0kB local_pcp:0kB free_cma:0kB [ 1730.400276] ? lock_downgrade+0x740/0x740 [ 1730.432370] ? __fget+0x225/0x360 [ 1730.435822] ? do_vfs_ioctl+0xff0/0xff0 [ 1730.439807] ? security_file_ioctl+0x83/0xb0 [ 1730.444409] SyS_ioctl+0x7f/0xb0 [ 1730.447767] ? do_vfs_ioctl+0xff0/0xff0 [ 1730.451739] do_syscall_64+0x1d5/0x640 [ 1730.455627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1730.460828] RIP: 0033:0x466459 [ 1730.464009] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.471991] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1730.479260] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1730.486532] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1730.493812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1730.499693] lowmem_reserve[]: [ 1730.501075] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1730.503443] Node 0 [ 1730.509092] 0 [ 1730.512455] CPU: 0 PID: 6668 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1730.514636] 0 [ 1730.516430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.535366] Call Trace: [ 1730.538068] dump_stack+0x1b2/0x281 [ 1730.541715] warn_alloc.cold+0x96/0x1cc [ 1730.543468] 0 0 [ 1730.545688] ? zone_watermark_ok_safe+0x220/0x220 [ 1730.545701] ? usleep_range+0x130/0x130 [ 1730.547660] 0 [ 1730.552524] ? _find_next_bit+0xdb/0x100 [ 1730.552535] ? run_timer_softirq+0x5a0/0x5a0 [ 1730.552551] __alloc_pages_nodemask+0x2127/0x2720 [ 1730.552567] ? lock_acquire+0x170/0x3f0 [ 1730.552582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1730.552592] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1730.552612] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1730.562775] Normal: [ 1730.566857] alloc_pages_current+0x155/0x260 [ 1730.582202] Node 0 [ 1730.584989] ion_page_pool_alloc+0x118/0x1b0 [ 1730.602193] 0*4kB 0*8kB [ 1730.603835] ion_system_heap_allocate+0x133/0x8c0 [ 1730.603848] ? _raw_spin_unlock+0x29/0x40 [ 1730.606511] 0*16kB [ 1730.611340] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1730.611349] ? ion_system_contig_heap_create+0x130/0x130 [ 1730.611360] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1730.611373] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1730.611383] ion_alloc+0x27a/0x810 [ 1730.615526] DMA: [ 1730.617746] ? ion_dma_buf_release+0x40/0x40 [ 1730.642273] 107*4kB [ 1730.643523] ? __might_fault+0x177/0x1b0 [ 1730.647904] (UME) [ 1730.650216] ion_ioctl+0xea/0x1f0 [ 1730.650227] ? ion_query_heaps+0x360/0x360 [ 1730.650239] ? ion_query_heaps+0x360/0x360 [ 1730.650251] do_vfs_ioctl+0x75a/0xff0 [ 1730.654300] 0*32kB [ 1730.656445] ? ioctl_preallocate+0x1a0/0x1a0 [ 1730.663052] 0*64kB [ 1730.664093] ? lock_downgrade+0x740/0x740 [ 1730.668430] 0*128kB [ 1730.672240] ? __fget+0x225/0x360 [ 1730.672250] ? do_vfs_ioctl+0xff0/0xff0 [ 1730.672262] ? security_file_ioctl+0x83/0xb0 [ 1730.672272] SyS_ioctl+0x7f/0xb0 [ 1730.672281] ? do_vfs_ioctl+0xff0/0xff0 [ 1730.672293] do_syscall_64+0x1d5/0x640 [ 1730.672308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1730.703344] 5*8kB [ 1730.706724] RIP: 0033:0x466459 [ 1730.716185] 0*256kB [ 1730.717920] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.729083] (UM) [ 1730.731121] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1730.731129] 6*16kB [ 1730.733172] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1730.733181] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1730.743804] 0*512kB [ 1730.749914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1730.749919] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1730.750147] Bluetooth: hci1 command 0x0406 tx timeout [ 1730.762328] syz-executor.1: [ 1730.767247] warn_alloc_show_mem: 1 callbacks suppressed [ 1730.767250] Mem-Info: [ 1730.789067] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1730.790582] (UME) 1*32kB (M) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1730.804143] 0*1024kB [ 1730.813063] active_anon:73780 inactive_anon:35144 isolated_anon:0 [ 1730.813063] active_file:23 inactive_file:21 isolated_file:14 [ 1730.813063] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1730.813063] slab_reclaimable:12502 slab_unreclaimable:118993 [ 1730.813063] mapped:43899 shmem:35592 pagetables:4875 bounce:0 [ 1730.813063] free:13745 free_pcp:0 free_cma:0 [ 1730.829551] syz-executor.1 cpuset= [ 1730.852471] Node 0 DMA32: 775*4kB (UME) 125*8kB (UME) 55*16kB (ME) 382*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17524kB [ 1730.859087] 0*2048kB [ 1730.878432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.891739] Node 1 Normal: 130*4kB (UM) 73*8kB (UME) 38*16kB (UM) 779*32kB (UME) 233*64kB (U) 6*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42832kB [ 1730.892710] 0*4096kB [ 1730.906605] Node 0 active_anon:291868kB inactive_anon:117860kB active_file:76kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:120496kB dirty:0kB writeback:0kB shmem:119512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 223232kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1730.912267] / [ 1730.937611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.948221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.951461] = 0kB [ 1730.956929] Node 1 active_anon:3252kB inactive_anon:22716kB active_file:16kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55100kB dirty:0kB writeback:0kB shmem:22856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1730.958912] Node 1 [ 1730.987203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.987210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.987214] 35636 total pagecache pages [ 1730.987223] 0 pages in swap cache [ 1730.987228] Swap cache stats: add 0, delete 0, find 0/0 [ 1730.987232] Free swap = 0kB [ 1730.987235] Total swap = 0kB [ 1730.987242] 2097051 pages RAM [ 1730.987246] 0 pages HighMem/MovableOnly [ 1730.987249] 363848 pages reserved [ 1730.987253] 0 pages cma reserved [ 1731.017157] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.017185] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1731.017207] Node 0 DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:291864kB inactive_anon:117860kB active_file:76kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17056kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1731.017231] lowmem_reserve[]: 0 0 0 0 0 [ 1731.017253] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.017275] lowmem_reserve[]: 0 0 0 0 0 [ 1731.017296] Node 1 Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:3252kB inactive_anon:22716kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2436kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1731.017320] lowmem_reserve[]: 0 0 0 0 0 [ 1731.017341] Node 0 DMA: 92*4kB (UME) 5*8kB (UM) 6*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10968kB [ 1731.017427] Node 0 DMA32: 773*4kB (UME) 125*8kB (UME) 56*16kB (UME) 188*32kB (UME) 60*64kB (U) 27*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18300kB [ 1731.017501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1731.017555] Node 1 Normal: 107*4kB (UM) 69*8kB (ME) 36*16kB (UM) 284*32kB (UME) 233*64kB (U) 6*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26836kB [ 1731.017637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.017644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1731.017651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.017658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1731.017662] 35636 total pagecache pages [ 1731.017673] 0 pages in swap cache [ 1731.017679] Swap cache stats: add 0, delete 0, find 0/0 [ 1731.017683] Free swap = 0kB [ 1731.017686] Total swap = 0kB [ 1731.017692] 2097051 pages RAM [ 1731.017696] 0 pages HighMem/MovableOnly [ 1731.017700] 363848 pages reserved [ 1731.017703] 0 pages cma reserved [ 1731.051215] mems_allowed=0-1 [ 1731.051270] CPU: 0 PID: 6666 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1731.051277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.051281] Call Trace: [ 1731.051302] dump_stack+0x1b2/0x281 [ 1731.051317] warn_alloc.cold+0x96/0x1cc [ 1731.051331] ? zone_watermark_ok_safe+0x220/0x220 [ 1731.051342] ? usleep_range+0x130/0x130 [ 1731.051355] ? _find_next_bit+0xdb/0x100 [ 1731.051366] ? run_timer_softirq+0x5a0/0x5a0 [ 1731.051385] __alloc_pages_nodemask+0x2127/0x2720 [ 1731.051403] ? lock_acquire+0x170/0x3f0 [ 1731.051420] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1731.051431] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1731.051448] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1731.051469] alloc_pages_current+0x155/0x260 [ 1731.051482] ion_page_pool_alloc+0x118/0x1b0 [ 1731.051493] ion_system_heap_allocate+0x133/0x8c0 [ 1731.051505] ? _raw_spin_unlock+0x29/0x40 [ 1731.051514] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1731.051525] ? ion_system_contig_heap_create+0x130/0x130 [ 1731.051536] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1731.051547] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1731.051559] ion_alloc+0x27a/0x810 [ 1731.051573] ? ion_dma_buf_release+0x40/0x40 [ 1731.051592] ? __might_fault+0x177/0x1b0 [ 1731.051604] ion_ioctl+0xea/0x1f0 [ 1731.051614] ? ion_query_heaps+0x360/0x360 [ 1731.051628] ? ion_query_heaps+0x360/0x360 [ 1731.051638] do_vfs_ioctl+0x75a/0xff0 [ 1731.051653] ? ioctl_preallocate+0x1a0/0x1a0 [ 1731.051662] ? lock_downgrade+0x740/0x740 [ 1731.051676] ? __fget+0x225/0x360 [ 1731.051687] ? do_vfs_ioctl+0xff0/0xff0 [ 1731.051699] ? security_file_ioctl+0x83/0xb0 [ 1731.051710] SyS_ioctl+0x7f/0xb0 [ 1731.051719] ? do_vfs_ioctl+0xff0/0xff0 [ 1731.051731] do_syscall_64+0x1d5/0x640 [ 1731.051747] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1731.051755] RIP: 0033:0x466459 [ 1731.051761] RSP: 002b:00007f825f75d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.051772] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1731.051778] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1731.051784] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1731.051790] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1731.051796] R13: 00007ffe46ca2e4f R14: 00007f825f75d300 R15: 0000000000022000 [ 1731.109062] Normal: 107*4kB (UM) 69*8kB (ME) 36*16kB (UM) 284*32kB (UME) 233*64kB (U) 6*128kB (U) 2*256kB (U) 0*512kB 80*1024kB (U) 13*2048kB (U) 0*4096kB = 135380kB [ 1731.109130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.109135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1731.109141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.109146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1731.109149] 35631 total pagecache pages [ 1731.109158] 0 pages in swap cache [ 1731.109162] Swap cache stats: add 0, delete 0, find 0/0 [ 1731.109165] Free swap = 0kB [ 1731.109168] Total swap = 0kB [ 1731.109174] 2097051 pages RAM [ 1731.109177] 0 pages HighMem/MovableOnly [ 1731.109181] 363848 pages reserved [ 1731.109183] 0 pages cma reserved [ 1731.109190] Out of memory (oom_kill_allocating_task): Kill process 6709 (systemd-journal) score 0 or sacrifice child [ 1731.109219] Killed process 6709 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1292kB [ 1731.174364] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1731.181756] systemd[1]: Failed to start Journal Service. [ 1731.238150] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1731.242687] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1731.242980] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 04:32:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) fstat(r0, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x3}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={r2, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f00000000c0)={r4, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000180)={r4, 0x2}) 04:32:30 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000), 0x0) 04:32:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) fstat(r0, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x3}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={r2, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f00000000c0)={r4, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000180)={r4, 0x2}) 04:32:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x10bea7818cacfb5f}) [ 1731.244481] systemd[1]: Stopped Journal Service. [ 1731.700252] systemd-journald[6710]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1733.777529] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1733.777757] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1733.804722] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1733.824275] CPU: 1 PID: 6714 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1733.832079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.839068] syz-executor.1 cpuset= [ 1733.841430] Call Trace: [ 1733.841432] / mems_allowed=0-1 [ 1733.844975] dump_stack+0x1b2/0x281 [ 1733.854354] warn_alloc.cold+0x96/0x1cc [ 1733.858345] ? zone_watermark_ok_safe+0x220/0x220 [ 1733.863221] __alloc_pages_nodemask+0x2127/0x2720 [ 1733.868061] ? _raw_spin_unlock_irq+0x24/0x80 [ 1733.872555] ? lock_acquire+0x170/0x3f0 [ 1733.876534] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1733.881479] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1733.886923] ? __mutex_unlock_slowpath+0x75/0x770 [ 1733.891771] alloc_pages_current+0x155/0x260 [ 1733.896186] ion_page_pool_alloc+0x118/0x1b0 [ 1733.900591] ion_system_heap_allocate+0x133/0x8c0 [ 1733.905425] ? ion_alloc+0x187/0x810 [ 1733.909133] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1733.914594] ? ion_system_contig_heap_create+0x130/0x130 [ 1733.920065] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1733.925078] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1733.929919] ion_alloc+0x204/0x810 [ 1733.933467] ? ion_dma_buf_release+0x40/0x40 [ 1733.937880] ? __might_fault+0x177/0x1b0 [ 1733.941941] ion_ioctl+0xea/0x1f0 [ 1733.945384] ? ion_query_heaps+0x360/0x360 [ 1733.949612] ? ion_query_heaps+0x360/0x360 [ 1733.953847] do_vfs_ioctl+0x75a/0xff0 [ 1733.957649] ? ioctl_preallocate+0x1a0/0x1a0 [ 1733.962066] ? lock_downgrade+0x740/0x740 [ 1733.966221] ? __fget+0x225/0x360 [ 1733.969666] ? do_vfs_ioctl+0xff0/0xff0 [ 1733.973640] ? security_file_ioctl+0x83/0xb0 [ 1733.978061] SyS_ioctl+0x7f/0xb0 [ 1733.981423] ? do_vfs_ioctl+0xff0/0xff0 [ 1733.985391] do_syscall_64+0x1d5/0x640 [ 1733.989284] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1733.995622] RIP: 0033:0x466459 [ 1733.998806] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.006522] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1734.013783] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1734.021050] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1734.028310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1734.035574] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1734.042858] CPU: 0 PID: 6715 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1734.050661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.060012] Call Trace: [ 1734.062607] dump_stack+0x1b2/0x281 [ 1734.066237] warn_alloc.cold+0x96/0x1cc [ 1734.070212] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.075227] ? zone_watermark_ok_safe+0x220/0x220 [ 1734.080094] __alloc_pages_nodemask+0x2127/0x2720 [ 1734.084942] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1734.089449] ? finish_task_switch+0x178/0x610 [ 1734.093947] ? finish_task_switch+0x14d/0x610 [ 1734.098483] ? lock_acquire+0x170/0x3f0 [ 1734.102484] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.107341] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1734.112799] ? __mutex_unlock_slowpath+0x75/0x770 [ 1734.118083] ? alloc_pages_current+0x37/0x260 [ 1734.122587] alloc_pages_current+0x155/0x260 [ 1734.127025] ion_page_pool_alloc+0x118/0x1b0 [ 1734.131450] ion_system_heap_allocate+0x133/0x8c0 [ 1734.136294] ? ion_alloc+0x187/0x810 [ 1734.140012] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1734.145466] ? ion_system_contig_heap_create+0x130/0x130 [ 1734.150937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.155977] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1734.160826] ion_alloc+0x204/0x810 [ 1734.164372] ? ion_dma_buf_release+0x40/0x40 [ 1734.168789] ? __might_fault+0x177/0x1b0 [ 1734.172874] ion_ioctl+0xea/0x1f0 [ 1734.176327] ? ion_query_heaps+0x360/0x360 [ 1734.180557] ? ion_query_heaps+0x360/0x360 [ 1734.184797] do_vfs_ioctl+0x75a/0xff0 [ 1734.188594] ? ioctl_preallocate+0x1a0/0x1a0 [ 1734.193526] ? lock_downgrade+0x740/0x740 [ 1734.197671] ? __fget+0x225/0x360 [ 1734.201133] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.205118] ? security_file_ioctl+0x83/0xb0 [ 1734.209520] SyS_ioctl+0x7f/0xb0 [ 1734.212876] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.216855] do_syscall_64+0x1d5/0x640 [ 1734.220737] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1734.225920] RIP: 0033:0x466459 [ 1734.229098] RSP: 002b:00007f825f75d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.237059] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1734.244320] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1734.251583] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1734.258856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1734.266126] R13: 00007ffe46ca2e4f R14: 00007f825f75d300 R15: 0000000000022000 [ 1734.426373] warn_alloc_show_mem: 2 callbacks suppressed [ 1734.426377] Mem-Info: [ 1734.448965] active_anon:74723 inactive_anon:37176 isolated_anon:0 [ 1734.448965] active_file:1132 inactive_file:1489 isolated_file:19 [ 1734.448965] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1734.448965] slab_reclaimable:12483 slab_unreclaimable:117910 [ 1734.448965] mapped:45957 shmem:37639 pagetables:4855 bounce:0 [ 1734.448965] free:61796 free_pcp:239 free_cma:0 [ 1734.582216] Node 0 active_anon:296132kB inactive_anon:125992kB active_file:2932kB inactive_file:2968kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:126204kB dirty:24kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1734.645966] Node 1 active_anon:2860kB inactive_anon:22712kB active_file:652kB inactive_file:1404kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:72124kB dirty:4kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1734.695526] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.736641] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1734.743949] Node 0 DMA32 free:20760kB min:36200kB low:45248kB high:54296kB active_anon:296128kB inactive_anon:125992kB active_file:2152kB inactive_file:2088kB unevictable:0kB writepending:24kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:17044kB bounce:0kB free_pcp:112kB local_pcp:32kB free_cma:0kB [ 1734.792320] lowmem_reserve[]: 0 0 0 0 0 [ 1734.796350] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.826450] syz-executor.4 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1734.861011] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1734.866177] CPU: 1 PID: 6722 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1734.873968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.883322] Call Trace: [ 1734.885905] dump_stack+0x1b2/0x281 [ 1734.889523] dump_header+0x178/0x82f [ 1734.893226] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1734.898313] ? ___ratelimit+0x2cd/0x530 [ 1734.902297] oom_kill_process.cold+0x10/0xa40 [ 1734.906792] out_of_memory+0xe3e/0x1190 [ 1734.910759] ? oom_killer_disable+0x1c0/0x1c0 [ 1734.915257] ? mutex_trylock+0x152/0x1a0 [ 1734.919481] __alloc_pages_nodemask+0x23e1/0x2720 [ 1734.924317] ? ____cache_alloc_node+0xf4/0x1d0 [ 1734.928889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.933717] ? do_raw_spin_unlock+0x164/0x220 [ 1734.938201] ? _raw_spin_unlock+0x29/0x40 [ 1734.942349] alloc_pages_current+0x155/0x260 [ 1734.946748] __vmalloc_area_node+0x40a/0x680 [ 1734.951168] ? __vmalloc_node_range+0x150/0x150 [ 1734.955833] ? __get_vm_area_node+0x27d/0x340 [ 1734.964143] __vmalloc_node_range+0xbe/0x150 [ 1734.968555] vmalloc_user+0x47/0xa0 [ 1734.972168] ? kcov_mmap+0x2b/0x120 [ 1734.975781] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.980779] kcov_mmap+0x2b/0x120 [ 1734.984220] ? kmem_cache_alloc+0x35f/0x3c0 [ 1734.988538] mmap_region+0xa1a/0x1220 [ 1734.992334] do_mmap+0x5b3/0xcb0 [ 1734.995693] vm_mmap_pgoff+0x14e/0x1a0 [ 1734.999595] ? vma_is_stack_for_current+0xb0/0xb0 [ 1735.004428] ? __fget+0x225/0x360 [ 1735.007870] SyS_mmap_pgoff+0x249/0x510 [ 1735.011850] ? find_mergeable_anon_vma+0x230/0x230 [ 1735.016768] ? do_syscall_64+0x4c/0x640 [ 1735.020742] ? align_vdso_addr+0x250/0x250 [ 1735.024962] do_syscall_64+0x1d5/0x640 [ 1735.028846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1735.034021] RIP: 0033:0x4664a2 [ 1735.037198] RSP: 002b:00007ffeacb39eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1735.044897] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004664a2 [ 1735.052155] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1735.059411] RBP: 0000000000000000 R08: 00000000000000f0 R09: 0000000000000000 [ 1735.066665] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056c5d0 [ 1735.073919] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f1 [ 1735.109086] lowmem_reserve[]: 0 0 0 0 0 [ 1735.113116] Node 1 Normal free:26360kB min:53696kB low:67120kB high:80544kB active_anon:2956kB inactive_anon:22712kB active_file:404kB inactive_file:128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.113812] Mem-Info: [ 1735.166406] active_anon:74772 inactive_anon:37176 isolated_anon:0 [ 1735.166406] active_file:42 inactive_file:37 isolated_file:0 [ 1735.166406] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1735.166406] slab_reclaimable:12483 slab_unreclaimable:117521 [ 1735.166406] mapped:48013 shmem:37639 pagetables:4868 bounce:0 [ 1735.166406] free:13991 free_pcp:0 free_cma:0 [ 1735.168139] lowmem_reserve[]: 0 0 0 0 0 [ 1735.203708] Node 0 DMA: 374*4kB (UME) 83*8kB (UM) 8*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 1735.214268] Node 0 active_anon:296132kB inactive_anon:125992kB active_file:104kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121912kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1735.227278] Node 0 DMA32: 735*4kB (UME) 179*8kB (UME) 96*16kB (UME) 58*32kB (UME) 30*64kB (M) 15*128kB (M) 10*256kB (UM) 6*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 19284kB [ 1735.292420] Node 1 active_anon:2956kB inactive_anon:22712kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70140kB dirty:0kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1735.296172] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1735.339057] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.348759] Node 1 [ 1735.377698] syz-executor.0: [ 1735.379714] Normal: [ 1735.380036] page allocation failure: order:0 [ 1735.382954] 69*4kB [ 1735.385263] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1735.397246] (UM) [ 1735.400325] (null) [ 1735.406406] 50*8kB [ 1735.408621] syz-executor.0 cpuset= [ 1735.408623] (UME) 19*16kB [ 1735.419135] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1735.423982] (UM) [ 1735.427088] Node 0 [ 1735.427092] 797*32kB (UME) [ 1735.435429] DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:296128kB inactive_anon:125992kB active_file:48kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:17048kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1735.435578] / [ 1735.438359] lowmem_reserve[]: [ 1735.475190] 0*64kB [ 1735.477264] 0 [ 1735.478322] 0*128kB [ 1735.480577] 0 0 0 [ 1735.482374] 0*256kB [ 1735.484700] 0 [ 1735.486830] 0*512kB [ 1735.499952] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.500644] 0*1024kB [ 1735.534155] mems_allowed=0-1 [ 1735.536035] 0*2048kB [ 1735.536578] CPU: 0 PID: 6672 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1735.542410] 0*4096kB [ 1735.549842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.549847] Call Trace: [ 1735.549869] dump_stack+0x1b2/0x281 [ 1735.549883] warn_alloc.cold+0x96/0x1cc [ 1735.549896] ? zone_watermark_ok_safe+0x220/0x220 [ 1735.549907] ? usleep_range+0x130/0x130 [ 1735.549917] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1735.549930] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1735.561754] = 26484kB [ 1735.564253] ? run_timer_softirq+0x5a0/0x5a0 [ 1735.567859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.571833] __alloc_pages_nodemask+0x2127/0x2720 [ 1735.571851] ? lock_acquire+0x170/0x3f0 [ 1735.571866] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1735.571876] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1735.571894] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1735.571915] alloc_pages_current+0x155/0x260 [ 1735.571926] ion_page_pool_alloc+0x118/0x1b0 [ 1735.585398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.585822] ion_system_heap_allocate+0x133/0x8c0 [ 1735.590856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.593215] ? _raw_spin_unlock+0x29/0x40 [ 1735.597593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.606417] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1735.606426] ? ion_system_contig_heap_create+0x130/0x130 [ 1735.606437] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1735.606448] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1735.606458] ion_alloc+0x27a/0x810 [ 1735.606471] ? ion_dma_buf_release+0x40/0x40 [ 1735.606482] ? __might_fault+0x177/0x1b0 [ 1735.606494] ion_ioctl+0xea/0x1f0 [ 1735.606504] ? ion_query_heaps+0x360/0x360 [ 1735.606516] ? ion_query_heaps+0x360/0x360 [ 1735.606526] do_vfs_ioctl+0x75a/0xff0 [ 1735.606538] ? ioctl_preallocate+0x1a0/0x1a0 [ 1735.606550] ? lock_downgrade+0x740/0x740 [ 1735.619877] 37715 total pagecache pages [ 1735.620187] ? __fget+0x225/0x360 [ 1735.624655] 0 pages in swap cache [ 1735.630089] ? do_vfs_ioctl+0xff0/0xff0 [ 1735.630102] ? security_file_ioctl+0x83/0xb0 [ 1735.630118] SyS_ioctl+0x7f/0xb0 [ 1735.630128] ? do_vfs_ioctl+0xff0/0xff0 [ 1735.630140] do_syscall_64+0x1d5/0x640 [ 1735.630155] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1735.630164] RIP: 0033:0x466459 [ 1735.630169] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.630179] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1735.630185] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1735.630194] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1735.643495] Swap cache stats: add 0, delete 0, find 0/0 [ 1735.647541] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1735.655758] Free swap = 0kB [ 1735.661181] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1735.669653] Bluetooth: hci2 command 0x0406 tx timeout [ 1735.684068] Total swap = 0kB [ 1735.691396] lowmem_reserve[]: [ 1735.705878] 2097051 pages RAM [ 1735.711351] 0 [ 1735.718181] 0 pages HighMem/MovableOnly [ 1735.721417] 0 [ 1735.744095] 363848 pages reserved [ 1735.752775] 0 [ 1735.765150] 0 pages cma reserved [ 1735.768805] 0 [ 1735.859175] warn_alloc_show_mem: 1 callbacks suppressed [ 1735.859179] Mem-Info: [ 1735.873632] active_anon:74772 inactive_anon:37176 isolated_anon:0 [ 1735.873632] active_file:42 inactive_file:33 isolated_file:0 [ 1735.873632] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1735.873632] slab_reclaimable:12483 slab_unreclaimable:117521 [ 1735.873632] mapped:48013 shmem:37639 pagetables:4868 bounce:0 [ 1735.873632] free:13845 free_pcp:30 free_cma:0 [ 1735.896353] 0 [ 1735.913464] Node 0 active_anon:296132kB inactive_anon:125992kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121912kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 227328kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1735.949755] Node 1 active_anon:2956kB inactive_anon:22712kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70140kB dirty:0kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1735.964482] Node 1 [ 1735.983800] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.990880] Normal free:26360kB min:53696kB low:67120kB high:80544kB active_anon:2956kB inactive_anon:22712kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1736.018377] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1736.052106] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:296128kB inactive_anon:125992kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:17048kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1736.054384] lowmem_reserve[]: [ 1736.090381] lowmem_reserve[]: 0 0 0 0 0 [ 1736.094105] 0 0 [ 1736.097515] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1736.106430] 0 [ 1736.134043] lowmem_reserve[]: 0 0 0 0 0 [ 1736.137228] 0 [ 1736.142038] Node 1 [ 1736.143361] 0 [ 1736.143860] Normal free:26484kB min:53696kB low:67120kB high:80544kB active_anon:2956kB inactive_anon:22712kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1736.147846] lowmem_reserve[]: 0 0 0 0 0 [ 1736.188259] Node 0 [ 1736.188514] Node 0 [ 1736.188517] DMA: 374*4kB [ 1736.192749] DMA: [ 1736.195290] (UME) [ 1736.195789] 374*4kB [ 1736.197839] 83*8kB [ 1736.206227] (UME) 83*8kB (UM) 8*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 1736.214967] (UM) 8*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10960kB [ 1736.230838] Node 0 DMA32: 733*4kB (ME) 179*8kB (UME) 96*16kB (UME) 57*32kB (ME) 31*64kB (UM) 15*128kB (M) 9*256kB (M) 5*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 18540kB [ 1736.253557] Node 0 [ 1736.274170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1736.277584] DMA32: [ 1736.295771] Node 1 Normal: 69*4kB (UM) 50*8kB (UME) 19*16kB (UM) 797*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26484kB [ 1736.299275] 733*4kB [ 1736.320153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.323673] (ME) [ 1736.337787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.338507] 179*8kB [ 1736.341937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.358032] (UME) 96*16kB (UME) 57*32kB (ME) 31*64kB (UM) 15*128kB (M) 9*256kB (M) 5*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 18540kB [ 1736.367734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.384186] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1736.389121] 