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 954.495577][T22684] lowmem_reserve[]: 0 0 0 0 0 [ 954.500298][T22684] Node 0 DMA: 10*4kB (UME) 5*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10176kB [ 954.635553][T22684] Node 0 DMA32: 2089*4kB (UMEH) 901*8kB (UMEH) 320*16kB (UMEH) 85*32kB (UME) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25068kB [ 954.746011][T22684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 954.823321][T22684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 954.881983][T22684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 954.941221][T22684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 955.005601][T22684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 955.015355][T22684] 15571 total pagecache pages [ 955.115987][T22684] 0 pages in swap cache [ 955.120176][T22684] Swap cache stats: add 0, delete 0, find 0/0 [ 955.176032][T22684] Free swap = 0kB [ 955.179792][T22684] Total swap = 0kB [ 955.183513][T22684] 1965979 pages RAM [ 955.245637][T22684] 0 pages HighMem/MovableOnly [ 955.250355][T22684] 349896 pages reserved [ 955.255475][T22684] 0 pages cma reserved [ 955.335939][T22684] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=11705,uid=0 [ 955.445624][T22684] Out of memory: Killed process 11705 (syz-executor.0) total-vm:93416kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 955.568779][ T1172] oom_reaper: reaped process 22684 (syz-executor.2), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB 05:43:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 955.667310][ T1172] oom_reaper: reaped process 22652 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 05:43:21 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:43:21 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:21 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 957.907526][T22711] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 05:43:21 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 958.077489][T22711] CPU: 0 PID: 22711 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 958.087155][T22711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.097215][T22711] Call Trace: [ 958.100545][T22711] dump_stack+0x18f/0x20d [ 958.104889][T22711] dump_header+0x106/0x60f [ 958.109319][T22711] oom_kill_process.cold+0x10/0x15 [ 958.114442][T22711] out_of_memory+0x358/0x13f0 [ 958.119134][T22711] ? oom_killer_disable+0x270/0x270 [ 958.124345][T22711] ? mutex_trylock+0x246/0x2c0 [ 958.129899][T22711] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 958.136585][T22711] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 958.143295][T22711] ? warn_alloc+0x120/0x120 [ 958.147812][T22711] ? fs_reclaim_release+0x90/0xd0 [ 958.152853][T22711] ? lock_is_held_type+0xbb/0xf0 [ 958.157848][T22711] __alloc_pages_nodemask+0x62c/0x790 [ 958.163232][T22711] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 958.170078][T22711] ? mark_lock+0xbc/0x1710 [ 958.174500][T22711] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 958.181010][T22711] alloc_pages_vma+0xdd/0x720 [ 958.185696][T22711] wp_page_copy+0x1fd/0x17d0 [ 958.190294][T22711] ? do_wp_page+0x699/0x1950 [ 958.194890][T22711] ? print_bad_pte+0x640/0x640 [ 958.199656][T22711] ? lock_downgrade+0x830/0x830 [ 958.204531][T22711] ? vm_normal_page+0x148/0x380 [ 958.209412][T22711] ? handle_mm_fault+0x2112/0x4590 [ 958.214635][T22711] do_wp_page+0x6a1/0x1950 [ 958.219246][T22711] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 958.224620][T22711] ? rwlock_bug.part.0+0x90/0x90 [ 958.229568][T22711] handle_mm_fault+0x3216/0x4590 [ 958.234520][T22711] ? apply_to_existing_page_range+0x40/0x40 [ 958.240436][T22711] ? vmacache_update+0xce/0x140 [ 958.245300][T22711] do_user_addr_fault+0x598/0xbf0 [ 958.250429][T22711] ? trace_hardirqs_off+0x40/0x210 [ 958.255575][T22711] exc_page_fault+0xa8/0x160 [ 958.260173][T22711] asm_exc_page_fault+0x1e/0x30 [ 958.265064][T22711] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 958.271403][T22711] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 958.291011][T22711] RSP: 0018:ffffc9026bba7bb0 EFLAGS: 00010206 [ 958.297105][T22711] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 958.305085][T22711] RDX: 0000000000000000 RSI: ffffc9026bba7c40 RDI: 0000000000743058 [ 958.313059][T22711] RBP: ffffc9026bba7c40 R08: 0000000000006f6c R09: ffffc9026bba7c67 [ 958.321035][T22711] R10: fffff5204d774f8c R11: 0000000000000000 R12: 0000000000000028 [ 958.329006][T22711] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 958.337020][T22711] _copy_to_user+0x11e/0x160 [ 958.341617][T22711] inet_gifconf+0x24f/0x4a0 [ 958.346130][T22711] ? inet_validate_link_af+0x390/0x390 [ 958.351598][T22711] ? mutex_lock_io_nested+0xf60/0xf60 [ 958.356973][T22711] ? lock_downgrade+0x830/0x830 [ 958.361838][T22711] ? inet_validate_link_af+0x390/0x390 [ 958.367299][T22711] dev_ifconf+0xdb/0x230 [ 958.371578][T22711] sock_do_ioctl+0x202/0x2d0 [ 958.376174][T22711] ? compat_ifr_data_ioctl+0x150/0x150 [ 958.381639][T22711] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 958.387580][T22711] ? do_vfs_ioctl+0x27d/0x1090 [ 958.392382][T22711] ? generic_block_fiemap+0x60/0x60 [ 958.397587][T22711] sock_ioctl+0x3b8/0x730 [ 958.401922][T22711] ? dlci_ioctl_set+0x30/0x30 [ 958.406606][T22711] ? __fget_files+0x294/0x400 [ 958.411312][T22711] ? bpf_lsm_file_ioctl+0x5/0x10 [ 958.416255][T22711] ? dlci_ioctl_set+0x30/0x30 [ 958.420941][T22711] __x64_sys_ioctl+0x193/0x200 [ 958.425711][T22711] do_syscall_64+0x2d/0x70 [ 958.430132][T22711] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 958.436027][T22711] RIP: 0033:0x45d4d9 [ 958.439924][T22711] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 958.459531][T22711] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.467963][T22711] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 958.475937][T22711] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 958.483910][T22711] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 958.491880][T22711] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 958.499850][T22711] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 961.111583][T22711] Mem-Info: [ 961.122687][T22711] active_anon:6563 inactive_anon:313464 isolated_anon:0 [ 961.122687][T22711] active_file:2088 inactive_file:4716 isolated_file:0 [ 961.122687][T22711] unevictable:3 dirty:0 writeback:0 [ 961.122687][T22711] slab_reclaimable:15602 slab_unreclaimable:112525 [ 961.122687][T22711] mapped:57682 shmem:8816 pagetables:18127 bounce:0 [ 961.122687][T22711] free:49803 free_pcp:444 free_cma:0 [ 961.275994][T22711] Node 0 active_anon:15332kB inactive_anon:1233384kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213148kB dirty:0kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1058816kB writeback_tmp:0kB kernel_stack:22336kB all_unreclaimable? yes [ 961.425972][T22711] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.555560][T22711] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 961.561357][T22711] Node 0 DMA32 free:22556kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1231144kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53288kB bounce:0kB free_pcp:1788kB local_pcp:808kB free_cma:0kB [ 961.775641][T22711] lowmem_reserve[]: 0 0 0 0 0 [ 961.780383][T22711] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 961.961858][T22711] lowmem_reserve[]: 0 0 0 0 0 [ 961.981459][T22711] Node 0 DMA: 8*4kB (UME) 4*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10160kB [ 962.081943][T22711] Node 0 DMA32: 1703*4kB (UMEH) 932*8kB (UMEH) 291*16kB (UMEH) 73*32kB (UM) 6*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22924kB [ 962.165574][T22711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 962.235601][T22711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.245178][T22711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 05:43:26 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 962.331468][T22711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 962.395661][T22711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 962.404974][T22711] 15628 total pagecache pages [ 962.481594][T22711] 0 pages in swap cache 05:43:26 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 962.524624][T22711] Swap cache stats: add 0, delete 0, find 0/0 [ 962.565591][T22711] Free swap = 0kB [ 962.569428][T22711] Total swap = 0kB [ 962.573143][T22711] 1965979 pages RAM [ 962.625569][T22711] 0 pages HighMem/MovableOnly [ 962.630505][T22711] 349896 pages reserved [ 962.634660][T22711] 0 pages cma reserved 05:43:26 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 962.706388][T22711] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=11428,uid=0 [ 962.795646][T22711] Out of memory: Killed process 11428 (syz-executor.4) total-vm:93416kB, anon-rss:2236kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 05:43:26 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 962.928214][ T1172] oom_reaper: reaped process 22711 (syz-executor.2), now anon-rss:0kB, file-rss:34768kB, shmem-rss:0kB 05:43:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x7, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:26 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:26 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:43:26 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x7, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:26 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 963.262863][T22747] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 963.435631][T22747] CPU: 1 PID: 22747 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 963.444336][T22747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.454418][T22747] Call Trace: [ 963.457716][T22747] dump_stack+0x18f/0x20d [ 963.462055][T22747] warn_alloc.cold+0x87/0x17a [ 963.466769][T22747] ? zone_watermark_ok_safe+0x260/0x260 [ 963.472438][T22747] ? __alloc_pages_direct_compact+0x366/0x420 [ 963.478512][T22747] ? get_page_from_freelist+0x37f0/0x37f0 [ 963.484237][T22747] ? psi_task_change+0x142/0x220 [ 963.489182][T22747] ? _raw_spin_unlock_irq+0x1f/0x80 [ 963.494396][T22747] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 963.501006][T22747] ? lock_acquire+0x1f1/0xad0 [ 963.505699][T22747] ? fs_reclaim_acquire+0xa1/0xf0 [ 963.510740][T22747] ? warn_alloc+0x120/0x120 [ 963.515347][T22747] ? __zone_watermark_ok+0x3f0/0x3f0 [ 963.520642][T22747] ? lock_is_held_type+0xbb/0xf0 [ 963.525580][T22747] ? ion_page_pool_alloc+0xba/0x270 [ 963.530787][T22747] __alloc_pages_nodemask+0x62c/0x790 [ 963.536165][T22747] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 963.542939][T22747] ? wait_for_completion+0x260/0x260 [ 963.548323][T22747] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 963.554741][T22747] alloc_pages_current+0x187/0x280 [ 963.559861][T22747] ion_page_pool_alloc+0x17d/0x270 [ 963.564980][T22747] ion_system_heap_allocate+0x246/0xd10 [ 963.570535][T22747] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 963.576082][T22747] ? ion_system_heap_free+0x470/0x470 [ 963.581478][T22747] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 963.587117][T22747] ion_ioctl+0x373/0xd20 [ 963.591372][T22747] ? ion_buffer_destroy+0x2b0/0x2b0 [ 963.596581][T22747] ? _copy_to_user+0x126/0x160 [ 963.601432][T22747] ? __fget_files+0x294/0x400 [ 963.606118][T22747] ? bpf_lsm_file_ioctl+0x5/0x10 [ 963.611079][T22747] ? ion_buffer_destroy+0x2b0/0x2b0 [ 963.616282][T22747] __x64_sys_ioctl+0x193/0x200 [ 963.621053][T22747] do_syscall_64+0x2d/0x70 [ 963.625473][T22747] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 963.631364][T22747] RIP: 0033:0x45d4d9 [ 963.635270][T22747] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 963.654893][T22747] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.663306][T22747] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 963.671278][T22747] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 963.679248][T22747] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 963.687215][T22747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 963.695185][T22747] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:43:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xa, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 965.606668][T22747] Mem-Info: [ 965.610042][T22747] active_anon:6599 inactive_anon:312898 isolated_anon:0 [ 965.610042][T22747] active_file:608 inactive_file:381 isolated_file:59 [ 965.610042][T22747] unevictable:3 dirty:35 writeback:0 [ 965.610042][T22747] slab_reclaimable:15602 slab_unreclaimable:112632 [ 965.610042][T22747] mapped:54150 shmem:8849 pagetables:18154 bounce:0 [ 965.610042][T22747] free:21974 free_pcp:0 free_cma:0 [ 965.886105][T22747] Node 0 active_anon:15332kB inactive_anon:1231204kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213172kB dirty:8kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB kernel_stack:22304kB all_unreclaimable? no [ 965.998751][T22747] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.110082][T22747] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 966.137968][T22747] Node 0 DMA32 free:23764kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1228964kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53176kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 966.285783][T22747] lowmem_reserve[]: 0 0 0 0 0 [ 966.290569][T22747] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.416378][T22747] lowmem_reserve[]: 0 0 0 0 0 [ 966.426566][T22747] Node 0 DMA: 8*4kB (UME) 4*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10160kB [ 966.496710][T22747] Node 0 DMA32: 1976*4kB (UMEH) 861*8kB (UME) 294*16kB (UMEH) 81*32kB (UM) 7*64kB (UH) 4*128kB (H) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24072kB [ 966.542210][T22747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 966.573663][T22747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.605578][T22747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 966.625160][T22747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.645386][T22747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 966.665758][T22747] 9034 total pagecache pages [ 966.670448][T22747] 0 pages in swap cache [ 966.674596][T22747] Swap cache stats: add 0, delete 0, find 0/0 [ 966.698157][T22747] Free swap = 0kB [ 966.729047][T22747] Total swap = 0kB [ 966.732983][T22747] 1965979 pages RAM [ 966.756235][T22747] 0 pages HighMem/MovableOnly [ 966.776641][T22747] 349896 pages reserved [ 966.795406][T22747] 0 pages cma reserved [ 966.926468][ T1172] oom_reaper: reaped process 22747 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:43:31 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 967.643370][T22787] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 967.747009][T22787] CPU: 1 PID: 22787 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 967.756230][T22787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.766284][T22787] Call Trace: [ 967.769583][T22787] dump_stack+0x18f/0x20d [ 967.773941][T22787] dump_header+0x106/0x60f [ 967.778454][T22787] oom_kill_process.cold+0x10/0x15 [ 967.783598][T22787] out_of_memory+0x358/0x13f0 [ 967.788298][T22787] ? oom_killer_disable+0x270/0x270 [ 967.793508][T22787] ? mutex_trylock+0x246/0x2c0 [ 967.798277][T22787] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 967.804963][T22787] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 967.811579][T22787] ? warn_alloc+0x120/0x120 [ 967.816101][T22787] ? fs_reclaim_release+0x90/0xd0 [ 967.821143][T22787] ? lock_is_held_type+0xbb/0xf0 [ 967.826094][T22787] __alloc_pages_nodemask+0x62c/0x790 [ 967.831562][T22787] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 967.838334][T22787] ? mark_lock+0xbc/0x1710 [ 967.842787][T22787] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 967.849208][T22787] alloc_pages_vma+0xdd/0x720 [ 967.853892][T22787] wp_page_copy+0x1fd/0x17d0 [ 967.858495][T22787] ? do_wp_page+0x699/0x1950 [ 967.863093][T22787] ? print_bad_pte+0x640/0x640 [ 967.867987][T22787] ? lock_downgrade+0x830/0x830 [ 967.872855][T22787] ? vm_normal_page+0x148/0x380 [ 967.877713][T22787] ? handle_mm_fault+0x2112/0x4590 [ 967.882852][T22787] do_wp_page+0x6a1/0x1950 [ 967.887274][T22787] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 967.892646][T22787] ? rwlock_bug.part.0+0x90/0x90 [ 967.897593][T22787] handle_mm_fault+0x3216/0x4590 [ 967.902556][T22787] ? apply_to_existing_page_range+0x40/0x40 [ 967.908460][T22787] ? vmacache_update+0xce/0x140 [ 967.913318][T22787] do_user_addr_fault+0x598/0xbf0 [ 967.918349][T22787] ? trace_hardirqs_off+0x40/0x210 [ 967.923466][T22787] exc_page_fault+0xa8/0x160 [ 967.928061][T22787] asm_exc_page_fault+0x1e/0x30 [ 967.932924][T22787] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 967.939252][T22787] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 967.958859][T22787] RSP: 0018:ffffc902b313fbb0 EFLAGS: 00010206 [ 967.964929][T22787] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 967.972901][T22787] RDX: 0000000000000000 RSI: ffffc902b313fc40 RDI: 0000000000743058 [ 967.980881][T22787] RBP: ffffc902b313fc40 R08: 0000000000006f6c R09: ffffc902b313fc67 [ 967.988858][T22787] R10: fffff52056627f8c R11: 0000000000000000 R12: 0000000000000028 [ 967.996831][T22787] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 968.004843][T22787] _copy_to_user+0x11e/0x160 [ 968.009454][T22787] inet_gifconf+0x24f/0x4a0 [ 968.013998][T22787] ? inet_validate_link_af+0x390/0x390 [ 968.019462][T22787] ? mutex_lock_io_nested+0xf60/0xf60 [ 968.024839][T22787] ? lock_downgrade+0x830/0x830 [ 968.029703][T22787] ? inet_validate_link_af+0x390/0x390 [ 968.035191][T22787] dev_ifconf+0xdb/0x230 [ 968.039455][T22787] sock_do_ioctl+0x202/0x2d0 [ 968.044050][T22787] ? compat_ifr_data_ioctl+0x150/0x150 [ 968.049513][T22787] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 968.055411][T22787] ? do_vfs_ioctl+0x27d/0x1090 [ 968.060181][T22787] ? generic_block_fiemap+0x60/0x60 [ 968.065388][T22787] sock_ioctl+0x3b8/0x730 [ 968.069726][T22787] ? dlci_ioctl_set+0x30/0x30 [ 968.074408][T22787] ? __fget_files+0x294/0x400 [ 968.079095][T22787] ? bpf_lsm_file_ioctl+0x5/0x10 [ 968.084035][T22787] ? dlci_ioctl_set+0x30/0x30 [ 968.088716][T22787] __x64_sys_ioctl+0x193/0x200 [ 968.093488][T22787] do_syscall_64+0x2d/0x70 [ 968.097908][T22787] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 968.103798][T22787] RIP: 0033:0x45d4d9 [ 968.107704][T22787] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 968.127313][T22787] RSP: 002b:00007f192313ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.135757][T22787] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 968.143727][T22787] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 968.151697][T22787] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 968.159669][T22787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 968.167645][T22787] R13: 000000000169fb6f R14: 00007f192313f9c0 R15: 000000000118cfec 05:43:33 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 970.694352][T22787] Mem-Info: [ 970.717025][T22787] active_anon:6618 inactive_anon:312942 isolated_anon:0 [ 970.717025][T22787] active_file:591 inactive_file:466 isolated_file:100 [ 970.717025][T22787] unevictable:3 dirty:0 writeback:0 [ 970.717025][T22787] slab_reclaimable:15602 slab_unreclaimable:112280 [ 970.717025][T22787] mapped:54410 shmem:8868 pagetables:18177 bounce:0 [ 970.717025][T22787] free:21324 free_pcp:62 free_cma:0 [ 970.981192][T22787] Node 0 active_anon:15332kB inactive_anon:1231204kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213216kB dirty:0kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB kernel_stack:22304kB all_unreclaimable? yes [ 971.045516][T22787] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.129975][T22787] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 971.185657][T22787] Node 0 DMA32 free:20996kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1228964kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53176kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 971.282713][T22787] lowmem_reserve[]: 0 0 0 0 0 [ 971.288843][T22787] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.322763][T22787] lowmem_reserve[]: 0 0 0 0 0 [ 971.328514][T22787] Node 0 DMA: 8*4kB (UME) 4*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10160kB [ 971.353536][T22787] Node 0 DMA32: 1761*4kB (UMEH) 792*8kB (UMEH) 253*16kB (UMEH) 64*32kB (UMH) 4*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21012kB [ 971.421617][T22787] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 971.448238][T22787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 971.492290][T22787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 971.508121][T22787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 971.520773][T22787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 971.539842][T22787] 9172 total pagecache pages [ 971.544450][T22787] 0 pages in swap cache [ 971.554046][T22787] Swap cache stats: add 0, delete 0, find 0/0 [ 971.563280][T22787] Free swap = 0kB [ 971.570251][T22787] Total swap = 0kB [ 971.573975][T22787] 1965979 pages RAM [ 971.581237][T22787] 0 pages HighMem/MovableOnly [ 971.589215][T22787] 349896 pages reserved [ 971.593378][T22787] 0 pages cma reserved [ 971.600461][T22787] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=10823,uid=0 [ 971.626135][T22787] Out of memory: Killed process 10823 (syz-executor.1) total-vm:93548kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 971.659487][ T1172] oom_reaper: reaped process 22787 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 971.721846][T15772] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 [ 971.763056][T15772] CPU: 0 PID: 15772 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 971.771763][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.781816][T15772] Call Trace: [ 971.785113][T15772] dump_stack+0x18f/0x20d [ 971.789452][T15772] dump_header+0x106/0x60f [ 971.793875][T15772] oom_kill_process.cold+0x10/0x15 [ 971.798999][T15772] out_of_memory+0x358/0x13f0 [ 971.803682][T15772] ? oom_killer_disable+0x270/0x270 [ 971.808886][T15772] ? mutex_trylock+0x246/0x2c0 [ 971.813661][T15772] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 971.820340][T15772] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 971.826950][T15772] ? warn_alloc+0x120/0x120 [ 971.831465][T15772] ? fs_reclaim_release+0x90/0xd0 [ 971.836504][T15772] ? lock_is_held_type+0xbb/0xf0 [ 971.841454][T15772] __alloc_pages_nodemask+0x62c/0x790 [ 971.846835][T15772] ? mark_lock+0xbc/0x1710 [ 971.851264][T15772] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 971.858031][T15772] ? cache_grow_begin+0x2b3/0x430 [ 971.863065][T15772] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 971.869051][T15772] cache_grow_begin+0x71/0x430 [ 971.873824][T15772] fallback_alloc+0x205/0x2d0 [ 971.878523][T15772] ? iter_file_splice_write+0x170/0xbe0 [ 971.884124][T15772] __kmalloc+0x261/0x320 [ 971.888386][T15772] iter_file_splice_write+0x170/0xbe0 [ 971.893764][T15772] ? shmem_file_read_iter+0x9f5/0xd30 [ 971.899232][T15772] ? atime_needs_update+0x491/0x5f0 [ 971.904439][T15772] ? __do_compat_sys_vmsplice+0x260/0x260 [ 971.910187][T15772] ? atime_needs_update+0x5f0/0x5f0 [ 971.915394][T15772] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 971.921371][T15772] ? iov_iter_pipe+0xf1/0x2a0 [ 971.926059][T15772] ? pipe_to_user+0x170/0x170 [ 971.930740][T15772] ? __do_compat_sys_vmsplice+0x260/0x260 [ 971.936460][T15772] direct_splice_actor+0x171/0x2f0 [ 971.941579][T15772] ? generic_splice_sendpage+0x140/0x140 [ 971.947214][T15772] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 971.953419][T15772] ? pipe_to_user+0x170/0x170 [ 971.958108][T15772] splice_direct_to_actor+0x38c/0x980 [ 971.963488][T15772] ? generic_splice_sendpage+0x140/0x140 [ 971.969126][T15772] ? do_splice_to+0x170/0x170 [ 971.973807][T15772] ? security_file_permission+0x248/0x560 [ 971.979563][T15772] do_splice_direct+0x1b3/0x280 [ 971.984445][T15772] ? splice_direct_to_actor+0x980/0x980 [ 971.990006][T15772] ? __sb_start_write+0x1d5/0x470 [ 971.995034][T15772] do_sendfile+0x55f/0xd40 [ 971.999463][T15772] ? do_compat_pwritev64+0x1b0/0x1b0 [ 972.004780][T15772] ? __might_fault+0x190/0x1d0 [ 972.009593][T15772] __x64_sys_sendfile64+0x149/0x210 [ 972.014822][T15772] ? __ia32_sys_sendfile+0x220/0x220 [ 972.020107][T15772] ? trace_hardirqs_on+0x5f/0x220 [ 972.025145][T15772] ? lockdep_hardirqs_on+0x76/0xf0 [ 972.030287][T15772] do_syscall_64+0x2d/0x70 [ 972.034728][T15772] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 972.040619][T15772] RIP: 0033:0x45d4d9 [ 972.044544][T15772] Code: Bad RIP value. [ 972.048608][T15772] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 972.057026][T15772] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d4d9 [ 972.065005][T15772] RDX: 00000000200001c0 RSI: 000000000000000a RDI: 000000000000000a [ 972.072980][T15772] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 972.082361][T15772] R10: 00008080fffffffe R11: 0000000000000246 R12: 000000000118cf4c [ 972.090329][T15772] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 972.122587][T15772] Mem-Info: [ 972.125791][T15772] active_anon:6621 inactive_anon:312322 isolated_anon:0 [ 972.125791][T15772] active_file:39 inactive_file:275 isolated_file:40 [ 972.125791][T15772] unevictable:3 dirty:6 writeback:0 [ 972.125791][T15772] slab_reclaimable:15602 slab_unreclaimable:112801 [ 972.125791][T15772] mapped:53585 shmem:8871 pagetables:18151 bounce:0 [ 972.125791][T15772] free:21884 free_pcp:388 free_cma:0 [ 972.163114][T15772] Node 0 active_anon:15332kB inactive_anon:1229040kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213216kB dirty:4kB writeback:0kB shmem:24276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB kernel_stack:22240kB all_unreclaimable? yes [ 972.193575][T15772] Node 1 active_anon:11152kB inactive_anon:20248kB active_file:148kB inactive_file:1296kB unevictable:12kB isolated(anon):0kB isolated(file):160kB mapped:1324kB dirty:20kB writeback:0kB shmem:11208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5920kB all_unreclaimable? no [ 972.226933][T15772] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 972.309085][T15772] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 972.327583][T15772] Node 0 DMA32 free:21348kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1226800kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52880kB bounce:0kB free_pcp:388kB local_pcp:384kB free_cma:0kB 05:43:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xa, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:36 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:43:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x54, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 972.625613][T15772] lowmem_reserve[]: 0 0 0 0 0 [ 972.630337][T15772] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 972.905284][T15772] lowmem_reserve[]: 0 0 0 0 0 [ 972.949404][T15772] Node 1 Normal free:74124kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:11160kB inactive_anon:20220kB active_file:2616kB inactive_file:7476kB unevictable:12kB writepending:56kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:18964kB bounce:0kB free_pcp:1772kB local_pcp:1160kB free_cma:0kB [ 973.263798][T15772] lowmem_reserve[]: 0 0 0 0 0 [ 973.310873][T15772] Node 0 DMA: 9*4kB (UME) 4*8kB (UME) 23*16kB (UME) 16*32kB (UME) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10164kB [ 973.471279][T15772] Node 0 DMA32: 1788*4kB (UMEH) 804*8kB (UMEH) 246*16kB (ME) 51*32kB (M) 6*64kB (UH) 4*128kB (H) 3*256kB (H) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 21328kB [ 973.621059][T15772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 973.709061][T15772] Node 1 Normal: 107*4kB (ME) 48*8kB (UME) 83*16kB (UME) 93*32kB (UME) 23*64kB (ME) 16*128kB (UME) 13*256kB (UME) 4*512kB (ME) 4*1024kB (ME) 22*2048kB (UE) 0*4096kB = 63164kB [ 973.817698][T15772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 973.873330][T15772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 973.928005][T15772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 973.979942][T15772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 974.037617][T15772] 11434 total pagecache pages [ 974.065514][T15772] 0 pages in swap cache [ 974.095773][T15772] Swap cache stats: add 0, delete 0, find 0/0 [ 974.125668][T15772] Free swap = 0kB [ 974.145502][T15772] Total swap = 0kB [ 974.166882][T15772] 1965979 pages RAM [ 974.188867][T15772] 0 pages HighMem/MovableOnly [ 974.214619][T15772] 349896 pages reserved [ 974.238609][T15772] 0 pages cma reserved [ 974.259962][T15772] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12093,uid=0 [ 974.340725][T15772] Out of memory: Killed process 12093 (syz-executor.2) total-vm:93548kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 974.466491][ T1172] oom_reaper: reaped process 22803 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 979.315825][T19654] tipc: TX() has been purged, node left! [ 979.331750][T19654] tipc: TX() has been purged, node left! 05:43:40 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:42 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x68, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:43 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:43 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 979.520319][T19654] tipc: TX() has been purged, node left! 05:43:43 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 979.611333][T19654] tipc: TX() has been purged, node left! [ 979.695926][T19654] tipc: TX() has been purged, node left! [ 979.702084][T19654] tipc: TX() has been purged, node left! [ 979.798371][T19654] tipc: TX() has been purged, node left! [ 979.804734][T19654] tipc: TX() has been purged, node left! [ 979.948170][T19654] tipc: TX() has been purged, node left! [ 980.034415][T19654] tipc: TX() has been purged, node left! [ 980.133347][T19654] tipc: TX() has been purged, node left! [ 980.200843][T22837] warn_alloc: 2 callbacks suppressed [ 980.200864][T22837] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 05:43:43 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 980.315704][T19654] tipc: TX() has been purged, node left! [ 980.323034][T19654] tipc: TX() has been purged, node left! [ 980.363129][T22837] CPU: 0 PID: 22837 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 980.371916][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.381974][T22837] Call Trace: [ 980.385288][T22837] dump_stack+0x18f/0x20d [ 980.389626][T22837] warn_alloc.cold+0x87/0x17a [ 980.394333][T22837] ? zone_watermark_ok_safe+0x260/0x260 [ 980.399891][T22837] ? __alloc_pages_direct_compact+0x366/0x420 [ 980.405966][T22837] ? get_page_from_freelist+0x37f0/0x37f0 [ 980.411693][T22837] ? __zone_watermark_ok+0x3f0/0x3f0 [ 980.416988][T22837] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 980.423588][T22837] ? lock_acquire+0x1f1/0xad0 [ 980.428266][T22837] ? fs_reclaim_acquire+0xa1/0xf0 [ 980.433292][T22837] ? warn_alloc+0x120/0x120 [ 980.437835][T22837] ? __zone_watermark_ok+0x3f0/0x3f0 [ 980.443122][T22837] ? lock_is_held_type+0xbb/0xf0 [ 980.448061][T22837] ? ion_page_pool_alloc+0xba/0x270 [ 980.453371][T22837] __alloc_pages_nodemask+0x62c/0x790 [ 980.458747][T22837] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 980.465526][T22837] ? wait_for_completion+0x260/0x260 [ 980.470809][T22837] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 980.477228][T22837] alloc_pages_current+0x187/0x280 [ 980.482339][T22837] ion_page_pool_alloc+0x17d/0x270 [ 980.487451][T22837] ion_system_heap_allocate+0x246/0xd10 [ 980.493003][T22837] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 980.498552][T22837] ? ion_system_heap_free+0x470/0x470 [ 980.503924][T22837] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 980.509482][T22837] ion_ioctl+0x373/0xd20 [ 980.513735][T22837] ? ion_buffer_destroy+0x2b0/0x2b0 [ 980.518943][T22837] ? _copy_to_user+0x126/0x160 [ 980.523719][T22837] ? __fget_files+0x294/0x400 [ 980.528401][T22837] ? bpf_lsm_file_ioctl+0x5/0x10 [ 980.533337][T22837] ? ion_buffer_destroy+0x2b0/0x2b0 [ 980.538584][T22837] __x64_sys_ioctl+0x193/0x200 [ 980.543352][T22837] do_syscall_64+0x2d/0x70 [ 980.547769][T22837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 980.553655][T22837] RIP: 0033:0x45d4d9 [ 980.557548][T22837] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.577150][T22837] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.585559][T22837] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 980.593528][T22837] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 980.601514][T22837] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:43:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1f4, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 980.609484][T22837] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 980.617453][T22837] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 980.626238][T19654] tipc: TX() has been purged, node left! 05:43:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x54, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 981.955712][T22837] Mem-Info: [ 981.958926][T22837] active_anon:6656 inactive_anon:312290 isolated_anon:0 [ 981.958926][T22837] active_file:426 inactive_file:3419 isolated_file:0 [ 981.958926][T22837] unevictable:3 dirty:74 writeback:0 [ 981.958926][T22837] slab_reclaimable:15621 slab_unreclaimable:110239 [ 981.958926][T22837] mapped:55961 shmem:8908 pagetables:17962 bounce:0 [ 981.958926][T22837] free:922170 free_pcp:238 free_cma:0 [ 982.183060][T22837] Node 0 active_anon:15396kB inactive_anon:1229180kB active_file:1696kB inactive_file:13668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:223844kB dirty:292kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1054720kB writeback_tmp:0kB kernel_stack:22688kB all_unreclaimable? no [ 982.380322][T22837] Node 0 DMA free:10312kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.585626][T22837] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 982.591408][T22837] Node 0 DMA32 free:224376kB min:70732kB low:79708kB high:88684kB reserved_highatomic:2048KB active_anon:15368kB inactive_anon:1224952kB active_file:1696kB inactive_file:13724kB unevictable:0kB writepending:292kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52948kB bounce:0kB free_pcp:1592kB local_pcp:488kB free_cma:0kB [ 982.825692][T22837] lowmem_reserve[]: 0 0 0 0 0 [ 982.830427][T22837] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.016463][T22837] lowmem_reserve[]: 0 0 0 0 0 [ 983.065613][T22837] Node 0 DMA: 74*4kB (UME) 40*8kB (UME) 28*16kB (UME) 17*32kB (UME) 4*64kB (ME) 2*128kB (ME) 2*256kB (ME) 1*512kB (E) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10312kB [ 983.171638][T22837] Node 0 DMA32: 7365*4kB (UMEH) 7637*8kB (UEH) 4147*16kB (UE) 1654*32kB (UME) 13*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 213996kB [ 983.276527][T22837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 983.345625][T22837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.401523][T22837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.468556][T22837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 983.545697][T22837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 983.555015][T22837] 12791 total pagecache pages [ 983.666435][T22837] 0 pages in swap cache [ 983.670626][T22837] Swap cache stats: add 0, delete 0, find 0/0 [ 983.725650][T22837] Free swap = 0kB [ 983.729425][T22837] Total swap = 0kB [ 983.733140][T22837] 1965979 pages RAM [ 983.775637][T22837] 0 pages HighMem/MovableOnly [ 983.780611][T22837] 349896 pages reserved [ 983.784758][T22837] 0 pages cma reserved 05:43:48 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:56 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 993.671138][T22864] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 993.878573][T22864] CPU: 1 PID: 22864 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 993.887267][T22864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.897952][T22864] Call Trace: [ 993.901248][T22864] dump_stack+0x18f/0x20d [ 993.905586][T22864] warn_alloc.cold+0x87/0x17a [ 993.910267][T22864] ? zone_watermark_ok_safe+0x260/0x260 [ 993.915824][T22864] ? __alloc_pages_direct_compact+0x366/0x420 [ 993.921897][T22864] ? get_page_from_freelist+0x37f0/0x37f0 05:43:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 993.927618][T22864] ? __zone_watermark_ok+0x3f0/0x3f0 [ 993.932912][T22864] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 993.939515][T22864] ? lock_acquire+0x1f1/0xad0 [ 993.944199][T22864] ? fs_reclaim_acquire+0xa1/0xf0 [ 993.949225][T22864] ? warn_alloc+0x120/0x120 [ 993.953804][T22864] ? __zone_watermark_ok+0x3f0/0x3f0 [ 993.959106][T22864] ? lock_is_held_type+0xbb/0xf0 [ 993.964048][T22864] ? ion_page_pool_alloc+0xba/0x270 [ 993.969255][T22864] __alloc_pages_nodemask+0x62c/0x790 [ 993.974636][T22864] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 993.981433][T22864] ? wait_for_completion+0x260/0x260 [ 993.986747][T22864] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 993.993193][T22864] alloc_pages_current+0x187/0x280 [ 993.998340][T22864] ion_page_pool_alloc+0x17d/0x270 [ 994.003464][T22864] ion_system_heap_allocate+0x246/0xd10 [ 994.009017][T22864] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 994.014587][T22864] ? ion_system_heap_free+0x470/0x470 [ 994.019966][T22864] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 994.025530][T22864] ion_ioctl+0x373/0xd20 [ 994.029783][T22864] ? ion_buffer_destroy+0x2b0/0x2b0 [ 994.034995][T22864] ? _copy_to_user+0x126/0x160 [ 994.039828][T22864] ? __fget_files+0x294/0x400 [ 994.044947][T22864] ? bpf_lsm_file_ioctl+0x5/0x10 [ 994.049891][T22864] ? ion_buffer_destroy+0x2b0/0x2b0 [ 994.055092][T22864] __x64_sys_ioctl+0x193/0x200 [ 994.059864][T22864] do_syscall_64+0x2d/0x70 [ 994.064279][T22864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 994.070191][T22864] RIP: 0033:0x45d4d9 [ 994.074088][T22864] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.093687][T22864] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.102623][T22864] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 994.110594][T22864] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 994.118568][T22864] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:43:57 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 994.126539][T22864] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 994.134510][T22864] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:43:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x300, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:57 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x68, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:58 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:43:58 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, 0x0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:43:58 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, 0x0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 996.295615][T22864] Mem-Info: [ 996.298791][T22864] active_anon:6788 inactive_anon:311970 isolated_anon:0 [ 996.298791][T22864] active_file:1145 inactive_file:2819 isolated_file:0 [ 996.298791][T22864] unevictable:3 dirty:82 writeback:0 [ 996.298791][T22864] slab_reclaimable:15602 slab_unreclaimable:107170 [ 996.298791][T22864] mapped:56056 shmem:9038 pagetables:18189 bounce:0 [ 996.298791][T22864] free:665215 free_pcp:223 free_cma:0 [ 996.520641][T22864] Node 0 active_anon:15924kB inactive_anon:1228048kB active_file:4572kB inactive_file:11268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224224kB dirty:324kB writeback:0kB shmem:24888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1058816kB writeback_tmp:0kB kernel_stack:23232kB all_unreclaimable? no [ 996.715613][T22864] Node 0 DMA free:10292kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 996.891629][T22864] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 996.935682][T22864] Node 0 DMA32 free:143912kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:15884kB inactive_anon:1225808kB active_file:4572kB inactive_file:11268kB unevictable:0kB writepending:324kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53892kB bounce:0kB free_pcp:768kB local_pcp:340kB free_cma:0kB [ 997.150382][T22864] lowmem_reserve[]: 0 0 0 0 0 [ 997.155112][T22864] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.321391][T22864] lowmem_reserve[]: 0 0 0 0 0 [ 997.369672][T22864] Node 0 DMA: 77*4kB (UME) 38*8kB (UME) 31*16kB (UME) 17*32kB (UME) 5*64kB (UME) 3*128kB (UME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10292kB [ 997.465661][T22864] Node 0 DMA32: 570*4kB (UEH) 606*8kB (UMEH) 4135*16kB (UMEH) 1765*32kB (UMEH) 37*64kB (UMH) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 133544kB [ 997.587136][T22864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 997.666499][T22864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.725770][T22864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 997.735111][T22864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.831487][T22864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 997.897415][T22864] 13096 total pagecache pages [ 997.902130][T22864] 0 pages in swap cache [ 997.955848][T22864] Swap cache stats: add 0, delete 0, find 0/0 [ 997.961936][T22864] Free swap = 0kB [ 998.015923][T22864] Total swap = 0kB [ 998.019845][T22864] 1965979 pages RAM [ 998.023650][T22864] 0 pages HighMem/MovableOnly [ 998.045655][T22864] 349896 pages reserved [ 998.049838][T22864] 0 pages cma reserved 05:44:01 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:01 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1f4, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:01 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, 0x0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3e8, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:02 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 998.570714][T22932] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 998.721706][T22932] CPU: 0 PID: 22932 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 998.730415][T22932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.740466][T22932] Call Trace: [ 998.743764][T22932] dump_stack+0x18f/0x20d [ 998.748104][T22932] dump_header+0x106/0x60f [ 998.752550][T22932] oom_kill_process.cold+0x10/0x15 [ 998.757665][T22932] out_of_memory+0x358/0x13f0 [ 998.762376][T22932] ? oom_killer_disable+0x270/0x270 [ 998.767604][T22932] ? mutex_trylock+0x246/0x2c0 [ 998.772384][T22932] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 998.779063][T22932] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 998.785678][T22932] ? warn_alloc+0x120/0x120 [ 998.790187][T22932] ? fs_reclaim_release+0x90/0xd0 [ 998.795224][T22932] ? lock_is_held_type+0xbb/0xf0 [ 998.800428][T22932] ? ion_page_pool_alloc+0xba/0x270 [ 998.805636][T22932] __alloc_pages_nodemask+0x62c/0x790 [ 998.811018][T22932] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 998.817827][T22932] ? wait_for_completion+0x260/0x260 [ 998.823108][T22932] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 998.829524][T22932] alloc_pages_current+0x187/0x280 [ 998.834646][T22932] ion_page_pool_alloc+0x17d/0x270 [ 998.839768][T22932] ion_system_heap_allocate+0x246/0xd10 [ 998.845342][T22932] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 998.850897][T22932] ? ion_system_heap_free+0x470/0x470 [ 998.856274][T22932] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 998.861857][T22932] ion_ioctl+0x373/0xd20 [ 998.866112][T22932] ? ion_buffer_destroy+0x2b0/0x2b0 [ 998.871319][T22932] ? _copy_to_user+0x126/0x160 [ 998.876103][T22932] ? __fget_files+0x294/0x400 [ 998.880789][T22932] ? bpf_lsm_file_ioctl+0x5/0x10 [ 998.885760][T22932] ? ion_buffer_destroy+0x2b0/0x2b0 [ 998.891224][T22932] __x64_sys_ioctl+0x193/0x200 [ 998.895996][T22932] do_syscall_64+0x2d/0x70 [ 998.900426][T22932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 998.906318][T22932] RIP: 0033:0x45d4d9 [ 998.910223][T22932] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.929836][T22932] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.938249][T22932] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 998.946217][T22932] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 998.954186][T22932] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 998.962157][T22932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 998.970138][T22932] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:44:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x500, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:03 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x300, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1000.811916][T22932] Mem-Info: [ 1000.815103][T22932] active_anon:6822 inactive_anon:312023 isolated_anon:0 [ 1000.815103][T22932] active_file:2276 inactive_file:1139 isolated_file:0 [ 1000.815103][T22932] unevictable:3 dirty:89 writeback:0 [ 1000.815103][T22932] slab_reclaimable:15609 slab_unreclaimable:106939 [ 1000.815103][T22932] mapped:56077 shmem:9074 pagetables:18265 bounce:0 [ 1000.815103][T22932] free:524078 free_pcp:573 free_cma:0 [ 1001.055687][T22932] Node 0 active_anon:16056kB inactive_anon:1228300kB active_file:9096kB inactive_file:4548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224308kB dirty:352kB writeback:0kB shmem:25012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1058816kB writeback_tmp:0kB kernel_stack:23264kB all_unreclaimable? no [ 1001.225655][T22932] Node 0 DMA free:10268kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1001.375711][T22932] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1001.381585][T22932] Node 0 DMA32 free:92644kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:16016kB inactive_anon:1225960kB active_file:9096kB inactive_file:4548kB unevictable:0kB writepending:352kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:54056kB bounce:0kB free_pcp:1088kB local_pcp:280kB free_cma:0kB [ 1001.555664][T22932] lowmem_reserve[]: 0 0 0 0 0 [ 1001.560985][T22932] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1001.731749][T22932] lowmem_reserve[]: 0 0 0 0 0 [ 1001.755592][T22932] Node 0 DMA: 69*4kB (UM) 37*8kB (UM) 30*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10268kB [ 1001.835645][T22932] Node 0 DMA32: 673*4kB (MEH) 837*8kB (UMEH) 1481*16kB (UMEH) 1772*32kB (UEH) 18*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 92220kB [ 1001.921936][T22932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1001.985617][T22932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1001.995210][T22932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1002.065614][T22932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1002.075197][T22932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1002.183932][T22932] 12501 total pagecache pages [ 1002.215715][T22932] 0 pages in swap cache [ 1002.219930][T22932] Swap cache stats: add 0, delete 0, find 0/0 [ 1002.255722][T22932] Free swap = 0kB [ 1002.259485][T22932] Total swap = 0kB [ 1002.263201][T22932] 1965979 pages RAM [ 1002.331715][T22932] 0 pages HighMem/MovableOnly [ 1002.354596][T22932] 349896 pages reserved [ 1002.375638][T22932] 0 pages cma reserved [ 1002.379716][T22932] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=11006,uid=0 [ 1002.475674][T22932] Out of memory: Killed process 11006 (syz-executor.2) total-vm:93548kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1010.596586][ T1172] oom_reaper: reaped process 22932 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:44:17 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:17 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:17 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:17 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x700, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3e8, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1014.331368][T22969] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1014.459369][T22969] CPU: 1 PID: 22969 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1014.468280][T22969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.478334][T22969] Call Trace: [ 1014.481638][T22969] dump_stack+0x18f/0x20d [ 1014.485982][T22969] dump_header+0x106/0x60f [ 1014.490418][T22969] oom_kill_process.cold+0x10/0x15 [ 1014.495547][T22969] out_of_memory+0x358/0x13f0 [ 1014.500241][T22969] ? oom_killer_disable+0x270/0x270 [ 1014.505452][T22969] ? mutex_trylock+0x246/0x2c0 [ 1014.510220][T22969] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1014.516907][T22969] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1014.523523][T22969] ? warn_alloc+0x120/0x120 [ 1014.528045][T22969] ? fs_reclaim_release+0x90/0xd0 [ 1014.533090][T22969] ? lock_is_held_type+0xbb/0xf0 [ 1014.538043][T22969] __alloc_pages_nodemask+0x62c/0x790 [ 1014.543430][T22969] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1014.550234][T22969] ? mark_lock+0xbc/0x1710 [ 1014.554659][T22969] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1014.561078][T22969] alloc_pages_vma+0xdd/0x720 [ 1014.565766][T22969] wp_page_copy+0x1fd/0x17d0 [ 1014.570385][T22969] ? do_wp_page+0x699/0x1950 [ 1014.574981][T22969] ? print_bad_pte+0x640/0x640 [ 1014.579755][T22969] ? lock_downgrade+0x830/0x830 [ 1014.584608][T22969] ? vm_normal_page+0x148/0x380 [ 1014.589485][T22969] ? handle_mm_fault+0x2112/0x4590 [ 1014.595213][T22969] do_wp_page+0x6a1/0x1950 [ 1014.599725][T22969] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1014.605097][T22969] ? rwlock_bug.part.0+0x90/0x90 [ 1014.610047][T22969] handle_mm_fault+0x3216/0x4590 [ 1014.615002][T22969] ? apply_to_existing_page_range+0x40/0x40 [ 1014.620908][T22969] ? vmacache_update+0xce/0x140 [ 1014.625769][T22969] do_user_addr_fault+0x598/0xbf0 [ 1014.630801][T22969] ? trace_hardirqs_off+0x40/0x210 [ 1014.635920][T22969] exc_page_fault+0xa8/0x160 [ 1014.640513][T22969] asm_exc_page_fault+0x1e/0x30 [ 1014.645370][T22969] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1014.651697][T22969] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1014.674630][T22969] RSP: 0018:ffffc90016cd7bb0 EFLAGS: 00010206 [ 1014.680695][T22969] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1014.688664][T22969] RDX: 0000000000000000 RSI: ffffc90016cd7c40 RDI: 0000000000743058 [ 1014.696634][T22969] RBP: ffffc90016cd7c40 R08: 0000000000006f6c R09: ffffc90016cd7c67 [ 1014.704624][T22969] R10: fffff52002d9af8c R11: 0000000000000000 R12: 0000000000000028 [ 1014.712595][T22969] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1014.720588][T22969] _copy_to_user+0x11e/0x160 [ 1014.725185][T22969] inet_gifconf+0x24f/0x4a0 [ 1014.729697][T22969] ? inet_validate_link_af+0x390/0x390 [ 1014.735156][T22969] ? mutex_lock_io_nested+0xf60/0xf60 [ 1014.740528][T22969] ? lock_downgrade+0x830/0x830 [ 1014.745387][T22969] ? inet_validate_link_af+0x390/0x390 [ 1014.750846][T22969] dev_ifconf+0xdb/0x230 [ 1014.755098][T22969] sock_do_ioctl+0x202/0x2d0 [ 1014.759692][T22969] ? compat_ifr_data_ioctl+0x150/0x150 [ 1014.765155][T22969] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1014.771052][T22969] ? do_vfs_ioctl+0x27d/0x1090 [ 1014.775819][T22969] ? generic_block_fiemap+0x60/0x60 [ 1014.781050][T22969] sock_ioctl+0x3b8/0x730 [ 1014.785384][T22969] ? dlci_ioctl_set+0x30/0x30 [ 1014.790070][T22969] ? __fget_files+0x294/0x400 [ 1014.794757][T22969] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1014.799694][T22969] ? dlci_ioctl_set+0x30/0x30 [ 1014.804375][T22969] __x64_sys_ioctl+0x193/0x200 [ 1014.809148][T22969] do_syscall_64+0x2d/0x70 [ 1014.813566][T22969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1014.819455][T22969] RIP: 0033:0x45d4d9 [ 1014.823349][T22969] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.842970][T22969] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.851387][T22969] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 05:44:18 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1014.859377][T22969] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 1014.867367][T22969] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1014.875335][T22969] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1014.883302][T22969] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:44:18 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 05:44:19 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 05:44:19 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1016.283185][T22998] warn_alloc: 1 callbacks suppressed [ 1016.283208][T22998] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1016.411359][T22998] CPU: 0 PID: 22998 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1016.420231][T22998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.430285][T22998] Call Trace: [ 1016.433591][T22998] dump_stack+0x18f/0x20d [ 1016.438192][T22998] warn_alloc.cold+0x87/0x17a [ 1016.442875][T22998] ? zone_watermark_ok_safe+0x260/0x260 [ 1016.448459][T22998] ? __alloc_pages_direct_compact+0x366/0x420 [ 1016.454533][T22998] ? get_page_from_freelist+0x37f0/0x37f0 [ 1016.460257][T22998] ? psi_task_change+0x142/0x220 [ 1016.465205][T22998] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1016.470431][T22998] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1016.477039][T22998] ? lock_acquire+0x1f1/0xad0 [ 1016.481722][T22998] ? fs_reclaim_acquire+0xa1/0xf0 [ 1016.486745][T22998] ? warn_alloc+0x120/0x120 [ 1016.491291][T22998] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1016.496585][T22998] ? lock_is_held_type+0xbb/0xf0 [ 1016.501527][T22998] ? ion_page_pool_alloc+0xba/0x270 [ 1016.506737][T22998] __alloc_pages_nodemask+0x62c/0x790 [ 1016.512120][T22998] ? trace_hardirqs_on+0x5f/0x220 [ 1016.517161][T22998] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1016.523932][T22998] ? wait_for_completion+0x260/0x260 [ 1016.529221][T22998] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1016.535644][T22998] alloc_pages_current+0x187/0x280 [ 1016.540786][T22998] ion_page_pool_alloc+0x17d/0x270 [ 1016.545903][T22998] ion_system_heap_allocate+0x246/0xd10 [ 1016.551456][T22998] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1016.557005][T22998] ? ion_system_heap_free+0x470/0x470 [ 1016.562379][T22998] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1016.567932][T22998] ion_ioctl+0x373/0xd20 [ 1016.572187][T22998] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1016.577391][T22998] ? _copy_to_user+0x126/0x160 [ 1016.582168][T22998] ? __fget_files+0x294/0x400 [ 1016.586851][T22998] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1016.591789][T22998] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1016.596989][T22998] __x64_sys_ioctl+0x193/0x200 [ 1016.601772][T22998] do_syscall_64+0x2d/0x70 [ 1016.606186][T22998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1016.612101][T22998] RIP: 0033:0x45d4d9 [ 1016.616084][T22998] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.635691][T22998] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.644103][T22998] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1016.652077][T22998] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1016.660051][T22998] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1016.668022][T22998] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1016.675991][T22998] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1017.536067][T22969] Mem-Info: [ 1017.539233][T22969] active_anon:6984 inactive_anon:311632 isolated_anon:0 [ 1017.539233][T22969] active_file:355 inactive_file:3187 isolated_file:0 [ 1017.539233][T22969] unevictable:3 dirty:53 writeback:0 [ 1017.539233][T22969] slab_reclaimable:15582 slab_unreclaimable:107013 [ 1017.539233][T22969] mapped:56059 shmem:9236 pagetables:18387 bounce:0 [ 1017.539233][T22969] free:448699 free_pcp:641 free_cma:0 [ 1017.745634][T22969] Node 0 active_anon:16232kB inactive_anon:1225888kB active_file:44kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213428kB dirty:8kB writeback:0kB shmem:25180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB kernel_stack:23232kB all_unreclaimable? no [ 1017.895610][T22969] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.045613][T22969] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1018.051395][T22969] Node 0 DMA32 free:42144kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:16192kB inactive_anon:1223648kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53868kB bounce:0kB free_pcp:2944kB local_pcp:1504kB free_cma:0kB [ 1018.165780][T22998] Mem-Info: [ 1018.168946][T22998] active_anon:6984 inactive_anon:311632 isolated_anon:0 [ 1018.168946][T22998] active_file:355 inactive_file:3187 isolated_file:0 [ 1018.168946][T22998] unevictable:3 dirty:53 writeback:0 [ 1018.168946][T22998] slab_reclaimable:15582 slab_unreclaimable:106986 [ 1018.168946][T22998] mapped:56059 shmem:9236 pagetables:18387 bounce:0 [ 1018.168946][T22998] free:448895 free_pcp:692 free_cma:0 [ 1018.285601][T22969] lowmem_reserve[]: 0 0 0 0 0 [ 1018.290347][T22969] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.435629][T22998] Node 0 active_anon:16232kB inactive_anon:1225888kB active_file:44kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213428kB dirty:8kB writeback:0kB shmem:25180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1056768kB writeback_tmp:0kB kernel_stack:23232kB all_unreclaimable? no [ 1018.485617][T22969] lowmem_reserve[]: 0 0 0 0 0 [ 1018.490333][T22969] Node 0 DMA: 66*4kB (UM) 25*8kB (UM) 30*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10160kB [ 1018.588055][T22969] Node 0 DMA32: 4916*4kB (UMEH) 1234*8kB (UMEH) 531*16kB (UMEH) 137*32kB (UMEH) 6*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44080kB [ 1018.604583][T22998] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1018.705607][T22969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1018.759976][T22998] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1018.776483][T22969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.793072][T22998] Node 0 DMA32 free:44064kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:16192kB inactive_anon:1223648kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53868kB bounce:0kB free_pcp:2660kB local_pcp:1300kB free_cma:0kB [ 1018.824390][T22969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.885634][T22969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1018.895214][T22969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1018.985613][T22969] 12791 total pagecache pages [ 1018.990328][T22969] 0 pages in swap cache [ 1018.994478][T22969] Swap cache stats: add 0, delete 0, find 0/0 [ 1019.005625][T22998] lowmem_reserve[]: 0 0 0 0 0 [ 1019.010324][T22998] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.099113][T22969] Free swap = 0kB [ 1019.121062][T22969] Total swap = 0kB [ 1019.139572][T22969] 1965979 pages RAM [ 1019.160545][T22969] 0 pages HighMem/MovableOnly [ 1019.185672][T22998] lowmem_reserve[]: 0 0 0 0 0 [ 1019.190482][T22998] Node 0 DMA: 66*4kB (UM) 25*8kB (UM) 30*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10160kB [ 1019.190930][T22969] 349896 pages reserved [ 1019.315587][T22998] Node 0 DMA32: 4916*4kB (UMEH) 1008*8kB (UMEH) 555*16kB (UMEH) 179*32kB (UMEH) 6*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44000kB [ 1019.395652][T22969] 0 pages cma reserved [ 1019.399796][T22969] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=8374,uid=0 [ 1019.425600][T22998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1019.465712][T22998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.475262][T22998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.495651][T22969] Out of memory: Killed process 8374 (syz-executor.2) total-vm:93680kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1019.565605][T22998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1019.575214][T22998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1019.603310][ T1172] oom_reaper: reaped process 8374 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1019.615073][T22998] 12477 total pagecache pages 05:44:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xa00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:23 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x500, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:23 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:23 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1019.708095][T22998] 0 pages in swap cache [ 1019.713001][T22998] Swap cache stats: add 0, delete 0, find 0/0 [ 1019.775632][T22998] Free swap = 0kB [ 1019.779379][T22998] Total swap = 0kB [ 1019.812246][T22998] 1965979 pages RAM [ 1019.848296][T22998] 0 pages HighMem/MovableOnly [ 1019.888817][T22998] 349896 pages reserved 05:44:23 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1019.931590][T22998] 0 pages cma reserved 05:44:23 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1020.096682][ T1172] oom_reaper: reaped process 22998 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 05:44:23 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:24 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:24 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:24 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1020.985844][T23034] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1021.076436][T23034] CPU: 1 PID: 23034 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1021.085149][T23034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.095209][T23034] Call Trace: [ 1021.098510][T23034] dump_stack+0x18f/0x20d [ 1021.102852][T23034] dump_header+0x106/0x60f [ 1021.107311][T23034] oom_kill_process.cold+0x10/0x15 [ 1021.112439][T23034] out_of_memory+0x358/0x13f0 [ 1021.117127][T23034] ? oom_killer_disable+0x270/0x270 [ 1021.122335][T23034] ? mutex_trylock+0x246/0x2c0 [ 1021.127117][T23034] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1021.133799][T23034] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1021.140448][T23034] ? warn_alloc+0x120/0x120 [ 1021.144959][T23034] ? fs_reclaim_release+0x90/0xd0 [ 1021.149999][T23034] ? lock_is_held_type+0xbb/0xf0 [ 1021.154955][T23034] __alloc_pages_nodemask+0x62c/0x790 [ 1021.160445][T23034] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1021.167220][T23034] ? mark_lock+0xbc/0x1710 [ 1021.171644][T23034] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1021.178067][T23034] alloc_pages_vma+0xdd/0x720 [ 1021.182752][T23034] wp_page_copy+0x1fd/0x17d0 [ 1021.187353][T23034] ? do_wp_page+0x699/0x1950 [ 1021.191948][T23034] ? print_bad_pte+0x640/0x640 [ 1021.196714][T23034] ? lock_downgrade+0x830/0x830 [ 1021.201576][T23034] ? vm_normal_page+0x148/0x380 [ 1021.206438][T23034] ? handle_mm_fault+0x2112/0x4590 [ 1021.211560][T23034] do_wp_page+0x6a1/0x1950 [ 1021.215985][T23034] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1021.221358][T23034] ? rwlock_bug.part.0+0x90/0x90 [ 1021.226437][T23034] handle_mm_fault+0x3216/0x4590 [ 1021.231475][T23034] ? apply_to_existing_page_range+0x40/0x40 [ 1021.237381][T23034] ? vmacache_update+0xce/0x140 [ 1021.242241][T23034] do_user_addr_fault+0x598/0xbf0 [ 1021.247276][T23034] ? trace_hardirqs_off+0x40/0x210 [ 1021.252482][T23034] exc_page_fault+0xa8/0x160 [ 1021.257076][T23034] asm_exc_page_fault+0x1e/0x30 [ 1021.261936][T23034] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1021.268264][T23034] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1021.287866][T23034] RSP: 0018:ffffc90018507bb0 EFLAGS: 00010206 [ 1021.293931][T23034] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1021.301927][T23034] RDX: 0000000000000000 RSI: ffffc90018507c40 RDI: 0000000000743058 [ 1021.309900][T23034] RBP: ffffc90018507c40 R08: 0000000000006f6c R09: ffffc90018507c67 [ 1021.317873][T23034] R10: fffff520030a0f8c R11: 0000000000000000 R12: 0000000000000028 [ 1021.325845][T23034] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1021.333868][T23034] _copy_to_user+0x11e/0x160 [ 1021.338470][T23034] inet_gifconf+0x24f/0x4a0 [ 1021.342985][T23034] ? inet_validate_link_af+0x390/0x390 [ 1021.348473][T23034] ? mutex_lock_io_nested+0xf60/0xf60 [ 1021.353850][T23034] ? lock_downgrade+0x830/0x830 [ 1021.358714][T23034] ? inet_validate_link_af+0x390/0x390 [ 1021.364176][T23034] dev_ifconf+0xdb/0x230 [ 1021.368433][T23034] sock_do_ioctl+0x202/0x2d0 [ 1021.373029][T23034] ? compat_ifr_data_ioctl+0x150/0x150 [ 1021.378494][T23034] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1021.384394][T23034] ? do_vfs_ioctl+0x27d/0x1090 [ 1021.390126][T23034] ? generic_block_fiemap+0x60/0x60 [ 1021.395340][T23034] sock_ioctl+0x3b8/0x730 [ 1021.399700][T23034] ? dlci_ioctl_set+0x30/0x30 [ 1021.404500][T23034] ? __fget_files+0x294/0x400 [ 1021.409188][T23034] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1021.414130][T23034] ? dlci_ioctl_set+0x30/0x30 [ 1021.418813][T23034] __x64_sys_ioctl+0x193/0x200 [ 1021.423582][T23034] do_syscall_64+0x2d/0x70 [ 1021.428003][T23034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.433894][T23034] RIP: 0033:0x45d4d9 [ 1021.437790][T23034] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.457396][T23034] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.465830][T23034] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1021.473813][T23034] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 1021.481787][T23034] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1021.489791][T23034] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1021.497762][T23034] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c [ 1023.421575][T23034] Mem-Info: [ 1023.424763][T23034] active_anon:6077 inactive_anon:311033 isolated_anon:0 [ 1023.424763][T23034] active_file:1000 inactive_file:2890 isolated_file:0 [ 1023.424763][T23034] unevictable:3 dirty:87 writeback:0 [ 1023.424763][T23034] slab_reclaimable:15573 slab_unreclaimable:107823 [ 1023.424763][T23034] mapped:56153 shmem:8336 pagetables:18402 bounce:0 [ 1023.424763][T23034] free:332390 free_pcp:243 free_cma:0 [ 1023.645638][T23034] Node 0 active_anon:13924kB inactive_anon:1223532kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213456kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1054720kB writeback_tmp:0kB kernel_stack:23168kB all_unreclaimable? no [ 1023.795673][T23034] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.936454][T23034] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1023.942238][T23034] Node 0 DMA32 free:23024kB min:46156kB low:55132kB high:64108kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1221292kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53756kB bounce:0kB free_pcp:1176kB local_pcp:672kB free_cma:0kB [ 1024.131591][T23034] lowmem_reserve[]: 0 0 0 0 0 [ 1024.145704][T23034] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.291452][T23034] lowmem_reserve[]: 0 0 0 0 0 [ 1024.311711][T23034] Node 0 DMA: 63*4kB (UM) 27*8kB (UM) 30*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10164kB [ 1024.395673][T23034] Node 0 DMA32: 2294*4kB (MEH) 931*8kB (UMEH) 246*16kB (UMEH) 26*32kB (UMH) 4*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22928kB [ 1024.471720][T23034] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1024.545861][T23034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.555440][T23034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.631709][T23034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1024.695688][T23034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1024.695697][T23034] 12246 total pagecache pages [ 1024.695705][T23034] 0 pages in swap cache [ 1024.695714][T23034] Swap cache stats: add 0, delete 0, find 0/0 [ 1024.695720][T23034] Free swap = 0kB [ 1024.695726][T23034] Total swap = 0kB [ 1024.695734][T23034] 1965979 pages RAM [ 1024.695740][T23034] 0 pages HighMem/MovableOnly [ 1024.695747][T23034] 349896 pages reserved [ 1024.695753][T23034] 0 pages cma reserved [ 1024.695764][T23034] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=14393,uid=0 [ 1025.046579][T23034] Out of memory: Killed process 14393 (syz-executor.1) total-vm:93416kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1025.156936][ T1172] oom_reaper: reaped process 23034 (syz-executor.5), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB 05:44:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:33 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x700, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:33 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:33 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:33 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1029.627882][T23049] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 05:44:33 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:33 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1029.769861][T23049] CPU: 0 PID: 23049 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1029.778561][T23049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.788607][T23049] Call Trace: [ 1029.791898][T23049] dump_stack+0x18f/0x20d [ 1029.796231][T23049] dump_header+0x106/0x60f [ 1029.800649][T23049] oom_kill_process.cold+0x10/0x15 [ 1029.805783][T23049] out_of_memory+0x358/0x13f0 [ 1029.810481][T23049] ? oom_killer_disable+0x270/0x270 [ 1029.815680][T23049] ? mutex_trylock+0x246/0x2c0 [ 1029.820436][T23049] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1029.827106][T23049] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1029.833705][T23049] ? warn_alloc+0x120/0x120 [ 1029.838209][T23049] ? fs_reclaim_release+0x90/0xd0 [ 1029.843241][T23049] ? lock_is_held_type+0xbb/0xf0 [ 1029.848183][T23049] __alloc_pages_nodemask+0x62c/0x790 [ 1029.853552][T23049] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1029.860318][T23049] ? mark_lock+0xbc/0x1710 [ 1029.864730][T23049] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1029.871140][T23049] alloc_pages_vma+0xdd/0x720 [ 1029.875840][T23049] wp_page_copy+0x1fd/0x17d0 [ 1029.880441][T23049] ? do_wp_page+0x699/0x1950 [ 1029.885024][T23049] ? print_bad_pte+0x640/0x640 [ 1029.889780][T23049] ? lock_downgrade+0x830/0x830 [ 1029.894632][T23049] ? vm_normal_page+0x148/0x380 [ 1029.899485][T23049] ? handle_mm_fault+0x2112/0x4590 [ 1029.904593][T23049] do_wp_page+0x6a1/0x1950 [ 1029.909007][T23049] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1029.914383][T23049] ? rwlock_bug.part.0+0x90/0x90 [ 1029.919418][T23049] handle_mm_fault+0x3216/0x4590 [ 1029.924357][T23049] ? apply_to_existing_page_range+0x40/0x40 [ 1029.930267][T23049] ? vmacache_update+0xce/0x140 [ 1029.935117][T23049] do_user_addr_fault+0x598/0xbf0 [ 1029.940139][T23049] ? trace_hardirqs_off+0x40/0x210 [ 1029.945248][T23049] exc_page_fault+0xa8/0x160 [ 1029.949839][T23049] asm_exc_page_fault+0x1e/0x30 [ 1029.954690][T23049] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1029.961010][T23049] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1029.980612][T23049] RSP: 0018:ffffc90018fefbb0 EFLAGS: 00010206 [ 1029.986675][T23049] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1029.994642][T23049] RDX: 0000000000000000 RSI: ffffc90018fefc40 RDI: 0000000000743058 [ 1030.002618][T23049] RBP: ffffc90018fefc40 R08: 0000000000006f6c R09: ffffc90018fefc67 [ 1030.010586][T23049] R10: fffff520031fdf8c R11: 0000000000000000 R12: 0000000000000028 [ 1030.018550][T23049] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1030.026538][T23049] _copy_to_user+0x11e/0x160 [ 1030.031139][T23049] inet_gifconf+0x24f/0x4a0 [ 1030.035663][T23049] ? inet_validate_link_af+0x390/0x390 [ 1030.041116][T23049] ? mutex_lock_io_nested+0xf60/0xf60 [ 1030.046480][T23049] ? lock_downgrade+0x830/0x830 [ 1030.051332][T23049] ? inet_validate_link_af+0x390/0x390 [ 1030.056793][T23049] dev_ifconf+0xdb/0x230 [ 1030.061040][T23049] sock_do_ioctl+0x202/0x2d0 [ 1030.065624][T23049] ? compat_ifr_data_ioctl+0x150/0x150 [ 1030.071077][T23049] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1030.076967][T23049] ? do_vfs_ioctl+0x27d/0x1090 [ 1030.081744][T23049] ? generic_block_fiemap+0x60/0x60 [ 1030.086941][T23049] sock_ioctl+0x3b8/0x730 [ 1030.091264][T23049] ? dlci_ioctl_set+0x30/0x30 [ 1030.095939][T23049] ? __fget_files+0x294/0x400 [ 1030.100638][T23049] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1030.105567][T23049] ? dlci_ioctl_set+0x30/0x30 [ 1030.110242][T23049] __x64_sys_ioctl+0x193/0x200 [ 1030.115001][T23049] do_syscall_64+0x2d/0x70 [ 1030.119429][T23049] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1030.125315][T23049] RIP: 0033:0x45d4d9 [ 1030.129206][T23049] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1030.148803][T23049] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.157211][T23049] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1030.165268][T23049] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 1030.173232][T23049] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1030.181196][T23049] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1030.193414][T23049] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:44:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:44:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:44:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:44:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 1032.135434][T23049] Mem-Info: [ 1032.167812][T23049] active_anon:6158 inactive_anon:310733 isolated_anon:0 [ 1032.167812][T23049] active_file:1001 inactive_file:2923 isolated_file:0 [ 1032.167812][T23049] unevictable:3 dirty:15 writeback:13 [ 1032.167812][T23049] slab_reclaimable:15545 slab_unreclaimable:107520 [ 1032.167812][T23049] mapped:56225 shmem:8410 pagetables:18615 bounce:0 [ 1032.167812][T23049] free:313963 free_pcp:539 free_cma:0 [ 1032.354428][T23049] Node 0 active_anon:13924kB inactive_anon:1221348kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213500kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1052672kB writeback_tmp:0kB kernel_stack:23136kB all_unreclaimable? yes [ 1032.505460][T23049] Node 0 DMA free:10160kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.655839][T23049] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1032.693365][T23049] Node 0 DMA32 free:22132kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1219108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53644kB bounce:0kB free_pcp:2056kB local_pcp:1336kB free_cma:0kB [ 1032.860697][T23049] lowmem_reserve[]: 0 0 0 0 0 [ 1032.887903][T23049] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.035652][T23049] lowmem_reserve[]: 0 0 0 0 0 [ 1033.060577][T23049] Node 0 DMA: 38*4kB (UM) 39*8kB (UM) 30*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10160kB [ 1033.150926][T23049] Node 0 DMA32: 2433*4kB (UMEH) 894*8kB (UMEH) 209*16kB (UMEH) 8*32kB (UMH) 4*64kB (H) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22020kB [ 1033.226240][T23049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1033.286213][T23049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.355656][T23049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.364992][T23049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.445651][T23049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1033.455025][T23049] 12342 total pagecache pages [ 1033.505654][T23049] 0 pages in swap cache [ 1033.509840][T23049] Swap cache stats: add 0, delete 0, find 0/0 [ 1033.556158][T23049] Free swap = 0kB [ 1033.559892][T23049] Total swap = 0kB [ 1033.566916][T23049] 1965979 pages RAM [ 1033.570730][T23049] 0 pages HighMem/MovableOnly [ 1033.575398][T23049] 349896 pages reserved [ 1033.636965][T23049] 0 pages cma reserved [ 1033.641085][T23049] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=12197,uid=0 [ 1033.723212][T23049] Out of memory: Killed process 12197 (syz-executor.3) total-vm:93416kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1033.808232][ T1172] oom_reaper: reaped process 23049 (syz-executor.5), now anon-rss:0kB, file-rss:34768kB, shmem-rss:0kB 05:44:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3f00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:44:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xa00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:37 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:37 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:37 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 1034.082372][T23092] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1034.214560][T23092] CPU: 0 PID: 23092 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1034.223563][T23092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1034.233629][T23092] Call Trace: [ 1034.236933][T23092] dump_stack+0x18f/0x20d [ 1034.241276][T23092] dump_header+0x106/0x60f [ 1034.245714][T23092] oom_kill_process.cold+0x10/0x15 [ 1034.250837][T23092] out_of_memory+0x358/0x13f0 [ 1034.255527][T23092] ? oom_killer_disable+0x270/0x270 [ 1034.260735][T23092] ? mutex_trylock+0x246/0x2c0 [ 1034.265517][T23092] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1034.272205][T23092] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1034.278824][T23092] ? warn_alloc+0x120/0x120 [ 1034.283339][T23092] ? fs_reclaim_release+0x90/0xd0 [ 1034.288381][T23092] ? lock_is_held_type+0xbb/0xf0 [ 1034.293336][T23092] __alloc_pages_nodemask+0x62c/0x790 [ 1034.298721][T23092] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1034.305497][T23092] ? mark_lock+0xbc/0x1710 [ 1034.309923][T23092] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1034.316348][T23092] alloc_pages_vma+0xdd/0x720 [ 1034.321045][T23092] wp_page_copy+0x1fd/0x17d0 [ 1034.325644][T23092] ? do_wp_page+0x699/0x1950 [ 1034.330248][T23092] ? print_bad_pte+0x640/0x640 [ 1034.335019][T23092] ? lock_downgrade+0x830/0x830 [ 1034.339874][T23092] ? vm_normal_page+0x148/0x380 [ 1034.344734][T23092] ? handle_mm_fault+0x2112/0x4590 [ 1034.349881][T23092] do_wp_page+0x6a1/0x1950 [ 1034.354307][T23092] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1034.359681][T23092] ? rwlock_bug.part.0+0x90/0x90 [ 1034.364657][T23092] handle_mm_fault+0x3216/0x4590 [ 1034.369611][T23092] ? apply_to_existing_page_range+0x40/0x40 [ 1034.375525][T23092] ? vmacache_update+0xce/0x140 [ 1034.380383][T23092] do_user_addr_fault+0x598/0xbf0 [ 1034.385443][T23092] ? trace_hardirqs_off+0x40/0x210 [ 1034.390569][T23092] exc_page_fault+0xa8/0x160 [ 1034.395256][T23092] asm_exc_page_fault+0x1e/0x30 [ 1034.400116][T23092] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1034.406446][T23092] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1034.426244][T23092] RSP: 0018:ffffc900f57afbb0 EFLAGS: 00010206 [ 1034.432315][T23092] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1034.440292][T23092] RDX: 0000000000000000 RSI: ffffc900f57afc40 RDI: 0000000000743058 [ 1034.448269][T23092] RBP: ffffc900f57afc40 R08: 0000000000006f6c R09: ffffc900f57afc67 [ 1034.456245][T23092] R10: fffff5201eaf5f8c R11: 0000000000000000 R12: 0000000000000028 [ 1034.464233][T23092] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1034.472232][T23092] _copy_to_user+0x11e/0x160 [ 1034.476833][T23092] inet_gifconf+0x24f/0x4a0 [ 1034.481342][T23092] ? inet_validate_link_af+0x390/0x390 [ 1034.486811][T23092] ? mutex_lock_io_nested+0xf60/0xf60 [ 1034.492187][T23092] ? lock_downgrade+0x830/0x830 [ 1034.497053][T23092] ? inet_validate_link_af+0x390/0x390 [ 1034.502515][T23092] dev_ifconf+0xdb/0x230 [ 1034.506769][T23092] sock_do_ioctl+0x202/0x2d0 [ 1034.511374][T23092] ? compat_ifr_data_ioctl+0x150/0x150 [ 1034.516837][T23092] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1034.522737][T23092] ? do_vfs_ioctl+0x27d/0x1090 [ 1034.527508][T23092] ? generic_block_fiemap+0x60/0x60 [ 1034.532719][T23092] sock_ioctl+0x3b8/0x730 [ 1034.537053][T23092] ? dlci_ioctl_set+0x30/0x30 [ 1034.541738][T23092] ? __fget_files+0x294/0x400 [ 1034.546421][T23092] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1034.551369][T23092] ? dlci_ioctl_set+0x30/0x30 [ 1034.556051][T23092] __x64_sys_ioctl+0x193/0x200 [ 1034.560821][T23092] do_syscall_64+0x2d/0x70 [ 1034.565242][T23092] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1034.571132][T23092] RIP: 0033:0x45d4d9 [ 1034.575029][T23092] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1034.594900][T23092] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.603321][T23092] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1034.611298][T23092] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 1034.619272][T23092] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1034.627245][T23092] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1034.635219][T23092] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c 05:44:38 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:38 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:44:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 05:44:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 05:44:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) [ 1036.883095][T23092] Mem-Info: [ 1036.899376][T23092] active_anon:6195 inactive_anon:310320 isolated_anon:0 [ 1036.899376][T23092] active_file:1006 inactive_file:2927 isolated_file:0 [ 1036.899376][T23092] unevictable:3 dirty:4 writeback:0 [ 1036.899376][T23092] slab_reclaimable:15544 slab_unreclaimable:107655 [ 1036.899376][T23092] mapped:56235 shmem:8446 pagetables:18769 bounce:0 [ 1036.899376][T23092] free:323530 free_pcp:482 free_cma:0 [ 1037.100796][T23092] Node 0 active_anon:13924kB inactive_anon:1219164kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213540kB dirty:4kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1050624kB writeback_tmp:0kB kernel_stack:23104kB all_unreclaimable? yes [ 1037.255640][T23092] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.365606][T23092] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1037.371376][T23092] Node 0 DMA32 free:23060kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1216924kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53532kB bounce:0kB free_pcp:1940kB local_pcp:544kB free_cma:0kB [ 1037.543228][T23092] lowmem_reserve[]: 0 0 0 0 0 [ 1037.549004][T23092] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.675639][T23092] lowmem_reserve[]: 0 0 0 0 0 [ 1037.680369][T23092] Node 0 DMA: 38*4kB (UM) 38*8kB (UM) 31*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10168kB [ 1037.765604][T23092] Node 0 DMA32: 2669*4kB (UMEH) 887*8kB (UMEH) 204*16kB (MEH) 7*32kB (MH) 4*64kB (H) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22924kB [ 1037.825633][T23092] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1037.895616][T23092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1037.905183][T23092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1037.985689][T23092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1037.995260][T23092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1038.055504][T23092] 12387 total pagecache pages [ 1038.085779][T23092] 0 pages in swap cache [ 1038.089956][T23092] Swap cache stats: add 0, delete 0, find 0/0 [ 1038.135645][T23092] Free swap = 0kB [ 1038.139404][T23092] Total swap = 0kB [ 1038.143117][T23092] 1965979 pages RAM [ 1038.186410][T23092] 0 pages HighMem/MovableOnly [ 1038.191107][T23092] 349896 pages reserved [ 1038.195255][T23092] 0 pages cma reserved [ 1038.245604][T23092] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=11971,uid=0 [ 1038.305687][T23092] Out of memory: Killed process 11971 (syz-executor.1) total-vm:93416kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1038.397609][ T1172] oom_reaper: reaped process 23092 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 05:44:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:42 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:42 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:44:42 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1038.649541][T23137] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1038.755254][T23137] CPU: 1 PID: 23137 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1038.763975][T23137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.774029][T23137] Call Trace: [ 1038.777326][T23137] dump_stack+0x18f/0x20d [ 1038.781669][T23137] dump_header+0x106/0x60f [ 1038.786095][T23137] oom_kill_process.cold+0x10/0x15 [ 1038.791216][T23137] out_of_memory+0x358/0x13f0 [ 1038.795913][T23137] ? oom_killer_disable+0x270/0x270 [ 1038.801125][T23137] ? mutex_trylock+0x246/0x2c0 [ 1038.805908][T23137] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1038.812589][T23137] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1038.819206][T23137] ? warn_alloc+0x120/0x120 [ 1038.823744][T23137] ? fs_reclaim_release+0x90/0xd0 [ 1038.828874][T23137] ? lock_is_held_type+0xbb/0xf0 [ 1038.833826][T23137] __alloc_pages_nodemask+0x62c/0x790 [ 1038.839212][T23137] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1038.845987][T23137] ? mark_lock+0xbc/0x1710 [ 1038.850464][T23137] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1038.857669][T23137] alloc_pages_vma+0xdd/0x720 [ 1038.862363][T23137] wp_page_copy+0x1fd/0x17d0 [ 1038.866961][T23137] ? do_wp_page+0x699/0x1950 [ 1038.871558][T23137] ? print_bad_pte+0x640/0x640 [ 1038.876326][T23137] ? lock_downgrade+0x830/0x830 [ 1038.881186][T23137] ? vm_normal_page+0x148/0x380 [ 1038.886049][T23137] ? handle_mm_fault+0x2112/0x4590 [ 1038.891173][T23137] do_wp_page+0x6a1/0x1950 [ 1038.895596][T23137] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1038.900972][T23137] ? rwlock_bug.part.0+0x90/0x90 [ 1038.905925][T23137] handle_mm_fault+0x3216/0x4590 [ 1038.910876][T23137] ? apply_to_existing_page_range+0x40/0x40 [ 1038.916816][T23137] ? vmacache_update+0xce/0x140 [ 1038.921681][T23137] do_user_addr_fault+0x598/0xbf0 [ 1038.926715][T23137] ? trace_hardirqs_off+0x40/0x210 [ 1038.931832][T23137] exc_page_fault+0xa8/0x160 [ 1038.936429][T23137] asm_exc_page_fault+0x1e/0x30 [ 1038.941291][T23137] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1038.947627][T23137] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1038.967233][T23137] RSP: 0018:ffffc900f590fbb0 EFLAGS: 00010206 [ 1038.973301][T23137] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1038.981277][T23137] RDX: 0000000000000000 RSI: ffffc900f590fc40 RDI: 0000000000743058 [ 1038.989250][T23137] RBP: ffffc900f590fc40 R08: 0000000000006f6c R09: ffffc900f590fc67 [ 1038.997222][T23137] R10: fffff5201eb21f8c R11: 0000000000000000 R12: 0000000000000028 [ 1039.005198][T23137] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1039.013195][T23137] _copy_to_user+0x11e/0x160 [ 1039.017792][T23137] inet_gifconf+0x24f/0x4a0 [ 1039.022307][T23137] ? inet_validate_link_af+0x390/0x390 [ 1039.027777][T23137] ? mutex_lock_io_nested+0xf60/0xf60 [ 1039.033414][T23137] ? lock_downgrade+0x830/0x830 [ 1039.038280][T23137] ? inet_validate_link_af+0x390/0x390 [ 1039.043747][T23137] dev_ifconf+0xdb/0x230 [ 1039.048003][T23137] sock_do_ioctl+0x202/0x2d0 [ 1039.052598][T23137] ? compat_ifr_data_ioctl+0x150/0x150 [ 1039.058065][T23137] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1039.063985][T23137] ? do_vfs_ioctl+0x27d/0x1090 [ 1039.068761][T23137] ? generic_block_fiemap+0x60/0x60 [ 1039.073968][T23137] sock_ioctl+0x3b8/0x730 [ 1039.078299][T23137] ? dlci_ioctl_set+0x30/0x30 [ 1039.082978][T23137] ? __fget_files+0x294/0x400 [ 1039.087691][T23137] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1039.092633][T23137] ? dlci_ioctl_set+0x30/0x30 [ 1039.097315][T23137] __x64_sys_ioctl+0x193/0x200 [ 1039.102087][T23137] do_syscall_64+0x2d/0x70 [ 1039.106502][T23137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.112392][T23137] RIP: 0033:0x45d4d9 [ 1039.116290][T23137] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1039.135918][T23137] RSP: 002b:00007f192313ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1039.144326][T23137] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1039.152297][T23137] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 1039.160299][T23137] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 1039.168274][T23137] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 1039.176248][T23137] R13: 000000000169fb6f R14: 00007f192313f9c0 R15: 000000000118cfec [ 1041.302759][T23137] Mem-Info: [ 1041.317541][T23137] active_anon:6221 inactive_anon:309811 isolated_anon:0 [ 1041.317541][T23137] active_file:1007 inactive_file:2935 isolated_file:0 [ 1041.317541][T23137] unevictable:3 dirty:20 writeback:0 [ 1041.317541][T23137] slab_reclaimable:15543 slab_unreclaimable:107604 [ 1041.317541][T23137] mapped:56260 shmem:8477 pagetables:18795 bounce:0 [ 1041.317541][T23137] free:331636 free_pcp:483 free_cma:0 [ 1041.524564][T23137] Node 0 active_anon:13924kB inactive_anon:1216972kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213580kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1048576kB writeback_tmp:0kB kernel_stack:23072kB all_unreclaimable? yes [ 1041.700908][T23137] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.865658][T23137] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1041.871441][T23137] Node 0 DMA32 free:24008kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1214732kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53420kB bounce:0kB free_pcp:2028kB local_pcp:644kB free_cma:0kB [ 1042.045583][T23137] lowmem_reserve[]: 0 0 0 0 0 [ 1042.050347][T23137] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1042.215627][T23137] lowmem_reserve[]: 0 0 0 0 0 [ 1042.220355][T23137] Node 0 DMA: 38*4kB (UM) 38*8kB (UM) 31*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10168kB [ 1042.305607][T23137] Node 0 DMA32: 2728*4kB (UMEH) 916*8kB (UME) 209*16kB (MEH) 10*32kB (UMH) 5*64kB (UH) 4*128kB (H) 3*256kB (H) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24016kB [ 1042.355808][T23137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1042.431817][T23137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1042.492012][T23137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1042.545617][T23137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1042.555184][T23137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1042.629962][T23137] 12436 total pagecache pages [ 1042.634663][T23137] 0 pages in swap cache [ 1042.665604][T23137] Swap cache stats: add 0, delete 0, find 0/0 [ 1042.671677][T23137] Free swap = 0kB [ 1042.675391][T23137] Total swap = 0kB [ 1042.715601][T23137] 1965979 pages RAM [ 1042.719447][T23137] 0 pages HighMem/MovableOnly [ 1042.724114][T23137] 349896 pages reserved [ 1042.785673][T23137] 0 pages cma reserved [ 1042.789760][T23137] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=15539,uid=0 [ 1042.865644][T23137] Out of memory: Killed process 15539 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:44:46 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1042.958030][ T1172] oom_reaper: reaped process 23138 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 05:44:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5400, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5400, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:46 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1043.242171][T23165] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1043.302800][T23158] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1043.419783][T23165] CPU: 0 PID: 23165 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1043.428469][T23165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.438523][T23165] Call Trace: [ 1043.441824][T23165] dump_stack+0x18f/0x20d [ 1043.446170][T23165] warn_alloc.cold+0x87/0x17a [ 1043.450877][T23165] ? zone_watermark_ok_safe+0x260/0x260 [ 1043.456476][T23165] ? __alloc_pages_direct_compact+0x366/0x420 [ 1043.462560][T23165] ? get_page_from_freelist+0x37f0/0x37f0 [ 1043.468281][T23165] ? psi_task_change+0x142/0x220 [ 1043.473227][T23165] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1043.478465][T23165] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1043.485079][T23165] ? lock_acquire+0x1f1/0xad0 [ 1043.489789][T23165] ? fs_reclaim_acquire+0xa1/0xf0 [ 1043.494820][T23165] ? warn_alloc+0x120/0x120 [ 1043.499366][T23165] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1043.504658][T23165] ? lock_is_held_type+0xbb/0xf0 [ 1043.509615][T23165] ? ion_page_pool_alloc+0xba/0x270 [ 1043.514910][T23165] __alloc_pages_nodemask+0x62c/0x790 [ 1043.520287][T23165] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1043.527080][T23165] ? wait_for_completion+0x260/0x260 [ 1043.532387][T23165] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1043.538802][T23165] alloc_pages_current+0x187/0x280 [ 1043.543921][T23165] ion_page_pool_alloc+0x17d/0x270 [ 1043.549039][T23165] ion_system_heap_allocate+0x246/0xd10 [ 1043.554615][T23165] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1043.560164][T23165] ? ion_system_heap_free+0x470/0x470 [ 1043.565539][T23165] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1043.571092][T23165] ion_ioctl+0x373/0xd20 [ 1043.575343][T23165] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1043.581503][T23165] ? _copy_to_user+0x126/0x160 [ 1043.586284][T23165] ? __fget_files+0x294/0x400 [ 1043.590966][T23165] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1043.595904][T23165] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1043.601104][T23165] __x64_sys_ioctl+0x193/0x200 [ 1043.605882][T23165] do_syscall_64+0x2d/0x70 [ 1043.610306][T23165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1043.616197][T23165] RIP: 0033:0x45d4d9 [ 1043.620114][T23165] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.639726][T23165] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1043.648153][T23165] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1043.656147][T23165] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1043.664120][T23165] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1043.672091][T23165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1043.680064][T23165] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 1043.688053][T23158] CPU: 1 PID: 23158 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1043.696995][T23158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.707048][T23158] Call Trace: [ 1043.710346][T23158] dump_stack+0x18f/0x20d [ 1043.714690][T23158] dump_header+0x106/0x60f [ 1043.719113][T23158] oom_kill_process.cold+0x10/0x15 [ 1043.724229][T23158] out_of_memory+0x358/0x13f0 [ 1043.728936][T23158] ? oom_killer_disable+0x270/0x270 [ 1043.734140][T23158] ? mutex_trylock+0x246/0x2c0 [ 1043.738908][T23158] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1043.745588][T23158] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1043.752198][T23158] ? warn_alloc+0x120/0x120 [ 1043.756711][T23158] ? fs_reclaim_release+0x90/0xd0 [ 1043.761753][T23158] ? lock_is_held_type+0xbb/0xf0 [ 1043.766698][T23158] __alloc_pages_nodemask+0x62c/0x790 [ 1043.772100][T23158] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1043.778870][T23158] ? mark_lock+0xbc/0x1710 [ 1043.783317][T23158] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1043.790191][T23158] alloc_pages_vma+0xdd/0x720 [ 1043.794882][T23158] wp_page_copy+0x1fd/0x17d0 [ 1043.799478][T23158] ? do_wp_page+0x699/0x1950 [ 1043.804076][T23158] ? print_bad_pte+0x640/0x640 [ 1043.808843][T23158] ? lock_downgrade+0x830/0x830 [ 1043.813718][T23158] ? vm_normal_page+0x148/0x380 [ 1043.818601][T23158] ? handle_mm_fault+0x2112/0x4590 [ 1043.823740][T23158] do_wp_page+0x6a1/0x1950 [ 1043.828165][T23158] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1043.833537][T23158] ? rwlock_bug.part.0+0x90/0x90 [ 1043.839474][T23158] handle_mm_fault+0x3216/0x4590 [ 1043.844427][T23158] ? apply_to_existing_page_range+0x40/0x40 [ 1043.850362][T23158] ? vmacache_update+0xce/0x140 [ 1043.855222][T23158] do_user_addr_fault+0x598/0xbf0 [ 1043.860253][T23158] ? trace_hardirqs_off+0x40/0x210 [ 1043.865379][T23158] exc_page_fault+0xa8/0x160 [ 1043.869974][T23158] asm_exc_page_fault+0x1e/0x30 [ 1043.874832][T23158] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1043.881160][T23158] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1043.900772][T23158] RSP: 0018:ffffc90018fefbb0 EFLAGS: 00010206 [ 1043.906838][T23158] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1043.914831][T23158] RDX: 0000000000000000 RSI: ffffc90018fefc40 RDI: 0000000000743058 [ 1043.922803][T23158] RBP: ffffc90018fefc40 R08: 0000000000006f6c R09: ffffc90018fefc67 [ 1043.930776][T23158] R10: fffff520031fdf8c R11: 0000000000000000 R12: 0000000000000028 [ 1043.938748][T23158] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1043.946737][T23158] _copy_to_user+0x11e/0x160 [ 1043.951337][T23158] inet_gifconf+0x24f/0x4a0 [ 1043.955853][T23158] ? inet_validate_link_af+0x390/0x390 [ 1043.961324][T23158] ? mutex_lock_io_nested+0xf60/0xf60 [ 1043.966709][T23158] ? lock_downgrade+0x830/0x830 [ 1043.971572][T23158] ? inet_validate_link_af+0x390/0x390 [ 1043.977034][T23158] dev_ifconf+0xdb/0x230 [ 1043.981282][T23158] sock_do_ioctl+0x202/0x2d0 [ 1043.985878][T23158] ? compat_ifr_data_ioctl+0x150/0x150 [ 1043.991343][T23158] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1043.997246][T23158] ? do_vfs_ioctl+0x27d/0x1090 [ 1044.002015][T23158] ? generic_block_fiemap+0x60/0x60 [ 1044.007227][T23158] sock_ioctl+0x3b8/0x730 [ 1044.011561][T23158] ? dlci_ioctl_set+0x30/0x30 [ 1044.016241][T23158] ? __fget_files+0x294/0x400 [ 1044.020951][T23158] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1044.025939][T23158] ? dlci_ioctl_set+0x30/0x30 [ 1044.031048][T23158] __x64_sys_ioctl+0x193/0x200 [ 1044.035822][T23158] do_syscall_64+0x2d/0x70 [ 1044.040242][T23158] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.046133][T23158] RIP: 0033:0x45d4d9 [ 1044.050033][T23158] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1044.069641][T23158] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.078054][T23158] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1044.086025][T23158] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 1044.093996][T23158] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1044.101966][T23158] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1044.109936][T23158] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 1045.085608][T23165] Mem-Info: [ 1045.088786][T23165] active_anon:6252 inactive_anon:309274 isolated_anon:0 [ 1045.088786][T23165] active_file:1011 inactive_file:2943 isolated_file:0 [ 1045.088786][T23165] unevictable:3 dirty:78 writeback:0 [ 1045.088786][T23165] slab_reclaimable:15543 slab_unreclaimable:107785 [ 1045.088786][T23165] mapped:56274 shmem:8504 pagetables:18767 bounce:0 [ 1045.088786][T23165] free:340044 free_pcp:644 free_cma:0 [ 1045.295671][T23165] Node 0 active_anon:13924kB inactive_anon:1214924kB active_file:36kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213636kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1046528kB writeback_tmp:0kB kernel_stack:23072kB all_unreclaimable? yes [ 1045.445615][T23165] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1045.585596][T23165] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1045.591366][T23165] Node 0 DMA32 free:24028kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1212684kB active_file:36kB inactive_file:20kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53420kB bounce:0kB free_pcp:2576kB local_pcp:1148kB free_cma:0kB [ 1045.775638][T23165] lowmem_reserve[]: 0 0 0 0 0 [ 1045.780372][T23165] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1045.935587][T23165] lowmem_reserve[]: 0 0 0 0 0 [ 1045.940342][T23165] Node 0 DMA: 38*4kB (UM) 38*8kB (UM) 31*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10168kB [ 1046.035602][T23165] Node 0 DMA32: 2703*4kB (UMEH) 938*8kB (UMEH) 212*16kB (UMEH) 10*32kB (UMH) 4*64kB (H) 4*128kB (H) 3*256kB (H) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24076kB [ 1046.136401][T23165] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1046.191319][T23165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.204701][T23158] Mem-Info: [ 1046.211625][T23158] active_anon:6252 inactive_anon:309274 isolated_anon:0 [ 1046.211625][T23158] active_file:1011 inactive_file:2943 isolated_file:0 [ 1046.211625][T23158] unevictable:3 dirty:79 writeback:0 [ 1046.211625][T23158] slab_reclaimable:15543 slab_unreclaimable:107973 [ 1046.211625][T23158] mapped:56275 shmem:8512 pagetables:18730 bounce:0 [ 1046.211625][T23158] free:347694 free_pcp:652 free_cma:0 [ 1046.281742][T23165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1046.345601][T23165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1046.355174][T23165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1046.435661][T23158] Node 0 active_anon:13924kB inactive_anon:1214924kB active_file:36kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213640kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1046528kB writeback_tmp:0kB kernel_stack:23072kB all_unreclaimable? yes [ 1046.465541][T23165] 12467 total pagecache pages [ 1046.471835][T23165] 0 pages in swap cache [ 1046.505681][T23165] Swap cache stats: add 0, delete 0, find 0/0 [ 1046.511781][T23165] Free swap = 0kB [ 1046.515500][T23165] Total swap = 0kB [ 1046.571568][T23165] 1965979 pages RAM [ 1046.575404][T23165] 0 pages HighMem/MovableOnly [ 1046.581195][T23158] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1046.626147][T23165] 349896 pages reserved [ 1046.630338][T23165] 0 pages cma reserved [ 1046.736207][T23158] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1046.742362][T23158] Node 0 DMA32 free:24572kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1212684kB active_file:36kB inactive_file:20kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53420kB bounce:0kB free_pcp:2656kB local_pcp:1436kB free_cma:0kB [ 1046.945605][T23158] lowmem_reserve[]: 0 0 0 0 0 [ 1046.950437][T23158] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1047.091277][T23158] lowmem_reserve[]: 0 0 0 0 0 [ 1047.115595][T23158] Node 0 DMA: 38*4kB (UM) 38*8kB (UM) 31*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10168kB [ 1047.215587][T23158] Node 0 DMA32: 2703*4kB (UMEH) 950*8kB (MEH) 220*16kB (MEH) 8*32kB (MH) 5*64kB (H) 4*128kB (H) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24044kB [ 1047.303389][T23158] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1047.355731][T23158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1047.426232][T23158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1047.475641][T23158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1047.485415][T23158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1047.555607][T23158] 12488 total pagecache pages [ 1047.560658][T23158] 0 pages in swap cache [ 1047.565058][T23158] Swap cache stats: add 0, delete 0, find 0/0 [ 1047.608211][T23158] Free swap = 0kB [ 1047.612069][T23158] Total swap = 0kB [ 1047.646172][T23158] 1965979 pages RAM [ 1047.650110][T23158] 0 pages HighMem/MovableOnly [ 1047.654797][T23158] 349896 pages reserved [ 1047.699226][T23158] 0 pages cma reserved [ 1047.703435][T23158] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=15500,uid=0 [ 1047.786450][T23158] Out of memory: Killed process 15500 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:44:51 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1047.876563][ T1172] oom_reaper: reaped process 15500 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:44:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x6800, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x6800, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1047.946467][ T1172] oom_reaper: reaped process 23165 (syz-executor.1), now anon-rss:0kB, file-rss:34768kB, shmem-rss:0kB 05:44:51 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1048.168233][T23184] syz-executor.0 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1048.352430][T23184] CPU: 1 PID: 23184 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1048.361368][T23184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.371800][T23184] Call Trace: [ 1048.375120][T23184] dump_stack+0x18f/0x20d [ 1048.379476][T23184] dump_header+0x106/0x60f [ 1048.383919][T23184] oom_kill_process.cold+0x10/0x15 [ 1048.389052][T23184] out_of_memory+0x358/0x13f0 [ 1048.394368][T23184] ? oom_killer_disable+0x270/0x270 [ 1048.399687][T23184] ? mutex_trylock+0x246/0x2c0 [ 1048.404471][T23184] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1048.411173][T23184] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1048.417802][T23184] ? warn_alloc+0x120/0x120 [ 1048.422540][T23184] ? fs_reclaim_release+0x90/0xd0 [ 1048.427701][T23184] ? lock_is_held_type+0xbb/0xf0 [ 1048.432754][T23184] ? ion_page_pool_alloc+0xba/0x270 [ 1048.438242][T23184] __alloc_pages_nodemask+0x62c/0x790 [ 1048.443795][T23184] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1048.450678][T23184] ? wait_for_completion+0x260/0x260 [ 1048.455985][T23184] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1048.462582][T23184] alloc_pages_current+0x187/0x280 [ 1048.467853][T23184] ion_page_pool_alloc+0x17d/0x270 [ 1048.472989][T23184] ion_system_heap_allocate+0x246/0xd10 [ 1048.478564][T23184] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1048.484276][T23184] ? ion_system_heap_free+0x470/0x470 [ 1048.489672][T23184] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1048.495249][T23184] ion_ioctl+0x373/0xd20 [ 1048.499521][T23184] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1048.504898][T23184] ? _copy_to_user+0x126/0x160 [ 1048.509698][T23184] ? __fget_files+0x294/0x400 [ 1048.514678][T23184] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1048.519641][T23184] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1048.524865][T23184] __x64_sys_ioctl+0x193/0x200 [ 1048.529659][T23184] do_syscall_64+0x2d/0x70 [ 1048.534097][T23184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1048.540005][T23184] RIP: 0033:0x45d4d9 [ 1048.544361][T23184] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1048.564167][T23184] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.572826][T23184] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1048.580818][T23184] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1048.588900][T23184] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1048.597139][T23184] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1048.605227][T23184] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1050.152853][T23184] Mem-Info: [ 1050.168637][T23184] active_anon:6286 inactive_anon:308696 isolated_anon:0 [ 1050.168637][T23184] active_file:1021 inactive_file:2943 isolated_file:0 [ 1050.168637][T23184] unevictable:3 dirty:0 writeback:0 [ 1050.168637][T23184] slab_reclaimable:15544 slab_unreclaimable:107901 [ 1050.168637][T23184] mapped:56273 shmem:8541 pagetables:18740 bounce:0 [ 1050.168637][T23184] free:340735 free_pcp:301 free_cma:0 [ 1050.345023][T23184] Node 0 active_anon:13924kB inactive_anon:1212776kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213676kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1044480kB writeback_tmp:0kB kernel_stack:23040kB all_unreclaimable? yes [ 1050.517694][T23184] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:2240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1050.691270][T23184] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1050.731303][T23184] Node 0 DMA32 free:22896kB min:46156kB low:55132kB high:64108kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1210536kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53308kB bounce:0kB free_pcp:1144kB local_pcp:260kB free_cma:0kB [ 1050.924978][T23184] lowmem_reserve[]: 0 0 0 0 0 [ 1050.954913][T23184] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1051.122516][T23184] lowmem_reserve[]: 0 0 0 0 0 [ 1051.156569][T23184] Node 0 DMA: 38*4kB (UM) 38*8kB (UM) 31*16kB (UM) 16*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 10168kB [ 1051.275679][T23184] Node 0 DMA32: 2325*4kB (MEH) 957*8kB (UME) 219*16kB (UMEH) 9*32kB (MH) 6*64kB (UH) 4*128kB (H) 3*256kB (H) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 22924kB [ 1051.341235][T23184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1051.379788][T23184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1051.421803][T23184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1051.475729][T23184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1051.521345][T23184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1051.575869][T23184] 12522 total pagecache pages [ 1051.580581][T23184] 0 pages in swap cache [ 1051.584757][T23184] Swap cache stats: add 0, delete 0, find 0/0 [ 1051.662165][T23184] Free swap = 0kB [ 1051.685635][T23184] Total swap = 0kB [ 1051.689412][T23184] 1965979 pages RAM [ 1051.693580][T23184] 0 pages HighMem/MovableOnly [ 1051.755662][T23184] 349896 pages reserved [ 1051.759864][T23184] 0 pages cma reserved [ 1051.763955][T23184] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=15359,uid=0 [ 1051.885664][T23184] Out of memory: Killed process 15359 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:44:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe803, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:55 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe803, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:44:55 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1052.054139][ T1172] oom_reaper: reaped process 23184 (syz-executor.0), now anon-rss:0kB, file-rss:34788kB, shmem-rss:0kB [ 1052.160607][T23208] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1052.261950][T23208] CPU: 1 PID: 23208 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1052.270692][T23208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.280754][T23208] Call Trace: [ 1052.284065][T23208] dump_stack+0x18f/0x20d [ 1052.288406][T23208] dump_header+0x106/0x60f [ 1052.292836][T23208] oom_kill_process.cold+0x10/0x15 [ 1052.297961][T23208] out_of_memory+0x358/0x13f0 [ 1052.302655][T23208] ? oom_killer_disable+0x270/0x270 [ 1052.307899][T23208] ? mutex_trylock+0x246/0x2c0 [ 1052.312666][T23208] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1052.319350][T23208] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1052.325968][T23208] ? warn_alloc+0x120/0x120 [ 1052.330486][T23208] ? fs_reclaim_release+0x90/0xd0 [ 1052.335530][T23208] ? lock_is_held_type+0xbb/0xf0 [ 1052.340473][T23208] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1052.346556][T23208] __alloc_pages_nodemask+0x62c/0x790 [ 1052.351964][T23208] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1052.358731][T23208] ? fs_reclaim_acquire+0xa1/0xf0 [ 1052.363770][T23208] ? fs_reclaim_release+0x90/0xd0 [ 1052.368801][T23208] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1052.375225][T23208] alloc_pages_current+0x187/0x280 [ 1052.380346][T23208] __get_free_pages+0x8/0x40 [ 1052.384944][T23208] sg_kmalloc+0x52/0x70 [ 1052.389139][T23208] __sg_alloc_table+0x244/0x380 [ 1052.394003][T23208] sg_alloc_table+0x37/0x270 [ 1052.398596][T23208] ? sg_alloc_table_from_pages+0x50/0x50 [ 1052.404237][T23208] ion_system_heap_allocate+0x4a9/0xd10 [ 1052.409800][T23208] ? ion_system_heap_free+0x470/0x470 [ 1052.415454][T23208] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1052.421012][T23208] ion_ioctl+0x373/0xd20 [ 1052.425268][T23208] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1052.430474][T23208] ? _copy_to_user+0x126/0x160 [ 1052.435252][T23208] ? __fget_files+0x294/0x400 [ 1052.439936][T23208] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1052.444879][T23208] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1052.450088][T23208] __x64_sys_ioctl+0x193/0x200 [ 1052.454867][T23208] do_syscall_64+0x2d/0x70 [ 1052.459288][T23208] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1052.465180][T23208] RIP: 0033:0x45d4d9 [ 1052.469100][T23208] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1052.488710][T23208] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.497129][T23208] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1052.505130][T23208] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1052.513106][T23208] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1052.521085][T23208] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1052.529064][T23208] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 1054.241706][T23208] Mem-Info: [ 1054.264237][T23208] active_anon:6315 inactive_anon:308118 isolated_anon:0 [ 1054.264237][T23208] active_file:1033 inactive_file:2939 isolated_file:0 [ 1054.264237][T23208] unevictable:3 dirty:4 writeback:0 [ 1054.264237][T23208] slab_reclaimable:15544 slab_unreclaimable:107230 [ 1054.264237][T23208] mapped:56270 shmem:8566 pagetables:18685 bounce:0 [ 1054.264237][T23208] free:325381 free_pcp:113 free_cma:0 [ 1054.514321][T23208] Node 0 active_anon:13924kB inactive_anon:1210628kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213712kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1042432kB writeback_tmp:0kB kernel_stack:23008kB all_unreclaimable? yes [ 1054.715681][T23208] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1054.902617][T23208] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1054.941326][T23208] Node 0 DMA32 free:21856kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1210436kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53196kB bounce:0kB free_pcp:532kB local_pcp:260kB free_cma:0kB [ 1055.150459][T23208] lowmem_reserve[]: 0 0 0 0 0 [ 1055.185990][T23208] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.355589][T23208] lowmem_reserve[]: 0 0 0 0 0 [ 1055.360345][T23208] Node 0 DMA: 32*4kB (UM) 3*8kB (M) 7*16kB (M) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10152kB [ 1055.465600][T23208] Node 0 DMA32: 2277*4kB (UMEH) 888*8kB (UMEH) 222*16kB (UME) 18*32kB (UMH) 10*64kB (UH) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22388kB [ 1055.536177][T23208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1055.615718][T23208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.625325][T23208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1055.735679][T23208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1055.745260][T23208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1055.861207][T23208] 12553 total pagecache pages [ 1055.890010][T23208] 0 pages in swap cache [ 1055.894198][T23208] Swap cache stats: add 0, delete 0, find 0/0 [ 1055.955703][T23208] Free swap = 0kB [ 1055.959463][T23208] Total swap = 0kB [ 1055.963180][T23208] 1965979 pages RAM [ 1056.016091][T23208] 0 pages HighMem/MovableOnly [ 1056.020806][T23208] 349896 pages reserved [ 1056.024961][T23208] 0 pages cma reserved [ 1056.095733][T23208] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14923,uid=0 [ 1056.195723][T23208] Out of memory: Killed process 14923 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:45:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xf401, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xf401, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1056.330156][ T1172] oom_reaper: reaped process 23208 (syz-executor.2), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 05:45:04 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:04 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:04 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xff00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xff00, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1060.773489][T23234] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1060.854277][T23234] CPU: 1 PID: 23234 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1060.862983][T23234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.873035][T23234] Call Trace: [ 1060.876333][T23234] dump_stack+0x18f/0x20d [ 1060.880698][T23234] dump_header+0x106/0x60f [ 1060.885132][T23234] oom_kill_process.cold+0x10/0x15 [ 1060.890253][T23234] out_of_memory+0x358/0x13f0 [ 1060.894945][T23234] ? oom_killer_disable+0x270/0x270 [ 1060.900159][T23234] ? mutex_trylock+0x246/0x2c0 [ 1060.904931][T23234] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1060.911621][T23234] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1060.918262][T23234] ? warn_alloc+0x120/0x120 [ 1060.922776][T23234] ? fs_reclaim_release+0x90/0xd0 [ 1060.927823][T23234] ? lock_is_held_type+0xbb/0xf0 [ 1060.932780][T23234] __alloc_pages_nodemask+0x62c/0x790 [ 1060.938166][T23234] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1060.944940][T23234] ? mark_lock+0xbc/0x1710 [ 1060.949367][T23234] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1060.955790][T23234] alloc_pages_vma+0xdd/0x720 [ 1060.960482][T23234] wp_page_copy+0x1fd/0x17d0 [ 1060.965081][T23234] ? do_wp_page+0x699/0x1950 [ 1060.969676][T23234] ? print_bad_pte+0x640/0x640 [ 1060.974452][T23234] ? lock_downgrade+0x830/0x830 [ 1060.979308][T23234] ? vm_normal_page+0x148/0x380 [ 1060.984168][T23234] ? handle_mm_fault+0x2112/0x4590 [ 1060.989289][T23234] do_wp_page+0x6a1/0x1950 [ 1060.993716][T23234] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1060.999090][T23234] ? rwlock_bug.part.0+0x90/0x90 [ 1061.004039][T23234] handle_mm_fault+0x3216/0x4590 [ 1061.008992][T23234] ? apply_to_existing_page_range+0x40/0x40 [ 1061.014899][T23234] ? vmacache_update+0xce/0x140 [ 1061.019760][T23234] do_user_addr_fault+0x598/0xbf0 [ 1061.024792][T23234] ? trace_hardirqs_off+0x40/0x210 [ 1061.029932][T23234] exc_page_fault+0xa8/0x160 [ 1061.034537][T23234] asm_exc_page_fault+0x1e/0x30 [ 1061.039401][T23234] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1061.046348][T23234] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1061.066044][T23234] RSP: 0018:ffffc9018a82fbb0 EFLAGS: 00010206 [ 1061.072112][T23234] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1061.080109][T23234] RDX: 0000000000000000 RSI: ffffc9018a82fc40 RDI: 0000000000743058 [ 1061.088102][T23234] RBP: ffffc9018a82fc40 R08: 0000000000006f6c R09: ffffc9018a82fc67 [ 1061.096072][T23234] R10: fffff52031505f8c R11: 0000000000000000 R12: 0000000000000028 [ 1061.104043][T23234] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1061.112040][T23234] _copy_to_user+0x11e/0x160 [ 1061.116646][T23234] inet_gifconf+0x24f/0x4a0 [ 