37671 total pagecache pages [ 1736.398931] 0 pages in swap cache [ 1736.407174] Node 1 Normal: 69*4kB (UM) 50*8kB (UME) 19*16kB (UM) 797*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26484kB [ 1736.410769] Swap cache stats: add 0, delete 0, find 0/0 [ 1736.432759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.434467] Free swap = 0kB [ 1736.447187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.449053] Total swap = 0kB [ 1736.458788] 2097051 pages RAM [ 1736.465705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.472077] 0 pages HighMem/MovableOnly [ 1736.476658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.478507] 363848 pages reserved [ 1736.497043] 0 pages cma reserved [ 1736.512779] 37782 total pagecache pages [ 1736.519997] 0 pages in swap cache [ 1736.532375] Swap cache stats: add 0, delete 0, find 0/0 [ 1736.537847] Free swap = 0kB [ 1736.559199] Total swap = 0kB [ 1736.566532] 2097051 pages RAM [ 1736.586326] 0 pages HighMem/MovableOnly [ 1736.619622] 363848 pages reserved [ 1736.623200] 0 pages cma reserved [ 1736.626585] Out of memory (oom_kill_allocating_task): Kill process 6722 (syz-executor.4) score 0 or sacrifice child [ 1736.676785] Killed process 6722 (syz-executor.4) total-vm:66492kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1736.735427] oom_reaper: reaped process 6722 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:32:34 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:32:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x12}}, 0x10) 04:32:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x10bea7818cacfb5f}) 04:32:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x10bea7818cacfb5f}) 04:32:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc}) 04:32:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4040, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) 04:32:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc}) 04:32:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc}) [ 1737.658846] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1737.732686] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1737.763223] CPU: 1 PID: 6738 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1737.771066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.780431] Call Trace: [ 1737.783016] dump_stack+0x1b2/0x281 [ 1737.786639] warn_alloc.cold+0x96/0x1cc [ 1737.790605] ? zone_watermark_ok_safe+0x220/0x220 [ 1737.795452] __alloc_pages_nodemask+0x2127/0x2720 [ 1737.800291] ? lock_acquire+0x170/0x3f0 [ 1737.804282] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1737.809127] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1737.814747] ? __mutex_unlock_slowpath+0x75/0x770 [ 1737.819598] ? alloc_pages_current+0x123/0x260 [ 1737.824171] alloc_pages_current+0x155/0x260 [ 1737.828572] ion_page_pool_alloc+0x118/0x1b0 [ 1737.832969] ion_system_heap_allocate+0x133/0x8c0 [ 1737.837800] ? ion_alloc+0x187/0x810 [ 1737.841505] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1737.846952] ? ion_system_contig_heap_create+0x130/0x130 [ 1737.852459] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1737.857478] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1737.862318] ion_alloc+0x204/0x810 [ 1737.865868] ? ion_dma_buf_release+0x40/0x40 [ 1737.870361] ? __might_fault+0x177/0x1b0 [ 1737.874447] ion_ioctl+0xea/0x1f0 [ 1737.877907] ? ion_query_heaps+0x360/0x360 [ 1737.882139] ? ion_query_heaps+0x360/0x360 [ 1737.886380] do_vfs_ioctl+0x75a/0xff0 [ 1737.890193] ? ioctl_preallocate+0x1a0/0x1a0 [ 1737.894610] ? lock_downgrade+0x740/0x740 [ 1737.898750] ? __fget+0x225/0x360 [ 1737.902197] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.906169] ? security_file_ioctl+0x83/0xb0 [ 1737.910585] SyS_ioctl+0x7f/0xb0 [ 1737.913939] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.917918] do_syscall_64+0x1d5/0x640 [ 1737.921820] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1737.927019] RIP: 0033:0x466459 [ 1737.930196] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.937892] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1737.945148] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1737.952512] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1737.959770] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1737.967030] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1738.155813] Mem-Info: [ 1738.158622] active_anon:75308 inactive_anon:37176 isolated_anon:0 [ 1738.158622] active_file:81 inactive_file:89 isolated_file:0 [ 1738.158622] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1738.158622] slab_reclaimable:12473 slab_unreclaimable:117964 [ 1738.158622] mapped:44051 shmem:37639 pagetables:4882 bounce:0 [ 1738.158622] free:25047 free_pcp:242 free_cma:0 [ 1738.194350] Node 0 active_anon:298064kB inactive_anon:125992kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120548kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1738.228427] Node 1 active_anon:3168kB inactive_anon:22712kB active_file:152kB inactive_file:368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55256kB dirty:0kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1738.289204] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1738.360085] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1738.365236] CPU: 0 PID: 6726 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1738.373044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.382410] Call Trace: [ 1738.385003] dump_stack+0x1b2/0x281 [ 1738.388638] warn_alloc.cold+0x96/0x1cc [ 1738.392639] ? zone_watermark_ok_safe+0x220/0x220 [ 1738.397493] __alloc_pages_nodemask+0x2127/0x2720 [ 1738.402355] ? __schedule+0x893/0x1de0 [ 1738.406249] ? lock_acquire+0x170/0x3f0 [ 1738.410226] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1738.415073] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1738.420548] ? __mutex_unlock_slowpath+0x75/0x770 [ 1738.425398] alloc_pages_current+0x155/0x260 [ 1738.429811] ion_page_pool_alloc+0x118/0x1b0 [ 1738.434218] ion_system_heap_allocate+0x133/0x8c0 [ 1738.439067] ? ion_alloc+0x187/0x810 [ 1738.442810] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1738.448258] ? ion_system_contig_heap_create+0x130/0x130 [ 1738.453707] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1738.458722] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1738.463583] ion_alloc+0x204/0x810 [ 1738.467129] ? ion_dma_buf_release+0x40/0x40 [ 1738.471550] ? __might_fault+0x177/0x1b0 [ 1738.475610] ion_ioctl+0xea/0x1f0 [ 1738.479070] ? ion_query_heaps+0x360/0x360 [ 1738.483392] ? ion_query_heaps+0x360/0x360 [ 1738.487632] do_vfs_ioctl+0x75a/0xff0 [ 1738.491436] ? ioctl_preallocate+0x1a0/0x1a0 [ 1738.495843] ? lock_downgrade+0x740/0x740 [ 1738.499996] ? __fget+0x225/0x360 [ 1738.503448] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.504873] Node 0 [ 1738.507418] ? security_file_ioctl+0x83/0xb0 [ 1738.507438] DMA free:11052kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.507443] lowmem_reserve[]: [ 1738.509676] SyS_ioctl+0x7f/0xb0 [ 1738.509685] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.509697] do_syscall_64+0x1d5/0x640 [ 1738.509712] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1738.509720] RIP: 0033:0x466459 [ 1738.509725] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.509736] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1738.509741] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1738.509747] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1738.509752] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1738.509758] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1738.568288] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1738.854822] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1738.885698] CPU: 0 PID: 6723 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1738.893517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.902886] Call Trace: [ 1738.905477] dump_stack+0x1b2/0x281 [ 1738.909107] dump_header+0x178/0x82f [ 1738.912828] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1738.917941] ? ___ratelimit+0x2cd/0x530 [ 1738.921910] oom_kill_process.cold+0x10/0xa40 [ 1738.926418] out_of_memory+0xe3e/0x1190 [ 1738.930390] ? oom_killer_disable+0x1c0/0x1c0 [ 1738.934882] ? mutex_trylock+0x152/0x1a0 [ 1738.938960] __alloc_pages_nodemask+0x23e1/0x2720 [ 1738.943812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1738.948667] alloc_pages_current+0x155/0x260 [ 1738.953090] filemap_fault+0x11a1/0x1ad0 [ 1738.957161] ext4_filemap_fault+0x84/0xb0 [ 1738.959611] 0 2717 [ 1738.961321] __do_fault+0xfa/0x380 [ 1738.961332] ? pmd_devmap_trans_unstable+0x151/0x1b0 [ 1738.963556] 2718 [ 1738.967079] __handle_mm_fault+0x2373/0x4620 [ 1738.978613] ? vm_insert_page+0x7c0/0x7c0 [ 1738.982753] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1738.987157] ? nanosleep_copyout+0x100/0x100 [ 1738.991693] ? mark_held_locks+0xa6/0xf0 [ 1738.995757] handle_mm_fault+0x455/0x9c0 [ 1738.999821] __do_page_fault+0x549/0xad0 [ 1739.003889] ? spurious_fault+0x640/0x640 [ 1739.008038] ? do_page_fault+0x60/0x500 [ 1739.012009] ? page_fault+0x2f/0x50 [ 1739.015656] page_fault+0x45/0x50 [ 1739.019125] RIP: 03e7:0x56bf60 [ 1739.022307] RSP: 56bf60:0000000000000001 EFLAGS: 0056bf60 [ 1739.069316] 2718 2718 [ 1739.077366] Node 0 DMA32 free:35784kB min:36200kB low:45248kB high:54296kB active_anon:298056kB inactive_anon:125992kB active_file:4kB inactive_file:524kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:17044kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.271024] Mem-Info: [ 1739.273485] active_anon:75308 inactive_anon:37176 isolated_anon:0 [ 1739.273485] active_file:38 inactive_file:13 isolated_file:0 [ 1739.273485] unevictable:0 dirty:0 writeback:1 unstable:0 [ 1739.273485] slab_reclaimable:12473 slab_unreclaimable:117642 [ 1739.273485] mapped:43917 shmem:37639 pagetables:4882 bounce:0 [ 1739.273485] free:25168 free_pcp:41 free_cma:0 [ 1739.354194] lowmem_reserve[]: 0 0 0 0 0 [ 1739.354252] Node 0 active_anon:298064kB inactive_anon:125992kB active_file:48kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120572kB dirty:0kB writeback:4kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.358223] Node 0 [ 1739.427697] Mem-Info: [ 1739.444714] active_anon:75308 inactive_anon:37176 isolated_anon:0 [ 1739.444714] active_file:34 inactive_file:13 isolated_file:0 [ 1739.444714] unevictable:0 dirty:0 writeback:1 unstable:0 [ 1739.444714] slab_reclaimable:12473 slab_unreclaimable:117642 [ 1739.444714] mapped:43917 shmem:37639 pagetables:4882 bounce:0 [ 1739.444714] free:25168 free_pcp:41 free_cma:0 [ 1739.574136] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.581449] Node 1 active_anon:3168kB inactive_anon:22712kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.707253] lowmem_reserve[]: 0 0 0 0 0 [ 1739.726739] Node 0 active_anon:298064kB inactive_anon:125992kB active_file:48kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120572kB dirty:0kB writeback:4kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 229376kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.738414] Node 1 Normal free:53440kB min:53696kB low:67120kB high:80544kB active_anon:3168kB inactive_anon:22712kB active_file:92kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2484kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1739.863729] Node 1 active_anon:3168kB inactive_anon:22712kB active_file:92kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.947458] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.034358] lowmem_reserve[]: 0 0 0 0 0 [ 1740.038413] Node 0 DMA: 335*4kB (UE) 70*8kB (UM) 6*16kB (UME) 1*32kB (M) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11052kB [ 1740.071173] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1740.076257] Node 0 DMA32 free:35684kB min:36200kB low:45248kB high:54296kB active_anon:298056kB inactive_anon:125992kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:17044kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1740.086123] Node 0 [ 1740.116803] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.128493] DMA32: [ 1740.158600] lowmem_reserve[]: 0 0 0 0 0 [ 1740.162150] 732*4kB [ 1740.164872] Node 0 [ 1740.164874] (UME) 189*8kB [ 1740.167197] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.178758] (UME) [ 1740.208363] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1740.212270] 85*16kB [ 1740.215588] Node 0 [ 1740.215591] (UME) 45*32kB [ 1740.217911] DMA32 free:35684kB min:36200kB low:45248kB high:54296kB active_anon:298056kB inactive_anon:125992kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:17044kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1740.233706] (ME) [ 1740.262719] lowmem_reserve[]: 0 0 0 0 0 [ 1740.265910] 71*64kB [ 1740.268803] Node 1 [ 1740.268807] (UM) 80*128kB [ 1740.277751] Normal free:53540kB min:53696kB low:67120kB high:80544kB active_anon:3168kB inactive_anon:22712kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.287279] (UM) [ 1740.321521] lowmem_reserve[]: 0 0 0 0 0 [ 1740.324841] 42*256kB [ 1740.327571] Node 0 [ 1740.327574] (UM) 6*512kB [ 1740.336368] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.346917] (UM) [ 1740.375292] lowmem_reserve[]: 0 0 0 0 0 [ 1740.378529] 0*1024kB 0*2048kB 0*4096kB = 35848kB [ 1740.385882] Node 0 [ 1740.397073] lowmem_reserve[]: 0 0 0 0 0 [ 1740.404919] Node 0 [ 1740.407857] Node 1 [ 1740.407860] Normal: 0*4kB [ 1740.416491] DMA: 335*4kB (UE) 70*8kB (UM) 6*16kB (UME) 1*32kB (M) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11052kB [ 1740.426538] 0*8kB [ 1740.450127] Normal free:53540kB min:53696kB low:67120kB high:80544kB active_anon:3168kB inactive_anon:22712kB active_file:44kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2484kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.454189] 0*16kB [ 1740.485883] Node 0 DMA32: 732*4kB (UME) 189*8kB (UME) 85*16kB (UME) 45*32kB (ME) 71*64kB (UM) 80*128kB (UM) 42*256kB (UM) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35848kB [ 1740.508175] lowmem_reserve[]: 0 0 0 0 0 [ 1740.514537] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.516633] 0*32kB [ 1740.529725] Node 0 DMA: 335*4kB (UE) 70*8kB (UM) 6*16kB (UME) 1*32kB (M) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11052kB [ 1740.546762] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.551994] Node 1 Normal: 86*4kB (UM) 56*8kB (ME) 36*16kB (UM) 29*32kB (UME) 25*64kB (M) 12*128kB (M) 68*256kB (UM) 34*512kB (UM) 5*1024kB (M) 4*2048kB (M) 0*4096kB = 53560kB [ 1740.575165] Node 1 Normal: 86*4kB (UM) 56*8kB (ME) 36*16kB (UM) 29*32kB (UME) 25*64kB (M) 12*128kB (M) 68*256kB (UM) 34*512kB (UM) 5*1024kB (M) 4*2048kB (M) 0*4096kB = 53560kB [ 1740.577225] Node 0 [ 1740.597716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.612589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.619197] DMA32: 732*4kB (UME) 189*8kB (UME) 85*16kB (UME) 45*32kB (ME) 71*64kB (UM) 80*128kB (UM) 42*256kB (UM) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35848kB [ 1740.636660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.646659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.663359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.665232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.687380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.690998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.713074] 37671 total pagecache pages [ 1740.716570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.717056] 0 pages in swap cache [ 1740.727764] Node 1 Normal: 86*4kB (UM) 56*8kB (ME) 36*16kB (UM) 29*32kB (UME) 25*64kB (M) 12*128kB (M) 68*256kB (UM) 34*512kB (UM) 5*1024kB (M) 4*2048kB (M) 0*4096kB = 53560kB [ 1740.744235] Swap cache stats: add 0, delete 0, find 0/0 [ 1740.762614] 37671 total pagecache pages [ 1740.766595] 0 pages in swap cache [ 1740.772294] Free swap = 0kB [ 1740.774329] Swap cache stats: add 0, delete 0, find 0/0 [ 1740.775315] Total swap = 0kB [ 1740.786034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.798568] 2097051 pages RAM [ 1740.799335] Free swap = 0kB [ 1740.801719] 0 pages HighMem/MovableOnly [ 1740.804683] Total swap = 0kB [ 1740.808646] 363848 pages reserved [ 1740.821712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.831593] 0 pages cma reserved [ 1740.835713] 2097051 pages RAM [ 1740.838827] 0 pages HighMem/MovableOnly [ 1740.848859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.868035] 363848 pages reserved [ 1740.871551] 0 pages cma reserved [ 1740.877221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.898524] 37671 total pagecache pages [ 1740.904789] 0 pages in swap cache [ 1740.908247] Swap cache stats: add 0, delete 0, find 0/0 [ 1740.925957] Free swap = 0kB [ 1740.934254] Total swap = 0kB [ 1740.937280] 2097051 pages RAM [ 1740.947655] 0 pages HighMem/MovableOnly [ 1740.956923] 363848 pages reserved [ 1740.967630] 0 pages cma reserved [ 1740.976284] Out of memory (oom_kill_allocating_task): Kill process 6723 (syz-executor.0) score 0 or sacrifice child [ 1740.999439] Killed process 6723 (syz-executor.0) total-vm:93384kB, anon-rss:2164kB, file-rss:33808kB, shmem-rss:0kB [ 1741.038899] oom_reaper: reaped process 6723 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1741.241717] oom_reaper: reaped process 6715 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1741.339581] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1741.376325] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1741.381502] CPU: 1 PID: 7993 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1741.389288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.398639] Call Trace: [ 1741.401228] dump_stack+0x1b2/0x281 [ 1741.404854] dump_header+0x178/0x82f [ 1741.408569] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1741.413669] ? ___ratelimit+0x2cd/0x530 [ 1741.417641] oom_kill_process.cold+0x10/0xa40 [ 1741.422140] out_of_memory+0xe3e/0x1190 [ 1741.426123] ? oom_killer_disable+0x1c0/0x1c0 [ 1741.430626] ? mutex_trylock+0x152/0x1a0 [ 1741.434705] __alloc_pages_nodemask+0x23e1/0x2720 [ 1741.439555] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1741.444400] alloc_pages_current+0x155/0x260 [ 1741.448797] filemap_fault+0x11a1/0x1ad0 [ 1741.452856] ext4_filemap_fault+0x84/0xb0 [ 1741.456994] __do_fault+0xfa/0x380 [ 1741.460526] __handle_mm_fault+0x2497/0x4620 [ 1741.464921] ? vm_insert_page+0x7c0/0x7c0 [ 1741.469055] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1741.473448] ? nanosleep_copyout+0x100/0x100 [ 1741.477847] ? mark_held_locks+0xa6/0xf0 [ 1741.481898] ? sync_mm_rss+0xf2/0x160 [ 1741.485689] handle_mm_fault+0x455/0x9c0 [ 1741.489760] __do_page_fault+0x549/0xad0 [ 1741.493811] ? spurious_fault+0x640/0x640 [ 1741.498037] ? do_page_fault+0x60/0x500 [ 1741.502001] ? page_fault+0x2f/0x50 [ 1741.505614] page_fault+0x45/0x50 [ 1741.509071] RIP: 1a82af:0x3 [ 1741.511987] RSP: 3c17:00007fff7edb406c EFLAGS: 00000032 [ 1741.525789] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1741.579104] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1741.580482] syz-executor.1 cpuset= [ 1741.602042] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1741.606334] / mems_allowed=0-1 [ 1741.618513] CPU: 1 PID: 6726 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1741.628459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.637819] Call Trace: [ 1741.640416] dump_stack+0x1b2/0x281 [ 1741.644039] warn_alloc.cold+0x96/0x1cc [ 1741.648005] ? zone_watermark_ok_safe+0x220/0x220 [ 1741.652842] ? usleep_range+0x130/0x130 [ 1741.656806] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1741.661933] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1741.666971] ? run_timer_softirq+0x5a0/0x5a0 [ 1741.671386] __alloc_pages_nodemask+0x2127/0x2720 [ 1741.676246] ? lock_acquire+0x170/0x3f0 [ 1741.680234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1741.685068] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1741.689564] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1741.695015] ? alloc_pages_current+0xe3/0x260 [ 1741.699505] alloc_pages_current+0x155/0x260 [ 1741.703910] ion_page_pool_alloc+0x118/0x1b0 [ 1741.708316] ion_system_heap_allocate+0x133/0x8c0 [ 1741.713164] ? ion_alloc+0x187/0x810 [ 1741.716888] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1741.722332] ? ion_system_contig_heap_create+0x130/0x130 [ 1741.727788] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1741.732803] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1741.737667] ion_alloc+0x204/0x810 [ 1741.739056] Mem-Info: [ 1741.741223] ? ion_dma_buf_release+0x40/0x40 [ 1741.743630] active_anon:74236 inactive_anon:37176 isolated_anon:0 [ 1741.743630] active_file:13 inactive_file:16 isolated_file:0 [ 1741.743630] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1741.743630] slab_reclaimable:12472 slab_unreclaimable:117185 [ 1741.743630] mapped:43911 shmem:37639 pagetables:4880 bounce:0 [ 1741.743630] free:14225 free_pcp:30 free_cma:0 [ 1741.748027] ? __might_fault+0x177/0x1b0 [ 1741.785318] ion_ioctl+0xea/0x1f0 [ 1741.788773] ? ion_query_heaps+0x360/0x360 [ 1741.793008] ? ion_query_heaps+0x360/0x360 [ 1741.797238] do_vfs_ioctl+0x75a/0xff0 [ 1741.801033] ? ioctl_preallocate+0x1a0/0x1a0 [ 1741.805433] ? lock_downgrade+0x740/0x740 [ 1741.809576] ? __fget+0x225/0x360 [ 1741.813024] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.816988] ? security_file_ioctl+0x83/0xb0 [ 1741.821399] SyS_ioctl+0x7f/0xb0 [ 1741.824768] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.828740] do_syscall_64+0x1d5/0x640 [ 1741.829074] Node 0 active_anon:293872kB inactive_anon:125992kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120548kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1741.832624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1741.865852] RIP: 0033:0x466459 [ 1741.869034] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.876757] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1741.884014] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1741.889054] Node 1 active_anon:3072kB inactive_anon:22712kB active_file:40kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1741.891273] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1741.891282] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1741.932935] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1741.940213] CPU: 0 PID: 6715 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1741.948004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.949999] Mem-Info: [ 1741.957353] Call Trace: [ 1741.962333] dump_stack+0x1b2/0x281 [ 1741.965961] warn_alloc.cold+0x96/0x1cc [ 1741.967183] Node 0 [ 1741.969932] ? zone_watermark_ok_safe+0x220/0x220 [ 1741.969943] ? usleep_range+0x130/0x130 [ 1741.969953] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1741.969966] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1741.969984] ? run_timer_softirq+0x5a0/0x5a0 [ 1741.972237] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1741.977052] __alloc_pages_nodemask+0x2127/0x2720 [ 1741.988338] active_anon:74236 inactive_anon:37176 isolated_anon:0 [ 1741.988338] active_file:13 inactive_file:16 isolated_file:0 [ 1741.988338] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1741.988338] slab_reclaimable:12472 slab_unreclaimable:117185 [ 1741.988338] mapped:43911 shmem:37639 pagetables:4880 bounce:0 [ 1741.988338] free:14225 free_pcp:30 free_cma:0 [ 1741.991168] ? lock_acquire+0x170/0x3f0 [ 1741.991186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1741.991195] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1741.991213] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1741.991226] ? __sanitizer_cov_trace_pc+0x1d/0x50 [ 1741.995653] lowmem_reserve[]: [ 1742.021127] alloc_pages_current+0x155/0x260 [ 1742.021142] ion_page_pool_alloc+0x118/0x1b0 [ 1742.021151] ion_system_heap_allocate+0x133/0x8c0 [ 1742.021161] ? ion_alloc+0x187/0x810 [ 1742.021171] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1742.021179] ? ion_system_contig_heap_create+0x130/0x130 [ 1742.021188] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1742.021199] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1742.021209] ion_alloc+0x204/0x810 [ 1742.021222] ? ion_dma_buf_release+0x40/0x40 [ 1742.021236] ? __might_fault+0x177/0x1b0 [ 1742.021247] ion_ioctl+0xea/0x1f0 [ 1742.021256] ? ion_query_heaps+0x360/0x360 [ 1742.021267] ? ion_query_heaps+0x360/0x360 [ 1742.021282] do_vfs_ioctl+0x75a/0xff0 [ 1742.032820] Node 0 active_anon:293872kB inactive_anon:125992kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120548kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1742.059371] ? ioctl_preallocate+0x1a0/0x1a0 [ 1742.059382] ? lock_downgrade+0x740/0x740 [ 1742.059394] ? __fget+0x225/0x360 [ 1742.059403] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.059414] ? security_file_ioctl+0x83/0xb0 [ 1742.059424] SyS_ioctl+0x7f/0xb0 [ 1742.059431] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.059442] do_syscall_64+0x1d5/0x640 [ 1742.059457] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1742.059466] RIP: 0033:0x466459 [ 1742.059471] RSP: 002b:00007f825f75d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1742.059482] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1742.059487] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1742.059493] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1742.059498] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1742.059503] R13: 00007ffe46ca2e4f R14: 00007f825f75d300 R15: 0000000000022000 [ 1742.305985] Node 1 active_anon:3072kB inactive_anon:22712kB active_file:48kB inactive_file:3052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56996kB dirty:0kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1742.339186] Node 0 DMA free:11928kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.370703] 0 2717 2718 2718 2718 [ 1742.379081] Node 0 DMA32 free:150084kB min:36200kB low:45248kB high:54296kB active_anon:293964kB inactive_anon:125992kB active_file:112kB inactive_file:1812kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17040kB bounce:0kB free_pcp:320kB local_pcp:216kB free_cma:0kB [ 1742.398318] lowmem_reserve[]: [ 1742.479063] lowmem_reserve[]: 0 0 0 0 0 [ 1742.486186] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.492226] 0 2717 2718 2718 2718 [ 1742.582713] Node 0 DMA32 free:98484kB min:36200kB low:45248kB high:54296kB active_anon:293964kB inactive_anon:125992kB active_file:212kB inactive_file:2112kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17040kB bounce:0kB free_pcp:356kB local_pcp:124kB free_cma:0kB [ 1742.589056] lowmem_reserve[]: [ 1742.669062] lowmem_reserve[]: 0 0 0 0 0 [ 1742.676176] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.719086] 0 0 0 0 0 [ 1742.721631] Node 1 Normal free:924540kB min:53696kB low:67120kB high:80544kB active_anon:3072kB inactive_anon:22712kB active_file:448kB inactive_file:2536kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2480kB bounce:0kB free_pcp:852kB local_pcp:128kB free_cma:0kB [ 1742.745851] lowmem_reserve[]: 0 0 0 0 0 [ 1742.758279] Node 1 Normal free:924640kB min:53696kB low:67120kB high:80544kB active_anon:3072kB inactive_anon:22712kB active_file:848kB inactive_file:2056kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2480kB bounce:0kB free_pcp:760kB local_pcp:632kB free_cma:0kB [ 1742.790057] lowmem_reserve[]: 0 0 0 0 0 [ 1742.795689] lowmem_reserve[]: 0 0 0 0 0 [ 1742.809095] Node 0 DMA: 314*4kB (UE) 70*8kB (UM) 6*16kB (UME) 1*32kB (M) 2*64kB (ME) 3*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11928kB [ 1742.822324] Node 0 DMA: 314*4kB (UE) 70*8kB (UM) 6*16kB (UME) 1*32kB (M) 2*64kB (ME) 3*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11928kB [ 1742.825937] Node 0 DMA32: 152*4kB (UE) 78*8kB (UME) 47*16kB (UME) 23*32kB (ME) 199*64kB (UM) 223*128kB (UM) 24*256kB (UM) 5*512kB (M) 0*1024kB 2*2048kB (M) 0*4096kB = 56800kB [ 1742.859784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1742.882839] Node 0 DMA32: 152*4kB (ME) 76*8kB (E) 45*16kB (E) 12*32kB (ME) 120*64kB (UM) 223*128kB (UM) 24*256kB (UM) 5*512kB (M) 0*1024kB 2*2048kB (M) 0*4096kB = 51344kB [ 1742.899076] Node 1 Normal: 3179*4kB (UM) 9*8kB (ME) 1*16kB (M) 4*32kB (UE) 9726*64kB (UM) 598*128kB (UM) 31*256kB (UM) 4*512kB (M) 112*1024kB (UM) 43*2048kB (UM) 0*4096kB = 924676kB [ 1742.902542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1742.959113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1742.968015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1742.969048] Node 1 Normal: 26*4kB (UM) 10*8kB (UME) 2*16kB (UM) 1*32kB (E) 9713*64kB (UM) 598*128kB (UM) 31*256kB (UM) 4*512kB (M) 61*1024kB (UM) 43*2048kB (UM) 0*4096kB = 858936kB [ 1743.019471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.028339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.062587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.071561] 39741 total pagecache pages [ 1743.075557] 0 pages in swap cache [ 1743.092686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.099703] Swap cache stats: add 0, delete 0, find 0/0 [ 1743.106659] Free swap = 0kB [ 1743.109091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.122565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.129102] Total swap = 0kB [ 1743.137639] 2097051 pages RAM [ 1743.149106] 0 pages HighMem/MovableOnly [ 1743.153187] 363848 pages reserved [ 1743.156632] 0 pages cma reserved [ 1743.159050] 39758 total pagecache pages [ 1743.165019] 0 pages in swap cache [ 1743.168473] Swap cache stats: add 0, delete 0, find 0/0 [ 1743.184731] Free swap = 0kB [ 1743.187798] Total swap = 0kB [ 1743.211603] 2097051 pages RAM [ 1743.214748] 0 pages HighMem/MovableOnly [ 1743.218717] 363848 pages reserved [ 1743.259072] 0 pages cma reserved [ 1743.262471] Out of memory (oom_kill_allocating_task): Kill process 7993 (syz-executor.0) score 0 or sacrifice child [ 1743.299938] Killed process 3956 (syz-executor.0) total-vm:93384kB, anon-rss:2208kB, file-rss:34628kB, shmem-rss:0kB [ 1743.347208] oom_reaper: reaped process 3956 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1743.475004] oom_reaper: reaped process 6714 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1743.529061] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1743.564429] oom_reaper: reaped process 6738 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1743.567014] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1743.581148] CPU: 1 PID: 6726 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1743.589128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.598484] Call Trace: [ 1743.601095] dump_stack+0x1b2/0x281 [ 1743.604760] warn_alloc.cold+0x96/0x1cc [ 1743.608737] ? zone_watermark_ok_safe+0x220/0x220 [ 1743.613590] __alloc_pages_nodemask+0x2127/0x2720 [ 1743.618426] ? lock_acquire+0x170/0x3f0 [ 1743.622398] ? lock_acquire+0x170/0x3f0 [ 1743.626372] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1743.631219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1743.636686] ? __mutex_unlock_slowpath+0x75/0x770 [ 1743.641527] alloc_pages_current+0x155/0x260 [ 1743.645931] ion_page_pool_alloc+0x118/0x1b0 [ 1743.650337] ion_system_heap_allocate+0x133/0x8c0 [ 1743.655186] ? _raw_spin_unlock+0x29/0x40 [ 1743.659333] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1743.664264] ? ion_system_contig_heap_create+0x130/0x130 [ 1743.669710] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1743.674739] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1743.679580] ion_alloc+0x27a/0x810 [ 1743.683119] ? ion_dma_buf_release+0x40/0x40 [ 1743.687534] ? __might_fault+0x177/0x1b0 [ 1743.691592] ion_ioctl+0xea/0x1f0 [ 1743.695042] ? ion_query_heaps+0x360/0x360 [ 1743.699276] ? ion_query_heaps+0x360/0x360 [ 1743.703518] do_vfs_ioctl+0x75a/0xff0 [ 1743.707316] ? ioctl_preallocate+0x1a0/0x1a0 [ 1743.711818] ? lock_downgrade+0x740/0x740 [ 1743.715991] ? __fget+0x225/0x360 [ 1743.719437] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.723415] ? security_file_ioctl+0x83/0xb0 [ 1743.727833] SyS_ioctl+0x7f/0xb0 [ 1743.731234] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.735204] do_syscall_64+0x1d5/0x640 [ 1743.739088] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1743.744294] RIP: 0033:0x466459 [ 1743.747473] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.755177] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1743.762435] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1743.769694] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1743.776956] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1743.784213] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1743.803262] warn_alloc_show_mem: 1 callbacks suppressed [ 1743.803267] Mem-Info: [ 1743.811197] active_anon:73231 inactive_anon:37176 isolated_anon:0 [ 1743.811197] active_file:63 inactive_file:0 isolated_file:20 [ 1743.811197] unevictable:0 dirty:49 writeback:0 unstable:0 [ 1743.811197] slab_reclaimable:12472 slab_unreclaimable:118912 [ 1743.811197] mapped:52716 shmem:37639 pagetables:4917 bounce:0 [ 1743.811197] free:13820 free_pcp:0 free_cma:0 [ 1743.845357] Node 0 active_anon:289884kB inactive_anon:125992kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:155608kB dirty:172kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1743.875532] Node 1 active_anon:3040kB inactive_anon:22712kB active_file:108kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55256kB dirty:24kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1743.903257] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.930530] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1743.935587] Node 0 DMA32 free:17676kB min:36200kB low:45248kB high:54296kB active_anon:289880kB inactive_anon:125992kB active_file:964kB inactive_file:700kB unevictable:0kB writepending:172kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12192kB pagetables:17188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.946899] syz-executor.1: [ 1743.965237] lowmem_reserve[]: 0 0 0 0 0 [ 1743.970969] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1743.972327] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.985898] syz-executor.1 cpuset= [ 1744.008378] lowmem_reserve[]: 0 0 0 0 0 [ 1744.008404] Node 1 Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:3040kB inactive_anon:22712kB active_file:308kB inactive_file:132kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.008430] lowmem_reserve[]: 0 0 0 0 [ 1744.021374] / [ 1744.044940] 0 [ 1744.052407] Node 0 DMA: 113*4kB (UME) 58*8kB (UM) 6*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1744.082522] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1744.089179] mems_allowed=0-1 [ 1744.099170] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1744.103150] systemd-udevd cpuset= [ 1744.111038] Node 0 DMA32: 710*4kB (UME) 177*8kB (UME) 88*16kB (UME) 44*32kB (ME) 17*64kB (M) 8*128kB (UM) 7*256kB (M) 5*512kB (M) 0*1024kB 2*2048kB (M) 0*4096kB = 17632kB [ 1744.124499] syz-executor.2 cpuset= [ 1744.130126] CPU: 0 PID: 6715 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1744.137299] / [ 1744.143622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.143629] Call Trace: [ 1744.157283] dump_stack+0x1b2/0x281 [ 1744.160915] warn_alloc.cold+0x96/0x1cc [ 1744.161780] mems_allowed=0-1 [ 1744.164911] ? zone_watermark_ok_safe+0x220/0x220 [ 1744.172863] __alloc_pages_nodemask+0x2127/0x2720 [ 1744.177714] ? lock_acquire+0x170/0x3f0 [ 1744.181694] ? lock_acquire+0x170/0x3f0 [ 1744.182499] Node 0 [ 1744.185679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1744.185688] Normal: [ 1744.187921] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1744.200507] ? __mutex_unlock_slowpath+0x75/0x770 [ 1744.205358] alloc_pages_current+0x155/0x260 [ 1744.209770] ion_page_pool_alloc+0x118/0x1b0 [ 1744.214191] ion_system_heap_allocate+0x133/0x8c0 [ 1744.219053] ? _raw_spin_unlock+0x29/0x40 [ 1744.223215] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1744.228142] ? ion_system_contig_heap_create+0x130/0x130 [ 1744.233595] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1744.236782] 0*4kB 0*8kB [ 1744.238615] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1744.238627] ion_alloc+0x27a/0x810 [ 1744.249661] ? ion_dma_buf_release+0x40/0x40 [ 1744.254076] ? __might_fault+0x177/0x1b0 [ 1744.258137] ion_ioctl+0xea/0x1f0 [ 1744.261130] 0*16kB 0*32kB [ 1744.261592] ? ion_query_heaps+0x360/0x360 [ 1744.261604] ? ion_query_heaps+0x360/0x360 [ 1744.264434] 0*64kB [ 1744.268656] do_vfs_ioctl+0x75a/0xff0 [ 1744.278914] ? ioctl_preallocate+0x1a0/0x1a0 [ 1744.283345] ? lock_downgrade+0x740/0x740 [ 1744.287511] ? __fget+0x225/0x360 [ 1744.290971] ? do_vfs_ioctl+0xff0/0xff0 [ 1744.294950] ? security_file_ioctl+0x83/0xb0 [ 1744.299376] SyS_ioctl+0x7f/0xb0 [ 1744.302764] ? do_vfs_ioctl+0xff0/0xff0 [ 1744.306834] do_syscall_64+0x1d5/0x640 [ 1744.310756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1744.315943] RIP: 0033:0x466459 [ 1744.318499] 0*128kB [ 1744.319144] RSP: 002b:00007f825f75d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1744.319155] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1744.319160] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1744.319166] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1744.319172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1744.319177] R13: 00007ffe46ca2e4f R14: 00007f825f75d300 R15: 0000000000022000 [ 1744.339077] / [ 1744.353064] CPU: 1 PID: 4625 Comm: systemd-udevd Not tainted 4.14.229-syzkaller #0 [ 1744.371559] mems_allowed=0-1 [ 1744.375073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.387496] Call Trace: [ 1744.390101] dump_stack+0x1b2/0x281 [ 1744.393723] dump_header+0x178/0x82f [ 1744.397453] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1744.402552] ? ___ratelimit+0x2cd/0x530 [ 1744.406525] oom_kill_process.cold+0x10/0xa40 [ 1744.411012] ? lock_downgrade+0x740/0x740 [ 1744.415155] out_of_memory+0x2dc/0x1190 [ 1744.419120] ? oom_killer_disable+0x1c0/0x1c0 [ 1744.423637] ? mutex_trylock+0x152/0x1a0 [ 1744.427700] __alloc_pages_nodemask+0x23e1/0x2720 [ 1744.432545] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1744.437391] alloc_pages_current+0x155/0x260 [ 1744.441792] filemap_fault+0x11a1/0x1ad0 [ 1744.445851] ext4_filemap_fault+0x84/0xb0 [ 1744.450000] __do_fault+0xfa/0x380 [ 1744.453533] __handle_mm_fault+0x2497/0x4620 [ 1744.457951] ? vm_insert_page+0x7c0/0x7c0 [ 1744.462100] ? mark_held_locks+0xa6/0xf0 [ 1744.466156] handle_mm_fault+0x455/0x9c0 [ 1744.470212] __do_page_fault+0x549/0xad0 [ 1744.474267] ? spurious_fault+0x640/0x640 [ 1744.478417] ? do_page_fault+0x60/0x500 [ 1744.482380] ? page_fault+0x2f/0x50 [ 1744.485991] page_fault+0x45/0x50 [ 1744.489433] RIP: 0001:0xffffffffffffffff [ 1744.493477] RSP: 8839b600:00007ffc715c4da0 EFLAGS: 7ffc715c4c30 [ 1744.493502] CPU: 0 PID: 6738 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1744.507342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.514421] 0*256kB [ 1744.516697] Call Trace: [ 1744.516705] 0*512kB [ 1744.519022] dump_stack+0x1b2/0x281 [ 1744.519037] warn_alloc.cold+0x96/0x1cc [ 1744.519050] ? zone_watermark_ok_safe+0x220/0x220 [ 1744.519061] ? usleep_range+0x130/0x130 [ 1744.519071] ? try_to_free_pages+0x23f/0x6e0 [ 1744.519082] ? _find_next_bit+0xdb/0x100 [ 1744.519093] ? run_timer_softirq+0x5a0/0x5a0 [ 1744.519109] __alloc_pages_nodemask+0x2127/0x2720 [ 1744.529264] syz-executor.3: [ 1744.531652] ? lock_acquire+0x170/0x3f0 [ 1744.536464] page allocation failure: order:0 [ 1744.540431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1744.540442] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1744.540458] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1744.540471] ? retint_kernel+0x2d/0x2d [ 1744.540484] alloc_pages_current+0x155/0x260 [ 1744.540496] ion_page_pool_alloc+0x118/0x1b0 [ 1744.540506] ion_system_heap_allocate+0x133/0x8c0 [ 1744.540517] ? ion_alloc+0x187/0x810 [ 1744.556201] 0*1024kB [ 1744.558235] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1744.565395] 0*2048kB [ 1744.569602] ? ion_system_contig_heap_create+0x130/0x130 [ 1744.569614] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1744.569632] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1744.569644] ion_alloc+0x204/0x810 [ 1744.569660] ? ion_dma_buf_release+0x40/0x40 [ 1744.569672] ? __might_fault+0x177/0x1b0 [ 1744.569684] ion_ioctl+0xea/0x1f0 [ 1744.569694] ? ion_query_heaps+0x360/0x360 [ 1744.586207] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1744.588406] ? ion_query_heaps+0x360/0x360 [ 1744.595799] 0*4096kB [ 1744.597217] do_vfs_ioctl+0x75a/0xff0 [ 1744.614050] (null) [ 1744.615957] ? ioctl_preallocate+0x1a0/0x1a0 [ 1744.627564] = 0kB [ 1744.631381] ? lock_downgrade+0x740/0x740 [ 1744.631396] ? __fget+0x225/0x360 [ 1744.631406] ? do_vfs_ioctl+0xff0/0xff0 [ 1744.631417] ? security_file_ioctl+0x83/0xb0 [ 1744.631428] SyS_ioctl+0x7f/0xb0 [ 1744.631437] ? do_vfs_ioctl+0xff0/0xff0 [ 1744.631448] do_syscall_64+0x1d5/0x640 [ 1744.631463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1744.631472] RIP: 0033:0x466459 [ 1744.631480] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 [ 1744.647532] syz-executor.3 cpuset= [ 1744.650112] ORIG_RAX: 0000000000000010 [ 1744.650119] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1744.650124] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1744.650129] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1744.650134] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1744.650140] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1744.749062] syz-executor.1: [ 1744.752689] Node 1 [ 1744.759869] page allocation failure: order:0 [ 1744.772963] Normal: 43*4kB (U) 11*8kB (UE) 8*16kB (UM) 5*32kB (UME) 680*64kB (UM) 102*128kB (UM) 29*256kB (UM) 4*512kB (UM) 6*1024kB (UM) 3*2048kB (U) 0*4096kB = 78884kB [ 1744.795497] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1744.798506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.813316] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1744.816174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.827805] CPU: 0 PID: 6715 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1744.835611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.845001] Call Trace: [ 1744.847599] dump_stack+0x1b2/0x281 [ 1744.851239] warn_alloc.cold+0x96/0x1cc [ 1744.855222] ? zone_watermark_ok_safe+0x220/0x220 [ 1744.860079] ? usleep_range+0x130/0x130 [ 1744.864058] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1744.869181] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1744.874195] ? run_timer_softirq+0x5a0/0x5a0 [ 1744.878618] __alloc_pages_nodemask+0x2127/0x2720 [ 1744.883472] ? lock_acquire+0x170/0x3f0 [ 1744.887455] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1744.892315] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1744.894635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.896815] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1744.911084] alloc_pages_current+0x155/0x260 [ 1744.915503] ion_page_pool_alloc+0x118/0x1b0 [ 1744.919916] ion_system_heap_allocate+0x133/0x8c0 [ 1744.924776] ? _raw_spin_unlock+0x29/0x40 [ 1744.928917] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1744.933843] ? ion_system_contig_heap_create+0x130/0x130 [ 1744.939295] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1744.944320] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1744.949211] ion_alloc+0x27a/0x810 [ 1744.952583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.952755] ? ion_dma_buf_release+0x40/0x40 [ 1744.965713] ? __might_fault+0x177/0x1b0 [ 1744.969777] ion_ioctl+0xea/0x1f0 [ 1744.973227] ? ion_query_heaps+0x360/0x360 [ 1744.977466] ? ion_query_heaps+0x360/0x360 [ 1744.981727] do_vfs_ioctl+0x75a/0xff0 [ 1744.985527] ? ioctl_preallocate+0x1a0/0x1a0 [ 1744.989934] ? lock_downgrade+0x740/0x740 [ 1744.992290] 39233 total pagecache pages [ 1744.994095] ? __fget+0x225/0x360 [ 1744.994106] ? do_vfs_ioctl+0xff0/0xff0 [ 1744.994118] ? security_file_ioctl+0x83/0xb0 [ 1744.994130] SyS_ioctl+0x7f/0xb0 [ 1744.998154] 0 pages in swap cache [ 1745.001537] ? do_vfs_ioctl+0xff0/0xff0 [ 1745.001549] do_syscall_64+0x1d5/0x640 [ 1745.001562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1745.001570] RIP: 0033:0x466459 [ 1745.001575] RSP: 002b:00007f825f75d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.001585] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1745.001590] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1745.001595] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1745.001600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1745.001606] R13: 00007ffe46ca2e4f R14: 00007f825f75d300 R15: 0000000000022000 [ 1745.002279] warn_alloc_show_mem: 2 callbacks suppressed [ 1745.002283] Mem-Info: [ 1745.079525] Swap cache stats: add 0, delete 0, find 0/0 [ 1745.084258] active_anon:73236 inactive_anon:37176 isolated_anon:0 [ 1745.084258] active_file:98 inactive_file:1596 isolated_file:0 [ 1745.084258] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1745.084258] slab_reclaimable:12469 slab_unreclaimable:119532 [ 1745.084258] mapped:53892 shmem:37639 pagetables:4898 bounce:0 [ 1745.084258] free:60582 free_pcp:343 free_cma:0 [ 1745.085986] Free swap = 0kB [ 1745.091711] Node 0 active_anon:289764kB inactive_anon:125992kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155576kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 221184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.156549] Node 1 active_anon:3180kB inactive_anon:22712kB active_file:340kB inactive_file:6432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59992kB dirty:88kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.183037] / [ 1745.184325] Node 0 [ 1745.184867] mems_allowed=0-1 [ 1745.186181] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.191457] CPU: 1 PID: 6714 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1745.192162] lowmem_reserve[]: [ 1745.217467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.217471] Call Trace: [ 1745.217494] dump_stack+0x1b2/0x281 [ 1745.217507] warn_alloc.cold+0x96/0x1cc [ 1745.217521] ? zone_watermark_ok_safe+0x220/0x220 [ 1745.225342] 0 [ 1745.228425] ? usleep_range+0x130/0x130 [ 1745.237782] 2717 [ 1745.240325] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1745.240339] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1745.240350] ? run_timer_softirq+0x5a0/0x5a0 [ 1745.243953] 2718 [ 1745.247919] __alloc_pages_nodemask+0x2127/0x2720 [ 1745.252753] 2718 [ 1745.254521] ? lock_acquire+0x170/0x3f0 [ 1745.258464] 2718 [ 1745.260517] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1745.260528] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1745.260546] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1745.270642] alloc_pages_current+0x155/0x260 [ 1745.270657] ion_page_pool_alloc+0x118/0x1b0 [ 1745.270668] ion_system_heap_allocate+0x133/0x8c0 [ 1745.275150] Node 0 [ 1745.277199] ? ion_alloc+0x187/0x810 [ 1745.282059] DMA32 free:50268kB min:36200kB low:45248kB high:54296kB active_anon:289760kB inactive_anon:125992kB active_file:52kB inactive_file:352kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12096kB pagetables:17116kB bounce:0kB free_pcp:624kB local_pcp:4kB free_cma:0kB [ 1745.284060] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1745.288020] lowmem_reserve[]: [ 1745.290069] ? ion_system_contig_heap_create+0x130/0x130 [ 1745.290080] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1745.290092] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1745.290103] ion_alloc+0x204/0x810 [ 1745.294921] 0 [ 1745.299406] ? ion_dma_buf_release+0x40/0x40 [ 1745.299419] ? __might_fault+0x177/0x1b0 [ 1745.299431] ion_ioctl+0xea/0x1f0 [ 1745.304861] 0 [ 1745.309268] ? ion_query_heaps+0x360/0x360 [ 1745.309279] ? ion_query_heaps+0x360/0x360 [ 1745.309290] do_vfs_ioctl+0x75a/0xff0 [ 1745.309302] ? ioctl_preallocate+0x1a0/0x1a0 [ 1745.313689] 0 [ 1745.318518] ? lock_downgrade+0x740/0x740 [ 1745.318533] ? __fget+0x225/0x360 [ 1745.320785] 0 [ 1745.324453] ? do_vfs_ioctl+0xff0/0xff0 [ 1745.353021] 0 [ 1745.358431] ? security_file_ioctl+0x83/0xb0 [ 1745.366939] SyS_ioctl+0x7f/0xb0 [ 1745.371956] Node 0 [ 1745.376777] ? do_vfs_ioctl+0xff0/0xff0 [ 1745.380332] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.382078] do_syscall_64+0x1d5/0x640 [ 1745.386454] lowmem_reserve[]: [ 1745.390506] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1745.390514] RIP: 0033:0x466459 [ 1745.390519] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.390532] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1745.393962] 0 [ 1745.395768] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1745.395776] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1745.400015] 0 [ 1745.404204] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1745.404212] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1745.408010] 0 [ 1745.532066] Total swap = 0kB [ 1745.532414] 0 [ 1745.534001] 2097051 pages RAM [ 1745.537019] 0 [ 1745.547711] Node 1 Normal free:197840kB min:53696kB low:67120kB high:80544kB active_anon:3180kB inactive_anon:22712kB active_file:340kB inactive_file:6432kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2476kB bounce:0kB free_pcp:772kB local_pcp:64kB free_cma:0kB [ 1745.549153] Mem-Info: [ 1745.589825] 0 pages HighMem/MovableOnly [ 1745.593840] 363848 pages reserved [ 1745.597296] 0 pages cma reserved [ 1745.611013] lowmem_reserve[]: 0 0 0 0 0 [ 1745.619193] Node 0 DMA: 113*4kB (UME) 58*8kB (UM) 6*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1745.669664] active_anon:73286 inactive_anon:37176 isolated_anon:0 [ 1745.669664] active_file:123 inactive_file:2046 isolated_file:0 [ 1745.669664] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1745.669664] slab_reclaimable:12469 slab_unreclaimable:119949 [ 1745.669664] mapped:54067 shmem:37639 pagetables:4898 bounce:0 [ 1745.669664] free:43175 free_pcp:660 free_cma:0 [ 1745.679113] Node 0 DMA32: 14063*4kB (UME) 1183*8kB (UME) 258*16kB (UME) 527*32kB (UME) 64*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90804kB [ 1745.764040] Node 0 active_anon:289964kB inactive_anon:125992kB active_file:252kB inactive_file:2052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156376kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 221184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.789043] Node 0 [ 1745.808163] Node 1 active_anon:3180kB inactive_anon:22712kB active_file:440kB inactive_file:6432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59992kB dirty:88kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.814382] syz-executor.2: [ 1745.844264] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1745.862732] Node 0 [ 1745.883762] Node 1 Normal: 7683*4kB (UM) 89*8kB (UME) 1044*16kB (UM) 224*32kB (UME) 69*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59732kB [ 1745.889177] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.909046] page allocation failure: order:4 [ 1745.936183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.949557] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1745.971446] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1745.978525] CPU: 0 PID: 6738 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1745.986338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.995689] Call Trace: [ 1745.998285] dump_stack+0x1b2/0x281 [ 1746.000955] lowmem_reserve[]: 0 [ 1746.001915] warn_alloc.cold+0x96/0x1cc [ 1746.001927] ? zone_watermark_ok_safe+0x220/0x220 [ 1746.005191] 2717 [ 1746.009162] __alloc_pages_nodemask+0x2127/0x2720 [ 1746.009174] ? lock_acquire+0x170/0x3f0 [ 1746.009186] ? lock_acquire+0x170/0x3f0 [ 1746.009202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1746.009221] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1746.009233] ? __mutex_unlock_slowpath+0x75/0x770 [ 1746.009247] alloc_pages_current+0x155/0x260 [ 1746.009261] ion_page_pool_alloc+0x118/0x1b0 [ 1746.009271] ion_system_heap_allocate+0x133/0x8c0 [ 1746.035065] IPVS: ftp: loaded support on port[0] = 21 [ 1746.039186] ? _raw_spin_unlock+0x29/0x40 [ 1746.039198] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1746.039208] ? ion_system_contig_heap_create+0x130/0x130 [ 1746.039218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1746.039230] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1746.039241] ion_alloc+0x27a/0x810 [ 1746.039256] ? ion_dma_buf_release+0x40/0x40 [ 1746.039269] ? __might_fault+0x177/0x1b0 [ 1746.039280] ion_ioctl+0xea/0x1f0 [ 1746.039289] ? ion_query_heaps+0x360/0x360 [ 1746.039300] ? ion_query_heaps+0x360/0x360 [ 1746.039311] do_vfs_ioctl+0x75a/0xff0 [ 1746.039323] ? ioctl_preallocate+0x1a0/0x1a0 [ 1746.039333] ? lock_downgrade+0x740/0x740 [ 1746.039347] ? __fget+0x225/0x360 [ 1746.039356] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.039368] ? security_file_ioctl+0x83/0xb0 [ 1746.039378] SyS_ioctl+0x7f/0xb0 [ 1746.039386] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.039397] do_syscall_64+0x1d5/0x640 [ 1746.039411] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1746.039420] RIP: 0033:0x466459 [ 1746.039427] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 [ 1746.046247] 2718 [ 1746.048681] ORIG_RAX: 0000000000000010 [ 1746.048689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1746.070330] Mem-Info: [ 1746.072146] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1746.077594] active_anon:73301 inactive_anon:37176 isolated_anon:0 [ 1746.077594] active_file:314 inactive_file:2111 isolated_file:0 [ 1746.077594] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1746.077594] slab_reclaimable:12457 slab_unreclaimable:119672 [ 1746.077594] mapped:54227 shmem:37639 pagetables:4912 bounce:0 [ 1746.077594] free:35371 free_pcp:356 free_cma:0 [ 1746.082835] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1746.082841] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1746.082847] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1746.098945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.100932] 2718 [ 1746.108005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.124802] 2718 [ 1746.133317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.158031] 40133 total pagecache pages [ 1746.179326] Node 0 active_anon:290088kB inactive_anon:125996kB active_file:828kB inactive_file:2264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156728kB dirty:32kB writeback:0kB shmem:127712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 221184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1746.256406] 0 pages in swap cache [ 1746.269088] Node 0 [ 1746.295501] Swap cache stats: add 0, delete 0, find 0/0 [ 1746.307931] DMA32 free:36160kB min:36200kB low:45248kB high:54296kB active_anon:290084kB inactive_anon:125996kB active_file:312kB inactive_file:156kB unevictable:0kB writepending:32kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12096kB pagetables:17188kB bounce:0kB free_pcp:864kB local_pcp:148kB free_cma:0kB [ 1746.344713] Free swap = 0kB [ 1746.347740] Total swap = 0kB [ 1746.347766] lowmem_reserve[]: [ 1746.359141] 2097051 pages RAM [ 1746.365384] 0 pages HighMem/MovableOnly [ 1746.379074] 0 0 0 0 0 [ 1746.381613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.419115] Node 1 active_anon:3180kB inactive_anon:22712kB active_file:1812kB inactive_file:2032kB unevictable:0kB isolated(anon):0kB isolated(file):204kB mapped:59020kB dirty:100kB writeback:0kB shmem:22848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1746.441104] 363848 pages reserved [ 1746.486578] 0 pages cma reserved [ 1746.499249] lowmem_reserve[]: 0 0 0 0 0 [ 1746.503265] Node 1 Normal free:31624kB min:53696kB low:67120kB high:80544kB active_anon:3180kB inactive_anon:22712kB active_file:1492kB inactive_file:1188kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1280kB pagetables:2500kB bounce:0kB free_pcp:168kB local_pcp:44kB free_cma:0kB [ 1746.539071] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.591455] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1746.619542] lowmem_reserve[]: 0 0 0 0 0 [ 1746.624012] Node 0 DMA32 free:23292kB min:36200kB low:45248kB high:54296kB active_anon:290084kB inactive_anon:125996kB active_file:312kB inactive_file:156kB unevictable:0kB writepending:32kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12096kB pagetables:17188kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1746.655230] Node 0 DMA: 109*4kB (UME) 58*8kB (UM) 6*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10948kB [ 1746.699424] Node 0 DMA32: 667*4kB (ME) 306*8kB (UME) 58*16kB (UME) 180*32kB (UME) 3*64kB (U) 23*128kB (U) 17*256kB (U) 0*512kB 0*1024kB 2*2048kB (U) 0*4096kB = 23388kB [ 1746.722468] lowmem_reserve[]: 0 0 0 0 0 [ 1746.726680] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.759101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1746.775937] Node 1 Normal: 0*4kB 1*8kB (E) 33*16kB (M) 42*32kB (UME) 4186*64kB (UM) 190*128kB (U) 14*256kB (U) 1*512kB (U) 108*1024kB (U) 39*2048kB (U) 0*4096kB = 488664kB [ 1746.819387] lowmem_reserve[]: 0 0 0 0 0 [ 1746.823497] Node 1 Normal free:523512kB min:53696kB low:67120kB high:80544kB active_anon:3180kB inactive_anon:22712kB active_file:1492kB inactive_file:2196kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1280kB pagetables:2500kB bounce:0kB free_pcp:528kB local_pcp:96kB free_cma:0kB [ 1746.859509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.873407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.883545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.894001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.903458] lowmem_reserve[]: 0 0 0 0 0 [ 1746.907467] Node 0 DMA: 107*4kB (UME) 51*8kB (UM) 6*16kB (UME) 1*32kB (M) 6*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11076kB [ 1746.925212] 38603 total pagecache pages [ 1746.934199] 0 pages in swap cache [ 1746.937661] Swap cache stats: add 0, delete 0, find 0/0 [ 1746.944262] Free swap = 0kB [ 1746.947281] Total swap = 0kB [ 1746.951355] Node 0 DMA32: 667*4kB (ME) 676*8kB (UME) 60*16kB (UME) 180*32kB (UME) 3*64kB (U) 23*128kB (U) 26*256kB (U) 0*512kB 0*1024kB 2*2048kB (U) 0*4096kB = 28684kB [ 1746.964130] chnl_net:caif_netlink_parms(): no params data found [ 1746.967711] 2097051 pages RAM [ 1746.976814] 0 pages HighMem/MovableOnly [ 1746.982311] 363848 pages reserved [ 1746.985762] 0 pages cma reserved [ 1746.990294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1747.002452] Out of memory: Kill process 4351 (syz-executor.0) score 1005 or sacrifice child [ 1747.012112] Node 1 Normal: 1*4kB (U) 1*8kB (E) 34*16kB (UM) 40*32kB (UME) 2813*64kB (UM) 492*128kB (U) 21*256kB (U) 1*512kB (U) 108*1024kB (U) 39*2048kB (U) 0*4096kB = 441196kB [ 1747.028951] Killed process 4351 (syz-executor.0) total-vm:93384kB, anon-rss:2208kB, file-rss:34628kB, shmem-rss:0kB [ 1747.040766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.050753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.064500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.068730] oom_reaper: reaped process 4351 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1747.075574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.104981] 39113 total pagecache pages [ 1747.110701] 0 pages in swap cache [ 1747.116282] Swap cache stats: add 0, delete 0, find 0/0 [ 1747.136059] Free swap = 0kB [ 1747.142340] Total swap = 0kB [ 1747.155075] 2097051 pages RAM [ 1747.177266] 0 pages HighMem/MovableOnly [ 1747.182874] 363848 pages reserved [ 1747.213960] 0 pages cma reserved 04:32:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x302c0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x18, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00', 0xffffffffffffffff) [ 1747.360273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.366935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.380082] device