1061.121161][T23234] ? inet_validate_link_af+0x390/0x390 [ 1061.126633][T23234] ? mutex_lock_io_nested+0xf60/0xf60 [ 1061.132015][T23234] ? lock_downgrade+0x830/0x830 [ 1061.136881][T23234] ? inet_validate_link_af+0x390/0x390 [ 1061.142366][T23234] dev_ifconf+0xdb/0x230 [ 1061.146620][T23234] sock_do_ioctl+0x202/0x2d0 [ 1061.151212][T23234] ? compat_ifr_data_ioctl+0x150/0x150 [ 1061.157114][T23234] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1061.163010][T23234] ? do_vfs_ioctl+0x27d/0x1090 [ 1061.167782][T23234] ? generic_block_fiemap+0x60/0x60 [ 1061.172992][T23234] sock_ioctl+0x3b8/0x730 [ 1061.177329][T23234] ? dlci_ioctl_set+0x30/0x30 [ 1061.182016][T23234] ? __fget_files+0x294/0x400 [ 1061.186700][T23234] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1061.191643][T23234] ? dlci_ioctl_set+0x30/0x30 [ 1061.196325][T23234] __x64_sys_ioctl+0x193/0x200 [ 1061.201103][T23234] do_syscall_64+0x2d/0x70 [ 1061.205523][T23234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1061.211460][T23234] RIP: 0033:0x45d4d9 [ 1061.215355][T23234] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1061.235132][T23234] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.243547][T23234] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1061.251520][T23234] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000006 [ 1061.259494][T23234] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1061.267465][T23234] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1061.275437][T23234] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c [ 1063.295629][T23234] Mem-Info: [ 1063.298810][T23234] active_anon:6381 inactive_anon:307647 isolated_anon:0 [ 1063.298810][T23234] active_file:1036 inactive_file:2956 isolated_file:0 [ 1063.298810][T23234] unevictable:3 dirty:0 writeback:0 [ 1063.298810][T23234] slab_reclaimable:15540 slab_unreclaimable:107058 [ 1063.298810][T23234] mapped:56326 shmem:8637 pagetables:18709 bounce:0 [ 1063.298810][T23234] free:306736 free_pcp:284 free_cma:0 [ 1063.506526][T23234] Node 0 active_anon:13924kB inactive_anon:1208452kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213752kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1040384kB writeback_tmp:0kB kernel_stack:22976kB all_unreclaimable? yes [ 1063.677998][T23234] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1063.825654][T23234] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1063.831433][T23234] Node 0 DMA32 free:22876kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1208260kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:53084kB bounce:0kB free_pcp:1180kB local_pcp:680kB free_cma:0kB [ 1063.985593][T23234] lowmem_reserve[]: 0 0 0 0 0 [ 1063.990442][T23234] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1064.106293][T23234] lowmem_reserve[]: 0 0 0 0 0 [ 1064.111023][T23234] Node 0 DMA: 6*4kB (M) 4*8kB (UM) 13*16kB (UM) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10152kB [ 1064.195612][T23234] Node 0 DMA32: 2277*4kB (UMEH) 977*8kB (UMEH) 229*16kB (UMEH) 14*32kB (UMH) 6*64kB (UH) 4*128kB (H) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22956kB [ 1064.255633][T23234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1064.315641][T23234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1064.325202][T23234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1064.401667][T23234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1064.445676][T23234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1064.445685][T23234] 12637 total pagecache pages [ 1064.445693][T23234] 0 pages in swap cache [ 1064.445703][T23234] Swap cache stats: add 0, delete 0, find 0/0 [ 1064.445709][T23234] Free swap = 0kB [ 1064.445714][T23234] Total swap = 0kB [ 1064.445723][T23234] 1965979 pages RAM [ 1064.445729][T23234] 0 pages HighMem/MovableOnly [ 1064.445735][T23234] 349896 pages reserved [ 1064.445740][T23234] 0 pages cma reserved [ 1064.445752][T23234] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14913,uid=0 [ 1064.742441][T23234] Out of memory: Killed process 14913 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1064.831030][ T1172] oom_reaper: reaped process 23246 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 05:45:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:08 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:08 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:08 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1065.072953][T23258] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1065.179782][T23258] CPU: 1 PID: 23258 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1065.188491][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.198548][T23258] Call Trace: [ 1065.201849][T23258] dump_stack+0x18f/0x20d [ 1065.207316][T23258] dump_header+0x106/0x60f [ 1065.211745][T23258] oom_kill_process.cold+0x10/0x15 [ 1065.216866][T23258] out_of_memory+0x358/0x13f0 [ 1065.221587][T23258] ? oom_killer_disable+0x270/0x270 [ 1065.226798][T23258] ? mutex_trylock+0x246/0x2c0 [ 1065.231576][T23258] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1065.238262][T23258] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1065.244878][T23258] ? warn_alloc+0x120/0x120 [ 1065.249400][T23258] ? fs_reclaim_release+0x90/0xd0 [ 1065.254454][T23258] ? lock_is_held_type+0xbb/0xf0 [ 1065.259405][T23258] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1065.265485][T23258] __alloc_pages_nodemask+0x62c/0x790 [ 1065.270866][T23258] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1065.277633][T23258] ? fs_reclaim_acquire+0xa1/0xf0 [ 1065.282668][T23258] ? fs_reclaim_release+0x90/0xd0 [ 1065.287697][T23258] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1065.294120][T23258] alloc_pages_current+0x187/0x280 [ 1065.299240][T23258] __get_free_pages+0x8/0x40 [ 1065.303835][T23258] sg_kmalloc+0x52/0x70 [ 1065.307992][T23258] __sg_alloc_table+0x244/0x380 [ 1065.312850][T23258] sg_alloc_table+0x37/0x270 [ 1065.317442][T23258] ? sg_alloc_table_from_pages+0x50/0x50 [ 1065.323086][T23258] ion_system_heap_allocate+0x4a9/0xd10 [ 1065.328644][T23258] ? ion_system_heap_free+0x470/0x470 [ 1065.334019][T23258] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1065.339835][T23258] ion_ioctl+0x373/0xd20 [ 1065.344091][T23258] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1065.349298][T23258] ? _copy_to_user+0x126/0x160 [ 1065.354076][T23258] ? __fget_files+0x294/0x400 [ 1065.358763][T23258] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1065.363702][T23258] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1065.368911][T23258] __x64_sys_ioctl+0x193/0x200 [ 1065.373714][T23258] do_syscall_64+0x2d/0x70 [ 1065.378136][T23258] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1065.384037][T23258] RIP: 0033:0x45d4d9 [ 1065.387932][T23258] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1065.407535][T23258] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1065.415966][T23258] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 05:45:09 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1065.423937][T23258] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1065.431907][T23258] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1065.439879][T23258] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1065.447849][T23258] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 1066.969465][T23258] Mem-Info: [ 1066.985269][T23258] active_anon:6412 inactive_anon:307099 isolated_anon:0 [ 1066.985269][T23258] active_file:1036 inactive_file:2963 isolated_file:0 [ 1066.985269][T23258] unevictable:3 dirty:3 writeback:0 [ 1066.985269][T23258] slab_reclaimable:15540 slab_unreclaimable:107491 [ 1066.985269][T23258] mapped:56333 shmem:8666 pagetables:18655 bounce:0 [ 1066.985269][T23258] free:306071 free_pcp:507 free_cma:0 [ 1067.190095][T23258] Node 0 active_anon:13924kB inactive_anon:1206300kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213780kB dirty:4kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1038336kB writeback_tmp:0kB kernel_stack:22944kB all_unreclaimable? yes [ 1067.348009][T23258] Node 0 DMA free:10152kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.504868][T23258] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1067.541619][T23258] Node 0 DMA32 free:24128kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1206108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52972kB bounce:0kB free_pcp:2020kB local_pcp:1060kB free_cma:0kB [ 1067.713200][T23258] lowmem_reserve[]: 0 0 0 0 0 [ 1067.738283][T23258] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1067.888216][T23258] lowmem_reserve[]: 0 0 0 0 0 [ 1067.912649][T23258] Node 0 DMA: 6*4kB (M) 4*8kB (UM) 13*16kB (UM) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10152kB [ 1067.994384][T23258] Node 0 DMA32: 2290*4kB (UMEH) 896*8kB (UME) 209*16kB (UME) 15*32kB (UMH) 6*64kB (UH) 4*128kB (H) 4*256kB (UH) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 24120kB [ 1068.103464][T23258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1068.172561][T23258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.216784][T23258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1068.264582][T23258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.318076][T23258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1068.373299][T23258] 12673 total pagecache pages [ 1068.390110][T23258] 0 pages in swap cache [ 1068.410256][T23258] Swap cache stats: add 0, delete 0, find 0/0 [ 1068.437108][T23258] Free swap = 0kB [ 1068.455282][T23258] Total swap = 0kB [ 1068.473558][T23258] 1965979 pages RAM [ 1068.495648][T23258] 0 pages HighMem/MovableOnly [ 1068.521448][T23258] 349896 pages reserved [ 1068.537354][T23258] 0 pages cma reserved [ 1068.554993][T23258] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14282,uid=0 [ 1068.636542][T23258] Out of memory: Killed process 14282 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1068.733789][ T1172] oom_reaper: reaped process 23258 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 05:45:12 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:12 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:12 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1069.026689][T23287] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1069.139685][T23287] CPU: 1 PID: 23287 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1069.148400][T23287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.158457][T23287] Call Trace: [ 1069.161760][T23287] dump_stack+0x18f/0x20d [ 1069.166113][T23287] dump_header+0x106/0x60f [ 1069.170545][T23287] oom_kill_process.cold+0x10/0x15 [ 1069.175670][T23287] out_of_memory+0x358/0x13f0 [ 1069.180368][T23287] ? oom_killer_disable+0x270/0x270 [ 1069.186885][T23287] ? mutex_trylock+0x246/0x2c0 [ 1069.191658][T23287] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1069.198343][T23287] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1069.204963][T23287] ? warn_alloc+0x120/0x120 [ 1069.209483][T23287] ? fs_reclaim_release+0x90/0xd0 [ 1069.214622][T23287] ? lock_is_held_type+0xbb/0xf0 [ 1069.219569][T23287] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.225651][T23287] __alloc_pages_nodemask+0x62c/0x790 [ 1069.231034][T23287] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1069.237802][T23287] ? fs_reclaim_acquire+0xa1/0xf0 [ 1069.242845][T23287] ? fs_reclaim_release+0x90/0xd0 [ 1069.247880][T23287] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1069.254311][T23287] alloc_pages_current+0x187/0x280 [ 1069.259445][T23287] __get_free_pages+0x8/0x40 [ 1069.264044][T23287] sg_kmalloc+0x52/0x70 [ 1069.268212][T23287] __sg_alloc_table+0x244/0x380 [ 1069.273086][T23287] sg_alloc_table+0x37/0x270 [ 1069.277683][T23287] ? sg_alloc_table_from_pages+0x50/0x50 [ 1069.283350][T23287] ion_system_heap_allocate+0x4a9/0xd10 [ 1069.288939][T23287] ? ion_system_heap_free+0x470/0x470 [ 1069.294317][T23287] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1069.299874][T23287] ion_ioctl+0x373/0xd20 [ 1069.304129][T23287] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1069.309336][T23287] ? _copy_to_user+0x126/0x160 [ 1069.314116][T23287] ? __fget_files+0x294/0x400 [ 1069.318804][T23287] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1069.323772][T23287] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1069.328977][T23287] __x64_sys_ioctl+0x193/0x200 [ 1069.333763][T23287] do_syscall_64+0x2d/0x70 [ 1069.338189][T23287] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1069.344078][T23287] RIP: 0033:0x45d4d9 [ 1069.347975][T23287] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1069.367581][T23287] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.376024][T23287] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1069.384001][T23287] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1069.391973][T23287] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1069.399967][T23287] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1069.407946][T23287] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1070.961417][T23287] Mem-Info: [ 1070.982774][T23287] active_anon:6440 inactive_anon:306551 isolated_anon:0 [ 1070.982774][T23287] active_file:1036 inactive_file:5195 isolated_file:0 [ 1070.982774][T23287] unevictable:3 dirty:56 writeback:0 [ 1070.982774][T23287] slab_reclaimable:15539 slab_unreclaimable:108129 [ 1070.982774][T23287] mapped:57790 shmem:8693 pagetables:18627 bounce:0 [ 1070.982774][T23287] free:249536 free_pcp:547 free_cma:0 [ 1071.242955][T23287] Node 0 active_anon:13924kB inactive_anon:1204124kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213808kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1036288kB writeback_tmp:0kB kernel_stack:22912kB all_unreclaimable? yes [ 1071.442436][T23287] Node 0 DMA free:10140kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1071.628496][T23287] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1071.671409][T23287] Node 0 DMA32 free:24040kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1203932kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52860kB bounce:0kB free_pcp:2196kB local_pcp:1128kB free_cma:0kB [ 1071.883619][T23287] lowmem_reserve[]: 0 0 0 0 0 [ 1071.935659][T23287] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1072.114367][T23287] lowmem_reserve[]: 0 0 0 0 0 [ 1072.140755][T23287] Node 0 DMA: 11*4kB (UM) 4*8kB (UM) 9*16kB (UM) 2*32kB (M) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10140kB [ 1072.237291][T23287] Node 0 DMA32: 2290*4kB (UMEH) 894*8kB (UMEH) 206*16kB (UME) 3*32kB (MH) 5*64kB (H) 4*128kB (H) 4*256kB (UH) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 24120kB [ 1072.335652][T23287] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1072.387826][T23287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.438621][T23287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1072.499352][T23287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.555644][T23287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1072.605517][T23287] 15021 total pagecache pages [ 1072.635640][T23287] 0 pages in swap cache [ 1072.655667][T23287] Swap cache stats: add 0, delete 0, find 0/0 [ 1072.682078][T23287] Free swap = 0kB [ 1072.702336][T23287] Total swap = 0kB [ 1072.722547][T23287] 1965979 pages RAM [ 1072.755639][T23287] 0 pages HighMem/MovableOnly [ 1072.760637][T23287] 349896 pages reserved [ 1072.795257][T23287] 0 pages cma reserved [ 1072.805358][T23287] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14271,uid=0 [ 1072.881669][T23287] Out of memory: Killed process 14271 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1072.992152][ T1172] oom_reaper: reaped process 23287 (syz-executor.0), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 05:45:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:16 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:16 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:16 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:16 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:17 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1073.572204][T23319] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 05:45:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x7, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1073.705422][T23319] CPU: 1 PID: 23319 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1073.714163][T23319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.724216][T23319] Call Trace: [ 1073.727538][T23319] dump_stack+0x18f/0x20d [ 1073.731884][T23319] dump_header+0x106/0x60f [ 1073.736314][T23319] oom_kill_process.cold+0x10/0x15 [ 1073.741435][T23319] out_of_memory+0x358/0x13f0 [ 1073.746135][T23319] ? oom_killer_disable+0x270/0x270 [ 1073.751347][T23319] ? mutex_trylock+0x246/0x2c0 [ 1073.756126][T23319] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1073.762817][T23319] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1073.769436][T23319] ? warn_alloc+0x120/0x120 [ 1073.773955][T23319] ? fs_reclaim_release+0x90/0xd0 [ 1073.779000][T23319] ? lock_is_held_type+0xbb/0xf0 [ 1073.783954][T23319] __alloc_pages_nodemask+0x62c/0x790 [ 1073.789337][T23319] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1073.796116][T23319] ? mark_lock+0xbc/0x1710 [ 1073.800542][T23319] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1073.806964][T23319] alloc_pages_vma+0xdd/0x720 [ 1073.811651][T23319] wp_page_copy+0x1fd/0x17d0 [ 1073.816251][T23319] ? do_wp_page+0x699/0x1950 [ 1073.820849][T23319] ? print_bad_pte+0x640/0x640 [ 1073.825618][T23319] ? lock_downgrade+0x830/0x830 [ 1073.830474][T23319] ? vm_normal_page+0x148/0x380 [ 1073.835334][T23319] ? handle_mm_fault+0x2112/0x4590 [ 1073.840458][T23319] do_wp_page+0x6a1/0x1950 [ 1073.844884][T23319] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1073.850261][T23319] ? rwlock_bug.part.0+0x90/0x90 [ 1073.855211][T23319] handle_mm_fault+0x3216/0x4590 [ 1073.860159][T23319] ? apply_to_existing_page_range+0x40/0x40 [ 1073.866068][T23319] ? vmacache_update+0xce/0x140 [ 1073.870936][T23319] do_user_addr_fault+0x598/0xbf0 [ 1073.875968][T23319] ? trace_hardirqs_off+0x40/0x210 [ 1073.881097][T23319] exc_page_fault+0xa8/0x160 [ 1073.885691][T23319] asm_exc_page_fault+0x1e/0x30 [ 1073.890566][T23319] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1073.896898][T23319] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1073.917468][T23319] RSP: 0018:ffffc9018abafbb0 EFLAGS: 00010206 [ 1073.923539][T23319] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1073.932205][T23319] RDX: 0000000000000000 RSI: ffffc9018abafc40 RDI: 0000000000743058 [ 1073.940178][T23319] RBP: ffffc9018abafc40 R08: 0000000000006f6c R09: ffffc9018abafc67 [ 1073.948148][T23319] R10: fffff52031575f8c R11: 0000000000000000 R12: 0000000000000028 [ 1073.956120][T23319] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1073.964122][T23319] _copy_to_user+0x11e/0x160 [ 1073.968723][T23319] inet_gifconf+0x24f/0x4a0 [ 1073.973239][T23319] ? inet_validate_link_af+0x390/0x390 [ 1073.978709][T23319] ? mutex_lock_io_nested+0xf60/0xf60 [ 1073.984084][T23319] ? lock_downgrade+0x830/0x830 [ 1073.988971][T23319] ? inet_validate_link_af+0x390/0x390 [ 1073.994435][T23319] dev_ifconf+0xdb/0x230 [ 1073.998687][T23319] sock_do_ioctl+0x202/0x2d0 [ 1074.003280][T23319] ? compat_ifr_data_ioctl+0x150/0x150 [ 1074.008745][T23319] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1074.014643][T23319] ? do_vfs_ioctl+0x27d/0x1090 [ 1074.019418][T23319] ? generic_block_fiemap+0x60/0x60 [ 1074.024627][T23319] sock_ioctl+0x3b8/0x730 [ 1074.028971][T23319] ? dlci_ioctl_set+0x30/0x30 [ 1074.033656][T23319] ? __fget_files+0x294/0x400 [ 1074.038344][T23319] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1074.043283][T23319] ? dlci_ioctl_set+0x30/0x30 [ 1074.047975][T23319] __x64_sys_ioctl+0x193/0x200 [ 1074.052746][T23319] do_syscall_64+0x2d/0x70 [ 1074.057175][T23319] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1074.063066][T23319] RIP: 0033:0x45d4d9 [ 1074.066966][T23319] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1074.086837][T23319] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.095251][T23319] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1074.103223][T23319] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000006 [ 1074.111218][T23319] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1074.119189][T23319] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1074.127161][T23319] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1076.437270][T23319] Mem-Info: [ 1076.451313][T23319] active_anon:6464 inactive_anon:306038 isolated_anon:0 [ 1076.451313][T23319] active_file:1043 inactive_file:5277 isolated_file:0 [ 1076.451313][T23319] unevictable:3 dirty:96 writeback:0 [ 1076.451313][T23319] slab_reclaimable:15539 slab_unreclaimable:108032 [ 1076.451313][T23319] mapped:57865 shmem:8722 pagetables:18615 bounce:0 [ 1076.451313][T23319] free:209618 free_pcp:216 free_cma:0 [ 1076.687420][T23319] Node 0 active_anon:13924kB inactive_anon:1201836kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213856kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1034240kB writeback_tmp:0kB kernel_stack:22880kB all_unreclaimable? no [ 1076.876471][T23319] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.025700][T23319] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1077.031568][T23319] Node 0 DMA32 free:24056kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1201644kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52748kB bounce:0kB free_pcp:900kB local_pcp:464kB free_cma:0kB [ 1077.195644][T23319] lowmem_reserve[]: 0 0 0 0 0 [ 1077.200410][T23319] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1077.355600][T23319] lowmem_reserve[]: 0 0 0 0 0 [ 1077.360350][T23319] Node 0 DMA: 25*4kB (UM) 3*8kB (M) 7*16kB (M) 2*32kB (M) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10156kB [ 1077.475642][T23319] Node 0 DMA32: 2448*4kB (UMEH) 929*8kB (UMEH) 214*16kB (UMEH) 15*32kB (UM) 8*64kB (UH) 4*128kB (H) 5*256kB (UH) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 24968kB [ 1077.555624][T23319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1077.615638][T23319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.625217][T23319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1077.725613][T23319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1077.735185][T23319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1077.827307][T23319] 15063 total pagecache pages [ 1077.832016][T23319] 0 pages in swap cache [ 1077.885631][T23319] Swap cache stats: add 0, delete 0, find 0/0 [ 1077.891731][T23319] Free swap = 0kB [ 1077.895453][T23319] Total swap = 0kB [ 1077.945678][T23319] 1965979 pages RAM [ 1077.949525][T23319] 0 pages HighMem/MovableOnly [ 1077.954189][T23319] 349896 pages reserved [ 1078.015678][T23319] 0 pages cma reserved [ 1078.019792][T23319] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14259,uid=0 [ 1078.111788][T23319] Out of memory: Killed process 14259 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1078.208150][ T1172] oom_reaper: reaped process 23319 (syz-executor.0), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB 05:45:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x7, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:22 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:22 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1078.536788][T23344] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1078.689477][T23344] CPU: 0 PID: 23344 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1078.698196][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.709472][T23344] Call Trace: [ 1078.712775][T23344] dump_stack+0x18f/0x20d [ 1078.717121][T23344] dump_header+0x106/0x60f [ 1078.721550][T23344] oom_kill_process.cold+0x10/0x15 [ 1078.726675][T23344] out_of_memory+0x358/0x13f0 [ 1078.731367][T23344] ? oom_killer_disable+0x270/0x270 [ 1078.736578][T23344] ? mutex_trylock+0x246/0x2c0 [ 1078.741380][T23344] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1078.748079][T23344] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1078.754696][T23344] ? warn_alloc+0x120/0x120 [ 1078.759238][T23344] ? fs_reclaim_release+0x90/0xd0 [ 1078.764279][T23344] ? lock_is_held_type+0xbb/0xf0 [ 1078.769233][T23344] __alloc_pages_nodemask+0x62c/0x790 [ 1078.774616][T23344] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1078.781414][T23344] ? mark_lock+0xbc/0x1710 [ 1078.785837][T23344] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1078.792317][T23344] alloc_pages_vma+0xdd/0x720 [ 1078.797005][T23344] wp_page_copy+0x1fd/0x17d0 [ 1078.802037][T23344] ? do_wp_page+0x699/0x1950 [ 1078.806633][T23344] ? print_bad_pte+0x640/0x640 [ 1078.811954][T23344] ? lock_downgrade+0x830/0x830 [ 1078.816808][T23344] ? vm_normal_page+0x148/0x380 [ 1078.821679][T23344] ? handle_mm_fault+0x2112/0x4590 [ 1078.826799][T23344] do_wp_page+0x6a1/0x1950 [ 1078.831234][T23344] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1078.836607][T23344] ? rwlock_bug.part.0+0x90/0x90 [ 1078.841557][T23344] handle_mm_fault+0x3216/0x4590 [ 1078.846508][T23344] ? apply_to_existing_page_range+0x40/0x40 [ 1078.852416][T23344] ? vmacache_update+0xce/0x140 [ 1078.857279][T23344] do_user_addr_fault+0x598/0xbf0 [ 1078.862310][T23344] ? trace_hardirqs_off+0x40/0x210 [ 1078.867431][T23344] exc_page_fault+0xa8/0x160 [ 1078.872024][T23344] asm_exc_page_fault+0x1e/0x30 [ 1078.876910][T23344] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1078.883238][T23344] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1078.902863][T23344] RSP: 0018:ffffc9018ac0fbb0 EFLAGS: 00010206 [ 1078.908938][T23344] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1078.916910][T23344] RDX: 0000000000000000 RSI: ffffc9018ac0fc40 RDI: 0000000000743058 [ 1078.924886][T23344] RBP: ffffc9018ac0fc40 R08: 0000000000006f6c R09: ffffc9018ac0fc67 [ 1078.932860][T23344] R10: fffff52031581f8c R11: 0000000000000000 R12: 0000000000000028 [ 1078.940842][T23344] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1078.948839][T23344] _copy_to_user+0x11e/0x160 [ 1078.953463][T23344] inet_gifconf+0x24f/0x4a0 [ 1078.957975][T23344] ? inet_validate_link_af+0x390/0x390 [ 1078.963436][T23344] ? mutex_lock_io_nested+0xf60/0xf60 [ 1078.968816][T23344] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1078.974805][T23344] ? lockdep_hardirqs_on+0x76/0xf0 [ 1078.979925][T23344] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1078.986085][T23344] ? inet_validate_link_af+0x390/0x390 [ 1078.991547][T23344] dev_ifconf+0xdb/0x230 [ 1078.995798][T23344] sock_do_ioctl+0x202/0x2d0 [ 1079.000423][T23344] ? compat_ifr_data_ioctl+0x150/0x150 [ 1079.005912][T23344] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1079.011811][T23344] ? do_vfs_ioctl+0x27d/0x1090 [ 1079.016581][T23344] ? generic_block_fiemap+0x60/0x60 [ 1079.021787][T23344] sock_ioctl+0x3b8/0x730 [ 1079.026125][T23344] ? dlci_ioctl_set+0x30/0x30 [ 1079.030824][T23344] ? __fget_files+0x294/0x400 [ 1079.035512][T23344] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1079.040455][T23344] ? dlci_ioctl_set+0x30/0x30 [ 1079.045141][T23344] __x64_sys_ioctl+0x193/0x200 [ 1079.049914][T23344] do_syscall_64+0x2d/0x70 [ 1079.054333][T23344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1079.060231][T23344] RIP: 0033:0x45d4d9 [ 1079.064133][T23344] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1079.083737][T23344] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.092153][T23344] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1079.100129][T23344] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000006 [ 1079.108128][T23344] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1079.116101][T23344] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1079.124077][T23344] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c [ 1081.453249][T23344] Mem-Info: [ 1081.499115][T23344] active_anon:6501 inactive_anon:305501 isolated_anon:0 [ 1081.499115][T23344] active_file:1044 inactive_file:5285 isolated_file:0 [ 1081.499115][T23344] unevictable:3 dirty:105 writeback:0 [ 1081.499115][T23344] slab_reclaimable:15539 slab_unreclaimable:108149 [ 1081.499115][T23344] mapped:57874 shmem:8759 pagetables:18587 bounce:0 [ 1081.499115][T23344] free:188974 free_pcp:615 free_cma:0 [ 1081.705658][T23344] Node 0 active_anon:13924kB inactive_anon:1199660kB active_file:32kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213892kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1032192kB writeback_tmp:0kB kernel_stack:22848kB all_unreclaimable? no [ 1081.855597][T23344] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.005587][T23344] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1082.011794][T23344] Node 0 DMA32 free:24980kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1199468kB active_file:32kB inactive_file:24kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52636kB bounce:0kB free_pcp:2504kB local_pcp:1288kB free_cma:0kB [ 1082.206395][T23344] lowmem_reserve[]: 0 0 0 0 0 [ 1082.211321][T23344] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.355610][T23344] lowmem_reserve[]: 0 0 0 0 0 [ 1082.360333][T23344] Node 0 DMA: 25*4kB (UM) 3*8kB (M) 7*16kB (M) 2*32kB (M) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10156kB [ 1082.465611][T23344] Node 0 DMA32: 2448*4kB (UMEH) 915*8kB (UMEH) 211*16kB (UMEH) 5*32kB (UM) 8*64kB (UH) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 24616kB [ 1082.545616][T23344] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1082.608224][T23344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.665608][T23344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.674986][T23344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.765629][T23344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.774958][T23344] 15108 total pagecache pages [ 1082.825607][T23344] 0 pages in swap cache [ 1082.829796][T23344] Swap cache stats: add 0, delete 0, find 0/0 [ 1082.875630][T23344] Free swap = 0kB [ 1082.879366][T23344] Total swap = 0kB [ 1082.883077][T23344] 1965979 pages RAM [ 1082.945597][T23344] 0 pages HighMem/MovableOnly [ 1082.950299][T23344] 349896 pages reserved [ 1082.954460][T23344] 0 pages cma reserved [ 1083.015616][T23344] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14248,uid=0 [ 1083.095662][T23344] Out of memory: Killed process 14248 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1083.187584][ T1172] oom_reaper: reaped process 23344 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 05:45:29 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x7, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:29 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:45:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x5000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:29 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1085.490373][T23373] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1085.590128][T23373] CPU: 1 PID: 23373 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1085.598861][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.608941][T23373] Call Trace: [ 1085.612267][T23373] dump_stack+0x18f/0x20d [ 1085.616612][T23373] dump_header+0x106/0x60f [ 1085.621046][T23373] oom_kill_process.cold+0x10/0x15 [ 1085.626168][T23373] out_of_memory+0x358/0x13f0 [ 1085.630865][T23373] ? oom_killer_disable+0x270/0x270 [ 1085.636949][T23373] ? mutex_trylock+0x246/0x2c0 [ 1085.641725][T23373] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1085.648418][T23373] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1085.655038][T23373] ? warn_alloc+0x120/0x120 [ 1085.659648][T23373] ? fs_reclaim_release+0x90/0xd0 [ 1085.664696][T23373] ? lock_is_held_type+0xbb/0xf0 [ 1085.669640][T23373] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1085.675723][T23373] __alloc_pages_nodemask+0x62c/0x790 [ 1085.681106][T23373] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1085.687874][T23373] ? fs_reclaim_acquire+0xa1/0xf0 [ 1085.692909][T23373] ? fs_reclaim_release+0x90/0xd0 [ 1085.697939][T23373] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1085.704373][T23373] alloc_pages_current+0x187/0x280 [ 1085.709490][T23373] __get_free_pages+0x8/0x40 [ 1085.714085][T23373] sg_kmalloc+0x52/0x70 [ 1085.718273][T23373] __sg_alloc_table+0x244/0x380 [ 1085.723133][T23373] sg_alloc_table+0x37/0x270 [ 1085.727738][T23373] ? sg_alloc_table_from_pages+0x50/0x50 [ 1085.733387][T23373] ion_system_heap_allocate+0x4a9/0xd10 [ 1085.738948][T23373] ? ion_system_heap_free+0x470/0x470 [ 1085.744328][T23373] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1085.749888][T23373] ion_ioctl+0x373/0xd20 [ 1085.754143][T23373] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1085.759350][T23373] ? _copy_to_user+0x126/0x160 [ 1085.764140][T23373] ? __fget_files+0x294/0x400 [ 1085.768848][T23373] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1085.773789][T23373] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1085.780044][T23373] __x64_sys_ioctl+0x193/0x200 [ 1085.784821][T23373] do_syscall_64+0x2d/0x70 [ 1085.789238][T23373] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1085.795130][T23373] RIP: 0033:0x45d4d9 [ 1085.799026][T23373] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1085.818636][T23373] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1085.827077][T23373] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1085.835070][T23373] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1085.843060][T23373] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1085.851028][T23373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1085.858999][T23373] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1087.248032][T23373] Mem-Info: [ 1087.264126][T23373] active_anon:6556 inactive_anon:304943 isolated_anon:0 [ 1087.264126][T23373] active_file:1043 inactive_file:5294 isolated_file:0 [ 1087.264126][T23373] unevictable:3 dirty:0 writeback:0 [ 1087.264126][T23373] slab_reclaimable:15539 slab_unreclaimable:107721 [ 1087.264126][T23373] mapped:57882 shmem:8807 pagetables:18570 bounce:0 [ 1087.264126][T23373] free:182008 free_pcp:512 free_cma:0 [ 1087.467503][T23373] Node 0 active_anon:13924kB inactive_anon:1197484kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213924kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1030144kB writeback_tmp:0kB kernel_stack:22816kB all_unreclaimable? no [ 1087.627493][T23373] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1087.781739][T23373] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1087.813552][T23373] Node 0 DMA32 free:24040kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1197292kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52524kB bounce:0kB free_pcp:2216kB local_pcp:720kB free_cma:0kB [ 1087.980206][T23373] lowmem_reserve[]: 0 0 0 0 0 [ 1088.011081][T23373] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1088.174081][T23373] lowmem_reserve[]: 0 0 0 0 0 [ 1088.201231][T23373] Node 0 DMA: 28*4kB (UM) 3*8kB (M) 7*16kB (M) 2*32kB (M) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10168kB [ 1088.283279][T23373] Node 0 DMA32: 2671*4kB (UMEH) 925*8kB (MEH) 211*16kB (UMEH) 6*32kB (M) 6*64kB (UH) 4*128kB (H) 4*256kB (UH) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24084kB [ 1088.445650][T23373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1088.556157][T23373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1088.585596][T23373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1088.594888][T23373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1088.646173][T23373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1088.694221][T23373] 15162 total pagecache pages [ 1088.705677][T23373] 0 pages in swap cache [ 1088.709836][T23373] Swap cache stats: add 0, delete 0, find 0/0 [ 1088.775607][T23373] Free swap = 0kB [ 1088.779352][T23373] Total swap = 0kB [ 1088.783068][T23373] 1965979 pages RAM [ 1088.831613][T23373] 0 pages HighMem/MovableOnly [ 1088.846619][T23373] 349896 pages reserved [ 1088.850778][T23373] 0 pages cma reserved [ 1088.854843][T23373] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14235,uid=0 [ 1088.962832][T23373] Out of memory: Killed process 14235 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:45:32 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1089.053689][ T1172] oom_reaper: reaped process 23373 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 05:45:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x7000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:32 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x7000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:32 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:45:32 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1089.379692][T23393] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 05:45:33 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1089.525067][T23393] CPU: 1 PID: 23393 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1089.533796][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.543850][T23393] Call Trace: [ 1089.547184][T23393] dump_stack+0x18f/0x20d [ 1089.551526][T23393] dump_header+0x106/0x60f [ 1089.555957][T23393] oom_kill_process.cold+0x10/0x15 [ 1089.561077][T23393] out_of_memory+0x358/0x13f0 [ 1089.565767][T23393] ? oom_killer_disable+0x270/0x270 [ 1089.571154][T23393] ? mutex_trylock+0x246/0x2c0 [ 1089.576012][T23393] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1089.582698][T23393] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1089.589409][T23393] ? warn_alloc+0x120/0x120 [ 1089.593925][T23393] ? fs_reclaim_release+0x90/0xd0 [ 1089.598968][T23393] ? lock_is_held_type+0xbb/0xf0 [ 1089.603920][T23393] __alloc_pages_nodemask+0x62c/0x790 [ 1089.609331][T23393] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1089.616107][T23393] ? mark_lock+0xbc/0x1710 [ 1089.620532][T23393] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1089.626956][T23393] alloc_pages_vma+0xdd/0x720 [ 1089.631645][T23393] wp_page_copy+0x1fd/0x17d0 [ 1089.636245][T23393] ? do_wp_page+0x699/0x1950 [ 1089.640844][T23393] ? print_bad_pte+0x640/0x640 [ 1089.645623][T23393] ? lock_downgrade+0x830/0x830 [ 1089.650478][T23393] ? vm_normal_page+0x148/0x380 [ 1089.655360][T23393] ? handle_mm_fault+0x2112/0x4590 [ 1089.660511][T23393] do_wp_page+0x6a1/0x1950 [ 1089.664938][T23393] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1089.670338][T23393] ? rwlock_bug.part.0+0x90/0x90 [ 1089.675289][T23393] handle_mm_fault+0x3216/0x4590 [ 1089.680241][T23393] ? apply_to_existing_page_range+0x40/0x40 [ 1089.686147][T23393] ? vmacache_update+0xce/0x140 [ 1089.691004][T23393] do_user_addr_fault+0x598/0xbf0 [ 1089.696033][T23393] ? trace_hardirqs_off+0x40/0x210 [ 1089.701155][T23393] exc_page_fault+0xa8/0x160 [ 1089.706444][T23393] asm_exc_page_fault+0x1e/0x30 [ 1089.711652][T23393] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1089.717980][T23393] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1089.737584][T23393] RSP: 0018:ffffc901fe6bfbb0 EFLAGS: 00010206 [ 1089.743654][T23393] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1089.751652][T23393] RDX: 0000000000000000 RSI: ffffc901fe6bfc40 RDI: 0000000000743058 [ 1089.759624][T23393] RBP: ffffc901fe6bfc40 R08: 0000000000006f6c R09: ffffc901fe6bfc67 [ 1089.767598][T23393] R10: fffff5203fcd7f8c R11: 0000000000000000 R12: 0000000000000028 [ 1089.775570][T23393] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1089.783569][T23393] _copy_to_user+0x11e/0x160 [ 1089.788169][T23393] inet_gifconf+0x24f/0x4a0 [ 1089.792681][T23393] ? inet_validate_link_af+0x390/0x390 [ 1089.798146][T23393] ? mutex_lock_io_nested+0xf60/0xf60 [ 1089.803549][T23393] ? lock_downgrade+0x830/0x830 [ 1089.808413][T23393] ? inet_validate_link_af+0x390/0x390 [ 1089.813885][T23393] dev_ifconf+0xdb/0x230 [ 1089.818140][T23393] sock_do_ioctl+0x202/0x2d0 [ 1089.822738][T23393] ? compat_ifr_data_ioctl+0x150/0x150 [ 1089.828201][T23393] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1089.834121][T23393] ? do_vfs_ioctl+0x27d/0x1090 [ 1089.838895][T23393] ? generic_block_fiemap+0x60/0x60 [ 1089.844104][T23393] sock_ioctl+0x3b8/0x730 [ 1089.848439][T23393] ? dlci_ioctl_set+0x30/0x30 [ 1089.853122][T23393] ? __fget_files+0x294/0x400 [ 1089.857845][T23393] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1089.862811][T23393] ? dlci_ioctl_set+0x30/0x30 [ 1089.867495][T23393] __x64_sys_ioctl+0x193/0x200 [ 1089.872288][T23393] do_syscall_64+0x2d/0x70 [ 1089.876710][T23393] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1089.882599][T23393] RIP: 0033:0x45d4d9 [ 1089.886495][T23393] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1089.906098][T23393] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.914943][T23393] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1089.922930][T23393] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000006 [ 1089.930913][T23393] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1089.938890][T23393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1089.946868][T23393] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c [ 1092.008519][T23393] Mem-Info: [ 1092.025973][T23393] active_anon:6589 inactive_anon:304403 isolated_anon:0 [ 1092.025973][T23393] active_file:1043 inactive_file:5303 isolated_file:0 [ 1092.025973][T23393] unevictable:3 dirty:0 writeback:0 [ 1092.025973][T23393] slab_reclaimable:15539 slab_unreclaimable:108224 [ 1092.025973][T23393] mapped:57894 shmem:8843 pagetables:18568 bounce:0 [ 1092.025973][T23393] free:189735 free_pcp:559 free_cma:0 [ 1092.252255][T23393] Node 0 active_anon:13924kB inactive_anon:1195296kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213972kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1028096kB writeback_tmp:0kB kernel_stack:22784kB all_unreclaimable? no [ 1092.415638][T23393] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.535604][T23393] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1092.541398][T23393] Node 0 DMA32 free:24044kB min:44108kB low:53084kB high:62060kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1195104kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52412kB bounce:0kB free_pcp:2272kB local_pcp:1412kB free_cma:0kB [ 1092.705650][T23393] lowmem_reserve[]: 0 0 0 0 0 [ 1092.710380][T23393] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.852508][T23393] lowmem_reserve[]: 0 0 0 0 0 [ 1092.865688][T23393] Node 0 DMA: 28*4kB (UM) 3*8kB (M) 7*16kB (M) 2*32kB (M) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10168kB [ 1092.945667][T23393] Node 0 DMA32: 2779*4kB (UMEH) 939*8kB (UMEH) 213*16kB (UMEH) 7*32kB (UM) 5*64kB (H) 4*128kB (H) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24116kB [ 1093.031828][T23393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1093.075612][T23393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.085164][T23393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1093.165655][T23393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1093.175223][T23393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1093.251656][T23393] 15196 total pagecache pages [ 1093.257386][T23393] 0 pages in swap cache [ 1093.261544][T23393] Swap cache stats: add 0, delete 0, find 0/0 [ 1093.305643][T23393] Free swap = 0kB [ 1093.309378][T23393] Total swap = 0kB [ 1093.313091][T23393] 1965979 pages RAM [ 1093.355612][T23393] 0 pages HighMem/MovableOnly [ 1093.360299][T23393] 349896 pages reserved [ 1093.364442][T23393] 0 pages cma reserved [ 1093.406401][T23393] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14225,uid=0 [ 1093.475718][T23393] Out of memory: Killed process 14225 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1093.567558][ T1172] oom_reaper: reaped process 23393 (syz-executor.5), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB 05:45:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:37 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:37 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:37 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:45:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1093.838349][T23423] warn_alloc: 1 callbacks suppressed [ 1093.838382][T23423] syz-executor.5: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 05:45:37 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1093.942500][T23420] syz-executor.0 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1094.022539][T23423] CPU: 1 PID: 23423 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1094.031225][T23423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.041278][T23423] Call Trace: [ 1094.044578][T23423] dump_stack+0x18f/0x20d [ 1094.048921][T23423] warn_alloc.cold+0x87/0x17a [ 1094.053630][T23423] ? zone_watermark_ok_safe+0x260/0x260 [ 1094.059209][T23423] ? __alloc_pages_direct_compact+0x366/0x420 [ 1094.065287][T23423] ? get_page_from_freelist+0x37f0/0x37f0 [ 1094.071032][T23423] ? psi_task_change+0x142/0x220 [ 1094.075984][T23423] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1094.081199][T23423] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1094.087809][T23423] ? lock_acquire+0x1f1/0xad0 [ 1094.092499][T23423] ? fs_reclaim_acquire+0xa1/0xf0 [ 1094.099707][T23423] ? warn_alloc+0x120/0x120 [ 1094.104233][T23423] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1094.109527][T23423] ? lock_is_held_type+0xbb/0xf0 [ 1094.114472][T23423] ? ion_page_pool_alloc+0xba/0x270 [ 1094.119687][T23423] __alloc_pages_nodemask+0x62c/0x790 [ 1094.125065][T23423] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1094.131841][T23423] ? wait_for_completion+0x260/0x260 [ 1094.137138][T23423] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1094.143611][T23423] alloc_pages_current+0x187/0x280 [ 1094.148745][T23423] ion_page_pool_alloc+0x17d/0x270 [ 1094.153861][T23423] ion_system_heap_allocate+0x246/0xd10 [ 1094.159426][T23423] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1094.164986][T23423] ? ion_system_heap_free+0x470/0x470 [ 1094.170366][T23423] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1094.175917][T23423] ion_ioctl+0x373/0xd20 [ 1094.180173][T23423] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1094.185376][T23423] ? _copy_to_user+0x126/0x160 [ 1094.190154][T23423] ? __fget_files+0x294/0x400 [ 1094.194875][T23423] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1094.199831][T23423] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1094.205044][T23423] __x64_sys_ioctl+0x193/0x200 [ 1094.209834][T23423] do_syscall_64+0x2d/0x70 [ 1094.214268][T23423] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1094.220158][T23423] RIP: 0033:0x45d4d9 [ 1094.224051][T23423] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1094.243833][T23423] RSP: 002b:00007f9c230cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.252247][T23423] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1094.260219][T23423] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1094.268193][T23423] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 1094.276169][T23423] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 1094.284151][T23423] R13: 000000000169fb6f R14: 00007f9c230ce9c0 R15: 000000000118cfec [ 1094.374413][T23420] CPU: 0 PID: 23420 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1094.383119][T23420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.393178][T23420] Call Trace: [ 1094.396477][T23420] dump_stack+0x18f/0x20d [ 1094.400814][T23420] dump_header+0x106/0x60f [ 1094.405236][T23420] oom_kill_process.cold+0x10/0x15 [ 1094.410446][T23420] out_of_memory+0x358/0x13f0 [ 1094.415134][T23420] ? oom_killer_disable+0x270/0x270 [ 1094.420345][T23420] ? mutex_trylock+0x246/0x2c0 [ 1094.425119][T23420] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1094.431814][T23420] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1094.438423][T23420] ? warn_alloc+0x120/0x120 [ 1094.442929][T23420] ? fs_reclaim_release+0x90/0xd0 [ 1094.447965][T23420] ? lock_is_held_type+0xbb/0xf0 [ 1094.452913][T23420] ? ion_page_pool_alloc+0xba/0x270 [ 1094.458117][T23420] __alloc_pages_nodemask+0x62c/0x790 [ 1094.463492][T23420] ? lockdep_hardirqs_on+0x76/0xf0 [ 1094.468627][T23420] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1094.475414][T23420] ? ion_page_pool_remove+0x10e/0x3a0 [ 1094.480807][T23420] ? wait_for_completion+0x260/0x260 [ 1094.486092][T23420] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1094.492509][T23420] alloc_pages_current+0x187/0x280 [ 1094.497625][T23420] ion_page_pool_alloc+0x17d/0x270 [ 1094.502739][T23420] ion_system_heap_allocate+0x246/0xd10 [ 1094.508295][T23420] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1094.513858][T23420] ? ion_system_heap_free+0x470/0x470 [ 1094.519254][T23420] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1094.524824][T23420] ion_ioctl+0x373/0xd20 [ 1094.529084][T23420] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1094.534303][T23420] ? _copy_to_user+0x126/0x160 [ 1094.539082][T23420] ? __fget_files+0x294/0x400 [ 1094.543767][T23420] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1094.548708][T23420] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1094.553910][T23420] __x64_sys_ioctl+0x193/0x200 [ 1094.558677][T23420] do_syscall_64+0x2d/0x70 [ 1094.563092][T23420] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1094.568982][T23420] RIP: 0033:0x45d4d9 [ 1094.572882][T23420] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1094.592486][T23420] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.600898][T23420] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1094.608869][T23420] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1094.616839][T23420] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1094.624813][T23420] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1094.632790][T23420] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c 05:45:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xa000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xa000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x4000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1096.343599][T23423] Mem-Info: [ 1096.389197][T23423] active_anon:6616 inactive_anon:303819 isolated_anon:0 [ 1096.389197][T23423] active_file:1045 inactive_file:5310 isolated_file:0 [ 1096.389197][T23423] unevictable:3 dirty:85 writeback:0 [ 1096.389197][T23423] slab_reclaimable:15539 slab_unreclaimable:108559 [ 1096.389197][T23423] mapped:57906 shmem:8870 pagetables:18477 bounce:0 [ 1096.389197][T23423] free:131183 free_pcp:365 free_cma:0 [ 1096.586809][T23420] Mem-Info: [ 1096.599208][T23420] active_anon:6622 inactive_anon:303848 isolated_anon:0 [ 1096.599208][T23420] active_file:1045 inactive_file:5310 isolated_file:0 [ 1096.599208][T23420] unevictable:3 dirty:86 writeback:0 [ 1096.599208][T23420] slab_reclaimable:15539 slab_unreclaimable:108393 [ 1096.599208][T23420] mapped:57906 shmem:8875 pagetables:18514 bounce:0 [ 1096.599208][T23420] free:130552 free_pcp:310 free_cma:0 [ 1096.774675][T23423] Node 0 active_anon:13924kB inactive_anon:1193120kB active_file:32kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214020kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1026048kB writeback_tmp:0kB kernel_stack:22752kB all_unreclaimable? no [ 1096.944753][T23420] Node 0 active_anon:13924kB inactive_anon:1193120kB active_file:32kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214020kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1026048kB writeback_tmp:0kB kernel_stack:22752kB all_unreclaimable? no [ 1096.998273][T23423] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.113574][T23420] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.184383][T23423] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1097.215704][T23423] Node 0 DMA32 free:21808kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1192928kB active_file:32kB inactive_file:24kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52300kB bounce:0kB free_pcp:1084kB local_pcp:372kB free_cma:0kB [ 1097.315654][T23420] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1097.321486][T23420] Node 0 DMA32 free:21808kB min:48204kB low:57180kB high:66156kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1192928kB active_file:32kB inactive_file:24kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52300kB bounce:0kB free_pcp:1088kB local_pcp:716kB free_cma:0kB [ 1097.416460][T23423] lowmem_reserve[]: 0 0 0 0 0 [ 1097.421181][T23423] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.505607][T23420] lowmem_reserve[]: 0 0 0 0 0 [ 1097.510326][T23420] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.616247][T23423] lowmem_reserve[]: 0 0 0 0 0 [ 1097.620963][T23423] Node 0 DMA: 34*4kB (UM) 4*8kB (UM) 7*16kB (M) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10168kB [ 1097.665600][T23420] lowmem_reserve[]: 0 0 0 0 0 [ 1097.670384][T23420] Node 0 DMA: 34*4kB (UM) 4*8kB (UM) 7*16kB (M) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10168kB [ 1097.735594][T23423] Node 0 DMA32: 2370*4kB (UMEH) 930*8kB (UME) 219*16kB (UMEH) 14*32kB (UM) 11*64kB (UH) 5*128kB (UH) 5*256kB (UH) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24008kB [ 1097.765608][T23420] Node 0 DMA32: 2370*4kB (UMEH) 930*8kB (UME) 219*16kB (UMEH) 14*32kB (UM) 11*64kB (UH) 5*128kB (UH) 5*256kB (UH) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24008kB [ 1097.835601][T23423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1097.848292][T23420] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1097.885628][T23423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1097.895188][T23423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1097.945622][T23420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1097.955188][T23420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1097.995604][T23423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.005181][T23423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.061535][T23420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.105659][T23423] 15241 total pagecache pages [ 1098.110365][T23423] 0 pages in swap cache [ 1098.114508][T23423] Swap cache stats: add 0, delete 0, find 0/0 [ 1098.126518][T23420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1098.176473][T23423] Free swap = 0kB [ 1098.180222][T23423] Total swap = 0kB [ 1098.183936][T23423] 1965979 pages RAM [ 1098.185595][T23420] 15241 total pagecache pages [ 1098.192422][T23420] 0 pages in swap cache [ 1098.245659][T23423] 0 pages HighMem/MovableOnly [ 1098.250347][T23423] 349896 pages reserved [ 1098.254507][T23423] 0 pages cma reserved [ 1098.260555][T23420] Swap cache stats: add 0, delete 0, find 0/0 [ 1098.295662][T23420] Free swap = 0kB [ 1098.299387][T23420] Total swap = 0kB [ 1098.303099][T23420] 1965979 pages RAM [ 1098.345610][T23420] 0 pages HighMem/MovableOnly [ 1098.350307][T23420] 349896 pages reserved [ 1098.354454][T23420] 0 pages cma reserved [ 1098.396140][T23420] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14213,uid=0 [ 1098.465666][T23420] Out of memory: Killed process 14213 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1098.587639][ T1172] oom_reaper: reaped process 23420 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1098.656516][ T1172] oom_reaper: reaped process 23423 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 05:45:44 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:44 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x54000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1100.539309][T23463] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1100.621972][T23463] CPU: 1 PID: 23463 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1100.630685][T23463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.640742][T23463] Call Trace: [ 1100.644042][T23463] dump_stack+0x18f/0x20d [ 1100.648384][T23463] dump_header+0x106/0x60f [ 1100.652812][T23463] oom_kill_process.cold+0x10/0x15 [ 1100.657934][T23463] out_of_memory+0x358/0x13f0 [ 1100.662628][T23463] ? oom_killer_disable+0x270/0x270 [ 1100.667840][T23463] ? mutex_trylock+0x246/0x2c0 [ 1100.672702][T23463] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1100.679388][T23463] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1100.686009][T23463] ? warn_alloc+0x120/0x120 [ 1100.690525][T23463] ? fs_reclaim_release+0x90/0xd0 [ 1100.695568][T23463] ? lock_is_held_type+0xbb/0xf0 [ 1100.700525][T23463] __alloc_pages_nodemask+0x62c/0x790 [ 1100.705914][T23463] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1100.712685][T23463] ? mark_lock+0xbc/0x1710 [ 1100.717111][T23463] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1100.723530][T23463] alloc_pages_vma+0xdd/0x720 [ 1100.728215][T23463] wp_page_copy+0x1fd/0x17d0 [ 1100.732812][T23463] ? do_wp_page+0x699/0x1950 [ 1100.737404][T23463] ? print_bad_pte+0x640/0x640 [ 1100.742171][T23463] ? lock_downgrade+0x830/0x830 [ 1100.747026][T23463] ? vm_normal_page+0x148/0x380 [ 1100.751893][T23463] ? handle_mm_fault+0x2112/0x4590 [ 1100.757009][T23463] do_wp_page+0x6a1/0x1950 [ 1100.761442][T23463] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 1100.766818][T23463] ? rwlock_bug.part.0+0x90/0x90 [ 1100.771769][T23463] handle_mm_fault+0x3216/0x4590 [ 1100.776719][T23463] ? apply_to_existing_page_range+0x40/0x40 [ 1100.782624][T23463] ? vmacache_update+0xce/0x140 [ 1100.787487][T23463] do_user_addr_fault+0x598/0xbf0 [ 1100.792519][T23463] ? trace_hardirqs_off+0x40/0x210 [ 1100.797639][T23463] exc_page_fault+0xa8/0x160 [ 1100.802234][T23463] asm_exc_page_fault+0x1e/0x30 [ 1100.807091][T23463] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1100.813420][T23463] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1100.833026][T23463] RSP: 0018:ffffc90207697bb0 EFLAGS: 00010206 [ 1100.839095][T23463] RAX: 0000000000000001 RBX: 0000000000743058 RCX: 0000000000000005 [ 1100.847068][T23463] RDX: 0000000000000000 RSI: ffffc90207697c40 RDI: 0000000000743058 [ 1100.855049][T23463] RBP: ffffc90207697c40 R08: 0000000000006f6c R09: ffffc90207697c67 [ 1100.863018][T23463] R10: fffff52040ed2f8c R11: 0000000000000000 R12: 0000000000000028 [ 1100.870992][T23463] R13: 0000000000743080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1100.878987][T23463] _copy_to_user+0x11e/0x160 [ 1100.883588][T23463] inet_gifconf+0x24f/0x4a0 [ 1100.888100][T23463] ? inet_validate_link_af+0x390/0x390 [ 1100.893564][T23463] ? mutex_lock_io_nested+0xf60/0xf60 [ 1100.898936][T23463] ? lock_downgrade+0x830/0x830 [ 1100.903793][T23463] ? inet_validate_link_af+0x390/0x390 [ 1100.909254][T23463] dev_ifconf+0xdb/0x230 [ 1100.913507][T23463] sock_do_ioctl+0x202/0x2d0 [ 1100.918103][T23463] ? compat_ifr_data_ioctl+0x150/0x150 [ 1100.923577][T23463] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1100.929471][T23463] ? do_vfs_ioctl+0x27d/0x1090 [ 1100.934236][T23463] ? generic_block_fiemap+0x60/0x60 [ 1100.939441][T23463] sock_ioctl+0x3b8/0x730 [ 1100.943778][T23463] ? dlci_ioctl_set+0x30/0x30 [ 1100.948466][T23463] ? __fget_files+0x294/0x400 [ 1100.953154][T23463] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1100.958092][T23463] ? dlci_ioctl_set+0x30/0x30 [ 1100.962774][T23463] __x64_sys_ioctl+0x193/0x200 [ 1100.967549][T23463] do_syscall_64+0x2d/0x70 [ 1100.971970][T23463] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1100.977859][T23463] RIP: 0033:0x45d4d9 [ 1100.981761][T23463] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1101.001366][T23463] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.009779][T23463] RAX: ffffffffffffffda RBX: 0000000000011f00 RCX: 000000000045d4d9 [ 1101.017745][T23463] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000006 [ 1101.025742][T23463] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1101.033717][T23463] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1101.041725][T23463] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c 05:45:46 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:45:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3f000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1103.445612][T23463] Mem-Info: [ 1103.448795][T23463] active_anon:6661 inactive_anon:303310 isolated_anon:0 [ 1103.448795][T23463] active_file:1045 inactive_file:5322 isolated_file:0 [ 1103.448795][T23463] unevictable:3 dirty:10 writeback:0 [ 1103.448795][T23463] slab_reclaimable:15539 slab_unreclaimable:107866 [ 1103.448795][T23463] mapped:57895 shmem:8916 pagetables:18485 bounce:0 [ 1103.448795][T23463] free:90053 free_pcp:300 free_cma:0 [ 1103.706491][T23463] Node 0 active_anon:13924kB inactive_anon:1190944kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214068kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1024000kB writeback_tmp:0kB kernel_stack:22720kB all_unreclaimable? yes [ 1103.891581][T23463] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1104.075649][T23463] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1104.081473][T23463] Node 0 DMA32 free:22580kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1190752kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52188kB bounce:0kB free_pcp:1760kB local_pcp:616kB free_cma:0kB [ 1104.235597][T23463] lowmem_reserve[]: 0 0 0 0 0 [ 1104.240517][T23463] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1104.400396][T23463] lowmem_reserve[]: 0 0 0 0 0 [ 1104.432870][T23463] Node 0 DMA: 9*4kB (UM) 15*8kB (UM) 8*16kB (UM) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10172kB [ 1104.515534][T23463] Node 0 DMA32: 2382*4kB (UMEH) 912*8kB (UMEH) 205*16kB (UME) 16*32kB (U) 12*64kB (UH) 6*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22920kB [ 1104.609696][T23463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1104.685681][T23463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1104.695255][T23463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1104.809490][T23463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1104.859253][T23463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1104.915395][T23463] 15300 total pagecache pages [ 1104.942267][T23463] 0 pages in swap cache [ 1104.966601][T23463] Swap cache stats: add 0, delete 0, find 0/0 [ 1105.026061][T23463] Free swap = 0kB [ 1105.029811][T23463] Total swap = 0kB [ 1105.033527][T23463] 1965979 pages RAM [ 1105.081962][T23463] 0 pages HighMem/MovableOnly [ 1105.095649][T23463] 349896 pages reserved [ 1105.099844][T23463] 0 pages cma reserved [ 1105.103916][T23463] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14200,uid=0 [ 1105.223134][T23463] Out of memory: Killed process 14200 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1105.307201][ T1172] oom_reaper: reaped process 23463 (syz-executor.2), now anon-rss:0kB, file-rss:34792kB, shmem-rss:0kB 05:45:50 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:50 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:45:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x68000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:50 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x40000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:50 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1107.325838][T23491] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1107.421782][T23491] CPU: 1 PID: 23491 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1107.430481][T23491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.440533][T23491] Call Trace: [ 1107.443833][T23491] dump_stack+0x18f/0x20d [ 1107.448170][T23491] dump_header+0x106/0x60f [ 1107.452602][T23491] oom_kill_process.cold+0x10/0x15 [ 1107.457735][T23491] out_of_memory+0x358/0x13f0 [ 1107.462429][T23491] ? oom_killer_disable+0x270/0x270 [ 1107.467639][T23491] ? mutex_trylock+0x246/0x2c0 [ 1107.472496][T23491] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1107.479180][T23491] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1107.485819][T23491] ? warn_alloc+0x120/0x120 [ 1107.490332][T23491] ? fs_reclaim_release+0x90/0xd0 [ 1107.495371][T23491] ? lock_is_held_type+0xbb/0xf0 [ 1107.500315][T23491] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.506392][T23491] __alloc_pages_nodemask+0x62c/0x790 [ 1107.511774][T23491] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1107.518537][T23491] ? fs_reclaim_acquire+0xa1/0xf0 [ 1107.523569][T23491] ? fs_reclaim_release+0x90/0xd0 [ 1107.528597][T23491] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1107.535028][T23491] alloc_pages_current+0x187/0x280 [ 1107.540144][T23491] __get_free_pages+0x8/0x40 [ 1107.544735][T23491] sg_kmalloc+0x52/0x70 [ 1107.548894][T23491] __sg_alloc_table+0x244/0x380 [ 1107.553752][T23491] sg_alloc_table+0x37/0x270 [ 1107.558368][T23491] ? sg_alloc_table_from_pages+0x50/0x50 [ 1107.564005][T23491] ion_system_heap_allocate+0x4a9/0xd10 [ 1107.569560][T23491] ? ion_system_heap_free+0x470/0x470 [ 1107.574933][T23491] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1107.580483][T23491] ion_ioctl+0x373/0xd20 [ 1107.584760][T23491] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1107.589961][T23491] ? _copy_to_user+0x126/0x160 [ 1107.594736][T23491] ? __fget_files+0x294/0x400 [ 1107.599421][T23491] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1107.604368][T23491] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1107.609570][T23491] __x64_sys_ioctl+0x193/0x200 [ 1107.614346][T23491] do_syscall_64+0x2d/0x70 [ 1107.618762][T23491] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.624649][T23491] RIP: 0033:0x45d4d9 [ 1107.628546][T23491] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1107.648148][T23491] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.656556][T23491] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1107.664528][T23491] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1107.672523][T23491] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1107.680494][T23491] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1107.688462][T23491] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1109.078141][T23491] Mem-Info: [ 1109.095769][T23491] active_anon:6710 inactive_anon:302775 isolated_anon:0 [ 1109.095769][T23491] active_file:1061 inactive_file:5318 isolated_file:0 [ 1109.095769][T23491] unevictable:3 dirty:0 writeback:0 [ 1109.095769][T23491] slab_reclaimable:15538 slab_unreclaimable:108244 [ 1109.095769][T23491] mapped:57933 shmem:8960 pagetables:18485 bounce:0 [ 1109.095769][T23491] free:76648 free_pcp:575 free_cma:0 [ 1109.312757][T23491] Node 0 active_anon:13924kB inactive_anon:1188768kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214100kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1021952kB writeback_tmp:0kB kernel_stack:22688kB all_unreclaimable? yes [ 1109.483936][T23491] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1109.652151][T23491] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1109.685370][T23491] Node 0 DMA32 free:23020kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1188576kB active_file:40kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52076kB bounce:0kB free_pcp:2328kB local_pcp:1232kB free_cma:0kB [ 1109.888129][T23491] lowmem_reserve[]: 0 0 0 0 0 [ 1109.911985][T23491] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.064779][T23491] lowmem_reserve[]: 0 0 0 0 0 [ 1110.096331][T23491] Node 0 DMA: 9*4kB (UM) 15*8kB (UM) 8*16kB (UM) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10172kB [ 1110.191632][T23491] Node 0 DMA32: 2707*4kB (UMEH) 903*8kB (UMEH) 185*16kB (UME) 0*32kB 5*64kB (H) 5*128kB (UH) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22996kB [ 1110.310168][T23491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1110.366263][T23491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.409583][T23491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.456537][T23491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.506122][T23491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1110.515419][T23491] 15354 total pagecache pages [ 1110.566409][T23491] 0 pages in swap cache [ 1110.570583][T23491] Swap cache stats: add 0, delete 0, find 0/0 [ 1110.621511][T23491] Free swap = 0kB [ 1110.625256][T23491] Total swap = 0kB [ 1110.676397][T23491] 1965979 pages RAM [ 1110.680219][T23491] 0 pages HighMem/MovableOnly [ 1110.684885][T23491] 349896 pages reserved [ 1110.731493][T23491] 0 pages cma reserved [ 1110.755616][T23491] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14148,uid=0 [ 1110.835759][T23491] Out of memory: Killed process 14148 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1110.925963][ T1172] oom_reaper: reaped process 23491 (syz-executor.0), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 05:45:54 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:45:54 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:45:54 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:45:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8dffffff, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x54000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:54 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1111.163579][T23509] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1111.303505][T23509] CPU: 0 PID: 23509 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1111.312218][T23509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.322298][T23509] Call Trace: [ 1111.325604][T23509] dump_stack+0x18f/0x20d [ 1111.329958][T23509] dump_header+0x106/0x60f [ 1111.334390][T23509] oom_kill_process.cold+0x10/0x15 [ 1111.339514][T23509] out_of_memory+0x358/0x13f0 [ 1111.344233][T23509] ? oom_killer_disable+0x270/0x270 [ 1111.349443][T23509] ? mutex_trylock+0x246/0x2c0 [ 1111.354220][T23509] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1111.360935][T23509] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1111.367552][T23509] ? warn_alloc+0x120/0x120 [ 1111.372068][T23509] ? fs_reclaim_release+0x90/0xd0 [ 1111.377123][T23509] ? lock_is_held_type+0xbb/0xf0 [ 1111.382072][T23509] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1111.388175][T23509] __alloc_pages_nodemask+0x62c/0x790 [ 1111.393557][T23509] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1111.400325][T23509] ? fs_reclaim_acquire+0xa1/0xf0 [ 1111.405362][T23509] ? fs_reclaim_release+0x90/0xd0 [ 1111.410394][T23509] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1111.416815][T23509] alloc_pages_current+0x187/0x280 [ 1111.421938][T23509] __get_free_pages+0x8/0x40 [ 1111.426531][T23509] sg_kmalloc+0x52/0x70 [ 1111.430705][T23509] __sg_alloc_table+0x244/0x380 [ 1111.435565][T23509] sg_alloc_table+0x37/0x270 [ 1111.440158][T23509] ? sg_alloc_table_from_pages+0x50/0x50 [ 1111.445799][T23509] ion_system_heap_allocate+0x4a9/0xd10 [ 1111.451409][T23509] ? ion_system_heap_free+0x470/0x470 [ 1111.456798][T23509] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1111.462349][T23509] ion_ioctl+0x373/0xd20 [ 1111.466603][T23509] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1111.471818][T23509] ? _copy_to_user+0x126/0x160 [ 1111.476598][T23509] ? __fget_files+0x294/0x400 [ 1111.481295][T23509] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1111.486236][T23509] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1111.491438][T23509] __x64_sys_ioctl+0x193/0x200 [ 1111.496208][T23509] do_syscall_64+0x2d/0x70 05:45:55 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1111.500639][T23509] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1111.506532][T23509] RIP: 0033:0x45d4d9 [ 1111.510428][T23509] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.530033][T23509] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.538447][T23509] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1111.546420][T23509] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1111.554389][T23509] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1111.562385][T23509] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1111.570356][T23509] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c 05:45:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x68000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe8030000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:45:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8dffffff, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1113.861330][T23509] Mem-Info: 05:45:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xf4010000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1113.886384][T23509] active_anon:6741 inactive_anon:302180 isolated_anon:0 [ 1113.886384][T23509] active_file:1001 inactive_file:1418 isolated_file:32 [ 1113.886384][T23509] unevictable:3 dirty:21 writeback:0 [ 1113.886384][T23509] slab_reclaimable:15538 slab_unreclaimable:107887 [ 1113.886384][T23509] mapped:55729 shmem:8993 pagetables:18431 bounce:0 [ 1113.886384][T23509] free:22250 free_pcp:40 free_cma:0 [ 1114.271784][T23509] Node 0 active_anon:13924kB inactive_anon:1186592kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214128kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1019904kB writeback_tmp:0kB kernel_stack:22656kB all_unreclaimable? yes 05:45:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xe8030000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1114.501650][T23509] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1114.735800][T23509] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1114.811200][T23509] Node 0 DMA32 free:23048kB min:46156kB low:55132kB high:64108kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1186400kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:51964kB bounce:0kB free_pcp:252kB local_pcp:84kB free_cma:0kB [ 1115.028761][T23509] lowmem_reserve[]: 0 0 0 0 0 [ 1115.144897][T23509] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.314178][T23509] lowmem_reserve[]: 0 0 0 0 0 [ 1115.380292][T23509] Node 0 DMA: 9*4kB (UM) 13*8kB (UM) 8*16kB (UM) 3*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10156kB [ 1115.496682][T23509] Node 0 DMA32: 2435*4kB (UMEH) 914*8kB (UMEH) 183*16kB (UMEH) 7*32kB (UH) 6*64kB (UH) 7*128kB (UH) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22508kB [ 1115.596680][T23509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1115.656644][T23509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.716668][T23509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.765649][T23509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.775252][T23509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1115.875635][T23509] 10518 total pagecache pages [ 1115.880345][T23509] 0 pages in swap cache [ 1115.884495][T23509] Swap cache stats: add 0, delete 0, find 0/0 [ 1115.970872][T23509] Free swap = 0kB [ 1115.974729][T23509] Total swap = 0kB [ 1116.006820][T23509] 1965979 pages RAM [ 1116.010636][T23509] 0 pages HighMem/MovableOnly [ 1116.015305][T23509] 349896 pages reserved [ 1116.081815][T23509] 0 pages cma reserved [ 1116.096576][T23509] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14125,uid=0 [ 1116.177083][T23509] Out of memory: Killed process 14125 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1116.286747][ T1172] oom_reaper: reaped process 23521 (syz-executor.5), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB 05:46:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xff000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xf4010000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:00 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:00 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:46:00 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1116.634268][T23560] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1116.774581][T23560] CPU: 0 PID: 23560 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1116.783292][T23560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1116.789764][T23567] warn_alloc: 1 callbacks suppressed [ 1116.789785][T23567] syz-executor.5: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1116.793343][T23560] Call Trace: [ 1116.793369][T23560] dump_stack+0x18f/0x20d [ 1116.793393][T23560] dump_header+0x106/0x60f [ 1116.793414][T23560] oom_kill_process.cold+0x10/0x15 [ 1116.793440][T23560] out_of_memory+0x358/0x13f0 [ 1116.793465][T23560] ? oom_killer_disable+0x270/0x270 [ 1116.793487][T23560] ? mutex_trylock+0x246/0x2c0 [ 1116.793504][T23560] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1116.793524][T23560] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1116.793558][T23560] ? warn_alloc+0x120/0x120 [ 1116.793579][T23560] ? fs_reclaim_release+0x90/0xd0 [ 1116.793607][T23560] ? lock_is_held_type+0xbb/0xf0 [ 1116.793621][T23560] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1116.793645][T23560] __alloc_pages_nodemask+0x62c/0x790 [ 1116.793664][T23560] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1116.793681][T23560] ? fs_reclaim_acquire+0xa1/0xf0 [ 1116.793703][T23560] ? fs_reclaim_release+0x90/0xd0 [ 1116.793722][T23560] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1116.793743][T23560] alloc_pages_current+0x187/0x280 [ 1116.793763][T23560] __get_free_pages+0x8/0x40 [ 1116.793777][T23560] sg_kmalloc+0x52/0x70 [ 1116.793794][T23560] __sg_alloc_table+0x244/0x380 [ 1116.793817][T23560] sg_alloc_table+0x37/0x270 [ 1116.793833][T23560] ? sg_alloc_table_from_pages+0x50/0x50 [ 1116.793858][T23560] ion_system_heap_allocate+0x4a9/0xd10 [ 1116.793882][T23560] ? ion_system_heap_free+0x470/0x470 [ 1116.793900][T23560] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1116.793922][T23560] ion_ioctl+0x373/0xd20 [ 1116.793950][T23560] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1116.793971][T23560] ? _copy_to_user+0x126/0x160 [ 1116.794001][T23560] ? __fget_files+0x294/0x400 [ 1116.794023][T23560] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1116.794039][T23560] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1116.794059][T23560] __x64_sys_ioctl+0x193/0x200 [ 1116.794079][T23560] do_syscall_64+0x2d/0x70 [ 1116.794096][T23560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1116.794109][T23560] RIP: 0033:0x45d4d9 [ 1116.794128][T23560] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:46:00 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1116.794139][T23560] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.794155][T23560] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1116.794165][T23560] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1116.794175][T23560] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1116.794186][T23560] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1116.794196][T23560] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 1117.038419][T23560] Mem-Info: [ 1117.435724][T23560] active_anon:6758 inactive_anon:301625 isolated_anon:0 [ 1117.435724][T23560] active_file:510 inactive_file:556 isolated_file:53 [ 1117.435724][T23560] unevictable:3 dirty:26 writeback:0 [ 1117.435724][T23560] slab_reclaimable:15538 slab_unreclaimable:108556 [ 1117.435724][T23560] mapped:54473 shmem:9008 pagetables:18296 bounce:0 [ 1117.435724][T23560] free:22239 free_pcp:63 free_cma:0 [ 1117.756491][T23560] Node 0 active_anon:13924kB inactive_anon:1184416kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214156kB dirty:4kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1017856kB writeback_tmp:0kB kernel_stack:22624kB all_unreclaimable? yes [ 1118.065749][T23560] Node 0 DMA free:10156kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.219444][T23560] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1118.225251][T23560] Node 0 DMA32 free:24928kB min:46156kB low:55132kB high:64108kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1184224kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:51852kB bounce:0kB free_pcp:476kB local_pcp:236kB free_cma:0kB [ 1118.277219][T23560] lowmem_reserve[]: 0 0 0 0 0 [ 1118.281956][T23560] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.338071][T23567] CPU: 0 PID: 23567 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1118.346786][T23567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.356857][T23567] Call Trace: [ 1118.360187][T23567] dump_stack+0x18f/0x20d [ 1118.364517][T23567] warn_alloc.cold+0x87/0x17a [ 1118.369189][T23567] ? zone_watermark_ok_safe+0x260/0x260 [ 1118.374833][T23567] ? __alloc_pages_direct_compact+0x366/0x420 [ 1118.381239][T23567] ? get_page_from_freelist+0x37f0/0x37f0 [ 1118.386954][T23567] ? psi_task_change+0x142/0x220 [ 1118.391896][T23567] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1118.397091][T23567] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1118.403683][T23567] ? lock_acquire+0x1f1/0xad0 [ 1118.408357][T23567] ? fs_reclaim_acquire+0xa1/0xf0 [ 1118.413373][T23567] ? warn_alloc+0x120/0x120 [ 1118.417875][T23567] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1118.423150][T23567] ? lock_is_held_type+0xbb/0xf0 [ 1118.428080][T23567] ? ion_page_pool_alloc+0xba/0x270 [ 1118.433275][T23567] __alloc_pages_nodemask+0x62c/0x790 [ 1118.438660][T23567] ? lockdep_hardirqs_on+0x76/0xf0 [ 1118.443765][T23567] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1118.450528][T23567] ? ion_page_pool_remove+0x10e/0x3a0 [ 1118.455914][T23567] ? wait_for_completion+0x260/0x260 [ 1118.461189][T23567] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1118.467597][T23567] alloc_pages_current+0x187/0x280 [ 1118.472705][T23567] ion_page_pool_alloc+0x17d/0x270 [ 1118.477811][T23567] ion_system_heap_allocate+0x246/0xd10 [ 1118.483351][T23567] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1118.488917][T23567] ? ion_system_heap_free+0x470/0x470 [ 1118.494297][T23567] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1118.499838][T23567] ion_ioctl+0x373/0xd20 [ 1118.504078][T23567] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1118.509273][T23567] ? _copy_to_user+0x126/0x160 [ 1118.514053][T23567] ? __fget_files+0x294/0x400 [ 1118.518726][T23567] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1118.523655][T23567] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1118.528935][T23567] __x64_sys_ioctl+0x193/0x200 [ 1118.533725][T23567] do_syscall_64+0x2d/0x70 [ 1118.538242][T23567] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1118.544124][T23567] RIP: 0033:0x45d4d9 [ 1118.548014][T23567] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1118.567607][T23567] RSP: 002b:00007f9c230cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.576007][T23567] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1118.584010][T23567] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1118.591996][T23567] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 1118.599959][T23567] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 1118.607925][T23567] R13: 000000000169fb6f R14: 00007f9c230ce9c0 R15: 000000000118cfec [ 1121.269905][T23567] Mem-Info: [ 1121.280867][T23567] active_anon:6764 inactive_anon:301605 isolated_anon:0 [ 1121.280867][T23567] active_file:313 inactive_file:236 isolated_file:93 [ 1121.280867][T23567] unevictable:3 dirty:27 writeback:0 [ 1121.280867][T23567] slab_reclaimable:15538 slab_unreclaimable:108075 [ 1121.280867][T23567] mapped:54025 shmem:9014 pagetables:18382 bounce:0 [ 1121.280867][T23567] free:365186 free_pcp:356 free_cma:0 [ 1121.325882][T23560] lowmem_reserve[]: 0 0 0 0 0 [ 1121.350520][T23560] Node 0 DMA: 59*4kB (UM) 27*8kB (UM) 34*16kB (UM) 19*32kB (UM) 6*64kB (UM) 1*128kB (M) 2*256kB (UM) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 11844kB [ 1121.371321][T23560] Node 0 DMA32: 17081*4kB (UMEH) 12318*8kB (UMEH) 4163*16kB (UME) 1777*32kB (UME) 269*64kB (UH) 65*128kB (UH) 16*256kB (UH) 7*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 325604kB [ 1121.385507][T23567] Node 0 active_anon:13924kB inactive_anon:1184416kB active_file:132kB inactive_file:1024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214756kB dirty:4kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1017856kB writeback_tmp:0kB kernel_stack:22624kB all_unreclaimable? no [ 1121.389370][T23560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1121.420990][T23567] Node 0 DMA free:11836kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:32kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.441039][T23560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1121.460982][T23567] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1121.482291][T23567] Node 0 DMA32 free:323852kB min:46156kB low:55132kB high:64108kB reserved_highatomic:2048KB active_anon:13892kB inactive_anon:1184224kB active_file:532kB inactive_file:844kB unevictable:0kB writepending:4kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:51852kB bounce:0kB free_pcp:1848kB local_pcp:1404kB free_cma:0kB [ 1121.566597][T23560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.626147][T23560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1121.635187][T23567] lowmem_reserve[]: 0 0 0 0 0 [ 1121.644750][T23567] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.658331][T23560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1121.682156][T23567] lowmem_reserve[]: 0 0 0 0 0 [ 1121.693581][T23567] Node 0 DMA: 59*4kB (UM) 27*8kB (UM) 34*16kB (UM) 19*32kB (UM) 6*64kB (UM) 1*128kB (M) 2*256kB (UM) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 11844kB [ 1121.764802][T23567] Node 0 DMA32: 15764*4kB (UMEH) 11604*8kB (UMEH) 4171*16kB (UME) 1778*32kB (UME) 269*64kB (UH) 65*128kB (UH) 16*256kB (UH) 7*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 314784kB [ 1121.845631][T23560] 11017 total pagecache pages [ 1121.850342][T23560] 0 pages in swap cache [ 1121.854608][T23560] Swap cache stats: add 0, delete 0, find 0/0 [ 1121.862211][T23567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1121.945656][T23560] Free swap = 0kB [ 1121.949479][T23560] Total swap = 0kB [ 1121.953201][T23560] 1965979 pages RAM [ 1121.965056][T23567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1122.015609][T23560] 0 pages HighMem/MovableOnly [ 1122.020312][T23560] 349896 pages reserved [ 1122.024467][T23560] 0 pages cma reserved [ 1122.025608][T23567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1122.085637][T23560] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14110,uid=0 [ 1122.102318][T23567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1122.166570][T23567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1122.175691][T23560] Out of memory: Killed process 14110 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1122.225668][T23567] 11167 total pagecache pages [ 1122.230377][T23567] 0 pages in swap cache [ 1122.234529][T23567] Swap cache stats: add 0, delete 0, find 0/0 [ 1122.316532][T23567] Free swap = 0kB [ 1122.320285][T23567] Total swap = 0kB [ 1122.324000][T23567] 1965979 pages RAM [ 1122.375338][T23567] 0 pages HighMem/MovableOnly [ 1122.425633][T23567] 349896 pages reserved [ 1122.429838][T23567] 0 pages cma reserved 05:46:16 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:16 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xff000000, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:16 executing program 2: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 05:46:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xffffff8d, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:16 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:16 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) getpeername$inet6(r0, 0x0, 0x0) 05:46:16 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:16 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:18 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xffffff8d, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:18 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:18 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 05:46:18 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1135.023297][T23608] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1135.140301][T23608] device ipvlan2 entered promiscuous mode [ 1135.218905][T23613] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 05:46:18 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:18 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1135.291506][T23613] device ipvlan3 entered promiscuous mode 05:46:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x6, r4}}, 0x20}}, 0x0) 05:46:19 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1135.610368][T23629] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 05:46:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1135.762654][T23629] CPU: 1 PID: 23629 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1135.771354][T23629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.781402][T23629] Call Trace: [ 1135.784699][T23629] dump_stack+0x18f/0x20d [ 1135.789039][T23629] warn_alloc.cold+0x87/0x17a [ 1135.793748][T23629] ? zone_watermark_ok_safe+0x260/0x260 [ 1135.799300][T23629] ? __alloc_pages_direct_compact+0x366/0x420 [ 1135.805372][T23629] ? get_page_from_freelist+0x37f0/0x37f0 [ 1135.811095][T23629] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1135.816385][T23629] ? drain_all_pages+0x4a/0x5f0 [ 1135.821243][T23629] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1135.827857][T23629] ? lock_acquire+0x1f1/0xad0 [ 1135.832544][T23629] ? fs_reclaim_acquire+0xa1/0xf0 [ 1135.837574][T23629] ? warn_alloc+0x120/0x120 [ 1135.842090][T23629] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1135.847384][T23629] ? lock_is_held_type+0xbb/0xf0 [ 1135.852356][T23629] ? ion_page_pool_alloc+0xba/0x270 [ 1135.857570][T23629] __alloc_pages_nodemask+0x62c/0x790 [ 1135.862953][T23629] ? trace_hardirqs_on+0x5f/0x220 [ 1135.867982][T23629] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1135.874764][T23629] ? wait_for_completion+0x260/0x260 [ 1135.880051][T23629] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1135.886477][T23629] alloc_pages_current+0x187/0x280 [ 1135.891602][T23629] ion_page_pool_alloc+0x17d/0x270 [ 1135.896724][T23629] ion_system_heap_allocate+0x246/0xd10 [ 1135.902280][T23629] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1135.907829][T23629] ? ion_system_heap_free+0x470/0x470 [ 1135.913206][T23629] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1135.918759][T23629] ion_ioctl+0x373/0xd20 [ 1135.923014][T23629] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1135.928218][T23629] ? _copy_to_user+0x126/0x160 [ 1135.932998][T23629] ? __fget_files+0x294/0x400 [ 1135.937681][T23629] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1135.942619][T23629] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1135.947843][T23629] __x64_sys_ioctl+0x193/0x200 [ 1135.952625][T23629] do_syscall_64+0x2d/0x70 [ 1135.957073][T23629] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1135.962989][T23629] RIP: 0033:0x45d4d9 [ 1135.966888][T23629] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1135.986504][T23629] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1135.994945][T23629] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1136.002922][T23629] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1136.010893][T23629] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1136.018872][T23629] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1136.027800][T23629] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1137.425602][T23629] Mem-Info: [ 1137.428928][T23629] active_anon:6899 inactive_anon:301017 isolated_anon:0 [ 1137.428928][T23629] active_file:1721 inactive_file:1991 isolated_file:0 [ 1137.428928][T23629] unevictable:3 dirty:90 writeback:0 [ 1137.428928][T23629] slab_reclaimable:15531 slab_unreclaimable:106057 [ 1137.428928][T23629] mapped:56288 shmem:9150 pagetables:18253 bounce:0 [ 1137.428928][T23629] free:357343 free_pcp:444 free_cma:0 [ 1137.645635][T23629] Node 0 active_anon:14320kB inactive_anon:1182672kB active_file:5944kB inactive_file:7960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224224kB dirty:348kB writeback:0kB shmem:23316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1015808kB writeback_tmp:0kB kernel_stack:22688kB all_unreclaimable? no [ 1137.817693][T23629] Node 0 DMA free:10892kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1137.972234][T23629] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1138.018818][T23629] Node 0 DMA32 free:186752kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14284kB inactive_anon:1182480kB active_file:5944kB inactive_file:7960kB unevictable:0kB writepending:348kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:51920kB bounce:0kB free_pcp:1436kB local_pcp:404kB free_cma:0kB [ 1138.192571][T23629] lowmem_reserve[]: 0 0 0 0 0 [ 1138.221420][T23629] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.371447][T23629] lowmem_reserve[]: 0 0 0 0 0 [ 1138.400899][T23629] Node 0 DMA: 79*4kB (UM) 28*8kB (UM) 39*16kB (UM) 20*32kB (UM) 4*64kB (UM) 1*128kB (M) 2*256kB (UM) 0*512kB 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 10892kB [ 1138.510492][T23629] Node 0 DMA32: 10939*4kB (UEH) 4114*8kB (UMEH) 3578*16kB (UMEH) 1491*32kB (UMEH) 71*64kB (UH) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 187580kB [ 1138.621508][T23629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1138.675635][T23629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1138.685202][T23629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1138.795356][T23629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1138.842759][T23629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1138.881423][T23629] 12883 total pagecache pages [ 1138.901667][T23629] 0 pages in swap cache [ 1138.941716][T23629] Swap cache stats: add 0, delete 0, find 0/0 [ 1138.961943][T23629] Free swap = 0kB [ 1138.985632][T23629] Total swap = 0kB [ 1138.989371][T23629] 1965979 pages RAM [ 1138.993171][T23629] 0 pages HighMem/MovableOnly [ 1139.045736][T23629] 349896 pages reserved [ 1139.049944][T23629] 0 pages cma reserved 05:46:28 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:28 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:28 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0xa8540, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 05:46:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x3, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:28 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:31 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0xe8, 0x0, 0x0) 05:46:31 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x4, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x3, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:31 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:31 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x76, &(0x7f0000000300)="0af25d55f74312008cb16cfb778fb56eaf7cbe5981503fc9b11951bc1f90786d9b963e554531cca77562c294b24e19d3d43257fc4a3473fc2fefcf7247ba66b42c975ce5da983cd540ab699c74a7a9033071781531d049afe379307b04a6d1c7d29614f66b15c7637f7e142850d12f5a3e8e65de16f4"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 05:46:32 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:32 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:32 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="00008e0000008e"], 0x0}, 0x0) 05:46:32 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:32 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x4, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:32 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:32 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:32 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1148.966195][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd 05:46:32 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1149.205677][ T23] usb 3-1: Using ep0 maxpacket: 16 05:46:32 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1149.325926][ T23] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1149.328444][T23729] warn_alloc: 1 callbacks suppressed [ 1149.328464][T23729] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1149.363799][ T23] usb 3-1: config 0 has no interface number 0 05:46:33 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1149.480264][ T23] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1149.560473][ T23] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1149.587949][T23729] CPU: 1 PID: 23729 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0 [ 1149.596631][T23729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.606683][T23729] Call Trace: [ 1149.609997][T23729] dump_stack+0x18f/0x20d [ 1149.614334][T23729] warn_alloc.cold+0x87/0x17a [ 1149.619014][T23729] ? zone_watermark_ok_safe+0x260/0x260 [ 1149.624575][T23729] ? __alloc_pages_direct_compact+0x366/0x420 [ 1149.630646][T23729] ? get_page_from_freelist+0x37f0/0x37f0 [ 1149.636369][T23729] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1149.641692][T23729] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1149.648297][T23729] ? lock_acquire+0x1f1/0xad0 [ 1149.652979][T23729] ? fs_reclaim_acquire+0xa1/0xf0 [ 1149.658007][T23729] ? warn_alloc+0x120/0x120 [ 1149.662521][T23729] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1149.667808][T23729] ? lock_is_held_type+0xbb/0xf0 [ 1149.672749][T23729] ? ion_page_pool_alloc+0xba/0x270 [ 1149.677955][T23729] __alloc_pages_nodemask+0x62c/0x790 [ 1149.683334][T23729] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1149.690110][T23729] ? wait_for_completion+0x260/0x260 [ 1149.695408][T23729] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1149.701852][T23729] alloc_pages_current+0x187/0x280 [ 1149.706977][T23729] ion_page_pool_alloc+0x17d/0x270 [ 1149.712094][T23729] ion_system_heap_allocate+0x246/0xd10 [ 1149.717676][T23729] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1149.723252][T23729] ? ion_system_heap_free+0x470/0x470 [ 1149.728626][T23729] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1149.734194][T23729] ion_ioctl+0x373/0xd20 [ 1149.738447][T23729] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1149.743653][T23729] ? _copy_to_user+0x126/0x160 [ 1149.748432][T23729] ? __fget_files+0x294/0x400 [ 1149.753146][T23729] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1149.758085][T23729] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1149.763377][T23729] __x64_sys_ioctl+0x193/0x200 [ 1149.768156][T23729] do_syscall_64+0x2d/0x70 [ 1149.772577][T23729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1149.780117][T23729] RIP: 0033:0x45d4d9 [ 1149.784024][T23729] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:46:33 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1149.803649][T23729] RSP: 002b:00007f196bce7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1149.812060][T23729] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1149.820032][T23729] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1149.827998][T23729] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1149.835967][T23729] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1149.843935][T23729] R13: 000000000169fb6f R14: 00007f196bce89c0 R15: 000000000118cf4c [ 1149.890577][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.942983][ T23] usb 3-1: config 0 descriptor?? [ 1151.174907][T23729] Mem-Info: [ 1151.198939][T23729] active_anon:7012 inactive_anon:301671 isolated_anon:0 [ 1151.198939][T23729] active_file:1770 inactive_file:1987 isolated_file:0 [ 1151.198939][T23729] unevictable:3 dirty:98 writeback:0 [ 1151.198939][T23729] slab_reclaimable:15527 slab_unreclaimable:106601 [ 1151.198939][T23729] mapped:56347 shmem:9263 pagetables:18430 bounce:0 [ 1151.198939][T23729] free:346010 free_pcp:474 free_cma:0 [ 1151.495345][T23729] Node 0 active_anon:14772kB inactive_anon:1185388kB active_file:6140kB inactive_file:7944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:224460kB dirty:380kB writeback:0kB shmem:23728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1017856kB writeback_tmp:0kB kernel_stack:22912kB all_unreclaimable? no 05:46:35 executing program 2: 05:46:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x7, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:35 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1151.662426][ T12] usb 3-1: USB disconnect, device number 9 [ 1151.783148][T23729] Node 0 DMA free:10312kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 05:46:35 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:35 executing program 2: 05:46:35 executing program 2: [ 1152.017818][T23729] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1152.080424][T23729] Node 0 DMA32 free:56648kB min:35916kB low:44892kB high:53868kB reserved_highatomic:2048KB active_anon:14748kB inactive_anon:1185348kB active_file:6144kB inactive_file:7944kB unevictable:0kB writepending:388kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52996kB bounce:0kB free_pcp:2544kB local_pcp:1244kB free_cma:0kB [ 1152.518922][T23729] lowmem_reserve[]: 0 0 0 0 0 [ 1152.546480][T23729] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1152.695716][T23729] lowmem_reserve[]: 0 0 0 0 0 [ 1152.719635][T23729] Node 0 DMA: 81*4kB (UM) 52*8kB (UM) 43*16kB (UM) 21*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (U) 1*1024kB (M) 3*2048kB (ME) 0*4096kB = 10356kB [ 1152.827112][T23729] Node 0 DMA32: 4147*4kB (UMEH) 4831*8kB (UMEH) 1529*16kB (UMEH) 1571*32kB (UMEH) 8*64kB (UH) 4*128kB (H) 3*256kB (H) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 133812kB [ 1152.931850][T23729] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1152.985621][T23729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1152.995191][T23729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1153.095745][T23729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1153.105349][T23729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1153.199470][T23729] 13042 total pagecache pages [ 1153.204205][T23729] 0 pages in swap cache [ 1153.235682][T23729] Swap cache stats: add 0, delete 0, find 0/0 [ 1153.241766][T23729] Free swap = 0kB [ 1153.245477][T23729] Total swap = 0kB [ 1153.309610][T23729] 1965979 pages RAM [ 1153.313446][T23729] 0 pages HighMem/MovableOnly [ 1153.355678][T23729] 349896 pages reserved [ 1153.359862][T23729] 0 pages cma reserved [ 1158.746559][ T1172] oom_reaper: reaped process 23729 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1158.786186][ T1172] oom_reaper: reaped process 23734 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:46:47 executing program 2: 05:46:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x8, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x7, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:47 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:46:47 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:47 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:47 executing program 2: [ 1164.155999][T23779] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1164.267157][T23779] CPU: 0 PID: 23779 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1164.275859][T23779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.285913][T23779] Call Trace: [ 1164.289239][T23779] dump_stack+0x18f/0x20d [ 1164.293611][T23779] dump_header+0x106/0x60f [ 1164.298044][T23779] oom_kill_process.cold+0x10/0x15 [ 1164.303164][T23779] out_of_memory+0x358/0x13f0 [ 1164.307856][T23779] ? oom_killer_disable+0x270/0x270 [ 1164.313067][T23779] ? mutex_trylock+0x246/0x2c0 [ 1164.317840][T23779] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1164.324559][T23779] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1164.331174][T23779] ? warn_alloc+0x120/0x120 [ 1164.335689][T23779] ? fs_reclaim_release+0x90/0xd0 [ 1164.340755][T23779] ? lock_is_held_type+0xbb/0xf0 [ 1164.345698][T23779] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1164.351779][T23779] __alloc_pages_nodemask+0x62c/0x790 [ 1164.357161][T23779] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1164.363954][T23779] ? fs_reclaim_acquire+0xa1/0xf0 [ 1164.368986][T23779] ? fs_reclaim_release+0x90/0xd0 [ 1164.374015][T23779] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1164.380463][T23779] alloc_pages_current+0x187/0x280 [ 1164.385581][T23779] __get_free_pages+0x8/0x40 [ 1164.390179][T23779] sg_kmalloc+0x52/0x70 [ 1164.394366][T23779] __sg_alloc_table+0x244/0x380 [ 1164.399228][T23779] sg_alloc_table+0x37/0x270 [ 1164.403821][T23779] ? sg_alloc_table_from_pages+0x50/0x50 [ 1164.409465][T23779] ion_system_heap_allocate+0x4a9/0xd10 [ 1164.415022][T23779] ? ion_system_heap_free+0x470/0x470 [ 1164.420402][T23779] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1164.425956][T23779] ion_ioctl+0x373/0xd20 [ 1164.430211][T23779] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1164.435415][T23779] ? _copy_to_user+0x126/0x160 [ 1164.440366][T23779] ? __fget_files+0x294/0x400 [ 1164.445047][T23779] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1164.450004][T23779] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1164.455209][T23779] __x64_sys_ioctl+0x193/0x200 [ 1164.459977][T23779] do_syscall_64+0x2d/0x70 [ 1164.464396][T23779] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1164.470291][T23779] RIP: 0033:0x45d4d9 [ 1164.474191][T23779] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1164.493799][T23779] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.502235][T23779] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1164.510233][T23779] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 05:46:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xa, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1164.518205][T23779] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1164.526177][T23779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1164.534153][T23779] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:46:48 executing program 2: 05:46:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 05:46:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x8, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) [ 1166.441525][T23779] Mem-Info: [ 1166.444768][T23779] active_anon:7139 inactive_anon:301157 isolated_anon:0 [ 1166.444768][T23779] active_file:597 inactive_file:3091 isolated_file:0 [ 1166.444768][T23779] unevictable:3 dirty:0 writeback:0 [ 1166.444768][T23779] slab_reclaimable:15526 slab_unreclaimable:104403 [ 1166.444768][T23779] mapped:56219 shmem:9389 pagetables:18431 bounce:0 [ 1166.444768][T23779] free:400798 free_pcp:663 free_cma:0 [ 1166.662270][T23779] Node 0 active_anon:14932kB inactive_anon:1182792kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214276kB dirty:0kB writeback:0kB shmem:23880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1015808kB writeback_tmp:0kB kernel_stack:22752kB all_unreclaimable? no [ 1166.810866][T23779] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1166.877984][T19654] tipc: TX() has been purged, node left! [ 1166.978916][T23779] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1167.017217][T23779] Node 0 DMA32 free:34460kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:14896kB inactive_anon:1182600kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52260kB bounce:0kB free_pcp:2584kB local_pcp:1284kB free_cma:0kB [ 1167.215697][T23779] lowmem_reserve[]: 0 0 0 0 0 [ 1167.220433][T23779] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1167.438141][T23779] lowmem_reserve[]: 0 0 0 0 0 [ 1167.442886][T23779] Node 0 DMA: 6*4kB (UM) 4*8kB (UM) 13*16kB (UM) 19*32kB (UM) 3*64kB (M) 2*128kB (UM) 1*256kB (M) 1*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 10280kB [ 1167.553585][T23779] Node 0 DMA32: 3908*4kB (UMEH) 806*8kB (MEH) 228*16kB (UMEH) 142*32kB (UMEH) 811*64kB (UH) 345*128kB (UH) 33*256kB (UH) 0*512kB 5*1024kB (U) 0*2048kB 0*4096kB = 139904kB [ 1167.665674][T23779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1167.735839][T23779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1167.745462][T23779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1167.855656][T23779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1167.865234][T23779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1167.985665][T23779] 13090 total pagecache pages [ 1167.990398][T23779] 0 pages in swap cache [ 1167.994549][T23779] Swap cache stats: add 0, delete 0, find 0/0 [ 1168.075666][T23779] Free swap = 0kB [ 1168.079416][T23779] Total swap = 0kB [ 1168.123809][T23779] 1965979 pages RAM [ 1168.144090][T23779] 0 pages HighMem/MovableOnly [ 1168.174456][T23779] 349896 pages reserved [ 1168.204814][T23779] 0 pages cma reserved [ 1168.225041][T23779] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14094,uid=0 [ 1168.295739][T23779] Out of memory: Killed process 14094 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:46:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xa, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff", 0x10}], 0x1) 05:46:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:56 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:46:56 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:46:56 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:46:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:46:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x54, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x54, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:58 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x68, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1175.032110][T23845] warn_alloc: 1 callbacks suppressed [ 1175.032131][T23845] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1175.052852][ T1172] oom_reaper: reaped process 23832 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1175.179423][T23845] CPU: 1 PID: 23845 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1175.188131][T23845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.198185][T23845] Call Trace: [ 1175.201485][T23845] dump_stack+0x18f/0x20d [ 1175.205822][T23845] warn_alloc.cold+0x87/0x17a [ 1175.210509][T23845] ? zone_watermark_ok_safe+0x260/0x260 [ 1175.216063][T23845] ? __alloc_pages_direct_compact+0x366/0x420 [ 1175.222135][T23845] ? get_page_from_freelist+0x37f0/0x37f0 [ 1175.227857][T23845] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1175.233141][T23845] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1175.239742][T23845] ? lock_acquire+0x1f1/0xad0 [ 1175.244421][T23845] ? fs_reclaim_acquire+0xa1/0xf0 [ 1175.249445][T23845] ? warn_alloc+0x120/0x120 [ 1175.253957][T23845] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1175.259243][T23845] ? lock_is_held_type+0xbb/0xf0 [ 1175.264183][T23845] ? ion_page_pool_alloc+0xba/0x270 [ 1175.269389][T23845] __alloc_pages_nodemask+0x62c/0x790 [ 1175.274766][T23845] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1175.281544][T23845] ? wait_for_completion+0x260/0x260 [ 1175.286831][T23845] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1175.293253][T23845] alloc_pages_current+0x187/0x280 [ 1175.298374][T23845] ion_page_pool_alloc+0x17d/0x270 [ 1175.303510][T23845] ion_system_heap_allocate+0x246/0xd10 [ 1175.309074][T23845] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1175.314628][T23845] ? ion_system_heap_free+0x470/0x470 [ 1175.320037][T23845] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1175.325594][T23845] ion_ioctl+0x373/0xd20 [ 1175.330375][T23845] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1175.335581][T23845] ? _copy_to_user+0x126/0x160 [ 1175.340358][T23845] ? __fget_files+0x294/0x400 [ 1175.345043][T23845] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1175.349985][T23845] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1175.355215][T23845] __x64_sys_ioctl+0x193/0x200 [ 1175.359987][T23845] do_syscall_64+0x2d/0x70 [ 1175.364427][T23845] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1175.370328][T23845] RIP: 0033:0x45d4d9 [ 1175.374224][T23845] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1175.393830][T23845] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.402243][T23845] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1175.410221][T23845] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1175.418211][T23845] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1175.426184][T23845] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1175.434160][T23845] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:46:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1f4, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x68, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:46:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:00 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:47:00 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x300, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1176.634990][T23864] syz-executor.5 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1176.815445][T23864] CPU: 0 PID: 23864 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1176.824274][T23864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.834432][T23864] Call Trace: [ 1176.837742][T23864] dump_stack+0x18f/0x20d [ 1176.842385][T23864] dump_header+0x106/0x60f [ 1176.846829][T23864] oom_kill_process.cold+0x10/0x15 [ 1176.852110][T23864] out_of_memory+0x358/0x13f0 [ 1176.857046][T23864] ? oom_killer_disable+0x270/0x270 [ 1176.862354][T23864] ? mutex_trylock+0x246/0x2c0 [ 1176.867133][T23864] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1176.873826][T23864] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1176.880454][T23864] ? warn_alloc+0x120/0x120 [ 1176.884983][T23864] ? fs_reclaim_release+0x90/0xd0 [ 1176.890049][T23864] ? lock_is_held_type+0xbb/0xf0 [ 1176.895004][T23864] ? ion_page_pool_alloc+0xba/0x270 [ 1176.900232][T23864] __alloc_pages_nodemask+0x62c/0x790 [ 1176.905714][T23864] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1176.912508][T23864] ? wait_for_completion+0x260/0x260 [ 1176.917814][T23864] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1176.924252][T23864] alloc_pages_current+0x187/0x280 [ 1176.929399][T23864] ion_page_pool_alloc+0x17d/0x270 [ 1176.934542][T23864] ion_system_heap_allocate+0x246/0xd10 [ 1176.940202][T23864] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1176.945980][T23864] ? ion_system_heap_free+0x470/0x470 [ 1176.951378][T23864] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1176.956951][T23864] ion_ioctl+0x373/0xd20 [ 1176.961225][T23864] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1176.966453][T23864] ? _copy_to_user+0x126/0x160 [ 1176.971282][T23864] ? __fget_files+0x294/0x400 [ 1176.975985][T23864] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1176.980942][T23864] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1176.986166][T23864] __x64_sys_ioctl+0x193/0x200 [ 1176.990957][T23864] do_syscall_64+0x2d/0x70 [ 1176.995581][T23864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1177.001499][T23864] RIP: 0033:0x45d4d9 [ 1177.005672][T23864] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1177.025570][T23864] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.034096][T23864] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1177.042176][T23864] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1177.050172][T23864] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1177.058254][T23864] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1177.066246][T23864] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:47:00 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1f4, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1177.559526][T23845] Mem-Info: [ 1177.587251][T23845] active_anon:7226 inactive_anon:301201 isolated_anon:0 [ 1177.587251][T23845] active_file:1335 inactive_file:2503 isolated_file:0 [ 1177.587251][T23845] unevictable:3 dirty:71 writeback:0 [ 1177.587251][T23845] slab_reclaimable:15530 slab_unreclaimable:103883 [ 1177.587251][T23845] mapped:56272 shmem:9479 pagetables:18477 bounce:0 [ 1177.587251][T23845] free:677674 free_pcp:407 free_cma:0 05:47:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x3e8, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:01 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1177.869318][T23845] Node 0 active_anon:15136kB inactive_anon:1182684kB active_file:48kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214316kB dirty:8kB writeback:0kB shmem:24084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1021952kB writeback_tmp:0kB kernel_stack:22784kB all_unreclaimable? no [ 1178.065876][T23845] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.236884][T23845] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1178.275188][T23845] Node 0 DMA32 free:40312kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15100kB inactive_anon:1182492kB active_file:48kB inactive_file:16kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52148kB bounce:0kB free_pcp:2280kB local_pcp:1016kB free_cma:0kB [ 1178.519790][T23845] lowmem_reserve[]: 0 0 0 0 0 [ 1178.550898][T23845] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.668805][T23845] lowmem_reserve[]: 0 0 0 0 0 [ 1178.685751][T23845] Node 0 DMA: 11*4kB (UM) 4*8kB (UM) 7*16kB (M) 3*32kB (UM) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10268kB [ 1178.899988][T23845] Node 0 DMA32: 6020*4kB (UMEH) 1021*8kB (UMEH) 109*16kB (UMEH) 44*32kB (UMEH) 37*64kB (UMH) 12*128kB (UMH) 7*256kB (UMH) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 43656kB [ 1178.927608][T23864] Mem-Info: [ 1178.938782][T23864] active_anon:7232 inactive_anon:301125 isolated_anon:0 [ 1178.938782][T23864] active_file:1412 inactive_file:2522 isolated_file:0 [ 1178.938782][T23864] unevictable:3 dirty:74 writeback:0 [ 1178.938782][T23864] slab_reclaimable:15544 slab_unreclaimable:102659 [ 1178.938782][T23864] mapped:56254 shmem:9484 pagetables:18375 bounce:0 [ 1178.938782][T23864] free:595290 free_pcp:594 free_cma:0 [ 1179.015688][T23845] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1179.053291][T23845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.085388][T23845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1179.116947][T23864] Node 0 active_anon:15136kB inactive_anon:1182684kB active_file:52kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214320kB dirty:8kB writeback:0kB shmem:24084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1021952kB writeback_tmp:0kB kernel_stack:22784kB all_unreclaimable? no [ 