bridge_slave_0 entered promiscuous mode [ 1747.387209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.399282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.408092] device bridge_slave_1 entered promiscuous mode [ 1747.457337] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1747.511121] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1747.565346] Bluetooth: hci4 command 0x0409 tx timeout [ 1747.573513] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1747.600002] team0: Port device team_slave_0 added [ 1747.605751] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1747.619831] team0: Port device team_slave_1 added [ 1747.666356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.689218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.714766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.751044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.757307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.782969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.814307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1747.834054] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1747.914918] device hsr_slave_0 entered promiscuous mode [ 1747.933483] device hsr_slave_1 entered promiscuous mode [ 1747.953560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1747.960920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1748.082096] kworker/u4:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1748.096646] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1748.120206] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1748.125174] CPU: 1 PID: 6928 Comm: kworker/u4:3 Not tainted 4.14.229-syzkaller #0 [ 1748.132795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1748.142155] Call Trace: [ 1748.144748] dump_stack+0x1b2/0x281 [ 1748.148375] dump_header+0x178/0x82f [ 1748.152087] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1748.157186] ? ___ratelimit+0x2cd/0x530 [ 1748.161181] oom_kill_process.cold+0x10/0xa40 [ 1748.165676] ? lock_downgrade+0x740/0x740 [ 1748.169826] out_of_memory+0x2dc/0x1190 [ 1748.173802] ? oom_killer_disable+0x1c0/0x1c0 [ 1748.178314] ? mutex_trylock+0x152/0x1a0 [ 1748.182396] __alloc_pages_nodemask+0x23e1/0x2720 [ 1748.187333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1748.192315] ? cache_grow_begin+0x3f/0x700 [ 1748.196556] cache_grow_begin+0x91/0x700 [ 1748.200625] fallback_alloc+0x207/0x2c0 [ 1748.204600] kmem_cache_alloc+0x1e5/0x3c0 [ 1748.208835] getname_kernel+0x4e/0x340 [ 1748.212722] call_usermodehelper_exec_async+0x2df/0x510 [ 1748.218097] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1748.223572] ret_from_fork+0x24/0x30 [ 1748.239681] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1748.244830] CPU: 1 PID: 6714 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1748.252620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1748.261976] Call Trace: [ 1748.264570] dump_stack+0x1b2/0x281 [ 1748.268203] warn_alloc.cold+0x96/0x1cc [ 1748.272190] ? zone_watermark_ok_safe+0x220/0x220 [ 1748.277051] __alloc_pages_nodemask+0x2127/0x2720 [ 1748.281895] ? switch_mm_irqs_off+0x601/0xeb0 [ 1748.286398] ? lock_acquire+0x170/0x3f0 [ 1748.290380] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1748.295258] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1748.300713] ? __mutex_unlock_slowpath+0x75/0x770 [ 1748.305557] ? __list_del_entry_valid+0xb3/0xf0 [ 1748.310230] alloc_pages_current+0x155/0x260 [ 1748.314643] ion_page_pool_alloc+0x118/0x1b0 [ 1748.319047] ion_system_heap_allocate+0x133/0x8c0 [ 1748.323891] ? _raw_spin_unlock+0x29/0x40 [ 1748.328039] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1748.332970] ? ion_system_contig_heap_create+0x130/0x130 [ 1748.338602] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1748.343640] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1748.348491] ion_alloc+0x27a/0x810 [ 1748.352063] ? ion_dma_buf_release+0x40/0x40 [ 1748.356477] ? __might_fault+0x177/0x1b0 [ 1748.357493] Mem-Info: [ 1748.360540] ion_ioctl+0xea/0x1f0 [ 1748.360549] ? ion_query_heaps+0x360/0x360 [ 1748.360561] ? ion_query_heaps+0x360/0x360 [ 1748.360573] do_vfs_ioctl+0x75a/0xff0 [ 1748.362981] active_anon:72799 inactive_anon:37180 isolated_anon:0 [ 1748.362981] active_file:53 inactive_file:36 isolated_file:0 [ 1748.362981] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1748.362981] slab_reclaimable:12450 slab_unreclaimable:119255 [ 1748.362981] mapped:52760 shmem:37644 pagetables:4873 bounce:0 [ 1748.362981] free:15395 free_pcp:251 free_cma:0 [ 1748.366410] ? ioctl_preallocate+0x1a0/0x1a0 [ 1748.375493] Node 0 active_anon:287928kB inactive_anon:125996kB active_file:56kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155772kB dirty:4kB writeback:0kB shmem:127712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1748.378641] ? lock_downgrade+0x740/0x740 [ 1748.378664] ? __fget+0x225/0x360 [ 1748.412038] Node 1 active_anon:3268kB inactive_anon:22724kB active_file:156kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55268kB dirty:28kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1748.416380] ? do_vfs_ioctl+0xff0/0xff0 [ 1748.444707] Node 0 [ 1748.448812] ? security_file_ioctl+0x83/0xb0 [ 1748.452282] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.479821] SyS_ioctl+0x7f/0xb0 [ 1748.479831] ? do_vfs_ioctl+0xff0/0xff0 [ 1748.479843] do_syscall_64+0x1d5/0x640 [ 1748.479859] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1748.483830] lowmem_reserve[]: [ 1748.486073] RIP: 0033:0x466459 [ 1748.490492] 0 [ 1748.515951] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.515961] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1748.515966] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1748.515971] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1748.515976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1748.515981] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1748.589076] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1748.600953] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1748.606077] CPU: 1 PID: 6726 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1748.613863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1748.623212] Call Trace: [ 1748.625807] dump_stack+0x1b2/0x281 [ 1748.629438] warn_alloc.cold+0x96/0x1cc [ 1748.633504] ? zone_watermark_ok_safe+0x220/0x220 [ 1748.638343] ? usleep_range+0x130/0x130 [ 1748.642312] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1748.647414] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1748.652426] ? run_timer_softirq+0x5a0/0x5a0 [ 1748.656839] __alloc_pages_nodemask+0x2127/0x2720 [ 1748.657975] 2717 [ 1748.661699] ? lock_acquire+0x170/0x3f0 [ 1748.661717] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1748.663771] 2718 [ 1748.667735] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1748.672579] 2718 [ 1748.674604] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1748.679087] 2718 [ 1748.681123] alloc_pages_current+0x155/0x260 [ 1748.688620] ion_page_pool_alloc+0x118/0x1b0 [ 1748.693038] Node 0 DMA32 free:17944kB min:36200kB low:45248kB high:54296kB active_anon:287924kB inactive_anon:125996kB active_file:56kB inactive_file:32kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12064kB pagetables:16992kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.697417] ion_system_heap_allocate+0x133/0x8c0 [ 1748.697430] ? _raw_spin_unlock+0x29/0x40 [ 1748.726371] lowmem_reserve[]: [ 1748.731161] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1748.731172] ? ion_system_contig_heap_create+0x130/0x130 [ 1748.731186] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1748.735321] 0 [ 1748.738415] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1748.752401] 0 [ 1748.753785] ion_alloc+0x27a/0x810 [ 1748.755587] 0 [ 1748.760441] ? ion_dma_buf_release+0x40/0x40 [ 1748.760454] ? __might_fault+0x177/0x1b0 [ 1748.760466] ion_ioctl+0xea/0x1f0 [ 1748.760476] ? ion_query_heaps+0x360/0x360 [ 1748.762260] 0 [ 1748.765785] ? ion_query_heaps+0x360/0x360 [ 1748.767562] 0 [ 1748.771957] do_vfs_ioctl+0x75a/0xff0 [ 1748.771969] ? ioctl_preallocate+0x1a0/0x1a0 [ 1748.771978] ? lock_downgrade+0x740/0x740 [ 1748.771992] ? __fget+0x225/0x360 [ 1748.779473] ? do_vfs_ioctl+0xff0/0xff0 [ 1748.779485] ? security_file_ioctl+0x83/0xb0 [ 1748.779496] SyS_ioctl+0x7f/0xb0 [ 1748.783711] Node 0 [ 1748.785496] ? do_vfs_ioctl+0xff0/0xff0 [ 1748.789757] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.791528] do_syscall_64+0x1d5/0x640 [ 1748.795301] lowmem_reserve[]: [ 1748.799702] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1748.799711] RIP: 0033:0x466459 [ 1748.799716] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.803880] 0 [ 1748.807314] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1748.807322] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1748.811308] 0 [ 1748.815664] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1748.819041] 0 [ 1748.821231] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1748.825221] 0 [ 1748.850126] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1748.859060] warn_alloc_show_mem: 1 callbacks suppressed [ 1748.859064] Mem-Info: [ 1748.866995] syz-executor.2: [ 1748.879063] active_anon:72799 inactive_anon:37180 isolated_anon:0 [ 1748.879063] active_file:53 inactive_file:11 isolated_file:0 [ 1748.879063] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1748.879063] slab_reclaimable:12450 slab_unreclaimable:119255 [ 1748.879063] mapped:52735 shmem:37644 pagetables:4873 bounce:0 [ 1748.879063] free:13866 free_pcp:226 free_cma:0 [ 1748.893629] page allocation failure: order:0 [ 1748.899071] Node 0 active_anon:287928kB inactive_anon:125996kB active_file:56kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155772kB dirty:4kB writeback:0kB shmem:127712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1748.908469] 0 [ 1748.916123] Node 1 active_anon:3268kB inactive_anon:22724kB active_file:156kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55168kB dirty:28kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1748.924966] Node 0 [ 1748.938193] Node 1 [ 1748.965126] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.974374] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1749.006433] lowmem_reserve[]: [ 1749.047521] Normal free:26564kB min:53696kB low:67120kB high:80544kB active_anon:3268kB inactive_anon:22724kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1184kB pagetables:2500kB bounce:0kB free_pcp:904kB local_pcp:676kB free_cma:0kB [ 1749.064264] 0 2717 2718 2718 2718 [ 1749.116113] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:287924kB inactive_anon:125996kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12064kB pagetables:16992kB bounce:0kB free_pcp:152kB local_pcp:32kB free_cma:0kB [ 1749.118836] (null) [ 1749.163608] lowmem_reserve[]: 0 0 0 0 0 [ 1749.163931] lowmem_reserve[]: [ 1749.167623] Node 0 [ 1749.167626] 0 0 [ 1749.170770] DMA: 93*4kB (UME) 51*8kB (UM) 6*16kB (UME) 1*32kB (M) 5*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 1749.187506] 0 [ 1749.190107] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1749.194298] syz-executor.3: page allocation failure: order:0 [ 1749.197062] CPU: 0 PID: 6738 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1749.197070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1749.217534] 0 [ 1749.219969] Call Trace: [ 1749.219996] dump_stack+0x1b2/0x281 [ 1749.220012] warn_alloc.cold+0x96/0x1cc [ 1749.220025] ? zone_watermark_ok_safe+0x220/0x220 [ 1749.220036] ? usleep_range+0x130/0x130 [ 1749.220046] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1749.220060] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1749.220071] ? run_timer_softirq+0x5a0/0x5a0 [ 1749.228030] 0 [ 1749.228077] __alloc_pages_nodemask+0x2127/0x2720 [ 1749.246961] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1749.250920] ? lock_acquire+0x170/0x3f0 [ 1749.250938] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1749.250948] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1749.250966] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1749.250985] alloc_pages_current+0x155/0x260 [ 1749.273032] ion_page_pool_alloc+0x118/0x1b0 [ 1749.277857] Node 0 [ 1749.282339] ion_system_heap_allocate+0x133/0x8c0 [ 1749.282352] ? _raw_spin_unlock+0x29/0x40 [ 1749.282360] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1749.282369] ? ion_system_contig_heap_create+0x130/0x130 [ 1749.282379] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1749.282392] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1749.282403] ion_alloc+0x27a/0x810 [ 1749.282414] ? ion_dma_buf_release+0x40/0x40 [ 1749.282426] ? __might_fault+0x177/0x1b0 [ 1749.282439] ion_ioctl+0xea/0x1f0 [ 1749.282447] ? ion_query_heaps+0x360/0x360 [ 1749.282459] ? ion_query_heaps+0x360/0x360 [ 1749.295734] (null) [ 1749.296745] do_vfs_ioctl+0x75a/0xff0 [ 1749.298958] syz-executor.3 cpuset= [ 1749.303786] ? ioctl_preallocate+0x1a0/0x1a0 [ 1749.303795] ? lock_downgrade+0x740/0x740 [ 1749.303809] ? __fget+0x225/0x360 [ 1749.303818] ? do_vfs_ioctl+0xff0/0xff0 [ 1749.303830] ? security_file_ioctl+0x83/0xb0 [ 1749.303841] SyS_ioctl+0x7f/0xb0 [ 1749.322823] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1749.323339] ? do_vfs_ioctl+0xff0/0xff0 [ 1749.328160] lowmem_reserve[]: [ 1749.331692] do_syscall_64+0x1d5/0x640 [ 1749.331706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1749.331714] RIP: 0033:0x466459 [ 1749.331719] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1749.331729] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1749.331734] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1749.331739] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1749.331745] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1749.331750] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1749.339373] Node 0 [ 1749.347249] / [ 1749.347923] DMA32: [ 1749.352198] mems_allowed=0-1 [ 1749.352213] CPU: 1 PID: 6714 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1749.352218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1749.352222] Call Trace: [ 1749.352243] dump_stack+0x1b2/0x281 [ 1749.352258] warn_alloc.cold+0x96/0x1cc [ 1749.352270] ? zone_watermark_ok_safe+0x220/0x220 [ 1749.352282] ? usleep_range+0x130/0x130 [ 1749.362009] 684*4kB [ 1749.366128] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1749.370281] (ME) [ 1749.373691] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1749.377632] 117*8kB [ 1749.382026] ? run_timer_softirq+0x5a0/0x5a0 [ 1749.382046] __alloc_pages_nodemask+0x2127/0x2720 [ 1749.382063] ? lock_acquire+0x170/0x3f0 [ 1749.385397] (ME) [ 1749.410291] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1749.410302] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1749.410319] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1749.410333] ? __list_del_entry_valid+0xb3/0xf0 [ 1749.414287] 60*16kB [ 1749.417377] alloc_pages_current+0x155/0x260 [ 1749.421250] (UME) [ 1749.426413] ion_page_pool_alloc+0x118/0x1b0 [ 1749.429600] 16*32kB [ 1749.437294] ion_system_heap_allocate+0x133/0x8c0 [ 1749.444589] (UME) [ 1749.451822] ? _raw_spin_unlock+0x29/0x40 [ 1749.451834] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1749.451845] ? ion_system_contig_heap_create+0x130/0x130 [ 1749.459131] 49*64kB [ 1749.466385] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1749.466399] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1749.473691] (U) [ 1749.475887] ion_alloc+0x27a/0x810 [ 1749.477580] 22*128kB [ 1749.479806] ? ion_dma_buf_release+0x40/0x40 [ 1749.479821] ? __might_fault+0x177/0x1b0 [ 1749.489034] (U) [ 1749.490806] ion_ioctl+0xea/0x1f0 [ 1749.509029] 27*256kB [ 1749.510278] ? ion_query_heaps+0x360/0x360 [ 1749.515092] (U) [ 1749.519051] ? ion_query_heaps+0x360/0x360 [ 1749.519063] do_vfs_ioctl+0x75a/0xff0 [ 1749.519075] ? ioctl_preallocate+0x1a0/0x1a0 [ 1749.539036] 0*512kB [ 1749.540216] ? lock_downgrade+0x740/0x740 [ 1749.545042] 0*1024kB [ 1749.549012] ? __fget+0x225/0x360 [ 1749.549022] ? do_vfs_ioctl+0xff0/0xff0 [ 1749.549035] ? security_file_ioctl+0x83/0xb0 [ 1749.549045] SyS_ioctl+0x7f/0xb0 [ 1749.559046] 0*2048kB [ 1749.560418] ? do_vfs_ioctl+0xff0/0xff0 [ 1749.565842] 0*4096kB [ 1749.570499] do_syscall_64+0x1d5/0x640 [ 1749.570515] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1749.570524] RIP: 0033:0x466459 [ 1749.589036] = 18008kB [ 1749.590893] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 [ 1749.593048] Node 0 [ 1749.597176] ORIG_RAX: 0000000000000010 [ 1749.609032] Normal: [ 1749.610532] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1749.615527] 0*4kB [ 1749.620350] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1749.620356] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1749.620361] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1749.620367] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1749.630300] 0 [ 1749.649185] Bluetooth: hci4 command 0x041b tx timeout [ 1749.649743] 0 [ 1749.729763] 0*8kB [ 1749.736015] 0 [ 1749.737998] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1749.738028] Node 1 Normal: 162*4kB (M) 97*8kB [ 1749.764593] 0 [ 1749.767422] (ME) [ 1749.769257] 0 [ 1749.769266] Node 1 Normal free:156080kB min:53696kB low:67120kB high:80544kB active_anon:3268kB inactive_anon:22724kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1184kB pagetables:2500kB bounce:0kB free_pcp:1024kB local_pcp:228kB free_cma:0kB [ 1749.769288] lowmem_reserve[]: 0 0 0 0 0 [ 1749.769307] Node 0 DMA: [ 1749.809046] 76*16kB [ 1749.832047] 93*4kB (UME) 51*8kB (UM) 6*16kB (UME) 1*32kB (M) 5*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10956kB [ 1749.856385] Node 0 DMA32: 167*4kB (E) 76*8kB (E) 45*16kB (E) 12*32kB (ME) 465*64kB (UM) 34*128kB (U) 35*256kB (UM) 4*512kB (U) 4*1024kB (UM) 1*2048kB (U) 0*4096kB = 53644kB [ 1749.876080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1749.887927] Node 1 Normal: 541*4kB (UM) 92*8kB (UME) 67*16kB (UM) 47*32kB (UME) 2197*64kB (UM) 236*128kB (UM) 33*256kB (UM) 15*512kB (UM) 11*1024kB (UM) 9*2048kB (U) 0*4096kB = 222116kB [ 1749.899037] (M) 61*32kB (ME) 1182*64kB (UM) 18*128kB (UM) 4*256kB (UM) 6*512kB (UM) 10*1024kB (UM) 9*2048kB (U) 0*4096kB = 115312kB [ 1749.922844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1749.949086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1749.952816] warn_alloc_show_mem: 2 callbacks suppressed [ 1749.952820] Mem-Info: [ 1749.957935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1749.974816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1749.993061] active_anon:72799 inactive_anon:37180 isolated_anon:0 [ 1749.993061] active_file:15 inactive_file:992 isolated_file:0 [ 1749.993061] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1749.993061] slab_reclaimable:12450 slab_unreclaimable:120280 [ 1749.993061] mapped:53492 shmem:37644 pagetables:4873 bounce:0 [ 1749.993061] free:83172 free_pcp:527 free_cma:0 [ 1750.029838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1750.038688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1750.041627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1750.069145] 38684 total pagecache pages [ 1750.071112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1750.073139] 0 pages in swap cache [ 1750.083718] 38684 total pagecache pages [ 1750.099096] 0 pages in swap cache [ 1750.102568] Swap cache stats: add 0, delete 0, find 0/0 [ 1750.103542] Swap cache stats: add 0, delete 0, find 0/0 [ 1750.107924] Free swap = 0kB [ 1750.113692] Node 0 active_anon:287928kB inactive_anon:125996kB active_file:28kB inactive_file:3992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158896kB dirty:96kB writeback:0kB shmem:127712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1750.137759] Total swap = 0kB [ 1750.147881] 2097051 pages RAM [ 1750.159062] 0 pages HighMem/MovableOnly [ 1750.163086] 363848 pages reserved [ 1750.166537] 0 pages cma reserved [ 1750.169299] Free swap = 0kB [ 1750.173364] Total swap = 0kB [ 1750.176383] 2097051 pages RAM [ 1750.189056] 0 pages HighMem/MovableOnly [ 1750.193042] 363848 pages reserved [ 1750.196483] 0 pages cma reserved [ 1750.216349] Out of memory: Kill process 4452 (syz-executor.0) score 1005 or sacrifice child [ 1750.229092] Node 1 active_anon:3268kB inactive_anon:22724kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:4kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1750.230494] Killed process 4452 (syz-executor.0) total-vm:93384kB, anon-rss:2208kB, file-rss:34628kB, shmem-rss:0kB [ 1750.303251] oom_reaper: reaped process 4452 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1750.317624] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1750.353059] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1750.358400] Node 0 DMA32 free:60000kB min:36200kB low:45248kB high:54296kB active_anon:285800kB inactive_anon:125996kB active_file:28kB inactive_file:5892kB unevictable:0kB writepending:96kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12000kB pagetables:16992kB bounce:0kB free_pcp:772kB local_pcp:624kB free_cma:0kB [ 1750.393827] lowmem_reserve[]: 0 0 0 0 0 [ 1750.397841] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1750.428641] lowmem_reserve[]: 0 0 0 0 0 [ 1750.433508] Node 1 Normal free:667068kB min:53696kB low:67120kB high:80544kB active_anon:3268kB inactive_anon:22724kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2352kB bounce:0kB free_pcp:1408kB local_pcp:668kB free_cma:0kB [ 1750.468533] lowmem_reserve[]: 0 0 0 0 0 [ 1750.473324] Node 0 DMA: 99*4kB (UME) 51*8kB (UM) 6*16kB (UME) 1*32kB (M) 4*64kB (UME) 3*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11044kB [ 1750.495251] Node 0 DMA32: 169*4kB (E) 76*8kB (E) 46*16kB (ME) 97*32kB (UE) 477*64kB (U) 189*128kB (UM) 39*256kB (UM) 5*512kB (U) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 77508kB [ 1750.516824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1750.539087] Node 1 Normal: 1573*4kB (UM) 510*8kB (UME) 854*16kB (UM) 736*32kB (UME) 6544*64kB (UM) 758*128kB (UM) 62*256kB (UM) 36*512kB (UM) 107*1024kB (UM) 16*2048kB (U) 0*4096kB = 740068kB [ 1750.556683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1750.569118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1750.577711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1750.589069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1750.597687] 39461 total pagecache pages [ 1750.609127] 0 pages in swap cache [ 1750.612617] Swap cache stats: add 0, delete 0, find 0/0 [ 1750.617967] Free swap = 0kB [ 1750.622538] Total swap = 0kB [ 1750.625562] 2097051 pages RAM [ 1750.628657] 0 pages HighMem/MovableOnly [ 1750.634023] 363848 pages reserved [ 1750.637478] 0 pages cma reserved 04:32:47 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x6b, 0x0, 0x4, 0x6, 0xfffffffa}) [ 1751.719213] Bluetooth: hci4 command 0x040f tx timeout [ 1752.892507] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1752.922028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.931546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1752.941373] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1752.947488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1752.954791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1752.964090] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1752.970230] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.978093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1752.985200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1752.993029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1753.000979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.007317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.014878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1753.024471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1753.031848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1753.040494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1753.048120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.054528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.064023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1753.071331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1753.082335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1753.089453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1753.101462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1753.108307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1753.116420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1753.124660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1753.133408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1753.140525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1753.148147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1753.158522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1753.165539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1753.173458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1753.183573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1753.190971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1753.198419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1753.208282] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1753.214902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1753.226924] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1753.234760] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1753.241223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1753.247960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1753.259741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.313738] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1753.322990] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1753.332816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1753.341288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1753.367341] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1753.375645] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1753.382847] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1753.392804] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1753.400254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1753.407605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1753.416390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1753.423551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1753.432329] device veth0_vlan entered promiscuous mode [ 1753.441988] device veth1_vlan entered promiscuous mode [ 1753.447757] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1753.456485] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1753.467842] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1753.477498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1753.484962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1753.492502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1753.503070] device veth0_macvtap entered promiscuous mode [ 1753.510552] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1753.518553] device veth1_macvtap entered promiscuous mode [ 1753.527369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1753.536710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1753.545632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.555982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.565250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.575038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.584408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.594187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.603401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.613152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.622496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1753.632265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.642383] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1753.649760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1753.657120] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1753.665441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1753.673227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1753.682884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.693261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.702819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.712843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.722007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.731765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.740936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.750721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.760339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1753.770503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.780957] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1753.787858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.797791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1753.805877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1753.814276] Bluetooth: hci4 command 0x0419 tx timeout 04:32:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4040, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) 04:32:50 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000), 0x0) 04:32:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x302c0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x18, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00', 0xffffffffffffffff) 04:32:50 executing program 3: bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) 04:32:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 04:32:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x4110, r1, 0xc000) 04:32:50 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000), 0x0) 04:32:51 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) write$snddsp(0xffffffffffffffff, &(0x7f0000000000)="95", 0x1) 04:32:51 