1179.151829][T23845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1179.181920][T23845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1179.216581][T23845] 13430 total pagecache pages [ 1179.233268][T23845] 0 pages in swap cache [ 1179.245687][T23864] Node 0 DMA free:10268kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1179.277226][T23845] Swap cache stats: add 0, delete 0, find 0/0 [ 1179.297997][T23845] Free swap = 0kB [ 1179.309972][T23845] Total swap = 0kB [ 1179.344611][T23845] 1965979 pages RAM [ 1179.357183][T23845] 0 pages HighMem/MovableOnly [ 1179.371902][T23864] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1179.385731][T23845] 349896 pages reserved [ 1179.390012][T23845] 0 pages cma reserved [ 1179.402787][T23864] Node 0 DMA32 free:43780kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15100kB inactive_anon:1182492kB active_file:52kB inactive_file:12kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52148kB bounce:0kB free_pcp:1316kB local_pcp:1268kB free_cma:0kB [ 1179.555638][T23864] lowmem_reserve[]: 0 0 0 0 0 [ 1179.560551][T23864] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1179.725655][T23864] lowmem_reserve[]: 0 0 0 0 0 [ 1179.730573][T23864] Node 0 DMA: 11*4kB (UM) 4*8kB (UM) 7*16kB (M) 3*32kB (UM) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10268kB [ 1179.835629][T23864] Node 0 DMA32: 6083*4kB (UMEH) 1101*8kB (UMEH) 123*16kB (UMEH) 40*32kB (UMEH) 46*64kB (UMH) 12*128kB (UMH) 7*256kB (UMH) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 45220kB [ 1179.925684][T23864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1179.998771][T23864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1180.055662][T23864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1180.065073][T23864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1180.125721][T23864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1180.135046][T23864] 13441 total pagecache pages [ 1180.218885][T23864] 0 pages in swap cache [ 1180.223091][T23864] Swap cache stats: add 0, delete 0, find 0/0 [ 1180.275637][T23864] Free swap = 0kB [ 1180.279587][T23864] Total swap = 0kB [ 1180.283394][T23864] 1965979 pages RAM [ 1180.328966][T23864] 0 pages HighMem/MovableOnly [ 1180.333914][T23864] 349896 pages reserved [ 1180.385650][T23864] 0 pages cma reserved [ 1180.390022][T23864] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=23842,uid=0 [ 1180.485736][T23864] Out of memory: Killed process 23845 (syz-executor.1) total-vm:93416kB, anon-rss:2224kB, file-rss:35868kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1180.577506][ T1172] oom_reaper: reaped process 23845 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 05:47:05 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x300, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x500, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:05 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:05 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1182.749955][T23897] syz-executor.5 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1182.782313][T23897] CPU: 0 PID: 23897 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1182.782322][T23897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.782328][T23897] Call Trace: 05:47:06 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, 0x0, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1182.782350][T23897] dump_stack+0x18f/0x20d [ 1182.782379][T23897] dump_header+0x106/0x60f 05:47:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x700, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1182.782399][T23897] oom_kill_process.cold+0x10/0x15 05:47:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x3e8, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1182.782416][T23897] out_of_memory+0x358/0x13f0 [ 1182.782437][T23897] ? oom_killer_disable+0x270/0x270 [ 1182.782457][T23897] ? mutex_trylock+0x246/0x2c0 [ 1182.782472][T23897] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1182.782491][T23897] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 05:47:07 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1182.782526][T23897] ? warn_alloc+0x120/0x120 [ 1182.782544][T23897] ? fs_reclaim_release+0x90/0xd0 [ 1182.782567][T23897] ? lock_is_held_type+0xbb/0xf0 [ 1182.782583][T23897] ? ion_page_pool_alloc+0xba/0x270 [ 1182.782604][T23897] __alloc_pages_nodemask+0x62c/0x790 [ 1182.782622][T23897] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1182.782656][T23897] ? wait_for_completion+0x260/0x260 [ 1182.782670][T23897] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1182.782689][T23897] alloc_pages_current+0x187/0x280 [ 1182.782708][T23897] ion_page_pool_alloc+0x17d/0x270 [ 1182.782727][T23897] ion_system_heap_allocate+0x246/0xd10 [ 1182.782748][T23897] ? rcu_read_lock_sched_held+0x3a/0xb0 05:47:07 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 05:47:07 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1182.782764][T23897] ? ion_system_heap_free+0x470/0x470 [ 1182.782781][T23897] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1182.782801][T23897] ion_ioctl+0x373/0xd20 05:47:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x500, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xa00, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1182.782824][T23897] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1182.782842][T23897] ? _copy_to_user+0x126/0x160 [ 1182.782868][T23897] ? __fget_files+0x294/0x400 [ 1182.782889][T23897] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1182.782903][T23897] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1182.782921][T23897] __x64_sys_ioctl+0x193/0x200 [ 1182.782940][T23897] do_syscall_64+0x2d/0x70 [ 1182.782955][T23897] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1182.782967][T23897] RIP: 0033:0x45d4d9 [ 1182.782982][T23897] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:47:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) [ 1182.782991][T23897] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.783006][T23897] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1182.783016][T23897] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 05:47:08 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1182.783025][T23897] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:47:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1182.783034][T23897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1182.783044][T23897] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c [ 1182.783260][T23897] Mem-Info: 05:47:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x700, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe00, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1182.783417][T23897] active_anon:7268 inactive_anon:301720 isolated_anon:0 [ 1182.783417][T23897] active_file:1432 inactive_file:2514 isolated_file:0 [ 1182.783417][T23897] unevictable:3 dirty:3 writeback:0 [ 1182.783417][T23897] slab_reclaimable:15555 slab_unreclaimable:104270 [ 1182.783417][T23897] mapped:56292 shmem:9519 pagetables:18477 bounce:0 [ 1182.783417][T23897] free:706835 free_pcp:174 free_cma:0 [ 1182.783450][T23897] Node 0 active_anon:15204kB inactive_anon:1185456kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214336kB dirty:8kB writeback:0kB shmem:24156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1024000kB writeback_tmp:0kB kernel_stack:23104kB all_unreclaimable? no [ 1182.783458][T23897] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 05:47:09 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0), 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) [ 1182.783494][T23897] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1182.783519][T23897] Node 0 DMA32 free:43812kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15168kB inactive_anon:1185264kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52928kB bounce:0kB free_pcp:696kB local_pcp:384kB free_cma:0kB [ 1182.783555][T23897] lowmem_reserve[]: 0 0 0 0 0 [ 1182.783578][T23897] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1182.783612][T23897] lowmem_reserve[]: 0 0 0 0 0 [ 1182.783644][T23897] Node 0 DMA: 61*4kB (UM) 32*8kB (UM) 11*16kB (UM) 8*32kB (UM) 8*64kB (UM) 3*128kB (UM) 1*256kB (M) 0*512kB 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 10276kB [ 1182.783734][T23897] Node 0 DMA32: 3271*4kB (UMEH) 1052*8kB (UMEH) 154*16kB (UMEH) 50*32kB (UMEH) 31*64kB (UMH) 11*128kB (MH) 22*256kB (UMH) 18*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 43804kB [ 1182.783821][T23897] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1182.783890][T23897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1182.783902][T23897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1182.783914][T23897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1182.783926][T23897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1182.783933][T23897] 13465 total pagecache pages [ 1182.783941][T23897] 0 pages in swap cache [ 1182.783951][T23897] Swap cache stats: add 0, delete 0, find 0/0 [ 1182.783957][T23897] Free swap = 0kB [ 1182.783963][T23897] Total swap = 0kB [ 1182.783970][T23897] 1965979 pages RAM [ 1182.783976][T23897] 0 pages HighMem/MovableOnly 05:47:11 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5400, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xa00, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x80000004}, 0x10}}, 0x0) 05:47:11 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1182.783982][T23897] 349896 pages reserved [ 1182.783988][T23897] 0 pages cma reserved [ 1182.783998][T23897] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=23891,uid=0 05:47:11 executing program 5: [ 1182.784078][T23897] Out of memory: Killed process 23894 (syz-executor.3) total-vm:93548kB, anon-rss:2232kB, file-rss:35868kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1182.786285][ T1172] oom_reaper: reaped process 23894 (syz-executor.3), now anon-rss:0kB, file-rss:34896kB, shmem-rss:0kB 05:47:11 executing program 5: [ 1184.560170][T23924] syz-executor.5 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1184.560190][T23924] CPU: 0 PID: 23924 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1184.560198][T23924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.560203][T23924] Call Trace: [ 1184.560226][T23924] dump_stack+0x18f/0x20d [ 1184.560248][T23924] dump_header+0x106/0x60f [ 1184.560268][T23924] oom_kill_process.cold+0x10/0x15 [ 1184.560285][T23924] out_of_memory+0x358/0x13f0 [ 1184.560307][T23924] ? oom_killer_disable+0x270/0x270 05:47:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:12 executing program 5: 05:47:12 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe00, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1184.560328][T23924] ? mutex_trylock+0x246/0x2c0 05:47:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x6800, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1184.560343][T23924] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1184.560363][T23924] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1184.560398][T23924] ? warn_alloc+0x120/0x120 [ 1184.560416][T23924] ? fs_reclaim_release+0x90/0xd0 [ 1184.560441][T23924] ? lock_is_held_type+0xbb/0xf0 [ 1184.560457][T23924] ? ion_page_pool_alloc+0xba/0x270 [ 1184.560479][T23924] __alloc_pages_nodemask+0x62c/0x790 [ 1184.560498][T23924] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1184.560523][T23924] ? wait_for_completion+0x260/0x260 [ 1184.560538][T23924] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1184.560559][T23924] alloc_pages_current+0x187/0x280 [ 1184.560579][T23924] ion_page_pool_alloc+0x17d/0x270 [ 1184.560597][T23924] ion_system_heap_allocate+0x246/0xd10 [ 1184.560619][T23924] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1184.560636][T23924] ? ion_system_heap_free+0x470/0x470 [ 1184.560653][T23924] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1184.560675][T23924] ion_ioctl+0x373/0xd20 [ 1184.560699][T23924] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1184.560718][T23924] ? _copy_to_user+0x126/0x160 [ 1184.560745][T23924] ? __fget_files+0x294/0x400 [ 1184.560773][T23924] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1184.560788][T23924] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1184.560806][T23924] __x64_sys_ioctl+0x193/0x200 [ 1184.560824][T23924] do_syscall_64+0x2d/0x70 [ 1184.560838][T23924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1184.560851][T23924] RIP: 0033:0x45d4d9 [ 1184.560866][T23924] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1184.560875][T23924] RSP: 002b:00007f9c230cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.560890][T23924] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1184.560899][T23924] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1184.560908][T23924] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 1184.560917][T23924] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 1184.560926][T23924] R13: 000000000169fb6f R14: 00007f9c230ce9c0 R15: 000000000118cfec 05:47:13 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:13 executing program 5: 05:47:13 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x3f00, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe803, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1184.598763][T23924] Mem-Info: [ 1184.598803][T23924] active_anon:7273 inactive_anon:301724 isolated_anon:0 [ 1184.598803][T23924] active_file:1437 inactive_file:2509 isolated_file:0 [ 1184.598803][T23924] unevictable:3 dirty:0 writeback:0 [ 1184.598803][T23924] slab_reclaimable:15567 slab_unreclaimable:104454 [ 1184.598803][T23924] mapped:56292 shmem:9523 pagetables:18478 bounce:0 [ 1184.598803][T23924] free:757466 free_pcp:173 free_cma:0 05:47:13 executing program 5: 05:47:14 executing program 5: [ 1184.598834][T23924] Node 0 active_anon:15216kB inactive_anon:1185216kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214336kB dirty:0kB writeback:0kB shmem:24168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1024000kB writeback_tmp:0kB kernel_stack:22880kB all_unreclaimable? no [ 1184.598841][T23924] Node 0 DMA free:10260kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:240kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1184.598875][T23924] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1184.598900][T23924] Node 0 DMA32 free:44024kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15180kB inactive_anon:1184984kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52676kB bounce:0kB free_pcp:692kB local_pcp:244kB free_cma:0kB [ 1184.598933][T23924] lowmem_reserve[]: 0 0 0 0 0 [ 1184.598964][T23924] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1184.598996][T23924] lowmem_reserve[]: 0 0 0 0 0 [ 1184.599019][T23924] Node 0 DMA: 21*4kB (UM) 2*8kB (UM) 7*16kB (M) 2*32kB (M) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10260kB [ 1184.599106][T23924] Node 0 DMA32: 3260*4kB (UMEH) 1038*8kB (UMEH) 117*16kB (UMEH) 37*32kB (UMEH) 31*64kB (UMH) 42*128kB (UMH) 12*256kB (UMH) 18*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44048kB 05:47:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:15 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x940b8) 05:47:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xf401, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:15 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x4000, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1184.599191][T23924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1184.599258][T23924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1184.599269][T23924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1184.599281][T23924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1184.599292][T23924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1184.599299][T23924] 13469 total pagecache pages [ 1184.599307][T23924] 0 pages in swap cache [ 1184.599316][T23924] Swap cache stats: add 0, delete 0, find 0/0 [ 1184.599323][T23924] Free swap = 0kB [ 1184.599329][T23924] Total swap = 0kB [ 1184.599336][T23924] 1965979 pages RAM [ 1184.599342][T23924] 0 pages HighMem/MovableOnly [ 1184.599348][T23924] 349896 pages reserved [ 1184.599354][T23924] 0 pages cma reserved [ 1184.599365][T23924] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=23921,uid=0 [ 1184.599468][T23924] Out of memory: Killed process 23921 (syz-executor.5) total-vm:93416kB, anon-rss:2228kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1184.602176][ T1172] oom_reaper: reaped process 23921 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1185.240558][T23938] warn_alloc: 4 callbacks suppressed [ 1185.240579][T23938] syz-executor.5: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1185.240709][T23938] CPU: 0 PID: 23938 Comm: syz-executor.5 Not tainted 5.9.0-rc1-syzkaller #0 [ 1185.240718][T23938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.240723][T23938] Call Trace: [ 1185.240744][T23938] dump_stack+0x18f/0x20d [ 1185.240764][T23938] warn_alloc.cold+0x87/0x17a [ 1185.240781][T23938] ? zone_watermark_ok_safe+0x260/0x260 [ 1185.240800][T23938] ? __alloc_pages_direct_compact+0x366/0x420 [ 1185.240816][T23938] ? get_page_from_freelist+0x37f0/0x37f0 [ 1185.240832][T23938] ? psi_task_change+0x142/0x220 [ 1185.240851][T23938] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1185.240873][T23938] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1185.240903][T23938] ? lock_acquire+0x1f1/0xad0 [ 1185.240928][T23938] ? fs_reclaim_acquire+0xa1/0xf0 [ 1185.240945][T23938] ? warn_alloc+0x120/0x120 [ 1185.240967][T23938] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1185.240983][T23938] ? lock_is_held_type+0xbb/0xf0 [ 1185.240999][T23938] ? ion_page_pool_alloc+0xba/0x270 05:47:16 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:16 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x940b8) 05:47:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5400, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff00, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1185.241020][T23938] __alloc_pages_nodemask+0x62c/0x790 [ 1185.241039][T23938] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1185.241062][T23938] ? wait_for_completion+0x260/0x260 [ 1185.241076][T23938] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1185.241094][T23938] alloc_pages_current+0x187/0x280 05:47:17 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1185.241112][T23938] ion_page_pool_alloc+0x17d/0x270 05:47:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x940b8) [ 1185.241129][T23938] ion_system_heap_allocate+0x246/0xd10 [ 1185.241149][T23938] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1185.241165][T23938] ? ion_system_heap_free+0x470/0x470 [ 1185.241181][T23938] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1185.241201][T23938] ion_ioctl+0x373/0xd20 [ 1185.241224][T23938] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1185.241241][T23938] ? _copy_to_user+0x126/0x160 [ 1185.241266][T23938] ? __fget_files+0x294/0x400 [ 1185.241285][T23938] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1185.241299][T23938] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1185.241315][T23938] __x64_sys_ioctl+0x193/0x200 [ 1185.241332][T23938] do_syscall_64+0x2d/0x70 [ 1185.241345][T23938] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1185.241356][T23938] RIP: 0033:0x45d4d9 [ 1185.241370][T23938] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1185.241378][T23938] RSP: 002b:00007f9c230eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1185.241392][T23938] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1185.241401][T23938] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1185.241409][T23938] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1185.241418][T23938] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1185.241426][T23938] R13: 000000000169fb6f R14: 00007f9c230ef9c0 R15: 000000000118cf4c 05:47:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:18 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x940b8) 05:47:18 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x44, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1185.271427][T23938] Mem-Info: [ 1185.271465][T23938] active_anon:7273 inactive_anon:300672 isolated_anon:0 [ 1185.271465][T23938] active_file:1437 inactive_file:2509 isolated_file:0 [ 1185.271465][T23938] unevictable:3 dirty:48 writeback:0 [ 1185.271465][T23938] slab_reclaimable:15567 slab_unreclaimable:104758 [ 1185.271465][T23938] mapped:56267 shmem:9523 pagetables:18515 bounce:0 [ 1185.271465][T23938] free:757635 free_pcp:510 free_cma:0 05:47:18 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:47:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x6800, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:18 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:18 executing program 5: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x940b8) [ 1185.271495][T23938] Node 0 active_anon:15216kB inactive_anon:1181008kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214336kB dirty:0kB writeback:0kB shmem:24168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1024000kB writeback_tmp:0kB kernel_stack:22848kB all_unreclaimable? no 05:47:18 executing program 5: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x940b8) 05:47:19 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1185.271502][T23938] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:200kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 05:47:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x68, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:19 executing program 5: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x940b8) [ 1185.271669][T23938] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1185.271695][T23938] Node 0 DMA32 free:43996kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15180kB inactive_anon:1180784kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52528kB bounce:0kB free_pcp:2040kB local_pcp:1432kB free_cma:0kB [ 1185.271730][T23938] lowmem_reserve[]: 0 0 0 0 0 [ 1185.271764][T23938] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1185.271796][T23938] lowmem_reserve[]: 0 0 0 0 0 [ 1185.271819][T23938] Node 0 DMA: 34*4kB (UM) 4*8kB (UM) 7*16kB (M) 3*32kB (UM) 3*64kB (M) 2*128kB (UM) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10296kB [ 1185.271907][T23938] Node 0 DMA32: 3303*4kB (UMEH) 1029*8kB (UMEH) 163*16kB (UMEH) 47*32kB (UMEH) 30*64kB (MH) 12*128kB (UMH) 23*256kB (UMH) 18*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44116kB [ 1185.271997][T23938] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1185.272064][T23938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1185.272075][T23938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1185.272087][T23938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1185.272098][T23938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1185.272105][T23938] 13469 total pagecache pages [ 1185.272112][T23938] 0 pages in swap cache [ 1185.272121][T23938] Swap cache stats: add 0, delete 0, find 0/0 [ 1185.272127][T23938] Free swap = 0kB [ 1185.272133][T23938] Total swap = 0kB [ 1185.272139][T23938] 1965979 pages RAM [ 1185.272145][T23938] 0 pages HighMem/MovableOnly [ 1185.272151][T23938] 349896 pages reserved [ 1185.272156][T23938] 0 pages cma reserved [ 1187.996204][T23974] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1187.996224][T23974] CPU: 0 PID: 23974 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1187.996233][T23974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.996239][T23974] Call Trace: [ 1187.996260][T23974] dump_stack+0x18f/0x20d [ 1187.996281][T23974] dump_header+0x106/0x60f [ 1187.996299][T23974] oom_kill_process.cold+0x10/0x15 [ 1187.996317][T23974] out_of_memory+0x358/0x13f0 [ 1187.996338][T23974] ? oom_killer_disable+0x270/0x270 [ 1187.996381][T23974] ? mutex_trylock+0x246/0x2c0 [ 1187.996410][T23974] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1187.996435][T23974] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1187.996480][T23974] ? warn_alloc+0x120/0x120 [ 1187.996499][T23974] ? fs_reclaim_release+0x90/0xd0 [ 1187.996528][T23974] ? lock_is_held_type+0xbb/0xf0 [ 1187.996545][T23974] ? ion_page_pool_alloc+0xba/0x270 [ 1187.996567][T23974] __alloc_pages_nodemask+0x62c/0x790 [ 1187.996585][T23974] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1187.996604][T23974] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1187.996621][T23974] ? wait_for_completion+0x260/0x260 [ 1187.996636][T23974] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1187.996656][T23974] alloc_pages_current+0x187/0x280 [ 1187.996675][T23974] ion_page_pool_alloc+0x17d/0x270 [ 1187.996692][T23974] ion_system_heap_allocate+0x246/0xd10 [ 1187.996713][T23974] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1187.996730][T23974] ? ion_system_heap_free+0x470/0x470 [ 1187.996746][T23974] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1187.996767][T23974] ion_ioctl+0x373/0xd20 [ 1187.996792][T23974] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1187.996810][T23974] ? _copy_to_user+0x126/0x160 [ 1187.996837][T23974] ? __fget_files+0x294/0x400 05:47:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:21 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:47:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe803, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x940b8) [ 1187.996856][T23974] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1187.996871][T23974] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1187.996888][T23974] __x64_sys_ioctl+0x193/0x200 [ 1187.996906][T23974] do_syscall_64+0x2d/0x70 [ 1187.996919][T23974] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1187.996941][T23974] RIP: 0033:0x45d4d9 [ 1187.996956][T23974] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1187.996964][T23974] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.996979][T23974] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1187.996996][T23974] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1187.997006][T23974] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1187.997014][T23974] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1187.997023][T23974] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 1187.997300][T23974] Mem-Info: [ 1187.997337][T23974] active_anon:7286 inactive_anon:301761 isolated_anon:0 [ 1187.997337][T23974] active_file:1435 inactive_file:2514 isolated_file:0 [ 1187.997337][T23974] unevictable:3 dirty:18 writeback:0 [ 1187.997337][T23974] slab_reclaimable:15569 slab_unreclaimable:105032 [ 1187.997337][T23974] mapped:56259 shmem:9536 pagetables:18532 bounce:0 [ 1187.997337][T23974] free:761512 free_pcp:351 free_cma:0 [ 1187.997369][T23974] Node 0 active_anon:15224kB inactive_anon:1185272kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214348kB dirty:0kB writeback:0kB shmem:24176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1021952kB writeback_tmp:0kB kernel_stack:23072kB all_unreclaimable? no [ 1187.997376][T23974] Node 0 DMA free:10268kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:200kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1187.997412][T23974] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1187.997434][T23974] Node 0 DMA32 free:44200kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15188kB inactive_anon:1185080kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52884kB bounce:0kB free_pcp:1404kB local_pcp:448kB free_cma:0kB [ 1187.997470][T23974] lowmem_reserve[]: 0 0 0 0 0 [ 1187.997493][T23974] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1187.997526][T23974] lowmem_reserve[]: 0 0 0 0 0 [ 1187.997549][T23974] Node 0 DMA: 35*4kB (UM) 4*8kB (UM) 7*16kB (M) 4*32kB (UM) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10268kB [ 1187.997637][T23974] Node 0 DMA32: 3118*4kB (UMEH) 1041*8kB (UME) 126*16kB (UMEH) 47*32kB (UMEH) 31*64kB (UMH) 12*128kB (UMH) 26*256kB (UMH) 19*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44224kB [ 1187.997720][T23974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1187.997784][T23974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.997796][T23974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.997808][T23974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1187.997819][T23974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.997826][T23974] 13510 total pagecache pages [ 1187.997834][T23974] 0 pages in swap cache [ 1187.997843][T23974] Swap cache stats: add 0, delete 0, find 0/0 [ 1187.997849][T23974] Free swap = 0kB [ 1187.997855][T23974] Total swap = 0kB [ 1187.997861][T23974] 1965979 pages RAM [ 1187.997867][T23974] 0 pages HighMem/MovableOnly [ 1187.997873][T23974] 349896 pages reserved [ 1187.997879][T23974] 0 pages cma reserved [ 1187.997889][T23974] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=23965,uid=0 [ 1187.997980][T23974] Out of memory: Killed process 23968 (syz-executor.4) total-vm:93548kB, anon-rss:2244kB, file-rss:35860kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1187.999852][ T1172] oom_reaper: reaped process 23968 (syz-executor.4), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 1190.799491][T24006] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1190.799510][T24006] CPU: 1 PID: 24006 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1190.799519][T24006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.799525][T24006] Call Trace: [ 1190.799546][T24006] dump_stack+0x18f/0x20d [ 1190.799567][T24006] dump_header+0x106/0x60f [ 1190.799586][T24006] oom_kill_process.cold+0x10/0x15 [ 1190.799602][T24006] out_of_memory+0x358/0x13f0 [ 1190.799623][T24006] ? oom_killer_disable+0x270/0x270 [ 1190.799644][T24006] ? mutex_trylock+0x246/0x2c0 [ 1190.799659][T24006] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1190.799677][T24006] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1190.799710][T24006] ? warn_alloc+0x120/0x120 [ 1190.799728][T24006] ? fs_reclaim_release+0x90/0xd0 [ 1190.799753][T24006] ? lock_is_held_type+0xbb/0xf0 [ 1190.799769][T24006] ? ion_page_pool_alloc+0xba/0x270 [ 1190.799791][T24006] __alloc_pages_nodemask+0x62c/0x790 [ 1190.799810][T24006] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1190.799834][T24006] ? wait_for_completion+0x260/0x260 [ 1190.799848][T24006] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1190.799867][T24006] alloc_pages_current+0x187/0x280 [ 1190.799886][T24006] ion_page_pool_alloc+0x17d/0x270 [ 1190.799905][T24006] ion_system_heap_allocate+0x246/0xd10 [ 1190.799926][T24006] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1190.799942][T24006] ? ion_system_heap_free+0x470/0x470 [ 1190.799959][T24006] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1190.799980][T24006] ion_ioctl+0x373/0xd20 [ 1190.800005][T24006] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1190.800024][T24006] ? _copy_to_user+0x126/0x160 [ 1190.800051][T24006] ? __fget_files+0x294/0x400 [ 1190.800072][T24006] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1190.800087][T24006] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1190.800106][T24006] __x64_sys_ioctl+0x193/0x200 [ 1190.800125][T24006] do_syscall_64+0x2d/0x70 [ 1190.800139][T24006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1190.800152][T24006] RIP: 0033:0x45d4d9 [ 1190.800178][T24006] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1190.800188][T24006] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1190.800203][T24006] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1190.800213][T24006] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1190.800223][T24006] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1190.800232][T24006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1190.800242][T24006] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 1190.800263][T24006] Mem-Info: [ 1190.800298][T24006] active_anon:7296 inactive_anon:301235 isolated_anon:0 [ 1190.800298][T24006] active_file:1442 inactive_file:2573 isolated_file:0 [ 1190.800298][T24006] unevictable:3 dirty:33 writeback:0 [ 1190.800298][T24006] slab_reclaimable:15588 slab_unreclaimable:105050 [ 1190.800298][T24006] mapped:56318 shmem:9546 pagetables:18518 bounce:0 [ 1190.800298][T24006] free:746492 free_pcp:257 free_cma:0 [ 1190.800330][T24006] Node 0 active_anon:15240kB inactive_anon:1183212kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214456kB dirty:4kB writeback:0kB shmem:24192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1021952kB writeback_tmp:0kB kernel_stack:22880kB all_unreclaimable? no [ 1190.800337][T24006] Node 0 DMA free:10268kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:36kB inactive_anon:200kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:56kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1190.800373][T24006] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1190.800587][T24006] Node 0 DMA32 free:46172kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15204kB inactive_anon:1183020kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52988kB bounce:0kB free_pcp:1028kB local_pcp:492kB free_cma:0kB [ 1190.800624][T24006] lowmem_reserve[]: 0 0 0 0 0 [ 1190.800647][T24006] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1190.800680][T24006] lowmem_reserve[]: 0 0 0 0 0 [ 1190.800703][T24006] Node 0 DMA: 35*4kB (UM) 4*8kB (UM) 7*16kB (M) 4*32kB (UM) 4*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 4*2048kB (UME) 0*4096kB = 10268kB [ 1190.800787][T24006] Node 0 DMA32: 3179*4kB (MEH) 1150*8kB (UMEH) 213*16kB (UME) 118*32kB (UMEH) 31*64kB (UMH) 12*128kB (UMH) 5*256kB (UMH) 6*512kB (U) 7*1024kB (U) 1*2048kB (M) 0*4096kB = 46188kB [ 1190.800875][T24006] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1190.800942][T24006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1190.800953][T24006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1190.800964][T24006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1190.800976][T24006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1190.800982][T24006] 13588 total pagecache pages [ 1190.800990][T24006] 0 pages in swap cache [ 1190.800999][T24006] Swap cache stats: add 0, delete 0, find 0/0 [ 1190.801005][T24006] Free swap = 0kB [ 1190.801011][T24006] Total swap = 0kB [ 1190.801018][T24006] 1965979 pages RAM [ 1190.801023][T24006] 0 pages HighMem/MovableOnly [ 1190.801029][T24006] 349896 pages reserved [ 1190.801035][T24006] 0 pages cma reserved [ 1190.801045][T24006] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=24000,uid=0 [ 1190.801123][T24006] Out of memory: Killed process 24003 (syz-executor.4) total-vm:93548kB, anon-rss:2244kB, file-rss:35888kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1190.802874][ T1172] oom_reaper: reaped process 24003 (syz-executor.4), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB 05:47:26 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:47:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x302, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:26 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x940b8) 05:47:26 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:47:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xf401, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:26 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x940b8) 05:47:26 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:47:27 executing program 5: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x940b8) 05:47:27 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:27 executing program 5: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x940b8) 05:47:27 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1204.009411][T24120] warn_alloc: 2 callbacks suppressed [ 1204.009432][T24120] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1204.226281][T24120] CPU: 0 PID: 24120 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1204.235000][T24120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.245067][T24120] Call Trace: [ 1204.248394][T24120] dump_stack+0x18f/0x20d [ 1204.252751][T24120] warn_alloc.cold+0x87/0x17a [ 1204.257432][T24120] ? zone_watermark_ok_safe+0x260/0x260 [ 1204.262985][T24120] ? __alloc_pages_direct_compact+0x366/0x420 [ 1204.269055][T24120] ? get_page_from_freelist+0x37f0/0x37f0 [ 1204.274777][T24120] ? psi_task_change+0x142/0x220 [ 1204.279719][T24120] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1204.284922][T24120] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1204.291527][T24120] ? lock_acquire+0x1f1/0xad0 [ 1204.296206][T24120] ? fs_reclaim_acquire+0xa1/0xf0 [ 1204.301235][T24120] ? warn_alloc+0x120/0x120 [ 1204.305747][T24120] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1204.311037][T24120] ? lock_is_held_type+0xbb/0xf0 [ 1204.315975][T24120] ? ion_page_pool_alloc+0xba/0x270 [ 1204.321180][T24120] __alloc_pages_nodemask+0x62c/0x790 [ 1204.326556][T24120] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1204.333323][T24120] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1204.339499][T24120] ? wait_for_completion+0x260/0x260 [ 1204.344782][T24120] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1204.351199][T24120] alloc_pages_current+0x187/0x280 [ 1204.356317][T24120] ion_page_pool_alloc+0x17d/0x270 [ 1204.361431][T24120] ion_system_heap_allocate+0x246/0xd10 [ 1204.366981][T24120] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1204.372533][T24120] ? ion_system_heap_free+0x470/0x470 [ 1204.377908][T24120] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1204.383461][T24120] ion_ioctl+0x373/0xd20 [ 1204.387740][T24120] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1204.392939][T24120] ? _copy_to_user+0x126/0x160 [ 1204.397734][T24120] ? __fget_files+0x294/0x400 [ 1204.402426][T24120] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1204.407364][T24120] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1204.412585][T24120] __x64_sys_ioctl+0x193/0x200 [ 1204.417357][T24120] do_syscall_64+0x2d/0x70 [ 1204.421775][T24120] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1204.427663][T24120] RIP: 0033:0x45d4d9 [ 1204.431561][T24120] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1204.451163][T24120] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.459570][T24120] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1204.467536][T24120] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1204.475546][T24120] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1204.483513][T24120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1204.491488][T24120] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 1205.665651][T24120] Mem-Info: [ 1205.668830][T24120] active_anon:7413 inactive_anon:301152 isolated_anon:0 [ 1205.668830][T24120] active_file:1432 inactive_file:4660 isolated_file:0 [ 1205.668830][T24120] unevictable:3 dirty:81 writeback:0 [ 1205.668830][T24120] slab_reclaimable:15618 slab_unreclaimable:104933 [ 1205.668830][T24120] mapped:57718 shmem:9673 pagetables:18416 bounce:0 [ 1205.668830][T24120] free:833090 free_pcp:721 free_cma:0 [ 1205.885742][T24120] Node 0 active_anon:15332kB inactive_anon:1182764kB active_file:36kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214512kB dirty:8kB writeback:0kB shmem:24280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1021952kB writeback_tmp:0kB kernel_stack:22784kB all_unreclaimable? no [ 1206.049798][T24120] Node 0 DMA free:10260kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:196kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.183037][T24120] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1206.226560][T24120] Node 0 DMA32 free:45700kB min:42060kB low:51036kB high:60012kB reserved_highatomic:2048KB active_anon:15292kB inactive_anon:1182568kB active_file:36kB inactive_file:20kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52456kB bounce:0kB free_pcp:1312kB local_pcp:416kB free_cma:0kB [ 1206.385811][T24120] lowmem_reserve[]: 0 0 0 0 0 [ 1206.390520][T24120] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.525660][T24120] lowmem_reserve[]: 0 0 0 0 0 [ 1206.530417][T24120] Node 0 DMA: 35*4kB (UM) 6*8kB (UM) 14*16kB (UM) 10*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 10268kB [ 1206.625655][T24120] Node 0 DMA32: 4322*4kB (UMEH) 1029*8kB (MEH) 124*16kB (UME) 42*32kB (UMEH) 33*64kB (UMH) 12*128kB (UMH) 13*256kB (UMH) 14*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 45040kB [ 1206.709773][T24120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1206.765774][T24120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.775343][T24120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1206.855725][T24120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.865300][T24120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1206.955660][T24120] 15776 total pagecache pages [ 1206.960368][T24120] 0 pages in swap cache [ 1206.964515][T24120] Swap cache stats: add 0, delete 0, find 0/0 [ 1207.025761][T24120] Free swap = 0kB [ 1207.029508][T24120] Total swap = 0kB [ 1207.033223][T24120] 1965979 pages RAM [ 1207.075653][T24120] 0 pages HighMem/MovableOnly [ 1207.080422][T24120] 349896 pages reserved [ 1207.084620][T24120] 0 pages cma reserved 05:47:30 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:47:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff00, 0x300, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:30 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:30 executing program 5: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x940b8) 05:47:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x303, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:31 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 05:47:31 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) [ 1208.005252][T24153] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 05:47:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) [ 1208.127408][T24153] CPU: 0 PID: 24153 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1208.136141][T24153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1208.146195][T24153] Call Trace: [ 1208.149494][T24153] dump_stack+0x18f/0x20d [ 1208.153833][T24153] dump_header+0x106/0x60f [ 1208.158255][T24153] oom_kill_process.cold+0x10/0x15 [ 1208.163375][T24153] out_of_memory+0x358/0x13f0 [ 1208.168064][T24153] ? oom_killer_disable+0x270/0x270 [ 1208.173277][T24153] ? mutex_trylock+0x246/0x2c0 [ 1208.178046][T24153] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1208.184732][T24153] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1208.191336][T24153] ? warn_alloc+0x120/0x120 [ 1208.195863][T24153] ? fs_reclaim_release+0x90/0xd0 [ 1208.200899][T24153] ? lock_is_held_type+0xbb/0xf0 [ 1208.205843][T24153] ? ion_page_pool_alloc+0xba/0x270 [ 1208.211050][T24153] __alloc_pages_nodemask+0x62c/0x790 [ 1208.216428][T24153] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1208.222613][T24153] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1208.229382][T24153] ? policy_node+0x14/0x140 [ 1208.233890][T24153] ? wait_for_completion+0x260/0x260 [ 1208.239172][T24153] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1208.245623][T24153] alloc_pages_current+0x187/0x280 [ 1208.250746][T24153] ion_page_pool_alloc+0x17d/0x270 [ 1208.255864][T24153] ion_system_heap_allocate+0x246/0xd10 [ 1208.261429][T24153] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1208.266974][T24153] ? ion_system_heap_free+0x470/0x470 [ 1208.272350][T24153] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1208.277904][T24153] ion_ioctl+0x373/0xd20 [ 1208.282161][T24153] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1208.287366][T24153] ? _copy_to_user+0x126/0x160 [ 1208.292145][T24153] ? __fget_files+0x294/0x400 [ 1208.296830][T24153] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1208.301778][T24153] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1208.306982][T24153] __x64_sys_ioctl+0x193/0x200 [ 1208.311759][T24153] do_syscall_64+0x2d/0x70 [ 1208.316179][T24153] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1208.322072][T24153] RIP: 0033:0x45d4d9 [ 1208.325977][T24153] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1208.345578][T24153] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1208.353988][T24153] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1208.361959][T24153] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1208.369929][T24153] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 05:47:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x44, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1208.377897][T24153] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1208.385957][T24153] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 1209.625700][T24153] Mem-Info: [ 1209.628882][T24153] active_anon:7449 inactive_anon:301147 isolated_anon:0 [ 1209.628882][T24153] active_file:1433 inactive_file:4665 isolated_file:0 [ 1209.628882][T24153] unevictable:3 dirty:56 writeback:0 [ 1209.628882][T24153] slab_reclaimable:15598 slab_unreclaimable:104146 [ 1209.628882][T24153] mapped:57725 shmem:9703 pagetables:18416 bounce:0 [ 1209.628882][T24153] free:841906 free_pcp:505 free_cma:0 [ 1209.816566][T24153] Node 0 active_anon:15336kB inactive_anon:1182984kB active_file:40kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214536kB dirty:8kB writeback:0kB shmem:24288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1021952kB writeback_tmp:0kB kernel_stack:22848kB all_unreclaimable? yes [ 1209.976537][T24153] Node 0 DMA free:10320kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:40kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1210.095759][T24153] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1210.101520][T24153] Node 0 DMA32 free:43544kB min:37964kB low:46940kB high:55916kB reserved_highatomic:2048KB active_anon:15296kB inactive_anon:1182792kB active_file:40kB inactive_file:12kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52680kB bounce:0kB free_pcp:2272kB local_pcp:1260kB free_cma:0kB [ 1210.311684][T24153] lowmem_reserve[]: 0 0 0 0 0 [ 1210.347375][T24153] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1210.495659][T24153] lowmem_reserve[]: 0 0 0 0 0 [ 1210.500562][T24153] Node 0 DMA: 4*4kB (UM) 28*8kB (UM) 15*16kB (UM) 10*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 10336kB [ 1210.567327][T24153] Node 0 DMA32: 8233*4kB (UMEH) 872*8kB (UMEH) 88*16kB (UMEH) 11*32kB (UMEH) 6*64kB (UH) 4*128kB (H) 3*256kB (H) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 45892kB [ 1210.645659][T24153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1210.695679][T24153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1210.705245][T24153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1210.775691][T24153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1210.785265][T24153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1210.865685][T24153] 15814 total pagecache pages [ 1210.870384][T24153] 0 pages in swap cache [ 1210.874530][T24153] Swap cache stats: add 0, delete 0, find 0/0 [ 1210.915663][T24153] Free swap = 0kB [ 1210.919408][T24153] Total swap = 0kB [ 1210.923122][T24153] 1965979 pages RAM [ 1210.985664][T24153] 0 pages HighMem/MovableOnly [ 1210.990371][T24153] 349896 pages reserved [ 1210.994517][T24153] 0 pages cma reserved [ 1211.035676][T24153] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=24144,uid=0 [ 1211.095680][T24153] Out of memory: OOM victim 24144 (syz-executor.4) is already exiting. Skip killing the task 05:47:34 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 05:47:34 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 05:47:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x304, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net\x00') fchdir(r2) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000200)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) close(r0) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000011c0)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40046305, {0x0, 0x40046306, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000100)=0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000e40)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x7}}, 0x0, 0x6, 0x6c, 0x1000, 0x2}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x400, 0xff, 0x10001, 0x0, 0x1, 0x8}, &(0x7f0000000080)=0x9c) 05:47:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x68, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:35 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000300)=""/181) [ 1211.420422][T24193] binder: 24177:24193 unknown command 0 [ 1211.480774][T24197] binder: 24177:24197 unknown command 0 [ 1211.496629][T24193] binder: 24177:24193 ioctl c0306201 200011c0 returned -22 [ 1211.569305][T24197] binder: 24177:24197 ioctl c0306201 20000080 returned -22 05:47:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c08, 0x0) 05:47:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x302, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1211.931553][T24192] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 05:47:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c08, &(0x7f0000000180)) [ 1212.051193][T24192] CPU: 1 PID: 24192 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1212.059900][T24192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.069956][T24192] Call Trace: [ 1212.073252][T24192] dump_stack+0x18f/0x20d [ 1212.077593][T24192] dump_header+0x106/0x60f [ 1212.082021][T24192] oom_kill_process.cold+0x10/0x15 [ 1212.087139][T24192] out_of_memory+0x358/0x13f0 [ 1212.091844][T24192] ? oom_killer_disable+0x270/0x270 [ 1212.097056][T24192] ? mutex_trylock+0x246/0x2c0 [ 1212.101908][T24192] ? __alloc_pages_slowpath.constprop.0+0xcc5/0x2860 [ 1212.108584][T24192] __alloc_pages_slowpath.constprop.0+0x2179/0x2860 [ 1212.115195][T24192] ? warn_alloc+0x120/0x120 [ 1212.119701][T24192] ? fs_reclaim_release+0x90/0xd0 [ 1212.124737][T24192] ? lock_is_held_type+0xbb/0xf0 [ 1212.129675][T24192] ? ion_page_pool_alloc+0xba/0x270 [ 1212.134881][T24192] __alloc_pages_nodemask+0x62c/0x790 [ 1212.140257][T24192] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1212.147033][T24192] ? wait_for_completion+0x260/0x260 [ 1212.152320][T24192] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1212.158745][T24192] alloc_pages_current+0x187/0x280 [ 1212.163865][T24192] ion_page_pool_alloc+0x17d/0x270 [ 1212.168982][T24192] ion_system_heap_allocate+0x246/0xd10 [ 1212.174538][T24192] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1212.180091][T24192] ? ion_system_heap_free+0x470/0x470 [ 1212.185470][T24192] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1212.191026][T24192] ion_ioctl+0x373/0xd20 [ 1212.194427][T24212] binder: 24177:24212 unknown command 0 05:47:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c02, &(0x7f0000000180)) [ 1212.195279][T24192] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1212.195299][T24192] ? _copy_to_user+0x126/0x160 [ 1212.195326][T24192] ? __fget_files+0x294/0x400 [ 1212.195346][T24192] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1212.195366][T24192] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1212.225596][T24192] __x64_sys_ioctl+0x193/0x200 [ 1212.230563][T24192] do_syscall_64+0x2d/0x70 [ 1212.234997][T24192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1212.236947][T24212] binder: 24177:24212 ioctl c0306201 200011c0 returned -22 [ 1212.240912][T24192] RIP: 0033:0x45d4d9 [ 1212.240930][T24192] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1212.240939][T24192] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.240954][T24192] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1212.240964][T24192] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1212.240973][T24192] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1212.240982][T24192] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1212.240990][T24192] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 1212.322086][T24193] binder: 24177:24193 unknown command 152 [ 1212.351526][T24193] binder: 24177:24193 ioctl c0306201 20000080 returned -22 [ 1213.190172][T24192] Mem-Info: [ 1213.202509][T24192] active_anon:7474 inactive_anon:300657 isolated_anon:0 [ 1213.202509][T24192] active_file:1436 inactive_file:4686 isolated_file:0 [ 1213.202509][T24192] unevictable:3 dirty:76 writeback:0 [ 1213.202509][T24192] slab_reclaimable:15588 slab_unreclaimable:104643 [ 1213.202509][T24192] mapped:57743 shmem:9726 pagetables:18398 bounce:0 [ 1213.202509][T24192] free:848821 free_pcp:646 free_cma:0 [ 1213.404585][T24192] Node 0 active_anon:15348kB inactive_anon:1180724kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214564kB dirty:8kB writeback:0kB shmem:24296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1019904kB writeback_tmp:0kB kernel_stack:22784kB all_unreclaimable? yes [ 1213.569753][T24192] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:52kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1213.723911][T24192] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1213.755805][T24192] Node 0 DMA32 free:42388kB min:37964kB low:46940kB high:55916kB reserved_highatomic:2048KB active_anon:15296kB inactive_anon:1180532kB active_file:40kB inactive_file:12kB unevictable:0kB writepending:8kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52456kB bounce:0kB free_pcp:1012kB local_pcp:928kB free_cma:0kB [ 1213.925292][T24192] lowmem_reserve[]: 0 0 0 0 0 [ 1213.954541][T24192] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1214.071096][T24192] lowmem_reserve[]: 0 0 0 0 0 [ 1214.092771][T24192] Node 0 DMA: 10*4kB (UM) 17*8kB (UM) 14*16kB (UM) 8*32kB (UM) 5*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 10320kB [ 1214.187945][T24192] Node 0 DMA32: 7241*4kB (UMEH) 862*8kB (UMEH) 100*16kB (UMEH) 77*32kB (UMEH) 14*64kB (UH) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42228kB [ 1214.285649][T24192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1214.345774][T24192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.390078][T24192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.434294][T24192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1214.479698][T24192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1214.530515][T24192] 15863 total pagecache pages [ 1214.550649][T24192] 0 pages in swap cache [ 1214.588419][T24192] Swap cache stats: add 0, delete 0, find 0/0 [ 1214.635754][T24192] Free swap = 0kB [ 1214.639524][T24192] Total swap = 0kB [ 1214.643236][T24192] 1965979 pages RAM [ 1214.684883][T24192] 0 pages HighMem/MovableOnly [ 1214.695796][T24192] 349896 pages reserved [ 1214.699956][T24192] 0 pages cma reserved [ 1214.704019][T24192] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14078,uid=0 [ 1214.805713][T24192] Out of memory: Killed process 14078 (syz-executor.2) total-vm:93416kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 05:47:38 executing program 0: 05:47:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x303, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:40 executing program 5: 05:47:40 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 05:47:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x305, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:40 executing program 5: 05:47:40 executing program 5: [ 1217.068865][T24223] warn_alloc: 2 callbacks suppressed [ 1217.068886][T24223] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1217.293967][T24223] CPU: 0 PID: 24223 Comm: syz-executor.1 Not tainted 5.9.0-rc1-syzkaller #0 [ 1217.310931][T24223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.320982][T24223] Call Trace: [ 1217.324280][T24223] dump_stack+0x18f/0x20d [ 1217.328620][T24223] warn_alloc.cold+0x87/0x17a [ 1217.333302][T24223] ? zone_watermark_ok_safe+0x260/0x260 [ 1217.338857][T24223] ? __alloc_pages_direct_compact+0x366/0x420 [ 1217.344925][T24223] ? get_page_from_freelist+0x37f0/0x37f0 [ 1217.350659][T24223] ? psi_task_change+0x142/0x220 [ 1217.355602][T24223] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1217.360807][T24223] __alloc_pages_slowpath.constprop.0+0x225a/0x2860 [ 1217.367404][T24223] ? lock_acquire+0x1f1/0xad0 [ 1217.372085][T24223] ? fs_reclaim_acquire+0xa1/0xf0 [ 1217.377115][T24223] ? warn_alloc+0x120/0x120 [ 1217.381630][T24223] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1217.386917][T24223] ? lock_is_held_type+0xbb/0xf0 [ 1217.391857][T24223] ? ion_page_pool_alloc+0xba/0x270 [ 1217.397193][T24223] __alloc_pages_nodemask+0x62c/0x790 [ 1217.402572][T24223] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 1217.409346][T24223] ? wait_for_completion+0x260/0x260 [ 1217.414632][T24223] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1217.421057][T24223] alloc_pages_current+0x187/0x280 [ 1217.426175][T24223] ion_page_pool_alloc+0x17d/0x270 [ 1217.431290][T24223] ion_system_heap_allocate+0x246/0xd10 [ 1217.436843][T24223] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1217.442386][T24223] ? ion_system_heap_free+0x470/0x470 [ 1217.447756][T24223] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 1217.453326][T24223] ion_ioctl+0x373/0xd20 [ 1217.457597][T24223] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1217.462797][T24223] ? _copy_to_user+0x126/0x160 [ 1217.467573][T24223] ? __fget_files+0x294/0x400 [ 1217.472261][T24223] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1217.477211][T24223] ? ion_buffer_destroy+0x2b0/0x2b0 [ 1217.482413][T24223] __x64_sys_ioctl+0x193/0x200 [ 1217.487182][T24223] do_syscall_64+0x2d/0x70 [ 1217.491598][T24223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1217.497489][T24223] RIP: 0033:0x45d4d9 [ 1217.501387][T24223] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1217.520992][T24223] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.529396][T24223] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d4d9 [ 1217.537363][T24223] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1217.545331][T24223] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1217.553297][T24223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1217.561269][T24223] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c 05:47:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x304, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:41 executing program 5: 05:47:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x307, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:41 executing program 5: 05:47:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 1219.231072][T24223] Mem-Info: [ 1219.234255][T24223] active_anon:7528 inactive_anon:300098 isolated_anon:0 [ 1219.234255][T24223] active_file:1439 inactive_file:4691 isolated_file:0 [ 1219.234255][T24223] unevictable:3 dirty:61 writeback:0 [ 1219.234255][T24223] slab_reclaimable:15587 slab_unreclaimable:104962 [ 1219.234255][T24223] mapped:57747 shmem:9778 pagetables:18395 bounce:0 [ 1219.234255][T24223] free:854575 free_pcp:260 free_cma:0 [ 1219.465752][T24223] Node 0 active_anon:15352kB inactive_anon:1178536kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214596kB dirty:24kB writeback:0kB shmem:24300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1019904kB writeback_tmp:0kB kernel_stack:22752kB all_unreclaimable? no [ 1219.625679][T24223] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:56kB inactive_anon:196kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:12kB present:15992kB managed:15908kB mlocked:0kB pagetables:52kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 05:47:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:43 executing program 5: timer_create(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) acct(&(0x7f00000000c0)='./file0\x00') clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) unlink(0x0) gettid() tkill(0x0, 0x0) 05:47:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x305, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1219.781177][T24223] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 1219.807773][T24223] Node 0 DMA32 free:46868kB min:37964kB low:46940kB high:55916kB reserved_highatomic:2048KB active_anon:15324kB inactive_anon:1178340kB active_file:36kB inactive_file:16kB unevictable:0kB writepending:12kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:52344kB bounce:0kB free_pcp:1216kB local_pcp:716kB free_cma:0kB [ 1220.024016][T24223] lowmem_reserve[]: 0 0 0 0 0 [ 1220.055758][T24223] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1220.238252][T24223] lowmem_reserve[]: 0 0 0 0 0 [ 1220.267198][T24223] Node 0 DMA: 50*4kB (U) 4*8kB (UM) 8*16kB (M) 8*32kB (UM) 6*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (U) 2*1024kB (UM) 3*2048kB (ME) 0*4096kB = 10344kB [ 1220.369277][T24223] Node 0 DMA32: 5846*4kB (UMEH) 1072*8kB (UMEH) 229*16kB (UMEH) 213*32kB (UMEH) 23*64kB (UH) 5*128kB (UH) 3*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45320kB [ 1221.305648][T24223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1221.374005][T24223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1221.413197][T24223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1221.465762][T24223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1221.475326][T24223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1221.565676][T24223] 15951 total pagecache pages [ 1221.570404][T24223] 0 pages in swap cache [ 1221.574555][T24223] Swap cache stats: add 0, delete 0, find 0/0 [ 1221.636778][T24223] Free swap = 0kB [ 1221.660780][T24223] Total swap = 0kB [ 1221.679318][T24223] 1965979 pages RAM [ 1221.703474][T24223] 0 pages HighMem/MovableOnly [ 1221.735682][T24223] 349896 pages reserved [ 1221.739854][T24223] 0 pages cma reserved 05:47:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x307, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:46 executing program 5: r0 = socket$inet(0x2, 0x803, 0x9) getsockopt(r0, 0xff, 0x0, 0x0, 0x0) 05:47:46 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010007, 0xffffffffffffffdf, 0x0, 0xffffffffffffffff, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 05:47:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x308, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:46 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x3001a, 0x0) 05:47:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xc, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x10}) 05:47:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 05:47:46 executing program 0: 05:47:46 executing program 5: 05:47:47 executing program 5: 05:47:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x30a, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:47 executing program 0: 05:47:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x308, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:47 executing program 0: 05:47:47 executing program 5: 05:47:47 executing program 1: 05:47:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:49 executing program 0: 05:47:49 executing program 1: 05:47:49 executing program 5: 05:47:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x30e, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x30a, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:49 executing program 5: 05:47:49 executing program 0: 05:47:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000140), 0x8c) 05:47:50 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f00000001c0)={r4}, 0x8) 05:47:50 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) 05:47:50 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 05:47:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:52 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000200), 0x8) 05:47:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000140)={r4, 0x2, "a7a1"}, &(0x7f00000000c0)=0xa) 05:47:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffffa}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x166, &(0x7f0000000300)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x30e, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x354, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/11, 0xb}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x75, &(0x7f00000001c0)="0100000087e7326bc88b9baf0500000032a5b60a00008024c30e478947d190ac004c45bec9c683f53b506b8c5893d35500c52c65ec345a8b75c1c317c3da822e15355c2ae26ba533fad72a1d53a9ff5b4ac51e08dcaeeb01eeb2dd9b56de54fcea571b152f7d37491e04451c47d280ce8f3e884f9f"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 05:47:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="b000000024000b0f00000000000000003f001200", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b0001"], 0xb0}}, 0x0) [ 1229.725335][T24388] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. 05:47:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x11a, &(0x7f00000001c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:47:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x368, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x354, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x368, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @const, @func_proto, @fwd]}, {0x0, [0x0, 0x0]}}, 0x0, 0xb8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:47:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x600, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:47:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x600, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1374.096159][ T1171] INFO: task syz-executor.1:24357 blocked for more than 143 seconds. [ 1374.104265][ T1171] Not tainted 5.9.0-rc1-syzkaller #0 [ 1374.145766][ T1171] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1374.154462][ T1171] task:syz-executor.1 state:D stack:29232 pid:24357 ppid: 6893 flags:0x00000004 [ 1374.242243][ T1171] Call Trace: [ 1374.245586][ T1171] __schedule+0x8e5/0x21e0 [ 1374.275843][ T1171] ? io_schedule_timeout+0x140/0x140 [ 1374.281150][ T1171] schedule+0xd0/0x2a0 [ 1374.285220][ T1171] schedule_preempt_disabled+0xf/0x20 [ 1374.345782][ T1171] __mutex_lock+0x3e2/0x10e0 [ 1374.350402][ T1171] ? lock_acquire+0x1f1/0xad0 [ 1374.355087][ T1171] ? _vm_unmap_aliases.part.0+0x35e/0x4d0 [ 1374.395790][ T1171] ? mutex_lock_io_nested+0xf60/0xf60 [ 1374.401185][ T1171] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1374.445787][ T1171] _vm_unmap_aliases.part.0+0x35e/0x4d0 [ 1374.451386][ T1171] vm_unmap_aliases+0x42/0x50 [ 1374.496307][ T1171] change_page_attr_set_clr+0x241/0x500 [ 1374.501873][ T1171] ? __change_page_attr_set_clr+0x24b0/0x24b0 [ 1374.545789][ T1171] ? find_vm_area+0x1c/0x190 [ 1374.550399][ T1171] ? lock_downgrade+0x830/0x830 [ 1374.555247][ T1171] ? do_raw_spin_lock+0x120/0x2b0 [ 1374.595794][ T1171] set_memory_ro+0x78/0xa0 [ 1374.600224][ T1171] ? set_memory_nx+0x110/0x110 [ 1374.605010][ T1171] ? _raw_spin_unlock+0x24/0x40 [ 1374.675828][ T1171] ? find_vm_area+0x145/0x190 [ 1374.680532][ T1171] bpf_int_jit_compile+0xd96/0x111e [ 1374.716706][ T1171] ? arch_prepare_bpf_dispatcher+0xc0/0xc0 [ 1374.722541][ T1171] bpf_prog_select_runtime+0x591/0xb00 [ 1374.775934][ T1171] bpf_migrate_filter+0x2dc/0x380 [ 1374.780987][ T1171] ? sk_filter_trim_cap+0x9c0/0x9c0 [ 1374.825864][ T1171] ? lockdep_hardirqs_on+0x60/0xf0 [ 1374.830996][ T1171] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1374.875825][ T1171] ? seccomp_check_filter+0xf9/0x1b0 [ 1374.881130][ T1171] bpf_prog_create_from_user+0x51b/0x660 [ 1374.919642][ T1171] ? hardlockup_detector_perf_enable.cold+0x1e/0x1e [ 1374.955841][ T1171] do_seccomp+0x7ba/0x2420 [ 1374.960270][ T1171] ? put_timespec64+0xcb/0x120 [ 1374.965032][ T1171] ? ns_to_timespec64+0xc0/0xc0 [ 1375.005793][ T1171] ? __seccomp_filter+0x1520/0x1520 [ 1375.011021][ T1171] ? lock_is_held_type+0xbb/0xf0 [ 1375.055887][ T1171] ? syscall_enter_from_user_mode+0x20/0x290 [ 1375.061909][ T1171] ? trace_hardirqs_on+0x5f/0x220 [ 1375.113101][ T1171] ? lockdep_hardirqs_on+0x76/0xf0 [ 1375.139927][ T1171] do_syscall_64+0x2d/0x70 [ 1375.144455][ T1171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1375.185842][ T1171] RIP: 0033:0x45d4d9 [ 1375.189767][ T1171] Code: Bad RIP value. [ 1375.193830][ T1171] RSP: 002b:00007f532fb68c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1375.275787][ T1171] RAX: ffffffffffffffda RBX: 0000000000026680 RCX: 000000000045d4d9 [ 1375.283797][ T1171] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 1375.335786][ T1171] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1375.343781][ T1171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1375.415792][ T1171] R13: 000000000169fb6f R14: 00007f532fb699c0 R15: 000000000118cf4c [ 1375.423839][ T1171] INFO: task syz-executor.1:24369 blocked for more than 144 seconds. [ 1375.495821][ T1171] Not tainted 5.9.0-rc1-syzkaller #0 [ 1375.501661][ T1171] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1375.545787][ T1171] task:syz-executor.1 state:D stack:29232 pid:24369 ppid: 24357 flags:0x00000004 [ 1375.554999][ T1171] Call Trace: [ 1375.605854][ T1171] __schedule+0x8e5/0x21e0 [ 1375.625812][ T1171] ? io_schedule_timeout+0x140/0x140 [ 1375.631113][ T1171] schedule+0xd0/0x2a0 [ 1375.635184][ T1171] schedule_preempt_disabled+0xf/0x20 [ 1375.715801][ T1171] __mutex_lock+0x3e2/0x10e0 [ 1375.720425][ T1171] ? lock_acquire+0x1f1/0xad0 [ 1375.725278][ T1171] ? _vm_unmap_aliases.part.0+0x35e/0x4d0 [ 1375.789505][ T1171] ? mutex_lock_io_nested+0xf60/0xf60 [ 1375.794927][ T1171] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1375.836624][ T1171] _vm_unmap_aliases.part.0+0x35e/0x4d0 [ 1375.842202][ T1171] vm_unmap_aliases+0x42/0x50 [ 1375.875809][ T1171] change_page_attr_set_clr+0x241/0x500 [ 1375.881372][ T1171] ? __change_page_attr_set_clr+0x24b0/0x24b0 [ 1375.935834][ T1171] ? find_vm_area+0x1c/0x190 [ 1375.940450][ T1171] ? lock_downgrade+0x830/0x830 [ 1375.945298][ T1171] ? do_raw_spin_lock+0x120/0x2b0 [ 1376.005798][ T1171] set_memory_ro+0x78/0xa0 [ 1376.010260][ T1171] ? set_memory_nx+0x110/0x110 [ 1376.015031][ T1171] ? _raw_spin_unlock+0x24/0x40 [ 1376.075780][ T1171] ? find_vm_area+0x145/0x190 [ 1376.080496][ T1171] bpf_int_jit_compile+0xd96/0x111e [ 1376.085700][ T1171] ? arch_prepare_bpf_dispatcher+0xc0/0xc0 [ 1376.145815][ T1171] bpf_prog_select_runtime+0x591/0xb00 [ 1376.151338][ T1171] bpf_migrate_filter+0x2dc/0x380 [ 1376.195838][ T1171] ? sk_filter_trim_cap+0x9c0/0x9c0 [ 1376.201064][ T1171] ? lockdep_hardirqs_on+0x60/0xf0 [ 1376.235835][ T1171] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1376.241742][ T1171] ? seccomp_check_filter+0xf9/0x1b0 [ 1376.295833][ T1171] bpf_prog_create_from_user+0x51b/0x660 [ 1376.301519][ T1171] ? hardlockup_detector_perf_enable.cold+0x1e/0x1e [ 1376.345856][ T1171] do_seccomp+0x7ba/0x2420 [ 1376.350303][ T1171] ? put_timespec64+0xcb/0x120 [ 1376.355063][ T1171] ? ns_to_timespec64+0xc0/0xc0 [ 1376.425798][ T1171] ? __seccomp_filter+0x1520/0x1520 [ 1376.431026][ T1171] ? lock_is_held_type+0xbb/0xf0 [ 1376.469840][ T1171] ? lock_is_held_type+0xbb/0xf0 [ 1376.474795][ T1171] ? syscall_enter_from_user_mode+0x20/0x290 [ 1376.515831][ T1171] ? trace_hardirqs_on+0x5f/0x220 [ 1376.520868][ T1171] ? lockdep_hardirqs_on+0x76/0xf0 [ 1376.555832][ T1171] do_syscall_64+0x2d/0x70 [ 1376.560260][ T1171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1376.615832][ T1171] RIP: 0033:0x45d4d9 [ 1376.619732][ T1171] Code: Bad RIP value. [ 1376.623791][ T1171] RSP: 002b:00007f532fb47c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1376.665772][ T1171] RAX: ffffffffffffffda RBX: 0000000000026680 RCX: 000000000045d4d9 [ 1376.673759][ T1171] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 1376.745823][ T1171] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 1376.753837][ T1171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 1376.805834][ T1171] R13: 000000000169fb6f R14: 00007f532fb489c0 R15: 000000000118cfec [ 1376.855824][ T1171] [ 1376.855824][ T1171] Showing all locks held in the system: [ 1376.863564][ T1171] 1 lock held by khungtaskd/1171: [ 1376.925874][ T1171] #0: ffffffff89bd6340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1376.972725][ T1171] 1 lock held by ion_system_heap/3563: [ 1376.995854][ T1171] 1 lock held by in:imklog/6518: [ 1377.000793][ T1171] #0: ffff888097921170 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1377.055778][ T1171] 2 locks held by agetty/6752: [ 1377.060559][ T1171] #0: ffff888090c14098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1377.115790][ T1171] #1: ffffc90000f902e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 1377.165894][ T1171] 1 lock held by syz-executor.2/14746: [ 1377.171373][ T1171] 1 lock held by syz-executor.2/15308: [ 1377.226666][ T1171] 2 locks held by syz-executor.2/15552: [ 1377.232242][ T1171] 2 locks held by syz-executor.2/15772: [ 1377.275773][ T1171] 1 lock held by syz-executor.2/15938: [ 1377.281252][ T1171] 1 lock held by syz-executor.2/16561: [ 1377.315777][ T1171] 1 lock held by syz-executor.2/16997: [ 1377.321288][ T1171] 2 locks held by kworker/u4:0/23339: [ 1377.375828][ T1171] 1 lock held by syz-executor.1/24357: [ 1377.381296][ T1171] #0: ffffffff89c83e28 (vmap_purge_lock){+.+.}-{3:3}, at: _vm_unmap_aliases.part.0+0x35e/0x4d0 [ 1377.435797][ T1171] 1 lock held by syz-executor.1/24369: [ 1377.441262][ T1171] #0: ffffffff89c83e28 (vmap_purge_lock){+.+.}-{3:3}, at: _vm_unmap_aliases.part.0+0x35e/0x4d0 [ 1377.515794][ T1171] [ 1377.518154][ T1171] ============================================= [ 1377.518154][ T1171] [ 1377.570135][ T1171] NMI backtrace for cpu 0 [ 1377.574476][ T1171] CPU: 0 PID: 1171 Comm: khungtaskd Not tainted 5.9.0-rc1-syzkaller #0 [ 1377.582702][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.592834][ T1171] Call Trace: [ 1377.596123][ T1171] dump_stack+0x18f/0x20d [ 1377.600456][ T1171] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1377.605657][ T1171] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1377.611290][ T1171] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1377.617270][ T1171] watchdog+0xd7d/0x1000 [ 1377.621513][ T1171] ? reset_hung_task_detector+0x30/0x30 [ 1377.627060][ T1171] kthread+0x3b5/0x4a0 [ 1377.631130][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 1377.636232][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 1377.641344][ T1171] ret_from_fork+0x1f/0x30 [ 1377.645985][ T1171] Sending NMI from CPU 0 to CPUs 1: [ 1377.651741][ C1] NMI backtrace for cpu 1 [ 1377.651748][ C1] CPU: 1 PID: 16997 Comm: syz-executor.2 Not tainted 5.9.0-rc1-syzkaller #0 [ 1377.651755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.651759][ C1] RIP: 0010:lock_release+0x1eb/0x8e0 [ 1377.651771][ C1] Code: 03 0f b6 14 11 65 4c 8b 3c 25 c0 fe 01 00 38 d0 7c 08 84 d2 0f 85 49 06 00 00 44 8b 05 8a e9 57 09 45 85 c0 0f 84 1c 02 00 00 <4d> 8d 8f e0 08 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ca 48 c1 [ 1377.651775][ C1] RSP: 0018:ffffc90015bcf880 EFLAGS: 00000002 [ 1377.651783][ C1] RAX: 0000000000000007 RBX: 0000000000000001 RCX: 1ffffffff15649a7 [ 1377.651789][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ab21ac8 [ 1377.651794][ C1] RBP: 1ffff92002b79f12 R08: 0000000000000001 R09: ffffffff8ab21acf [ 1377.651799][ C1] R10: fffffbfff1564359 R11: 0000000000000001 R12: ffffffff89bd6340 [ 1377.651805][ C1] R13: ffffffff836bb9f8 R14: 0000000000000000 R15: ffff88821473c240 [ 1377.651810][ C1] FS: 00007f1923160700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1377.651815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1377.651820][ C1] CR2: 00007f0ffb383000 CR3: 000000021396f000 CR4: 00000000001506e0 [ 1377.651826][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1377.651831][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1377.651834][ C1] Call Trace: [ 1377.651838][ C1] ? lock_downgrade+0x830/0x830 [ 1377.651842][ C1] ? lockdep_hardirqs_on+0x76/0xf0 [ 1377.651845][ C1] ? pipe_unlock+0x3d/0x70 [ 1377.651849][ C1] ? iter_file_splice_write+0x5f8/0xbe0 [ 1377.651853][ C1] aa_file_perm+0x5dd/0x1100 [ 1377.651857][ C1] ? __do_compat_sys_vmsplice+0x260/0x260 [ 1377.651861][ C1] ? aa_path_link+0x2f0/0x2f0 [ 1377.651865][ C1] ? generic_file_splice_read+0x108/0x6c0 [ 1377.651869][ C1] ? iov_iter_pipe+0xf1/0x2a0 [ 1377.651873][ C1] ? pipe_to_user+0x170/0x170 [ 1377.651877][ C1] apparmor_file_permission+0x163/0x4e0 [ 1377.651881][ C1] security_file_permission+0x56/0x560 [ 1377.651884][ C1] rw_verify_area+0x115/0x360 [ 1377.651888][ C1] do_splice_to+0x80/0x170 [ 1377.651892][ C1] splice_direct_to_actor+0x307/0x980 [ 1377.651896][ C1] ? generic_splice_sendpage+0x140/0x140 [ 1377.651900][ C1] ? do_splice_to+0x170/0x170 [ 1377.651904][ C1] ? security_file_permission+0x248/0x560 [ 1377.651908][ C1] do_splice_direct+0x1b3/0x280 [ 1377.651912][ C1] ? splice_direct_to_actor+0x980/0x980 [ 1377.651916][ C1] ? __sb_start_write+0x1d5/0x470 [ 1377.651919][ C1] do_sendfile+0x55f/0xd40 [ 1377.651923][ C1] ? do_compat_pwritev64+0x1b0/0x1b0 [ 1377.651927][ C1] ? __might_fault+0x190/0x1d0 [ 1377.651931][ C1] __x64_sys_sendfile64+0x149/0x210 [ 1377.651935][ C1] ? __ia32_sys_sendfile+0x220/0x220 [ 1377.651939][ C1] ? trace_hardirqs_on+0x5f/0x220 [ 1377.651942][ C1] ? lockdep_hardirqs_on+0x76/0xf0 [ 1377.651946][ C1] do_syscall_64+0x2d/0x70 [ 1377.651950][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1377.651953][ C1] RIP: 0033:0x45d4d9 [ 1377.651957][ C1] Code: Bad RIP value. [ 1377.651961][ C1] RSP: 002b:00007f192315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1377.651970][ C1] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045d4d9 [ 1377.651976][ C1] RDX: 00000000200001c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 1377.651981][ C1] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 1377.651986][ C1] R10: 00008080fffffffe R11: 0000000000000246 R12: 000000000118cf4c [ 1377.651992][ C1] R13: 000000000169fb6f R14: 00007f19231609c0 R15: 000000000118cf4c [ 1377.905768][ T1171] Kernel panic - not syncing: hung_task: blocked tasks [ 1378.002954][ T1171] CPU: 0 PID: 1171 Comm: khungtaskd Not tainted 5.9.0-rc1-syzkaller #0 [ 1378.011179][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.021244][ T1171] Call Trace: [ 1378.024552][ T1171] dump_stack+0x18f/0x20d [ 1378.028884][ T1171] panic+0x2e3/0x75c [ 1378.032776][ T1171] ? __warn_printk+0xf3/0xf3 [ 1378.037367][ T1171] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1378.042991][ T1171] ? preempt_schedule_thunk+0x16/0x18 [ 1378.048356][ T1171] ? watchdog.cold+0x5/0x16b [ 1378.052941][ T1171] ? watchdog+0xa82/0x1000 [ 1378.057361][ T1171] watchdog.cold+0x16/0x16b [ 1378.061865][ T1171] ? reset_hung_task_detector+0x30/0x30 [ 1378.067408][ T1171] kthread+0x3b5/0x4a0 [ 1378.071477][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 1378.076582][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 1378.081691][ T1171] ret_from_fork+0x1f/0x30 [ 1378.087598][ T1171] Kernel Offset: disabled [ 1378.091919][ T1171] Rebooting in 86400 seconds..