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) write$snddsp(0xffffffffffffffff, &(0x7f0000000000)="95", 0x1) 04:32:51 executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x6b, 0x4, 0x4, 0x6, 0xfffffffa}) 04:32:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in={0x2, 0x4e20, @remote}}}, 0x90) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)=0x7) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1, &(0x7f00000001c0)) 04:32:51 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) write$snddsp(0xffffffffffffffff, &(0x7f0000000000)="95", 0x1) 04:32:51 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) [ 1755.226769] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1755.239805] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1755.246375] syz-executor.0: [ 1755.251893] syz-executor.0: [ 1755.252467] syz-executor.3: [ 1755.255065] page allocation failure: order:4 [ 1755.258109] syz-executor.2: [ 1755.261751] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1755.268767] syz-executor.4 cpuset= [ 1755.274467] page allocation failure: order:4 [ 1755.276332] syz-executor.5 cpuset= [ 1755.281818] page allocation failure: order:4 [ 1755.284879] (null) [ 1755.288895] page allocation failure: order:4 [ 1755.294194] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1755.295727] / [ 1755.298674] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1755.306855] / [ 1755.309398] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1755.316947] (null) [ 1755.318380] syz-executor.0 cpuset= [ 1755.325169] (null) [ 1755.327058] mems_allowed=0-1 [ 1755.331453] (null) [ 1755.337980] / mems_allowed=0-1 [ 1755.338077] syz-executor.3 cpuset= [ 1755.341494] mems_allowed=0-1 [ 1755.343066] syz-executor.2 cpuset= [ 1755.345191] CPU: 1 PID: 7001 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1755.348191] syz-executor.0 cpuset= [ 1755.351682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.351686] Call Trace: [ 1755.351705] dump_stack+0x1b2/0x281 [ 1755.351719] warn_alloc.cold+0x96/0x1cc [ 1755.351731] ? zone_watermark_ok_safe+0x220/0x220 [ 1755.351755] __alloc_pages_nodemask+0x2127/0x2720 [ 1755.359632] / [ 1755.363085] ? lock_acquire+0x170/0x3f0 [ 1755.377537] / [ 1755.378786] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1755.382898] mems_allowed=0-1 [ 1755.387609] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1755.387623] ? __mutex_unlock_slowpath+0x75/0x770 [ 1755.392547] / [ 1755.394164] alloc_pages_current+0x155/0x260 [ 1755.398169] mems_allowed=0-1 [ 1755.399814] ion_page_pool_alloc+0x118/0x1b0 [ 1755.399824] ion_system_heap_allocate+0x133/0x8c0 [ 1755.399834] ? ion_alloc+0x187/0x810 [ 1755.399846] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1755.399856] ? ion_system_contig_heap_create+0x130/0x130 [ 1755.399865] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1755.399875] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1755.399885] ion_alloc+0x204/0x810 [ 1755.399899] ? ion_dma_buf_release+0x40/0x40 [ 1755.399913] ? __might_fault+0x177/0x1b0 [ 1755.399923] ion_ioctl+0xea/0x1f0 [ 1755.399932] ? ion_query_heaps+0x360/0x360 [ 1755.399945] ? ion_query_heaps+0x360/0x360 [ 1755.399954] do_vfs_ioctl+0x75a/0xff0 [ 1755.399966] ? ioctl_preallocate+0x1a0/0x1a0 [ 1755.399975] ? lock_downgrade+0x740/0x740 [ 1755.399997] ? __fget+0x225/0x360 [ 1755.400006] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.400017] ? security_file_ioctl+0x83/0xb0 [ 1755.400028] SyS_ioctl+0x7f/0xb0 [ 1755.400036] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.400048] do_syscall_64+0x1d5/0x640 [ 1755.400064] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1755.400072] RIP: 0033:0x466459 [ 1755.400077] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.400087] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1755.400093] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1755.400099] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1755.400104] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1755.400111] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1755.404744] CPU: 1 PID: 7010 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1755.422362] mems_allowed=0-1 [ 1755.424444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.424448] Call Trace: [ 1755.424466] dump_stack+0x1b2/0x281 [ 1755.424480] warn_alloc.cold+0x96/0x1cc [ 1755.603109] ? zone_watermark_ok_safe+0x220/0x220 [ 1755.607976] __alloc_pages_nodemask+0x2127/0x2720 [ 1755.612820] ? lock_acquire+0x170/0x3f0 [ 1755.616795] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1755.621638] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1755.627087] ? __mutex_unlock_slowpath+0x75/0x770 [ 1755.631931] ? retint_kernel+0x2d/0x2d [ 1755.635817] alloc_pages_current+0x155/0x260 [ 1755.640220] ion_page_pool_alloc+0x118/0x1b0 [ 1755.644620] ion_system_heap_allocate+0x133/0x8c0 [ 1755.649453] ? ion_alloc+0x187/0x810 [ 1755.653159] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1755.658601] ? ion_system_contig_heap_create+0x130/0x130 [ 1755.664053] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1755.669065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1755.673921] ion_alloc+0x204/0x810 [ 1755.677461] ? ion_dma_buf_release+0x40/0x40 [ 1755.681864] ? __might_fault+0x177/0x1b0 [ 1755.685920] ion_ioctl+0xea/0x1f0 [ 1755.689368] ? ion_query_heaps+0x360/0x360 [ 1755.693597] ? ion_query_heaps+0x360/0x360 [ 1755.697826] do_vfs_ioctl+0x75a/0xff0 [ 1755.701640] ? ioctl_preallocate+0x1a0/0x1a0 [ 1755.706042] ? lock_downgrade+0x740/0x740 [ 1755.710188] ? __fget+0x225/0x360 [ 1755.713636] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.717617] ? security_file_ioctl+0x83/0xb0 [ 1755.722024] SyS_ioctl+0x7f/0xb0 [ 1755.725381] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.729351] do_syscall_64+0x1d5/0x640 [ 1755.733238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1755.738415] RIP: 0033:0x466459 [ 1755.741594] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.749293] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1755.756555] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1755.763830] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1755.771093] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1755.778355] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1755.785743] CPU: 0 PID: 7005 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1755.793549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.803945] Call Trace: [ 1755.806583] dump_stack+0x1b2/0x281 [ 1755.810211] warn_alloc.cold+0x96/0x1cc [ 1755.814210] ? zone_watermark_ok_safe+0x220/0x220 [ 1755.819106] __alloc_pages_nodemask+0x2127/0x2720 [ 1755.823964] ? lock_acquire+0x170/0x3f0 [ 1755.827940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1755.832803] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1755.838257] ? __mutex_unlock_slowpath+0x75/0x770 [ 1755.843125] alloc_pages_current+0x155/0x260 [ 1755.847556] ion_page_pool_alloc+0x118/0x1b0 [ 1755.851805] Mem-Info: [ 1755.851987] ion_system_heap_allocate+0x133/0x8c0 [ 1755.858120] active_anon:73334 inactive_anon:37179 isolated_anon:0 [ 1755.858120] active_file:1809 inactive_file:2354 isolated_file:0 [ 1755.858120] unevictable:0 dirty:102 writeback:0 unstable:0 [ 1755.858120] slab_reclaimable:12461 slab_unreclaimable:121318 [ 1755.858120] mapped:55356 shmem:37643 pagetables:4881 bounce:0 [ 1755.858120] free:228164 free_pcp:30 free_cma:0 [ 1755.859325] ? ion_alloc+0x187/0x810 [ 1755.859337] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1755.859348] ? ion_system_contig_heap_create+0x130/0x130 [ 1755.859359] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1755.859372] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1755.859400] ion_alloc+0x204/0x810 [ 1755.921255] ? ion_dma_buf_release+0x40/0x40 [ 1755.925661] ? __might_fault+0x177/0x1b0 [ 1755.929721] ion_ioctl+0xea/0x1f0 [ 1755.931856] Node 0 active_anon:290284kB inactive_anon:125992kB active_file:7156kB inactive_file:9412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166328kB dirty:368kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 221184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1755.933166] ? ion_query_heaps+0x360/0x360 [ 1755.933180] ? ion_query_heaps+0x360/0x360 [ 1755.933192] do_vfs_ioctl+0x75a/0xff0 [ 1755.933204] ? ioctl_preallocate+0x1a0/0x1a0 [ 1755.933217] ? lock_downgrade+0x740/0x740 [ 1755.982475] ? __fget+0x225/0x360 [ 1755.985945] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.989915] ? security_file_ioctl+0x83/0xb0 [ 1755.994321] SyS_ioctl+0x7f/0xb0 [ 1755.994531] Node 1 active_anon:3052kB inactive_anon:22724kB active_file:80kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:40kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1755.997677] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.997696] do_syscall_64+0x1d5/0x640 [ 1755.997713] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1755.997723] RIP: 0033:0x466459 [ 1756.041183] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.048914] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1756.056189] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1756.057746] Node 0 [ 1756.063453] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1756.063459] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1756.063464] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1756.072627] CPU: 0 PID: 7009 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1756.095652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.105027] Call Trace: [ 1756.105926] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:4100kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.107649] dump_stack+0x1b2/0x281 [ 1756.107665] warn_alloc.cold+0x96/0x1cc [ 1756.107680] ? zone_watermark_ok_safe+0x220/0x220 [ 1756.145908] __alloc_pages_nodemask+0x2127/0x2720 [ 1756.150765] ? _raw_spin_unlock_irq+0x24/0x80 [ 1756.155286] ? lock_acquire+0x170/0x3f0 [ 1756.159260] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1756.164071] lowmem_reserve[]: 0 2717 [ 1756.164119] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1756.164132] ? __mutex_unlock_slowpath+0x75/0x770 [ 1756.172473] 2718 [ 1756.173268] alloc_pages_current+0x155/0x260 [ 1756.183868] 2718 [ 1756.185070] ion_page_pool_alloc+0x118/0x1b0 [ 1756.185082] ion_system_heap_allocate+0x133/0x8c0 [ 1756.185093] ? ion_alloc+0x187/0x810 [ 1756.185106] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1756.188361] 2718 [ 1756.191542] ? ion_system_contig_heap_create+0x130/0x130 [ 1756.191553] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1756.191565] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1756.191577] ion_alloc+0x204/0x810 [ 1756.191592] ? ion_dma_buf_release+0x40/0x40 [ 1756.191604] ? __might_fault+0x177/0x1b0 [ 1756.205609] ion_ioctl+0xea/0x1f0 [ 1756.205620] ? ion_query_heaps+0x360/0x360 [ 1756.205634] ? ion_query_heaps+0x360/0x360 [ 1756.205645] do_vfs_ioctl+0x75a/0xff0 [ 1756.212152] Node 0 [ 1756.213150] ? ioctl_preallocate+0x1a0/0x1a0 [ 1756.224864] DMA32 free:751676kB min:36200kB low:45248kB high:54296kB active_anon:286188kB inactive_anon:125992kB active_file:7232kB inactive_file:9432kB unevictable:0kB writepending:380kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17244kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 1756.226490] ? lock_downgrade+0x740/0x740 [ 1756.226506] ? __fget+0x225/0x360 [ 1756.226517] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.226531] ? security_file_ioctl+0x83/0xb0 [ 1756.237653] lowmem_reserve[]: [ 1756.238396] SyS_ioctl+0x7f/0xb0 [ 1756.248282] 0 [ 1756.250687] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.250701] do_syscall_64+0x1d5/0x640 [ 1756.250718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1756.250728] RIP: 0033:0x466459 [ 1756.256367] 0 [ 1756.257336] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.257347] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1756.257354] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1756.257359] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1756.257365] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1756.257374] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1756.319598] 0 [ 1756.325788] CPU: 0 PID: 7002 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1756.340080] 0 [ 1756.343744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.343749] Call Trace: [ 1756.343769] dump_stack+0x1b2/0x281 [ 1756.343784] warn_alloc.cold+0x96/0x1cc [ 1756.343798] ? zone_watermark_ok_safe+0x220/0x220 [ 1756.363278] 0 [ 1756.365618] __alloc_pages_nodemask+0x2127/0x2720 [ 1756.365636] ? lock_acquire+0x170/0x3f0 [ 1756.393642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1756.393663] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1756.393676] ? __mutex_unlock_slowpath+0x75/0x770 [ 1756.393698] alloc_pages_current+0x155/0x260 [ 1756.393711] ion_page_pool_alloc+0x118/0x1b0 [ 1756.406583] Node 0 [ 1756.408735] ion_system_heap_allocate+0x133/0x8c0 [ 1756.408747] ? ion_alloc+0x187/0x810 [ 1756.408758] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1756.408769] ? ion_system_contig_heap_create+0x130/0x130 [ 1756.415199] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.415393] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1756.423972] lowmem_reserve[]: [ 1756.424173] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1756.435407] 0 [ 1756.438838] ion_alloc+0x204/0x810 [ 1756.438855] ? ion_dma_buf_release+0x40/0x40 [ 1756.438869] ? __might_fault+0x177/0x1b0 [ 1756.452413] 0 [ 1756.454053] ion_ioctl+0xea/0x1f0 [ 1756.454065] ? ion_query_heaps+0x360/0x360 [ 1756.454077] ? ion_query_heaps+0x360/0x360 [ 1756.467516] 0 [ 1756.490265] do_vfs_ioctl+0x75a/0xff0 [ 1756.490280] ? ioctl_preallocate+0x1a0/0x1a0 [ 1756.490291] ? lock_downgrade+0x740/0x740 [ 1756.490304] ? __fget+0x225/0x360 [ 1756.490312] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.490323] ? security_file_ioctl+0x83/0xb0 [ 1756.490337] SyS_ioctl+0x7f/0xb0 [ 1756.519681] 0 [ 1756.522290] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.522306] do_syscall_64+0x1d5/0x640 [ 1756.522322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1756.529985] 0 [ 1756.530769] RIP: 0033:0x466459 [ 1756.536342] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 [ 1756.546421] Node 1 [ 1756.548333] ORIG_RAX: 0000000000000010 [ 1756.548339] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1756.548345] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1756.548351] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1756.548357] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1756.548364] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1756.630428] CPU: 1 PID: 7021 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1756.638230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.647590] Call Trace: [ 1756.650188] dump_stack+0x1b2/0x281 [ 1756.653816] warn_alloc.cold+0x96/0x1cc [ 1756.657794] ? zone_watermark_ok_safe+0x220/0x220 [ 1756.662650] __alloc_pages_nodemask+0x2127/0x2720 [ 1756.667498] ? __schedule+0x893/0x1de0 [ 1756.671391] ? lock_acquire+0x170/0x3f0 [ 1756.675371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1756.680484] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1756.685942] ? __mutex_unlock_slowpath+0x75/0x770 [ 1756.690793] alloc_pages_current+0x155/0x260 [ 1756.695211] ion_page_pool_alloc+0x118/0x1b0 [ 1756.699620] ion_system_heap_allocate+0x133/0x8c0 [ 1756.704641] ? ion_alloc+0x187/0x810 [ 1756.708367] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1756.713820] ? ion_system_contig_heap_create+0x130/0x130 [ 1756.719444] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1756.724467] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1756.729473] ion_alloc+0x204/0x810 [ 1756.733020] ? ion_dma_buf_release+0x40/0x40 [ 1756.737537] ? __might_fault+0x177/0x1b0 [ 1756.741613] ion_ioctl+0xea/0x1f0 [ 1756.745069] ? ion_query_heaps+0x360/0x360 [ 1756.749304] ? __fget+0x1fe/0x360 [ 1756.752752] ? ion_query_heaps+0x360/0x360 [ 1756.757030] do_vfs_ioctl+0x75a/0xff0 [ 1756.760846] ? ioctl_preallocate+0x1a0/0x1a0 [ 1756.765257] ? lock_downgrade+0x740/0x740 [ 1756.769420] ? __fget+0x225/0x360 [ 1756.772873] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.776851] ? security_file_ioctl+0x83/0xb0 [ 1756.781266] SyS_ioctl+0x7f/0xb0 [ 1756.784645] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.788624] do_syscall_64+0x1d5/0x640 [ 1756.792523] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1756.797718] RIP: 0033:0x466459 [ 1756.800907] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.808725] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1756.816010] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1756.823283] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1756.830555] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1756.837823] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1756.847147] warn_alloc_show_mem: 2 callbacks suppressed [ 1756.847268] Mem-Info: [ 1756.855309] active_anon:73335 inactive_anon:37179 isolated_anon:0 [ 1756.855309] active_file:1828 inactive_file:2359 isolated_file:0 [ 1756.855309] unevictable:0 dirty:105 writeback:0 unstable:0 [ 1756.855309] slab_reclaimable:12461 slab_unreclaimable:122337 [ 1756.855309] mapped:55366 shmem:37643 pagetables:4881 bounce:0 [ 1756.855309] free:190230 free_pcp:21 free_cma:0 [ 1756.889582] Node 0 active_anon:290288kB inactive_anon:125992kB active_file:7232kB inactive_file:9432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166368kB dirty:380kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 221184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1756.918533] Normal free:150536kB min:53696kB low:67120kB high:80544kB active_anon:3052kB inactive_anon:22724kB active_file:80kB inactive_file:4kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.946925] Node 1 active_anon:3052kB inactive_anon:22724kB active_file:80kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:40kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1756.974987] lowmem_reserve[]: 0 0 0 0 0 [ 1756.979187] Node 0 DMA: 16*4kB (UME) 48*8kB (UM) 28*16kB (UME) 26*32kB (UM) 19*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11136kB [ 1756.995411] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:4100kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.022990] Node 0 DMA32: 153*4kB (UME) 58*8kB (UME) 11990*16kB (UME) 9173*32kB (UME) 71*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 491252kB [ 1757.038250] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1757.043611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1757.054787] Node 0 DMA32 free:470864kB min:36200kB low:45248kB high:54296kB active_anon:286188kB inactive_anon:125992kB active_file:7232kB inactive_file:9432kB unevictable:0kB writepending:380kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17244kB bounce:0kB free_pcp:224kB local_pcp:76kB free_cma:0kB [ 1757.085234] Node 1 Normal: 1838*4kB (UM) 2804*8kB (UME) 2736*16kB (UM) 2406*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 150552kB [ 1757.100260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1757.109396] lowmem_reserve[]: 0 0 0 0 0 [ 1757.113552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1757.122391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.148420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1757.157526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1757.166490] 41852 total pagecache pages [ 1757.170763] lowmem_reserve[]: 0 0 0 0 0 [ 1757.174921] 0 pages in swap cache [ 1757.178529] Node 1 Normal free:150536kB min:53696kB low:67120kB high:80544kB active_anon:3052kB inactive_anon:22724kB active_file:80kB inactive_file:4kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.207519] Swap cache stats: add 0, delete 0, find 0/0 [ 1757.216509] Free swap = 0kB [ 1757.223194] Total swap = 0kB [ 1757.228672] 2097051 pages RAM [ 1757.232531] 0 pages HighMem/MovableOnly [ 1757.236736] 363848 pages reserved [ 1757.240635] 0 pages cma reserved [ 1757.246437] lowmem_reserve[]: 0 0 0 0 0 [ 1757.255194] Node 0 DMA: 16*4kB (UME) 48*8kB (UM) 28*16kB (UME) 26*32kB (UM) 19*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11136kB [ 1757.279159] Node 0 DMA32: 152*4kB (ME) 57*8kB (UME) 477*16kB (UME) 9173*32kB (UME) 71*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 307032kB [ 1757.312900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1757.335384] Node 1 Normal: 1838*4kB (UM) 2804*8kB (UME) 2736*16kB (UM) 2406*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 150552kB [ 1757.352148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1757.369879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1757.400542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1757.429113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1757.439797] 41854 total pagecache pages [ 1757.443808] 0 pages in swap cache [ 1757.447281] Swap cache stats: add 0, delete 0, find 0/0 [ 1757.469083] Free swap = 0kB [ 1757.472133] Total swap = 0kB [ 1757.475186] 2097051 pages RAM [ 1757.478284] 0 pages HighMem/MovableOnly [ 1757.499184] 363848 pages reserved [ 1757.502659] 0 pages cma reserved [ 1757.842824] oom_reaper: reaped process 7021 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1757.903671] oom_reaper: reaped process 7009 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1757.937061] oom_reaper: reaped process 7005 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1758.006194] oom_reaper: reaped process 7010 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1758.053714] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1758.067331] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1758.072582] CPU: 1 PID: 7002 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1758.080383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1758.090183] Call Trace: [ 1758.092765] dump_stack+0x1b2/0x281 [ 1758.096384] dump_header+0x178/0x82f [ 1758.100090] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1758.105184] ? ___ratelimit+0x2cd/0x530 [ 1758.109157] oom_kill_process.cold+0x10/0xa40 [ 1758.113671] out_of_memory+0xe3e/0x1190 [ 1758.117628] ? oom_killer_disable+0x1c0/0x1c0 [ 1758.122111] ? mutex_trylock+0x152/0x1a0 [ 1758.126178] __alloc_pages_nodemask+0x23e1/0x2720 [ 1758.131049] ? lock_acquire+0x170/0x3f0 [ 1758.135031] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1758.139864] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1758.144367] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1758.149930] alloc_pages_current+0x155/0x260 [ 1758.154334] ion_page_pool_alloc+0x118/0x1b0 [ 1758.158720] ion_system_heap_allocate+0x133/0x8c0 [ 1758.163553] ? ion_alloc+0x187/0x810 [ 1758.167255] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1758.172694] ? ion_system_contig_heap_create+0x130/0x130 [ 1758.178168] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1758.179117] syz-executor.4: [ 1758.183194] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1758.183198] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1758.186205] ion_alloc+0x204/0x810 [ 1758.204431] ? ion_dma_buf_release+0x40/0x40 [ 1758.208841] ? __might_fault+0x177/0x1b0 [ 1758.212902] ion_ioctl+0xea/0x1f0 [ 1758.216352] ? ion_query_heaps+0x360/0x360 [ 1758.220587] ? ion_query_heaps+0x360/0x360 [ 1758.223389] (null) [ 1758.224820] do_vfs_ioctl+0x75a/0xff0 [ 1758.226953] syz-executor.4 cpuset= [ 1758.230827] ? ioctl_preallocate+0x1a0/0x1a0 [ 1758.230838] ? lock_downgrade+0x740/0x740 [ 1758.230852] ? __fget+0x225/0x360 [ 1758.230861] ? do_vfs_ioctl+0xff0/0xff0 [ 1758.230873] ? security_file_ioctl+0x83/0xb0 [ 1758.230884] SyS_ioctl+0x7f/0xb0 [ 1758.230892] ? do_vfs_ioctl+0xff0/0xff0 [ 1758.230905] do_syscall_64+0x1d5/0x640 [ 1758.230923] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1758.244631] / [ 1758.246409] RIP: 0033:0x466459 [ 1758.252619] mems_allowed=0-1 [ 1758.255657] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.287760] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1758.295025] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1758.302287] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1758.309723] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1758.317010] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1758.327081] CPU: 0 PID: 7021 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1758.334094] Mem-Info: [ 1758.334887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1758.337299] active_anon:72730 inactive_anon:37179 isolated_anon:0 [ 1758.337299] active_file:28 inactive_file:23 isolated_file:0 [ 1758.337299] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1758.337299] slab_reclaimable:12453 slab_unreclaimable:122600 [ 1758.337299] mapped:52802 shmem:37643 pagetables:4880 bounce:0 [ 1758.337299] free:13917 free_pcp:0 free_cma:0 [ 1758.346707] Call Trace: [ 1758.346729] dump_stack+0x1b2/0x281 [ 1758.346742] warn_alloc.cold+0x96/0x1cc [ 1758.346754] ? zone_watermark_ok_safe+0x220/0x220 [ 1758.346784] ? usleep_range+0x130/0x130 [ 1758.380840] Node 0 active_anon:287912kB inactive_anon:125992kB active_file:96kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156112kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1758.383367] ? _find_next_bit+0xdb/0x100 [ 1758.386997] Node 1 active_anon:3008kB inactive_anon:22724kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1758.390943] ? run_timer_softirq+0x5a0/0x5a0 [ 1758.390961] __alloc_pages_nodemask+0x2127/0x2720 [ 1758.390986] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1758.395789] Node 0 [ 1758.399747] ? migrate_swap_stop+0x880/0x880 [ 1758.399757] ? lock_acquire+0x170/0x3f0 [ 1758.399781] alloc_pages_current+0x155/0x260 [ 1758.427755] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.431775] ion_page_pool_alloc+0x118/0x1b0 [ 1758.431791] ion_system_heap_allocate+0x133/0x8c0 [ 1758.458878] lowmem_reserve[]: [ 1758.463251] ? ion_alloc+0x187/0x810 [ 1758.463266] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1758.468081] 0 [ 1758.472913] ? ion_system_contig_heap_create+0x130/0x130 [ 1758.472924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1758.472936] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1758.472947] ion_alloc+0x204/0x810 [ 1758.475185] 2717 [ 1758.479588] ? ion_dma_buf_release+0x40/0x40 [ 1758.479601] ? __might_fault+0x177/0x1b0 [ 1758.479612] ion_ioctl+0xea/0x1f0 [ 1758.483563] 2718 [ 1758.487960] ? ion_query_heaps+0x360/0x360 [ 1758.513758] 2718 [ 1758.518119] ? __fget+0x1fe/0x360 [ 1758.522947] 2718 [ 1758.526026] ? ion_query_heaps+0x360/0x360 [ 1758.535249] do_vfs_ioctl+0x75a/0xff0 [ 1758.537026] Node 0 [ 1758.542479] ? ioctl_preallocate+0x1a0/0x1a0 [ 1758.542495] ? lock_downgrade+0x740/0x740 [ 1758.542507] ? __fget+0x225/0x360 [ 1758.542519] ? do_vfs_ioctl+0xff0/0xff0 [ 1758.547538] DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:285860kB inactive_anon:125992kB active_file:88kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.552359] ? security_file_ioctl+0x83/0xb0 [ 1758.552371] SyS_ioctl+0x7f/0xb0 [ 1758.552379] ? do_vfs_ioctl+0xff0/0xff0 [ 1758.552390] do_syscall_64+0x1d5/0x640 [ 1758.555905] lowmem_reserve[]: [ 1758.557961] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1758.562366] 0 [ 1758.566394] RIP: 0033:0x466459 [ 1758.569847] 0 [ 1758.571864] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.576087] 0 [ 1758.578154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1758.581626] 0 [ 1758.583661] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1758.587859] 0 [ 1758.591649] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1758.591655] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1758.591660] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1758.609151] warn_alloc_show_mem: 2 callbacks suppressed [ 1758.609154] Mem-Info: [ 1758.618083] syz-executor.2: [ 1758.643617] active_anon:72730 inactive_anon:37179 isolated_anon:0 [ 1758.643617] active_file:28 inactive_file:23 isolated_file:0 [ 1758.643617] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1758.643617] slab_reclaimable:12453 slab_unreclaimable:122600 [ 1758.643617] mapped:52802 shmem:37643 pagetables:4880 bounce:0 [ 1758.643617] free:13917 free_pcp:0 free_cma:0 [ 1758.646385] syz-executor.3: [ 1758.647493] Node 0 active_anon:287912kB inactive_anon:125992kB active_file:96kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156112kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1758.651490] syz-executor.0: [ 1758.655373] Node 1 active_anon:3008kB inactive_anon:22724kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1758.658440] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1758.663743] Node 0 [ 1758.668850] page allocation failure: order:0 [ 1758.670586] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.678178] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1758.680040] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1758.680063] Node 0 DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:285860kB inactive_anon:125992kB active_file:88kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.680085] lowmem_reserve[]: 0 0 0 0 0 [ 1758.680106] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.680124] lowmem_reserve[]: 0 0 0 0 0 [ 1758.680142] Node 1 Normal free:26712kB min:53696kB low:67120kB high:80544kB active_anon:3008kB inactive_anon:22724kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.680162] lowmem_reserve[]: 0 0 0 0 0 [ 1758.680181] Node 0 DMA: 3*4kB (UME) 2*8kB (UM) 3*16kB (ME) 2*32kB (UM) 9*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10956kB [ 1758.680265] Node 0 DMA32: 764*4kB (UME) 134*8kB (ME) 79*16kB (UME) 44*32kB (UME) 17*64kB (M) 9*128kB (UM) 7*256kB (M) 6*512kB (UM) 4*1024kB (UM) [ 1758.711201] (null) [ 1758.714426] 0*2048kB [ 1758.736687] (null) [ 1758.777726] syz-executor.0 cpuset= [ 1758.801765] 0*4096kB [ 1758.839740] page allocation failure: order:0 [ 1758.844984] = 18000kB [ 1758.881029] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1758.886445] syz-executor.3 cpuset= [ 1758.922188] Node 0 [ 1758.945552] Node 0 [ 1758.985752] / [ 1759.041731] / [ 1759.048386] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1759.053452] (null) [ 1759.064584] Node 1 Normal: 48*4kB (UM) 24*8kB (UME) 14*16kB (UM) 816*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26720kB [ 1759.068888] syz-executor.2 cpuset= [ 1759.078155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1759.078165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1759.092486] / [ 1759.104021] mems_allowed=0-1 [ 1759.108448] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.108849] CPU: 0 PID: 7009 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1759.133804] mems_allowed=0-1 [ 1759.141519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.141524] Call Trace: [ 1759.141546] dump_stack+0x1b2/0x281 [ 1759.141559] warn_alloc.cold+0x96/0x1cc [ 1759.141570] ? zone_watermark_ok_safe+0x220/0x220 [ 1759.141579] ? usleep_range+0x130/0x130 [ 1759.141590] ? _find_next_bit+0xdb/0x100 [ 1759.141608] ? run_timer_softirq+0x5a0/0x5a0 [ 1759.141624] __alloc_pages_nodemask+0x2127/0x2720 [ 1759.159039] mems_allowed=0-1 [ 1759.160221] ? lock_acquire+0x170/0x3f0 [ 1759.169028] lowmem_reserve[]: [ 1759.172968] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1759.177343] 0 [ 1759.181739] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1759.181756] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1759.181776] alloc_pages_current+0x155/0x260 [ 1759.217820] ion_page_pool_alloc+0x118/0x1b0 [ 1759.222225] ion_system_heap_allocate+0x133/0x8c0 [ 1759.227063] ? ion_alloc+0x187/0x810 [ 1759.229038] 0 [ 1759.230773] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1759.230779] 0 [ 1759.232566] ? ion_system_contig_heap_create+0x130/0x130 [ 1759.237999] 0 [ 1759.239802] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1759.239815] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1759.239827] ion_alloc+0x204/0x810 [ 1759.239841] ? ion_dma_buf_release+0x40/0x40 [ 1759.264793] ? __might_fault+0x177/0x1b0 [ 1759.268864] ion_ioctl+0xea/0x1f0 [ 1759.269036] 0 [ 1759.272307] ? ion_query_heaps+0x360/0x360 [ 1759.272319] ? ion_query_heaps+0x360/0x360 [ 1759.274100] Node 1 [ 1759.278317] do_vfs_ioctl+0x75a/0xff0 [ 1759.288549] ? ioctl_preallocate+0x1a0/0x1a0 [ 1759.292954] ? lock_downgrade+0x740/0x740 [ 1759.297095] ? __fget+0x225/0x360 [ 1759.300538] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.304516] ? security_file_ioctl+0x83/0xb0 [ 1759.308937] SyS_ioctl+0x7f/0xb0 [ 1759.312291] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.316257] do_syscall_64+0x1d5/0x640 [ 1759.319043] Normal free:26720kB min:53696kB low:67120kB high:80544kB active_anon:3008kB inactive_anon:22724kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.320137] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1759.353250] RIP: 0033:0x466459 [ 1759.356440] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.364226] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1759.371497] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1759.378757] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1759.386019] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1759.393368] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1759.399056] lowmem_reserve[]: 0 0 0 0 0 [ 1759.404631] Node 0 DMA: 3*4kB (UME) 2*8kB (UM) 3*16kB (ME) 2*32kB (UM) 9*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10956kB [ 1759.416885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1759.433479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1759.433926] CPU: 1 PID: 7005 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1759.442170] 37677 total pagecache pages [ 1759.449868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.449873] Call Trace: [ 1759.449896] dump_stack+0x1b2/0x281 [ 1759.449909] warn_alloc.cold+0x96/0x1cc [ 1759.449920] ? zone_watermark_ok_safe+0x220/0x220 [ 1759.449930] ? usleep_range+0x130/0x130 [ 1759.449943] ? _find_next_bit+0xdb/0x100 [ 1759.449955] ? run_timer_softirq+0x5a0/0x5a0 [ 1759.449971] __alloc_pages_nodemask+0x2127/0x2720 [ 1759.449986] ? lock_acquire+0x170/0x3f0 [ 1759.450011] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1759.450021] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1759.450039] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1759.450060] alloc_pages_current+0x155/0x260 [ 1759.450071] ion_page_pool_alloc+0x118/0x1b0 [ 1759.450082] ion_system_heap_allocate+0x133/0x8c0 [ 1759.450092] ? ion_alloc+0x187/0x810 [ 1759.450103] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1759.450113] ? ion_system_contig_heap_create+0x130/0x130 [ 1759.450124] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1759.450135] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1759.450146] ion_alloc+0x204/0x810 [ 1759.450160] ? ion_dma_buf_release+0x40/0x40 [ 1759.450173] ? __might_fault+0x177/0x1b0 [ 1759.450192] ion_ioctl+0xea/0x1f0 [ 1759.450202] ? ion_query_heaps+0x360/0x360 [ 1759.450214] ? ion_query_heaps+0x360/0x360 [ 1759.450225] do_vfs_ioctl+0x75a/0xff0 [ 1759.450236] ? ioctl_preallocate+0x1a0/0x1a0 [ 1759.458209] 0 pages in swap cache [ 1759.463542] ? lock_downgrade+0x740/0x740 [ 1759.463557] ? __fget+0x225/0x360 [ 1759.463567] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.463579] ? security_file_ioctl+0x83/0xb0 [ 1759.463589] SyS_ioctl+0x7f/0xb0 [ 1759.463596] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.463607] do_syscall_64+0x1d5/0x640 [ 1759.463622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1759.463633] RIP: 0033:0x466459 [ 1759.466231] Swap cache stats: add 0, delete 0, find 0/0 [ 1759.469804] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.469815] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1759.469821] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1759.469826] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1759.469831] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1759.469837] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1759.480486] CPU: 1 PID: 7010 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1759.486898] Free swap = 0kB [ 1759.487151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.491578] Total swap = 0kB [ 1759.496380] Call Trace: [ 1759.504168] 2097051 pages RAM [ 1759.505175] dump_stack+0x1b2/0x281 [ 1759.509660] 0 pages HighMem/MovableOnly [ 1759.515070] warn_alloc.cold+0x96/0x1cc [ 1759.523287] 363848 pages reserved [ 1759.523843] ? zone_watermark_ok_safe+0x220/0x220 [ 1759.528657] 0 pages cma reserved [ 1759.532355] ? usleep_range+0x130/0x130 [ 1759.532368] ? _find_next_bit+0xdb/0x100 [ 1759.532378] ? run_timer_softirq+0x5a0/0x5a0 [ 1759.532399] __alloc_pages_nodemask+0x2127/0x2720 [ 1759.532420] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1759.532433] ? migrate_swap_stop+0x880/0x880 [ 1759.532445] ? lock_acquire+0x170/0x3f0 [ 1759.537885] Node 0 [ 1759.543316] ? retint_kernel+0x2d/0x2d [ 1759.543331] alloc_pages_current+0x155/0x260 [ 1759.543344] ion_page_pool_alloc+0x118/0x1b0 [ 1759.543354] ion_system_heap_allocate+0x133/0x8c0 [ 1759.543365] ? ion_alloc+0x187/0x810 [ 1759.543375] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1759.543385] ? ion_system_contig_heap_create+0x130/0x130 [ 1759.543401] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1759.543412] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1759.543422] ion_alloc+0x204/0x810 [ 1759.543437] ? ion_dma_buf_release+0x40/0x40 [ 1759.572844] DMA32: [ 1759.572906] ? __might_fault+0x177/0x1b0 [ 1759.577116] 764*4kB [ 1759.580905] ion_ioctl+0xea/0x1f0 [ 1759.580915] ? ion_query_heaps+0x360/0x360 [ 1759.580928] ? ion_query_heaps+0x360/0x360 [ 1759.580938] do_vfs_ioctl+0x75a/0xff0 [ 1759.580949] ? ioctl_preallocate+0x1a0/0x1a0 [ 1759.580959] ? lock_downgrade+0x740/0x740 [ 1759.580972] ? __fget+0x225/0x360 [ 1759.580982] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.592831] (UME) [ 1759.592961] ? security_file_ioctl+0x83/0xb0 [ 1759.596390] 140*8kB [ 1759.600345] SyS_ioctl+0x7f/0xb0 [ 1759.600355] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.600367] do_syscall_64+0x1d5/0x640 [ 1759.600382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1759.600391] RIP: 0033:0x466459 [ 1759.600395] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.600405] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1759.600413] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1759.619072] (UME) [ 1759.621149] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1759.624321] 81*16kB [ 1759.629660] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1759.629666] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1759.656291] Mem-Info: [ 1759.670305] (UME) [ 1759.742835] active_anon:72730 inactive_anon:37179 isolated_anon:0 [ 1759.742835] active_file:17 inactive_file:17 isolated_file:0 [ 1759.742835] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1759.742835] slab_reclaimable:12453 slab_unreclaimable:122600 [ 1759.742835] mapped:52802 shmem:37643 pagetables:4880 bounce:0 [ 1759.742835] free:29634 free_pcp:320 free_cma:0 [ 1759.772885] 44*32kB [ 1759.834820] Node 0 active_anon:287912kB inactive_anon:125992kB active_file:316kB inactive_file:600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156612kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1759.865481] (UME) [ 1759.904896] Node 1 active_anon:3008kB inactive_anon:22724kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1760.038127] 17*64kB (M) 9*128kB (UM) 7*256kB (M) 6*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 18080kB [ 1760.097331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1760.169343] Node 1 Normal: 188*4kB (UM) 571*8kB (UME) 360*16kB (UM) 1224*32kB (UME) 1*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 248*1024kB (U) 19*2048kB (U) 0*4096kB = 344072kB [ 1760.249630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.258528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.289084] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.340149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.380489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.399058] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1760.404125] Node 0 DMA32 free:114008kB min:36200kB low:45248kB high:54296kB active_anon:285860kB inactive_anon:125992kB active_file:348kB inactive_file:2340kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17240kB bounce:0kB free_pcp:180kB local_pcp:160kB free_cma:0kB [ 1760.431886] 39121 total pagecache pages [ 1760.437709] 0 pages in swap cache [ 1760.479070] Swap cache stats: add 0, delete 0, find 0/0 [ 1760.479076] Free swap = 0kB [ 1760.479079] Total swap = 0kB [ 1760.479086] 2097051 pages RAM [ 1760.479089] 0 pages HighMem/MovableOnly [ 1760.479092] 363848 pages reserved [ 1760.479094] 0 pages cma reserved [ 1760.479102] Out of memory (oom_kill_allocating_task): Kill process 7002 (syz-executor.0) score 0 or sacrifice child [ 1760.479127] Killed process 7002 (syz-executor.0) total-vm:93648kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1760.479372] warn_alloc: 1 callbacks suppressed [ 1760.479377] syz-executor.0: [ 1760.519123] lowmem_reserve[]: 0 0 0 0 0 [ 1760.583076] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.642261] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1760.689790] lowmem_reserve[]: 0 0 0 0 0 [ 1760.693806] Node 1 Normal free:53352kB min:53696kB low:67120kB high:80544kB active_anon:3008kB inactive_anon:22724kB active_file:1736kB inactive_file:1432kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:852kB local_pcp:112kB free_cma:0kB [ 1760.712863] syz-executor.0 cpuset= [ 1760.726090] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1760.761382] / mems_allowed=0-1 [ 1760.766590] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1760.773844] CPU: 0 PID: 7002 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1760.783483] lowmem_reserve[]: [ 1760.786208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1760.786217] 0 [ 1760.789301] Call Trace: [ 1760.789320] dump_stack+0x1b2/0x281 [ 1760.789338] warn_alloc.cold+0x96/0x1cc [ 1760.798672] 0 [ 1760.800465] ? zone_watermark_ok_safe+0x220/0x220 [ 1760.800486] ? wait_for_completion_io+0x10/0x10 [ 1760.800500] __alloc_pages_nodemask+0x2127/0x2720 [ 1760.803070] syz-executor.0 cpuset= [ 1760.806688] ? lock_acquire+0x170/0x3f0 [ 1760.810693] / [ 1760.812454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1760.817264] mems_allowed=0-1 [ 1760.821913] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1760.821931] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1760.821951] alloc_pages_current+0x155/0x260 [ 1760.826773] 0 [ 1760.830300] ion_page_pool_alloc+0x118/0x1b0 [ 1760.830310] ion_system_heap_allocate+0x133/0x8c0 [ 1760.830323] ? ion_alloc+0x187/0x810 [ 1760.834275] 0 [ 1760.835979] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1760.849028] 0 [ 1760.853897] ? ion_system_contig_heap_create+0x130/0x130 [ 1760.860066] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1760.860079] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1760.860101] ion_alloc+0x204/0x810 [ 1760.879032] Node 0 [ 1760.880233] ? ion_dma_buf_release+0x40/0x40 [ 1760.882013] DMA: [ 1760.887452] ? __might_fault+0x177/0x1b0 [ 1760.909027] 2*4kB [ 1760.909534] ion_ioctl+0xea/0x1f0 [ 1760.913582] (ME) [ 1760.915718] ? ion_query_heaps+0x360/0x360 [ 1760.925403] ? ion_query_heaps+0x360/0x360 [ 1760.929025] 2*8kB [ 1760.929627] do_vfs_ioctl+0x75a/0xff0 [ 1760.929639] ? ioctl_preallocate+0x1a0/0x1a0 [ 1760.931877] (UM) [ 1760.935754] ? lock_downgrade+0x740/0x740 [ 1760.946348] ? __fget+0x225/0x360 [ 1760.949037] 3*16kB (ME) [ 1760.949886] ? do_vfs_ioctl+0xff0/0xff0 [ 1760.949900] ? security_file_ioctl+0x83/0xb0 [ 1760.952549] 2*32kB [ 1760.956523] SyS_ioctl+0x7f/0xb0 [ 1760.966756] ? do_vfs_ioctl+0xff0/0xff0 [ 1760.970739] do_syscall_64+0x1d5/0x640 [ 1760.974636] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1760.979032] (UM) [ 1760.979829] RIP: 0033:0x466459 [ 1760.979832] 9*64kB (UME) [ 1760.981882] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 [ 1760.985080] 12*128kB [ 1760.987824] ORIG_RAX: 0000000000000010 [ 1760.999680] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1761.006961] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1761.009028] (UME) [ 1761.014230] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1761.014238] 6*256kB [ 1761.016367] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1761.033184] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1761.039023] (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10952kB [ 1761.048410] Node 0 DMA32: 698*4kB (UME) 110*8kB (UME) 48*16kB (UME) 16*32kB (UME) 0*64kB 28*128kB (U) 26*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18264kB [ 1761.057897] rs:main Q:Reg cpuset= [ 1761.066258] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1761.090960] / mems_allowed=0-1 [ 1761.094465] CPU: 0 PID: 5988 Comm: rs:main Q:Reg Not tainted 4.14.229-syzkaller #0 [ 1761.102164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.109098] syz-executor.3 cpuset= [ 1761.111503] Call Trace: [ 1761.111510] / [ 1761.115056] dump_stack+0x1b2/0x281 [ 1761.117621] mems_allowed=0-1 [ 1761.119318] dump_header+0x178/0x82f [ 1761.119329] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1761.119343] ? ___ratelimit+0x2cd/0x530 [ 1761.122964] Node 0 [ 1761.126040] oom_kill_process.cold+0x10/0xa40 [ 1761.137936] Normal: [ 1761.138776] out_of_memory+0xe3e/0x1190 [ 1761.141004] 0*4kB [ 1761.145475] ? oom_killer_disable+0x1c0/0x1c0 [ 1761.147772] 0*8kB [ 1761.151729] ? mutex_trylock+0x152/0x1a0 [ 1761.151740] __alloc_pages_nodemask+0x23e1/0x2720 [ 1761.151757] ? trace_hardirqs_on+0x10/0x10 [ 1761.173921] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1761.178763] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1761.179024] 0*16kB 0*32kB 0*64kB 0*128kB [ 1761.183348] alloc_pages_current+0x155/0x260 [ 1761.183360] pagecache_get_page+0x3f5/0xab0 [ 1761.187488] 0*256kB [ 1761.191885] grab_cache_page_write_begin+0x63/0x90 [ 1761.191896] ext4_da_write_begin+0x249/0xe70 [ 1761.191907] ? __ext4_journal_stop+0xe7/0x1b0 [ 1761.191918] ? ext4_write_begin+0x1260/0x1260 [ 1761.216769] ? balance_dirty_pages_ratelimited+0x8fe/0x1800 [ 1761.222472] generic_perform_write+0x1c9/0x420 [ 1761.227045] ? __mnt_drop_write_file+0x5f/0x90 [ 1761.231616] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1761.236271] ? current_time+0xb0/0xb0 [ 1761.239021] 0*512kB [ 1761.240056] ? ext4_file_write_iter+0x1cc/0xd20 [ 1761.240059] 0*1024kB 0*2048kB [ 1761.242373] __generic_file_write_iter+0x227/0x590 [ 1761.247019] 0*4096kB [ 1761.250285] ext4_file_write_iter+0x276/0xd20 [ 1761.250295] ? aa_file_perm+0x304/0xab0 [ 1761.250308] ? ext4_file_read_iter+0x330/0x330 [ 1761.270676] ? trace_hardirqs_on+0x10/0x10 [ 1761.274940] ? iov_iter_init+0xa6/0x1c0 [ 1761.278905] __vfs_write+0x44c/0x630 [ 1761.279048] = 0kB [ 1761.282620] ? kernel_read+0x110/0x110 [ 1761.284685] Node 1 Normal: 55*4kB [ 1761.288566] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1761.288577] vfs_write+0x17f/0x4d0 [ 1761.300665] SyS_write+0xf2/0x210 [ 1761.304113] ? SyS_read+0x210/0x210 [ 1761.307735] ? __do_page_fault+0x159/0xad0 [ 1761.311961] ? do_syscall_64+0x4c/0x640 [ 1761.315923] ? SyS_read+0x210/0x210 [ 1761.319540] do_syscall_64+0x1d5/0x640 [ 1761.323425] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1761.328601] RIP: 0033:0x7f41f5aa31cd [ 1761.329038] (UM) [ 1761.332336] RSP: 002b:00007f41f305e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1761.334417] 32*8kB [ 1761.342102] RAX: ffffffffffffffda RBX: 00007f41e4025560 RCX: 00007f41f5aa31cd [ 1761.342107] RDX: 00000000000001bf RSI: 00007f41e4025560 RDI: 0000000000000008 [ 1761.342111] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f41e40255e0 [ 1761.342115] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f41e40252e0 [ 1761.342119] R13: 00007f41f305e5b0 R14: 000055bf01613800 R15: 00000000000001bf [ 1761.372588] Mem-Info: [ 1761.381044] CPU: 1 PID: 7009 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1761.383494] active_anon:72732 inactive_anon:37179 isolated_anon:0 [ 1761.383494] active_file:35 inactive_file:33 isolated_file:14 [ 1761.383494] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1761.383494] slab_reclaimable:12440 slab_unreclaimable:123960 [ 1761.383494] mapped:52834 shmem:37643 pagetables:4880 bounce:0 [ 1761.383494] free:13761 free_pcp:0 free_cma:0 [ 1761.391150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.391155] Call Trace: [ 1761.391175] dump_stack+0x1b2/0x281 [ 1761.391189] warn_alloc.cold+0x96/0x1cc [ 1761.391202] ? zone_watermark_ok_safe+0x220/0x220 [ 1761.391226] __alloc_pages_nodemask+0x2127/0x2720 [ 1761.424655] warn_alloc_show_mem: 2 callbacks suppressed [ 1761.424659] Mem-Info: [ 1761.433914] ? __schedule+0x893/0x1de0 [ 1761.433932] ? lock_acquire+0x170/0x3f0 [ 1761.433948] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1761.433963] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1761.433976] ? __mutex_unlock_slowpath+0x75/0x770 [ 1761.433992] alloc_pages_current+0x155/0x260 [ 1761.436865] active_anon:72732 inactive_anon:37179 isolated_anon:0 [ 1761.436865] active_file:35 inactive_file:33 isolated_file:14 [ 1761.436865] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1761.436865] slab_reclaimable:12440 slab_unreclaimable:123960 [ 1761.436865] mapped:52834 shmem:37643 pagetables:4880 bounce:0 [ 1761.436865] free:13761 free_pcp:0 free_cma:0 [ 1761.440456] ion_page_pool_alloc+0x118/0x1b0 [ 1761.440466] ion_system_heap_allocate+0x133/0x8c0 [ 1761.440478] ? _raw_spin_unlock+0x29/0x40 [ 1761.440486] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1761.440494] ? ion_system_contig_heap_create+0x130/0x130 [ 1761.440505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1761.440518] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1761.444503] Node 0 active_anon:287912kB inactive_anon:125992kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156240kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1761.449325] ion_alloc+0x27a/0x810 [ 1761.449340] ? ion_dma_buf_release+0x40/0x40 [ 1761.449352] ? __might_fault+0x177/0x1b0 [ 1761.449364] ion_ioctl+0xea/0x1f0 [ 1761.449374] ? ion_query_heaps+0x360/0x360 [ 1761.454219] Node 1 active_anon:3016kB inactive_anon:22724kB active_file:108kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:55096kB dirty:112kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1761.459560] ? ion_query_heaps+0x360/0x360 [ 1761.459571] do_vfs_ioctl+0x75a/0xff0 [ 1761.459582] ? ioctl_preallocate+0x1a0/0x1a0 [ 1761.459591] ? lock_downgrade+0x740/0x740 [ 1761.459604] ? __fget+0x225/0x360 [ 1761.459612] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.459623] ? security_file_ioctl+0x83/0xb0 [ 1761.459632] SyS_ioctl+0x7f/0xb0 [ 1761.459640] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.459652] do_syscall_64+0x1d5/0x640 [ 1761.462083] Node 0 [ 1761.465957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1761.487689] Node 0 active_anon:287912kB inactive_anon:125992kB active_file:32kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156240kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1761.489417] RIP: 0033:0x466459 [ 1761.489422] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.489432] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1761.489437] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1761.489446] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1761.489451] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1761.489456] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1761.496180] (UME) [ 1761.529066] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.540353] 16*16kB [ 1761.541397] CPU: 0 PID: 7010 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1761.546745] (M) [ 1761.551742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.551746] Call Trace: [ 1761.551766] dump_stack+0x1b2/0x281 [ 1761.551780] warn_alloc.cold+0x96/0x1cc [ 1761.551793] ? zone_watermark_ok_safe+0x220/0x220 [ 1761.551816] __alloc_pages_nodemask+0x2127/0x2720 [ 1761.556637] 16*32kB [ 1761.584651] ? ___preempt_schedule+0x16/0x18 [ 1761.584668] ? lock_acquire+0x170/0x3f0 [ 1761.584683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1761.584700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1761.589639] (UME) [ 1761.592622] ? __mutex_unlock_slowpath+0x75/0x770 [ 1761.596653] 5*64kB [ 1761.600795] alloc_pages_current+0x155/0x260 [ 1761.600810] ion_page_pool_alloc+0x118/0x1b0 [ 1761.600821] ion_system_heap_allocate+0x133/0x8c0 [ 1761.600834] ? _raw_spin_unlock+0x29/0x40 [ 1761.605043] (UM) [ 1761.632452] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1761.632462] ? ion_system_contig_heap_create+0x130/0x130 [ 1761.632472] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1761.632483] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1761.632501] ion_alloc+0x27a/0x810 [ 1761.636721] 2*128kB [ 1761.640514] ? ion_dma_buf_release+0x40/0x40 [ 1761.640526] ? __might_fault+0x177/0x1b0 [ 1761.640537] ion_ioctl+0xea/0x1f0 [ 1761.640547] ? ion_query_heaps+0x360/0x360 [ 1761.644936] (UM) [ 1761.649076] ? ion_query_heaps+0x360/0x360 [ 1761.649086] do_vfs_ioctl+0x75a/0xff0 [ 1761.649098] ? ioctl_preallocate+0x1a0/0x1a0 [ 1761.649111] ? lock_downgrade+0x740/0x740 [ 1761.652541] 1*256kB [ 1761.656505] ? __fget+0x225/0x360 [ 1761.660935] (M) [ 1761.664252] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.668201] 45*512kB [ 1761.672090] ? security_file_ioctl+0x83/0xb0 [ 1761.672101] SyS_ioctl+0x7f/0xb0 [ 1761.672110] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.672122] do_syscall_64+0x1d5/0x640 [ 1761.672136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1761.674354] (UM) [ 1761.679552] RIP: 0033:0x466459 [ 1761.679557] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.679566] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1761.679571] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1761.679576] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1761.679581] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1761.679586] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1761.696555] lowmem_reserve[]: [ 1761.718279] 2*1024kB [ 1761.729129] Node 1 active_anon:3016kB inactive_anon:22724kB active_file:108kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:55096kB dirty:112kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1761.744567] (M) [ 1761.749067] 0 2717 2718 2718 2718 [ 1761.758361] 0*2048kB [ 1761.765172] Node 0 [ 1761.791465] 0*4096kB [ 1761.795281] Node 0 [ 1761.797182] = 27164kB [ 1761.797192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1761.820362] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.826212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1761.827085] lowmem_reserve[]: [ 1761.831212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1761.848041] DMA32 free:17552kB min:36200kB low:45248kB high:54296kB active_anon:285860kB inactive_anon:125992kB active_file:32kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.853965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1761.855301] lowmem_reserve[]: [ 1761.857533] 37704 total pagecache pages [ 1761.862001] 0 2717 2718 2718 2718 [ 1761.867880] 0 pages in swap cache [ 1761.871282] Node 0 DMA32 free:17552kB min:36200kB low:45248kB high:54296kB active_anon:285860kB inactive_anon:125992kB active_file:32kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.871303] lowmem_reserve[]: 0 0 0 0 0 [ 1761.871332] Node 0 [ 1761.877976] Swap cache stats: add 0, delete 0, find 0/0 [ 1761.882482] 0 0 [ 1761.890296] Free swap = 0kB [ 1761.907975] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.912315] Total swap = 0kB [ 1761.915709] lowmem_reserve[]: [ 1761.925297] 2097051 pages RAM [ 1761.926294] 0 [ 1761.930812] 0 pages HighMem/MovableOnly [ 1761.949043] 0 [ 1761.958127] 363848 pages reserved [ 1761.960798] 0 [ 1761.964560] 0 pages cma reserved [ 1761.968428] 0 [ 1762.290660] 0 [ 1762.294298] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.323979] 0 0 0 [ 1762.326159] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:3016kB inactive_anon:22724kB active_file:72kB inactive_file:80kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.344058] lowmem_reserve[]: 0 0 0 0 0 [ 1762.359160] Node 1 Normal free:26756kB min:53696kB low:67120kB high:80544kB active_anon:3016kB inactive_anon:22724kB active_file:72kB inactive_file:80kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.359296] lowmem_reserve[]: [ 1762.387980] lowmem_reserve[]: 0 0 0 0 0 [ 1762.388005] Node 0 DMA: 2*4kB (ME) 29*8kB (UM) 6*16kB (UME) 2*32kB (UM) 5*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 1762.396416] 0 [ 1762.419420] syz-executor.2: [ 1762.420982] 0 [ 1762.421234] page allocation failure: order:4 [ 1762.424238] 0 [ 1762.426021] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1762.434246] 0 0 [ 1762.444856] Node 0 DMA: 2*4kB (ME) 29*8kB (UM) 6*16kB (UME) 2*32kB (UM) 5*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 1762.464901] Node 0 DMA32: 696*4kB (ME) 111*8kB (UME) 47*16kB (ME) 413*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17640kB [ 1762.470381] Node 0 DMA32: 696*4kB (ME) 111*8kB (UME) 47*16kB (ME) 413*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1762.478503] Node 0 Normal: [ 1762.492154] 0*2048kB [ 1762.494173] 0*4kB [ 1762.495104] 0*4096kB [ 1762.497501] 0*8kB [ 1762.499678] = 17640kB [ 1762.502077] 0*16kB [ 1762.504219] Node 0 [ 1762.506611] 0*32kB [ 1762.508838] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1762.515239] syz-executor.2 cpuset= [ 1762.523606] Node 1 Normal: 169*4kB (UM) 952*8kB (UME) 522*16kB (UM) 270*32kB (UME) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 26756kB [ 1762.532588] / [ 1762.542387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1762.549635] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1762.568459] mems_allowed=0-1 [ 1762.571628] CPU: 1 PID: 7005 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1762.576366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1762.579415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1762.579420] Call Trace: [ 1762.579441] dump_stack+0x1b2/0x281 [ 1762.579455] warn_alloc.cold+0x96/0x1cc [ 1762.579467] ? zone_watermark_ok_safe+0x220/0x220 [ 1762.579488] __alloc_pages_nodemask+0x2127/0x2720 [ 1762.579501] ? ___preempt_schedule+0x16/0x18 [ 1762.589052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1762.598202] ? lock_acquire+0x170/0x3f0 [ 1762.601083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1762.604375] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1762.608332] 37733 total pagecache pages [ 1762.613166] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1762.613180] ? __mutex_unlock_slowpath+0x75/0x770 [ 1762.613187] ? retint_kernel+0x2d/0x2d [ 1762.613201] alloc_pages_current+0x155/0x260 [ 1762.613218] ion_page_pool_alloc+0x118/0x1b0 [ 1762.618400] 0 pages in swap cache [ 1762.622438] ion_system_heap_allocate+0x133/0x8c0 [ 1762.622451] ? _raw_spin_unlock+0x29/0x40 [ 1762.622459] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1762.622469] ? ion_system_contig_heap_create+0x130/0x130 [ 1762.622479] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1762.622490] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1762.622499] ion_alloc+0x27a/0x810 [ 1762.622511] ? ion_dma_buf_release+0x40/0x40 [ 1762.622526] ? __might_fault+0x177/0x1b0 [ 1762.631407] Node 1 [ 1762.635330] ion_ioctl+0xea/0x1f0 [ 1762.643971] Swap cache stats: add 0, delete 0, find 0/0 [ 1762.648732] ? ion_query_heaps+0x360/0x360 [ 1762.652736] Normal: [ 1762.658217] ? ion_query_heaps+0x360/0x360 [ 1762.663091] Free swap = 0kB [ 1762.666958] do_vfs_ioctl+0x75a/0xff0 [ 1762.671387] 169*4kB [ 1762.675751] ? ioctl_preallocate+0x1a0/0x1a0 [ 1762.679318] Total swap = 0kB [ 1762.684022] ? lock_downgrade+0x740/0x740 [ 1762.688171] 2097051 pages RAM [ 1762.693099] ? __fget+0x225/0x360 [ 1762.693110] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.693121] ? security_file_ioctl+0x83/0xb0 [ 1762.693131] SyS_ioctl+0x7f/0xb0 [ 1762.693140] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.693151] do_syscall_64+0x1d5/0x640 [ 1762.693165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1762.693177] RIP: 0033:0x466459 [ 1762.698640] (UM) [ 1762.703626] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.703637] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1762.703642] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1762.703647] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1762.703652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1762.703657] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1762.715516] warn_alloc_show_mem: 2 callbacks suppressed [ 1762.715519] Mem-Info: [ 1762.729297] 952*8kB [ 1762.737237] active_anon:72732 inactive_anon:37179 isolated_anon:0 [ 1762.737237] active_file:26 inactive_file:10 isolated_file:15 [ 1762.737237] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1762.737237] slab_reclaimable:12426 slab_unreclaimable:123983 [ 1762.737237] mapped:52834 shmem:37643 pagetables:4880 bounce:0 [ 1762.737237] free:13805 free_pcp:0 free_cma:0 [ 1762.738213] (UME) [ 1762.742602] Node 0 active_anon:287912kB inactive_anon:125992kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:156240kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 219136kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1762.742620] Node 1 active_anon:3016kB inactive_anon:22724kB active_file:72kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:112kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1762.745626] 0 pages HighMem/MovableOnly [ 1762.753193] Node 0 [ 1762.756129] 363848 pages reserved [ 1762.762032] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.765567] 0 pages cma reserved [ 1762.767832] lowmem_reserve[]: [ 1762.779082] 522*16kB [ 1762.785560] 0 [ 1762.785647] (UM) [ 1762.789541] 2717 2718 [ 1762.809047] 270*32kB [ 1762.819346] 2718 [ 1762.829046] (UME) [ 1762.902807] 2718 [ 1763.137952] 1*64kB [ 1763.142318] Node 0 DMA32 free:309024kB min:36200kB low:45248kB high:54296kB active_anon:285860kB inactive_anon:125992kB active_file:412kB inactive_file:424kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17240kB bounce:0kB free_pcp:1380kB local_pcp:716kB free_cma:0kB [ 1763.169067] (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 26756kB [ 1763.175871] lowmem_reserve[]: [ 1763.180372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.180380] 0 [ 1763.183472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.196445] 0 0 0 0 [ 1763.205041] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.229073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.234472] lowmem_reserve[]: [ 1763.239490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.251206] 37711 total pagecache pages [ 1763.255178] 0 pages in swap cache [ 1763.258618] Swap cache stats: add 0, delete 0, find 0/0 [ 1763.264019] Free swap = 0kB [ 1763.267032] Total swap = 0kB [ 1763.270119] 2097051 pages RAM [ 1763.273215] 0 pages HighMem/MovableOnly [ 1763.277189] 363848 pages reserved [ 1763.292085] 0 pages cma reserved [ 1763.295498] Out of memory (oom_kill_allocating_task): Kill process 5988 (rs:main Q:Reg) score 0 or sacrifice child [ 1763.309051] 0 0 0 0 0 [ 1763.311579] Node 1 Normal free:888004kB min:53696kB low:67120kB high:80544kB active_anon:3016kB inactive_anon:22724kB active_file:84kB inactive_file:68kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2280kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.312979] Killed process 5985 (rsyslogd) total-vm:254332kB, anon-rss:1024kB, file-rss:0kB, shmem-rss:0kB [ 1763.400815] oom_reaper: reaped process 5985 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1763.408735] lowmem_reserve[]: 0 0 0 0 0 [ 1763.414222] Node 0 DMA: 5*4kB (UME) 30*8kB (UM) 7*16kB (UME) 3*32kB (UM) 8*64kB (UME) 12*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11220kB [ 1763.453219] Node 0 DMA32: 11965*4kB (UME) 9523*8kB (UME) 7408*16kB (UME) 1846*32kB (UME) 1909*64kB (U) 94*128kB (U) 27*256kB (U) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 445324kB [ 1763.499223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1763.529048] Node 1 Normal: 265*4kB (UM) 1029*8kB (UME) 1049*16kB (UM) 355*32kB (UME) 2676*64kB (UM) 354*128kB (U) 106*256kB (U) 1*512kB (U) 213*1024kB (U) 39*2048kB (U) 1*4096kB (U) = 583740kB [ 1763.565671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.609099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.617705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.639083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.647688] 38611 total pagecache pages [ 1763.689214] 0 pages in swap cache [ 1763.692724] Swap cache stats: add 0, delete 0, find 0/0 [ 1763.709479] Free swap = 0kB [ 1763.712528] Total swap = 0kB [ 1763.729393] 2097051 pages RAM [ 1763.732521] 0 pages HighMem/MovableOnly [ 1763.736705] 363848 pages reserved [ 1763.741538] 0 pages cma reserved [ 1764.088477] oom_reaper: reaped process 7001 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1764.131162] systemd-cgroups invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1764.144064] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1764.149426] CPU: 0 PID: 7028 Comm: systemd-cgroups Not tainted 4.14.229-syzkaller #0 [ 1764.157392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1764.166721] Call Trace: [ 1764.169292] dump_stack+0x1b2/0x281 [ 1764.172910] dump_header+0x178/0x82f [ 1764.176603] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1764.181685] ? ___ratelimit+0x2cd/0x530 [ 1764.185647] oom_kill_process.cold+0x10/0xa40 [ 1764.190125] out_of_memory+0xe3e/0x1190 [ 1764.194103] ? oom_killer_disable+0x1c0/0x1c0 [ 1764.198578] ? mutex_trylock+0x152/0x1a0 [ 1764.202641] __alloc_pages_nodemask+0x23e1/0x2720 [ 1764.207471] ? __schedule+0x893/0x1de0 [ 1764.211348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1764.216180] ? lock_acquire+0x170/0x3f0 [ 1764.220156] ? reacquire_held_locks+0xb5/0x3f0 [ 1764.224714] ? alloc_set_pte+0xd57/0x1610 [ 1764.228841] alloc_pages_vma+0xd2/0x6d0 [ 1764.232797] wp_page_copy+0x1f5/0x25c0 [ 1764.236662] ? _vm_normal_page+0x162/0x3b0 [ 1764.240879] ? tlb_flush_mmu_free+0x1a0/0x1a0 [ 1764.245350] ? __lock_acquire+0x5fc/0x3f20 [ 1764.249593] do_wp_page+0x245/0x1db0 [ 1764.253286] ? __handle_mm_fault+0x129c/0x4620 [ 1764.257843] ? finish_mkwrite_fault+0x5e0/0x5e0 [ 1764.262503] ? do_fault_around+0x35e/0x620 [ 1764.266731] __handle_mm_fault+0x234f/0x4620 [ 1764.271118] ? change_protection+0xa0/0xa0 [ 1764.275331] ? vm_insert_page+0x7c0/0x7c0 [ 1764.279465] ? do_mprotect_pkey+0x691/0x7e0 [ 1764.283776] ? mark_held_locks+0xa6/0xf0 [ 1764.287814] handle_mm_fault+0x455/0x9c0 [ 1764.291857] __do_page_fault+0x549/0xad0 [ 1764.295896] ? spurious_fault+0x640/0x640 [ 1764.300027] ? do_page_fault+0x60/0x500 [ 1764.303980] ? page_fault+0x2f/0x50 [ 1764.307594] page_fault+0x45/0x50 [ 1764.311022] RIP: 0000:0x7fdff8214000 [ 1764.314709] RSP: f821e378:00007fffc5a086e0 EFLAGS: 7fdff99899e0 [ 1764.321735] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1764.329429] Mem-Info: [ 1764.341749] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1764.342091] syz-executor.0: page allocation failure: order:0 [ 1764.353674] syz-executor.5: [ 1764.360397] active_anon:71983 inactive_anon:37179 isolated_anon:0 [ 1764.360397] active_file:17 inactive_file:18 isolated_file:0 [ 1764.360397] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1764.360397] slab_reclaimable:12423 slab_unreclaimable:124569 [ 1764.360397] mapped:52894 shmem:37643 pagetables:4869 bounce:0 [ 1764.360397] free:13846 free_pcp:0 free_cma:0 [ 1764.369845] page allocation failure: order:0 [ 1764.398893] syz-executor.4: [ 1764.398926] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1764.403389] syz-executor.2: [ 1764.406372] (null) [ 1764.419038] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1764.420025] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1764.435558] (null) [ 1764.435579] CPU: 0 PID: 7010 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1764.437729] syz-executor.3 cpuset= [ 1764.445511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1764.445516] Call Trace: [ 1764.445536] dump_stack+0x1b2/0x281 [ 1764.445551] warn_alloc.cold+0x96/0x1cc [ 1764.445564] ? zone_watermark_ok_safe+0x220/0x220 [ 1764.449119] page allocation failure: order:0 [ 1764.458435] ? usleep_range+0x130/0x130 [ 1764.461029] syz-executor.0 cpuset= [ 1764.464608] ? try_to_free_pages+0x23f/0x6e0 [ 1764.468552] / [ 1764.473388] ? _find_next_bit+0xdb/0x100 [ 1764.477812] syz-executor.4 cpuset= [ 1764.481728] ? run_timer_softirq+0x5a0/0x5a0 [ 1764.481748] __alloc_pages_nodemask+0x2127/0x2720 [ 1764.485274] / [ 1764.489688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1764.491404] / [ 1764.495419] ? migrate_swap_stop+0x880/0x880 [ 1764.498941] mems_allowed=0-1 [ 1764.503332] ? lock_acquire+0x170/0x3f0 [ 1764.503355] alloc_pages_current+0x155/0x260 [ 1764.503371] ion_page_pool_alloc+0x118/0x1b0 [ 1764.508227] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1764.509913] ion_system_heap_allocate+0x133/0x8c0 [ 1764.509927] ? _raw_spin_unlock+0x29/0x40 [ 1764.509939] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1764.514771] (null) [ 1764.516475] ? ion_system_contig_heap_create+0x130/0x130 [ 1764.521678] mems_allowed=0-1 [ 1764.524729] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1764.524743] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1764.529028] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1764.533097] ion_alloc+0x27a/0x810 [ 1764.537490] (null) [ 1764.544579] ? ion_dma_buf_release+0x40/0x40 [ 1764.544592] ? __might_fault+0x177/0x1b0 [ 1764.544603] ion_ioctl+0xea/0x1f0 [ 1764.544613] ? ion_query_heaps+0x360/0x360 [ 1764.549478] mems_allowed=0-1 [ 1764.553755] ? ion_query_heaps+0x360/0x360 [ 1764.569036] syz-executor.2 cpuset= [ 1764.569347] do_vfs_ioctl+0x75a/0xff0 [ 1764.574354] / [ 1764.579212] ? ioctl_preallocate+0x1a0/0x1a0 [ 1764.619034] syz-executor.5 cpuset= [ 1764.622775] ? lock_downgrade+0x740/0x740 [ 1764.624477] / [ 1764.628875] ? __fget+0x225/0x360 [ 1764.641652] ? do_vfs_ioctl+0xff0/0xff0 [ 1764.645709] ? security_file_ioctl+0x83/0xb0 [ 1764.650122] SyS_ioctl+0x7f/0xb0 [ 1764.653478] ? do_vfs_ioctl+0xff0/0xff0 [ 1764.657447] do_syscall_64+0x1d5/0x640 [ 1764.659031] mems_allowed=0-1 [ 1764.661327] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1764.669612] RIP: 0033:0x466459 [ 1764.672792] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.679040] mems_allowed=0-1 [ 1764.680518] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1764.690867] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1764.698150] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1764.705432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1764.712704] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1764.720023] CPU: 1 PID: 7021 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1764.722410] Node 0 active_anon:284748kB inactive_anon:125992kB active_file:52kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156428kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.727834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1764.765470] Call Trace: [ 1764.768059] dump_stack+0x1b2/0x281 [ 1764.771691] warn_alloc.cold+0x96/0x1cc [ 1764.775662] ? zone_watermark_ok_safe+0x220/0x220 [ 1764.780498] ? usleep_range+0x130/0x130 [ 1764.784476] ? try_to_free_pages+0x23f/0x6e0 [ 1764.788880] ? _find_next_bit+0xdb/0x100 [ 1764.792937] ? run_timer_softirq+0x5a0/0x5a0 [ 1764.797349] __alloc_pages_nodemask+0x2127/0x2720 [ 1764.802190] ? lock_acquire+0x170/0x3f0 [ 1764.806163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1764.811007] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1764.815517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1764.820979] ? retint_kernel+0x2d/0x2d [ 1764.824862] alloc_pages_current+0x155/0x260 [ 1764.829283] ion_page_pool_alloc+0x118/0x1b0 [ 1764.833696] ion_system_heap_allocate+0x133/0x8c0 [ 1764.838536] ? _raw_spin_unlock+0x29/0x40 [ 1764.839160] Node 1 active_anon:3184kB inactive_anon:22724kB active_file:16kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55148kB dirty:0kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.842677] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1764.874764] ? ion_system_contig_heap_create+0x130/0x130 [ 1764.880212] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1764.885232] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1764.890080] ion_alloc+0x27a/0x810 [ 1764.893632] ? ion_dma_buf_release+0x40/0x40 [ 1764.898036] ? __might_fault+0x177/0x1b0 [ 1764.902099] ion_ioctl+0xea/0x1f0 [ 1764.905548] ? ion_query_heaps+0x360/0x360 [ 1764.909780] ? __fget+0x1fe/0x360 [ 1764.913255] ? ion_query_heaps+0x360/0x360 [ 1764.917481] do_vfs_ioctl+0x75a/0xff0 [ 1764.921284] ? ioctl_preallocate+0x1a0/0x1a0 [ 1764.925690] ? lock_downgrade+0x740/0x740 [ 1764.929840] ? __fget+0x225/0x360 [ 1764.933289] ? do_vfs_ioctl+0xff0/0xff0 [ 1764.937257] ? security_file_ioctl+0x83/0xb0 [ 1764.941668] SyS_ioctl+0x7f/0xb0 [ 1764.945027] ? do_vfs_ioctl+0xff0/0xff0 [ 1764.949010] do_syscall_64+0x1d5/0x640 [ 1764.951314] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.952911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1764.952922] RIP: 0033:0x466459 [ 1764.987839] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.995640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1765.002926] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1765.010192] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1765.017453] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1765.024714] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1765.032011] CPU: 0 PID: 7001 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1765.039810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.049198] Call Trace: [ 1765.051876] dump_stack+0x1b2/0x281 [ 1765.055501] warn_alloc.cold+0x96/0x1cc [ 1765.059486] ? zone_watermark_ok_safe+0x220/0x220 [ 1765.064338] ? usleep_range+0x130/0x130 [ 1765.068300] ? try_to_free_pages+0x23f/0x6e0 [ 1765.072700] ? _find_next_bit+0xdb/0x100 [ 1765.076750] ? run_timer_softirq+0x5a0/0x5a0 [ 1765.081167] __alloc_pages_nodemask+0x2127/0x2720 [ 1765.086019] ? lock_acquire+0x170/0x3f0 [ 1765.089997] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.094838] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1765.099331] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1765.104806] alloc_pages_current+0x155/0x260 [ 1765.109229] ion_page_pool_alloc+0x118/0x1b0 [ 1765.113635] ion_system_heap_allocate+0x133/0x8c0 [ 1765.118471] ? ion_alloc+0x187/0x810 [ 1765.122186] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1765.127629] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.133072] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1765.138089] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.142935] ion_alloc+0x204/0x810 [ 1765.146486] ? ion_dma_buf_release+0x40/0x40 [ 1765.150889] ? __might_fault+0x177/0x1b0 [ 1765.154958] ion_ioctl+0xea/0x1f0 [ 1765.158426] ? ion_query_heaps+0x360/0x360 [ 1765.162656] ? ion_query_heaps+0x360/0x360 [ 1765.166883] do_vfs_ioctl+0x75a/0xff0 [ 1765.170768] ? ioctl_preallocate+0x1a0/0x1a0 [ 1765.175169] ? lock_downgrade+0x740/0x740 [ 1765.179312] ? __fget+0x225/0x360 [ 1765.182756] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.186720] ? security_file_ioctl+0x83/0xb0 [ 1765.191138] SyS_ioctl+0x7f/0xb0 [ 1765.194502] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.198468] do_syscall_64+0x1d5/0x640 [ 1765.203308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1765.208491] RIP: 0033:0x466459 [ 1765.211668] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.219367] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1765.226627] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1765.234323] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1765.241691] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1765.249227] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1765.256515] CPU: 1 PID: 7005 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1765.261945] lowmem_reserve[]: [ 1765.264397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.264406] 0 [ 1765.267496] Call Trace: [ 1765.281231] 2717 2718 2718 [ 1765.281292] dump_stack+0x1b2/0x281 [ 1765.281307] warn_alloc.cold+0x96/0x1cc [ 1765.284215] 2718 [ 1765.287829] ? zone_watermark_ok_safe+0x220/0x220 [ 1765.293915] ? usleep_range+0x130/0x130 [ 1765.298728] Node 0 [ 1765.302691] ? try_to_free_pages+0x23f/0x6e0 [ 1765.302701] ? _find_next_bit+0xdb/0x100 [ 1765.302712] ? run_timer_softirq+0x5a0/0x5a0 [ 1765.302728] __alloc_pages_nodemask+0x2127/0x2720 [ 1765.302746] ? lock_acquire+0x170/0x3f0 [ 1765.302763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.309367] DMA32 free:18392kB min:36200kB low:45248kB high:54296kB active_anon:284744kB inactive_anon:125992kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12064kB pagetables:17164kB bounce:0kB free_pcp:280kB local_pcp:156kB free_cma:0kB [ 1765.309402] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1765.313441] lowmem_reserve[]: [ 1765.317846] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1765.317868] alloc_pages_current+0x155/0x260 [ 1765.324970] 0 [ 1765.326742] ion_page_pool_alloc+0x118/0x1b0 [ 1765.333768] 0 [ 1765.360186] ion_system_heap_allocate+0x133/0x8c0 [ 1765.360200] ? _raw_spin_unlock+0x29/0x40 [ 1765.360207] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1765.360216] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.360227] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1765.360238] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.360248] ion_alloc+0x27a/0x810 [ 1765.360261] ? ion_dma_buf_release+0x40/0x40 [ 1765.360274] ? __might_fault+0x177/0x1b0 [ 1765.360285] ion_ioctl+0xea/0x1f0 [ 1765.360296] ? ion_query_heaps+0x360/0x360 [ 1765.369060] 0 [ 1765.373329] ? ion_query_heaps+0x360/0x360 [ 1765.377728] 0 [ 1765.379537] do_vfs_ioctl+0x75a/0xff0 [ 1765.379550] ? ioctl_preallocate+0x1a0/0x1a0 [ 1765.379559] ? lock_downgrade+0x740/0x740 [ 1765.379573] ? __fget+0x225/0x360 [ 1765.379583] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.379595] ? security_file_ioctl+0x83/0xb0 [ 1765.379605] SyS_ioctl+0x7f/0xb0 [ 1765.379612] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.379622] do_syscall_64+0x1d5/0x640 [ 1765.379636] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1765.379645] RIP: 0033:0x466459 [ 1765.379652] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 [ 1765.401274] 0 [ 1765.405359] ORIG_RAX: 0000000000000010 [ 1765.415188] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1765.418706] Node 0 [ 1765.423091] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1765.423097] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1765.423102] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1765.423107] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1765.436294] CPU: 1 PID: 7002 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1765.459061] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1765.462484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.466874] lowmem_reserve[]: [ 1765.470216] Call Trace: [ 1765.470237] dump_stack+0x1b2/0x281 [ 1765.470251] warn_alloc.cold+0x96/0x1cc [ 1765.470264] ? zone_watermark_ok_safe+0x220/0x220 [ 1765.470288] __alloc_pages_nodemask+0x2127/0x2720 [ 1765.491127] 0 [ 1765.491812] ? lock_acquire+0x170/0x3f0 [ 1765.493582] 0 [ 1765.497551] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.519043] 0 [ 1765.521531] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1765.528777] 0 [ 1765.536039] ? __mutex_unlock_slowpath+0x75/0x770 [ 1765.536054] alloc_pages_current+0x155/0x260 [ 1765.536068] ion_page_pool_alloc+0x118/0x1b0 [ 1765.536078] ion_system_heap_allocate+0x133/0x8c0 [ 1765.536091] ? _raw_spin_unlock+0x29/0x40 [ 1765.581257] 0 [ 1765.583756] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1765.591323] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.591334] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1765.591346] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.591356] ion_alloc+0x27a/0x810 [ 1765.591370] ? ion_dma_buf_release+0x40/0x40 [ 1765.591382] ? __might_fault+0x177/0x1b0 [ 1765.591396] ion_ioctl+0xea/0x1f0 [ 1765.609059] Mem-Info: [ 1765.610578] ? ion_query_heaps+0x360/0x360 [ 1765.612368] active_anon:71983 inactive_anon:37179 isolated_anon:0 [ 1765.612368] active_file:16 inactive_file:19 isolated_file:0 [ 1765.612368] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1765.612368] slab_reclaimable:12423 slab_unreclaimable:124410 [ 1765.612368] mapped:52860 shmem:37643 pagetables:4869 bounce:0 [ 1765.612368] free:13851 free_pcp:70 free_cma:0 [ 1765.617181] ? ion_query_heaps+0x360/0x360 [ 1765.618971] Node 0 active_anon:284748kB inactive_anon:125992kB active_file:44kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156344kB dirty:0kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1765.624395] do_vfs_ioctl+0x75a/0xff0 [ 1765.624408] ? ioctl_preallocate+0x1a0/0x1a0 [ 1765.624417] ? lock_downgrade+0x740/0x740 [ 1765.624429] ? __fget+0x225/0x360 [ 1765.624437] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.624449] ? security_file_ioctl+0x83/0xb0 [ 1765.624458] SyS_ioctl+0x7f/0xb0 [ 1765.624466] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.624479] do_syscall_64+0x1d5/0x640 [ 1765.628580] Node 1 [ 1765.631110] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1765.631119] RIP: 0033:0x466459 [ 1765.631123] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.631133] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1765.631139] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1765.631143] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1765.631149] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1765.631155] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1765.663467] CPU: 1 PID: 7009 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1765.666565] Node 1 active_anon:3184kB inactive_anon:22724kB active_file:20kB inactive_file:320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55196kB dirty:0kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1765.671326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.671330] Call Trace: [ 1765.671347] dump_stack+0x1b2/0x281 [ 1765.671361] warn_alloc.cold+0x96/0x1cc [ 1765.671374] ? zone_watermark_ok_safe+0x220/0x220 [ 1765.671387] ? usleep_range+0x130/0x130 [ 1765.674916] Node 0 [ 1765.680266] ? try_to_free_pages+0x23f/0x6e0 [ 1765.680277] ? _find_next_bit+0xdb/0x100 [ 1765.680288] ? run_timer_softirq+0x5a0/0x5a0 [ 1765.680303] __alloc_pages_nodemask+0x2127/0x2720 [ 1765.680320] ? lock_acquire+0x170/0x3f0 [ 1765.680335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.684393] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1765.687821] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1765.690286] Normal free:69448kB min:53696kB low:67120kB high:80544kB active_anon:3184kB inactive_anon:22724kB active_file:20kB inactive_file:320kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2312kB bounce:0kB free_pcp:0kB local_pcp:120kB free_cma:0kB [ 1765.694443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1765.739727] lowmem_reserve[]: [ 1765.759931] alloc_pages_current+0x155/0x260 [ 1765.759947] ion_page_pool_alloc+0x118/0x1b0 [ 1765.759956] ion_system_heap_allocate+0x133/0x8c0 [ 1765.759968] ? _raw_spin_unlock+0x29/0x40 [ 1765.759976] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1765.759985] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.759996] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1765.760013] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.760029] ion_alloc+0x27a/0x810 [ 1765.780345] 0 [ 1765.784181] ? ion_dma_buf_release+0x40/0x40 [ 1765.787537] 2717 [ 1765.791525] ? __might_fault+0x177/0x1b0 [ 1765.791537] ion_ioctl+0xea/0x1f0 [ 1765.791546] ? ion_query_heaps+0x360/0x360 [ 1765.791557] ? ion_query_heaps+0x360/0x360 [ 1765.791567] do_vfs_ioctl+0x75a/0xff0 [ 1765.791579] ? ioctl_preallocate+0x1a0/0x1a0 [ 1765.791587] ? lock_downgrade+0x740/0x740 [ 1765.791599] ? __fget+0x225/0x360 [ 1765.791609] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.791623] ? security_file_ioctl+0x83/0xb0 [ 1765.840456] 2718 [ 1765.842821] SyS_ioctl+0x7f/0xb0 [ 1765.853232] lowmem_reserve[]: [ 1765.857869] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.909052] 2718 [ 1765.909819] do_syscall_64+0x1d5/0x640 [ 1765.913777] 2718 [ 1765.916005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1765.942540] RIP: 0033:0x466459 [ 1765.999720] 0 [ 1766.000885] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 [ 1766.006324] 0 [ 1766.009410] ORIG_RAX: 0000000000000010 [ 1766.009416] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1766.009422] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1766.009427] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1766.009432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1766.009438] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1766.222233] Node 0 DMA32 free:60416kB min:36200kB low:45248kB high:54296kB active_anon:284744kB inactive_anon:125992kB active_file:144kB inactive_file:656kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12064kB pagetables:17164kB bounce:0kB free_pcp:232kB local_pcp:100kB free_cma:0kB [ 1766.304195] lowmem_reserve[]: 0 0 0 0 0 [ 1766.308236] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.381050] lowmem_reserve[]: 0 0 0 0 0 [ 1766.385083] Node 1 Normal free:263336kB min:53696kB low:67120kB high:80544kB active_anon:3284kB inactive_anon:22724kB active_file:736kB inactive_file:5496kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2312kB bounce:0kB free_pcp:620kB local_pcp:580kB free_cma:0kB [ 1766.500450] lowmem_reserve[]: 0 0 0 0 0 [ 1766.504479] Node 0 DMA: 4*4kB (UME) 2*8kB (UM) 4*16kB (UME) 2*32kB (UM) 4*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11040kB [ 1766.537588] Node 0 DMA32: 286*4kB (UME) 216*8kB (UME) 66*16kB (UME) 17*32kB (ME) 2343*64kB (UM) 188*128kB (U) 48*256kB (UM) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 200504kB [ 1766.572933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1766.613627] Node 1 Normal: 0*4kB 3*8kB (UE) 1*16kB (U) 2*32kB (UE) 3543*64kB (U) 151*128kB (U) 127*256kB (U) 50*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 304296kB [ 1766.628264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.659044] 0 0 0 [ 1766.661421] Node 0 DMA: 4*4kB (UME) 2*8kB (UM) 4*16kB (UME) 2*32kB (UM) 4*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11040kB [ 1766.685714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.709090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.717956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.733065] Node 0 DMA32: 3097*4kB (UME) 94*8kB (UME) 1661*16kB (UME) 324*32kB (UME) 2394*64kB (UM) 188*128kB (U) 48*256kB (UM) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 249380kB [ 1766.766362] 39807 total pagecache pages [ 1766.774311] 0 pages in swap cache [ 1766.777772] Swap cache stats: add 0, delete 0, find 0/0 [ 1766.783255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1766.797843] Free swap = 0kB [ 1766.802442] Node 1 Normal: 237*4kB (UM) 860*8kB (UME) 182*16kB (UM) 84*32kB (UE) 3544*64kB (U) 152*128kB (U) 127*256kB (U) 50*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 317812kB [ 1766.822319] Total swap = 0kB [ 1766.825352] 2097051 pages RAM [ 1766.828445] 0 pages HighMem/MovableOnly [ 1766.848727] 363848 pages reserved [ 1766.857124] 0 pages cma reserved [ 1766.863771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.893457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.905651] warn_alloc_show_mem: 4 callbacks suppressed [ 1766.905655] Mem-Info: [ 1766.914038] active_anon:72233 inactive_anon:37179 isolated_anon:0 [ 1766.914038] active_file:670 inactive_file:1420 isolated_file:0 [ 1766.914038] unevictable:0 dirty:50 writeback:0 unstable:0 [ 1766.914038] slab_reclaimable:12423 slab_unreclaimable:127254 [ 1766.914038] mapped:54298 shmem:37643 pagetables:4869 bounce:0 [ 1766.914038] free:114468 free_pcp:376 free_cma:0 [ 1766.922395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.974875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.986718] 39807 total pagecache pages [ 1766.989067] Node 0 active_anon:285648kB inactive_anon:125992kB active_file:844kB inactive_file:1440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157744kB dirty:200kB writeback:0kB shmem:127708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1766.993153] 0 pages in swap cache [ 1767.019605] Node 1 active_anon:3284kB inactive_anon:22724kB active_file:1928kB inactive_file:4312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59456kB dirty:4kB writeback:0kB shmem:22864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1767.029145] Swap cache stats: add 0, delete 0, find 0/0 [ 1767.055697] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.079175] Free swap = 0kB [ 1767.088084] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1767.093420] Total swap = 0kB [ 1767.094159] Node 0 DMA32 free:86168kB min:36200kB low:45248kB high:54296kB active_anon:285644kB inactive_anon:125992kB active_file:848kB inactive_file:1396kB unevictable:0kB writepending:264kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:17296kB bounce:0kB free_pcp:160kB local_pcp:56kB free_cma:0kB [ 1767.096465] 2097051 pages RAM [ 1767.096472] 0 pages HighMem/MovableOnly [ 1767.133603] 363848 pages reserved [ 1767.137055] 0 pages cma reserved [ 1767.138025] lowmem_reserve[]: [ 1767.141464] Out of memory (oom_kill_allocating_task): Kill process 7028 (systemd-cgroups) score 0 or sacrifice child [ 1767.141957] 0 [ 1767.144587] Killed process 7028 (systemd-cgroups) total-vm:37668kB, anon-rss:172kB, file-rss:0kB, shmem-rss:0kB [ 1767.174303] 0 0 0 0 [ 1767.176668] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.206194] lowmem_reserve[]: 0 0 0 0 0 [ 1767.210384] Node 1 Normal free:314464kB min:53696kB low:67120kB high:80544kB active_anon:3100kB inactive_anon:22724kB active_file:1960kB inactive_file:4312kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2312kB bounce:0kB free_pcp:312kB local_pcp:44kB free_cma:0kB [ 1767.257432] lowmem_reserve[]: 0 0 0 0 0 [ 1767.264865] Node 0 DMA: 5*4kB (UME) 2*8kB (UM) 4*16kB (UME) 2*32kB (UM) 4*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11044kB [ 1767.287325] Node 0 DMA32: 165*4kB (E) 72*8kB (ME) 64*16kB (UME) 18*32kB (UME) 14*64kB (UM) 150*128kB (U) 48*256kB (UM) 11*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 44948kB [ 1767.308779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1767.326370] Node 1 Normal: 1*4kB (U) 2*8kB (ME) 2*16kB (UM) 2*32kB (ME) 2325*64kB (U) 153*128kB (UM) 127*256kB (U) 46*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 224564kB [ 1767.347332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.366282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.375698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.391879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.406022] 40707 total pagecache pages [ 1767.411589] 0 pages in swap cache [ 1767.415058] Swap cache stats: add 0, delete 0, find 0/0 04:33:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 04:33:04 executing program 1: read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) [ 1767.424415] Free swap = 0kB [ 1767.428579] Total swap = 0kB [ 1767.434180] 2097051 pages RAM [ 1767.437717] 0 pages HighMem/MovableOnly [ 1767.442938] 363848 pages reserved [ 1767.446977] 0 pages cma reserved 04:33:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', r1) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:33:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x56}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x77, 0xffff7fff, 0x20000003, 0x7, 0x20000007}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000a060104000000000000000003000002380007800c00018008000140ac1414201400170076657468305f746fd4026f6e640000000900130073797a310000000008001c4000000008"], 0x4c}}, 0x4) 04:33:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x9}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r3, 0x1, "63c38b", "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"}}, 0x110) 04:33:04 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) fanotify_init(0x62, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x6b, 0x4, 0x4, 0x6, 0xfffffffa}) 04:33:04 executing program 1: read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 04:33:04 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = fanotify_init(0x62, 0x0) fanotify_mark(r2, 0x48, 0x40000000, r1, &(0x7f0000000100)='./file0\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x6b, 0x4, 0x4, 0x6, 0xfffffffa}) 04:33:04 executing program 1: read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 04:33:04 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x1c1142) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) write$snddsp(r0, &(0x7f0000000040)="95", 0x1) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000000) 04:33:04 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0xf1, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) 04:33:04 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0xf1, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) 04:33:04 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2ab00, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) [ 1767.881738] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.895455] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.896257] syz-executor.0: [ 1767.910176] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.938747] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.940917] syz-executor.4 cpuset= [ 1767.949863] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1767.964674] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1767.974733] CPU: 1 PID: 7047 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1767.977589] / [ 1767.982538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.993596] Call Trace: [ 1767.996226] dump_stack+0x1b2/0x281 [ 1767.997587] mems_allowed=0-1 [ 1767.999860] warn_alloc.cold+0x96/0x1cc [ 1767.999874] ? zone_watermark_ok_safe+0x220/0x220 [ 1767.999900] __alloc_pages_nodemask+0x2127/0x2720 [ 1767.999910] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1767.999921] ? finish_task_switch+0x178/0x610 [ 1767.999929] ? finish_task_switch+0x14d/0x610 [ 1767.999942] ? lock_acquire+0x170/0x3f0 [ 1768.034132] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.038991] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.044553] ? __mutex_unlock_slowpath+0x75/0x770 [ 1768.049402] ? alloc_pages_current+0x16/0x260 [ 1768.053921] alloc_pages_current+0x155/0x260 [ 1768.058332] ion_page_pool_alloc+0x118/0x1b0 [ 1768.062737] ion_system_heap_allocate+0x133/0x8c0 [ 1768.067575] ? ion_alloc+0x187/0x810 [ 1768.071288] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1768.076732] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.082174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.087188] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.092030] ion_alloc+0x204/0x810 [ 1768.095578] ? ion_dma_buf_release+0x40/0x40 [ 1768.099995] ? __might_fault+0x177/0x1b0 [ 1768.104058] ion_ioctl+0xea/0x1f0 [ 1768.107506] ? ion_query_heaps+0x360/0x360 [ 1768.111738] ? cp_compat_stat+0x890/0x890 [ 1768.115882] ? ion_query_heaps+0x360/0x360 [ 1768.120126] do_vfs_ioctl+0x75a/0xff0 [ 1768.123932] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.128349] ? lock_downgrade+0x740/0x740 [ 1768.133110] ? __fget+0x225/0x360 [ 1768.136586] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.140571] ? security_file_ioctl+0x83/0xb0 [ 1768.144999] SyS_ioctl+0x7f/0xb0 [ 1768.148359] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.152329] do_syscall_64+0x1d5/0x640 [ 1768.156220] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.161408] RIP: 0033:0x466459 [ 1768.164590] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.172308] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1768.179663] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.186930] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1768.194190] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.201456] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1768.208759] CPU: 0 PID: 7038 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1768.213468] syz-executor.0 cpuset= [ 1768.216581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.216586] Call Trace: [ 1768.216605] dump_stack+0x1b2/0x281 [ 1768.216619] warn_alloc.cold+0x96/0x1cc [ 1768.216632] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.216655] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.226966] / [ 1768.229532] ? lock_acquire+0x170/0x3f0 [ 1768.234830] mems_allowed=0-1 [ 1768.235798] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.235819] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.235832] ? __mutex_unlock_slowpath+0x75/0x770 [ 1768.235848] alloc_pages_current+0x155/0x260 [ 1768.279204] ion_page_pool_alloc+0x118/0x1b0 [ 1768.283605] ion_system_heap_allocate+0x133/0x8c0 [ 1768.288442] ? ion_alloc+0x187/0x810 [ 1768.292149] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1768.297607] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.303051] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.308070] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.312907] ion_alloc+0x204/0x810 [ 1768.316444] ? ion_dma_buf_release+0x40/0x40 [ 1768.320848] ? __might_fault+0x177/0x1b0 [ 1768.324908] ion_ioctl+0xea/0x1f0 [ 1768.328987] ? ion_query_heaps+0x360/0x360 [ 1768.333219] ? ion_query_heaps+0x360/0x360 [ 1768.337447] do_vfs_ioctl+0x75a/0xff0 [ 1768.341242] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.345659] ? lock_downgrade+0x740/0x740 [ 1768.349808] ? __fget+0x225/0x360 [ 1768.353262] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.357265] ? security_file_ioctl+0x83/0xb0 [ 1768.361692] SyS_ioctl+0x7f/0xb0 [ 1768.365067] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.369053] do_syscall_64+0x1d5/0x640 [ 1768.372943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.378153] RIP: 0033:0x466459 [ 1768.381337] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.389075] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1768.396876] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.404419] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1768.411943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.419524] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1768.466962] CPU: 1 PID: 7040 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1768.474797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.484158] Call Trace: [ 1768.486755] dump_stack+0x1b2/0x281 [ 1768.490386] warn_alloc.cold+0x96/0x1cc [ 1768.494368] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.499390] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.506001] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.510860] ? lock_acquire+0x170/0x3f0 [ 1768.514837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.519701] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.525160] ? __mutex_unlock_slowpath+0x75/0x770 [ 1768.530049] alloc_pages_current+0x155/0x260 [ 1768.534474] ion_page_pool_alloc+0x118/0x1b0 [ 1768.538901] ion_system_heap_allocate+0x133/0x8c0 [ 1768.543753] ? ion_alloc+0x187/0x810 [ 1768.547467] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1768.552924] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.558459] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.563486] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.568343] ion_alloc+0x204/0x810 [ 1768.571899] ? ion_dma_buf_release+0x40/0x40 [ 1768.576337] ? __might_fault+0x177/0x1b0 [ 1768.580413] ion_ioctl+0xea/0x1f0 [ 1768.583915] ? ion_query_heaps+0x360/0x360 [ 1768.588167] ? ion_query_heaps+0x360/0x360 [ 1768.592439] do_vfs_ioctl+0x75a/0xff0 [ 1768.596240] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.600647] ? lock_downgrade+0x740/0x740 [ 1768.604798] ? __fget+0x225/0x360 [ 1768.608247] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.612583] ? security_file_ioctl+0x83/0xb0 [ 1768.617017] SyS_ioctl+0x7f/0xb0 [ 1768.620395] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.624378] do_syscall_64+0x1d5/0x640 [ 1768.628280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.633472] RIP: 0033:0x466459 [ 1768.636653] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.644426] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1768.651721] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.659003] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1768.666272] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.673543] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1768.684059] CPU: 1 PID: 7048 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1768.691889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.701244] Call Trace: [ 1768.703844] dump_stack+0x1b2/0x281 [ 1768.707473] warn_alloc.cold+0x96/0x1cc [ 1768.711470] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.716492] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.721359] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.726215] ? lock_acquire+0x170/0x3f0 [ 1768.730224] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.734297] syz-executor.2: page allocation failure: order:4 [ 1768.735070] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.735076] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1768.740871] ? __mutex_unlock_slowpath+0x75/0x770 [ 1768.740886] alloc_pages_current+0x155/0x260 [ 1768.740899] ion_page_pool_alloc+0x118/0x1b0 [ 1768.740910] ion_system_heap_allocate+0x133/0x8c0 [ 1768.740919] ? ion_alloc+0x187/0x810 [ 1768.740930] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1768.740940] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.740950] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.740960] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.740971] ion_alloc+0x204/0x810 [ 1768.772840] syz-executor.2 cpuset= [ 1768.776188] ? ion_dma_buf_release+0x40/0x40 [ 1768.808319] ? __might_fault+0x177/0x1b0 [ 1768.812382] ion_ioctl+0xea/0x1f0 [ 1768.815856] ? ion_query_heaps+0x360/0x360 [ 1768.820089] ? ion_query_heaps+0x360/0x360 [ 1768.824319] do_vfs_ioctl+0x75a/0xff0 [ 1768.828112] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.832515] ? lock_downgrade+0x740/0x740 [ 1768.836656] ? __fget+0x225/0x360 [ 1768.840111] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.844085] ? security_file_ioctl+0x83/0xb0 [ 1768.848494] SyS_ioctl+0x7f/0xb0 [ 1768.851853] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.855832] do_syscall_64+0x1d5/0x640 [ 1768.859727] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.864911] RIP: 0033:0x466459 [ 1768.868090] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.875807] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1768.884371] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.891652] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1768.898935] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.906197] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1768.920841] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1768.924188] Mem-Info: [ 1768.939099] / mems_allowed=0-1 [ 1768.942920] active_anon:72309 inactive_anon:37177 isolated_anon:0 [ 1768.942920] active_file:1159 inactive_file:1357 isolated_file:0 [ 1768.942920] unevictable:0 dirty:140 writeback:0 unstable:0 [ 1768.942920] slab_reclaimable:12508 slab_unreclaimable:128314 [ 1768.942920] mapped:55092 shmem:37643 pagetables:4882 bounce:0 [ 1768.942920] free:44849 free_pcp:187 free_cma:0 [ 1768.958082] CPU: 0 PID: 7066 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1768.977721] Node 0 active_anon:285680kB inactive_anon:125980kB active_file:992kB inactive_file:1812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158324kB dirty:284kB writeback:0kB shmem:127704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1768.984754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.984758] Call Trace: [ 1768.984777] dump_stack+0x1b2/0x281 [ 1768.984792] warn_alloc.cold+0x96/0x1cc [ 1768.984803] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.984814] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.984839] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.984855] ? lock_acquire+0x170/0x3f0 [ 1768.984870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1769.013527] Node 1 active_anon:3556kB inactive_anon:22728kB active_file:3644kB inactive_file:3616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62044kB dirty:276kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1769.022693] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1769.022708] ? __mutex_unlock_slowpath+0x75/0x770 [ 1769.022718] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 1769.022732] alloc_pages_current+0x155/0x260 [ 1769.022747] ion_page_pool_alloc+0x118/0x1b0 [ 1769.022759] ion_system_heap_allocate+0x133/0x8c0 [ 1769.025474] Node 0 [ 1769.028944] ? ion_alloc+0x187/0x810 [ 1769.028956] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1769.028966] ? ion_system_contig_heap_create+0x130/0x130 [ 1769.028977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1769.028994] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1769.033091] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1769.038033] ion_alloc+0x204/0x810 [ 1769.038049] ? ion_dma_buf_release+0x40/0x40 [ 1769.038063] ? __might_fault+0x177/0x1b0 [ 1769.038078] ion_ioctl+0xea/0x1f0 [ 1769.043111] lowmem_reserve[]: [ 1769.047757] ? ion_query_heaps+0x360/0x360 [ 1769.047771] ? ion_query_heaps+0x360/0x360 [ 1769.047782] do_vfs_ioctl+0x75a/0xff0 [ 1769.047795] ? ioctl_preallocate+0x1a0/0x1a0 [ 1769.047808] ? lock_downgrade+0x740/0x740 [ 1769.051968] 0 [ 1769.056601] ? __fget+0x225/0x360 [ 1769.056612] ? do_vfs_ioctl+0xff0/0xff0 [ 1769.056625] ? security_file_ioctl+0x83/0xb0 [ 1769.056642] SyS_ioctl+0x7f/0xb0 [ 1769.056651] ? do_vfs_ioctl+0xff0/0xff0 [ 1769.056663] do_syscall_64+0x1d5/0x640 [ 1769.084520] 2717 [ 1769.089711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1769.089720] RIP: 0033:0x466459 [ 1769.089725] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.089737] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1769.089742] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1769.089748] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1769.089754] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1769.089759] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1769.109100] syz-executor.0 cpuset= [ 1769.170580] 2718 [ 1769.264083] / mems_allowed=0-1 [ 1769.340876] CPU: 0 PID: 7050 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1769.348688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1769.358132] Call Trace: [ 1769.360731] dump_stack+0x1b2/0x281 [ 1769.364395] warn_alloc.cold+0x96/0x1cc [ 1769.368370] ? zone_watermark_ok_safe+0x220/0x220 [ 1769.373228] __alloc_pages_nodemask+0x2127/0x2720 [ 1769.378069] ? io_schedule_timeout+0x140/0x140 [ 1769.382666] ? lock_acquire+0x170/0x3f0 [ 1769.386650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1769.391503] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1769.396958] ? __mutex_unlock_slowpath+0x75/0x770 [ 1769.401819] alloc_pages_current+0x155/0x260 [ 1769.406239] ion_page_pool_alloc+0x118/0x1b0 [ 1769.410649] ion_system_heap_allocate+0x133/0x8c0 [ 1769.415491] ? ion_alloc+0x187/0x810 [ 1769.419209] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1769.424673] ? ion_system_contig_heap_create+0x130/0x130 [ 1769.430127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1769.435145] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1769.439995] ion_alloc+0x204/0x810 [ 1769.443548] ? ion_dma_buf_release+0x40/0x40 [ 1769.447984] ? __might_fault+0x177/0x1b0 [ 1769.452061] ion_ioctl+0xea/0x1f0 [ 1769.455521] ? ion_query_heaps+0x360/0x360 [ 1769.459759] ? ion_query_heaps+0x360/0x360 [ 1769.463998] do_vfs_ioctl+0x75a/0xff0 [ 1769.467808] ? ioctl_preallocate+0x1a0/0x1a0 [ 1769.472215] ? lock_downgrade+0x740/0x740 [ 1769.476369] ? __fget+0x225/0x360 [ 1769.479821] ? do_vfs_ioctl+0xff0/0xff0 [ 1769.483799] ? security_file_ioctl+0x83/0xb0 [ 1769.488208] SyS_ioctl+0x7f/0xb0 [ 1769.491576] ? do_vfs_ioctl+0xff0/0xff0 [ 1769.495554] do_syscall_64+0x1d5/0x640 [ 1769.499444] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1769.504641] RIP: 0033:0x466459 [ 1769.507819] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.515521] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1769.522786] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1769.530044] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1769.537302] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1769.544559] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1769.633930] 2718 2718 [ 1769.654761] Node 0 DMA32 free:35752kB min:36200kB low:45248kB high:54296kB active_anon:285692kB inactive_anon:125988kB active_file:992kB inactive_file:1860kB unevictable:0kB writepending:336kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11968kB pagetables:16840kB bounce:0kB free_pcp:1060kB local_pcp:336kB free_cma:0kB [ 1769.745349] lowmem_reserve[]: 0 0 0 0 0 [ 1769.753446] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1769.798183] lowmem_reserve[]: 0 0 0 0 0 [ 1769.844101] Node 1 Normal free:64304kB min:53696kB low:67120kB high:80544kB active_anon:3556kB inactive_anon:22728kB active_file:1376kB inactive_file:736kB unevictable:0kB writepending:292kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2692kB bounce:0kB free_pcp:944kB local_pcp:292kB free_cma:0kB [ 1769.882753] lowmem_reserve[]: 0 0 0 0 0 [ 1769.887173] Node 0 DMA: 3*4kB (UME) 1*8kB (M) 4*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11060kB [ 1769.940329] Node 0 DMA32: 123*4kB (UM) 53*8kB (UE) 63*16kB (UME) 846*32kB (UE) 257*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45956kB [ 1770.012501] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1770.061929] Node 1 Normal: 194*4kB (UM) 118*8kB (ME) 62*16kB (M) 28*32kB (ME) 216*64kB (UM) 362*128kB (UM) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64792kB [ 1770.088071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1770.152068] warn_alloc_show_mem: 4 callbacks suppressed [ 1770.152072] Mem-Info: [ 1770.161910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1770.179683] active_anon:72313 inactive_anon:37179 isolated_anon:0 [ 1770.179683] active_file:385 inactive_file:746 isolated_file:19 [ 1770.179683] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1770.179683] slab_reclaimable:12507 slab_unreclaimable:128658 [ 1770.179683] mapped:53612 shmem:37643 pagetables:4883 bounce:0 [ 1770.179683] free:30779 free_pcp:445 free_cma:0 [ 1770.227747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1770.240339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1770.269784] 39001 total pagecache pages [ 1770.276292] 0 pages in swap cache [ 1770.287160] Swap cache stats: add 0, delete 0, find 0/0 [ 1770.294732] Free swap = 0kB [ 1770.298865] Total swap = 0kB [ 1770.311530] 2097051 pages RAM [ 1770.314918] Node 0 active_anon:285696kB inactive_anon:125988kB active_file:2088kB inactive_file:2964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160536kB dirty:12kB writeback:0kB shmem:127704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1770.318066] 0 pages HighMem/MovableOnly [ 1770.377364] Node 1 active_anon:3556kB inactive_anon:22728kB active_file:104kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:55112kB dirty:12kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1770.457716] 363848 pages reserved [ 1770.476996] 0 pages cma reserved [ 1770.496856] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1770.559710] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1770.564881] Node 0 DMA32 free:58360kB min:36200kB low:45248kB high:54296kB active_anon:285692kB inactive_anon:125988kB active_file:2396kB inactive_file:2408kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11968kB pagetables:16840kB bounce:0kB free_pcp:1308kB local_pcp:592kB free_cma:0kB [ 1770.595395] lowmem_reserve[]: 0 0 0 0 0 [ 1770.602990] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1770.715497] lowmem_reserve[]: 0 0 0 0 0 [ 1770.722833] Node 1 Normal free:75036kB min:53696kB low:67120kB high:80544kB active_anon:3556kB inactive_anon:22728kB active_file:152kB inactive_file:32kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2692kB bounce:0kB free_pcp:884kB local_pcp:208kB free_cma:0kB [ 1770.855485] lowmem_reserve[]: 0 0 0 0 0 [ 1770.859766] Node 0 DMA: 4*4kB (UME) 2*8kB (UM) 3*16kB (ME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11056kB [ 1770.943050] Node 0 DMA32: 261*4kB (ME) 54*8kB (ME) 49*16kB (ME) 16*32kB (UME) 511*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35732kB [ 1770.968015] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1770.993812] Node 1 Normal: 47*4kB (M) 43*8kB (ME) 35*16kB (UM) 31*32kB (UME) 58*64kB (UM) 358*128kB (UM) 7*256kB (U) 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 57508kB [ 1771.049045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1771.057958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1771.109072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1771.118202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1771.178268] 38956 total pagecache pages [ 1771.183890] 0 pages in swap cache [ 1771.187348] Swap cache stats: add 0, delete 0, find 0/0 [ 1771.196952] Free swap = 0kB [ 1771.202899] Total swap = 0kB [ 1771.205919] 2097051 pages RAM [ 1771.217526] 0 pages HighMem/MovableOnly [ 1771.233130] 363848 pages reserved [ 1771.236662] 0 pages cma reserved [ 1771.310647] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1771.339074] systemd-journal cpuset=/ mems_allowed=0-1 [ 1771.344351] CPU: 0 PID: 6710 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1771.352295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.361647] Call Trace: [ 1771.364245] dump_stack+0x1b2/0x281 [ 1771.367877] dump_header+0x178/0x82f [ 1771.371601] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1771.376696] ? ___ratelimit+0x2cd/0x530 [ 1771.380663] oom_kill_process.cold+0x10/0xa40 [ 1771.385160] out_of_memory+0xe3e/0x1190 [ 1771.389126] ? oom_killer_disable+0x1c0/0x1c0 [ 1771.393787] ? mutex_trylock+0x152/0x1a0 [ 1771.397847] __alloc_pages_nodemask+0x23e1/0x2720 [ 1771.402711] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1771.407542] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1771.412905] ? cache_grow_begin+0x3f/0x700 [ 1771.417127] cache_grow_begin+0x91/0x700 [ 1771.421193] fallback_alloc+0x207/0x2c0 [ 1771.425172] kmem_cache_alloc+0x1e5/0x3c0 [ 1771.429832] getname_flags+0xc8/0x550 [ 1771.433625] user_path_at_empty+0x2a/0x50 [ 1771.437765] SyS_faccessat+0x21b/0x680 [ 1771.441641] ? SyS_fallocate+0x80/0x80 [ 1771.445515] ? do_syscall_64+0x4c/0x640 [ 1771.449474] ? SyS_faccessat+0x680/0x680 [ 1771.453532] do_syscall_64+0x1d5/0x640 [ 1771.457426] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1771.462605] RIP: 0033:0x7facabc1b9c7 [ 1771.466304] RSP: 002b:00007ffd62abaf28 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1771.474003] RAX: ffffffffffffffda RBX: 00007ffd62abde40 RCX: 00007facabc1b9c7 [ 1771.481259] RDX: 00007facac68ca00 RSI: 0000000000000000 RDI: 0000562b5cbab9a3 [ 1771.488515] RBP: 00007ffd62abaf60 R08: 0000000000000000 R09: 0000000000000000 [ 1771.495773] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1771.503030] R13: 0000000000000000 R14: 00007ffd62abde40 R15: 00007ffd62abb450 [ 1771.528600] Mem-Info: [ 1771.555747] active_anon:72318 inactive_anon:37179 isolated_anon:0 [ 1771.555747] active_file:58 inactive_file:0 isolated_file:0 [ 1771.555747] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1771.555747] slab_reclaimable:12504 slab_unreclaimable:128280 [ 1771.555747] mapped:53038 shmem:37643 pagetables:4883 bounce:0 [ 1771.555747] free:25004 free_pcp:0 free_cma:0 [ 1771.591358] Node 0 active_anon:285712kB inactive_anon:125988kB active_file:116kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156956kB dirty:12kB writeback:0kB shmem:127704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1771.621725] Node 1 active_anon:3560kB inactive_anon:22728kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55196kB dirty:4kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1771.651329] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.680168] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1771.685239] Node 0 DMA32 free:35848kB min:36200kB low:45248kB high:54296kB active_anon:285708kB inactive_anon:125988kB active_file:116kB inactive_file:288kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11968kB pagetables:16840kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.716729] lowmem_reserve[]: 0 0 0 0 0 [ 1771.727864] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.762453] lowmem_reserve[]: 0 0 0 0 0 [ 1771.766483] Node 1 Normal free:53096kB min:53696kB low:67120kB high:80544kB active_anon:3560kB inactive_anon:22728kB active_file:140kB inactive_file:24kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.804377] lowmem_reserve[]: 0 0 0 0 0 [ 1771.808394] Node 0 DMA: 8*4kB (UME) 2*8kB (UM) 3*16kB (ME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11072kB [ 1771.832804] Node 0 DMA32: 516*4kB (UME) 128*8kB (UME) 76*16kB (UME) 21*32kB (ME) 447*64kB (UM) 20*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36144kB [ 1771.856631] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1771.867456] Node 1 Normal: 75*4kB (M) 42*8kB (UME) 22*16kB (M) 21*32kB (UME) 3*64kB (UM) 356*128kB (UM) 7*256kB (U) 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 53308kB [ 1771.891516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1771.904938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1771.918477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1771.936944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1771.945583] 37680 total pagecache pages [ 1771.958523] 0 pages in swap cache [ 1771.962065] Swap cache stats: add 0, delete 0, find 0/0 [ 1771.967429] Free swap = 0kB [ 1771.979501] Total swap = 0kB [ 1771.982533] 2097051 pages RAM [ 1771.985629] 0 pages HighMem/MovableOnly [ 1771.996182] 363848 pages reserved [ 1772.002000] 0 pages cma reserved [ 1772.005369] Out of memory (oom_kill_allocating_task): Kill process 6710 (systemd-journal) score 0 or sacrifice child [ 1772.025096] Killed process 6710 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:4kB, shmem-rss:2988kB [ 1772.039199] oom_reaper: reaped process 6710 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2992kB [ 1772.079389] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1772.096098] in:imklog cpuset=/ mems_allowed=0-1 [ 1772.101571] CPU: 1 PID: 7031 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 1772.108943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1772.118297] Call Trace: [ 1772.120886] dump_stack+0x1b2/0x281 [ 1772.124533] dump_header+0x178/0x82f [ 1772.128240] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1772.133330] ? ___ratelimit+0x2cd/0x530 [ 1772.137294] oom_kill_process.cold+0x10/0xa40 [ 1772.141804] out_of_memory+0xe3e/0x1190 [ 1772.145776] ? oom_killer_disable+0x1c0/0x1c0 [ 1772.150262] ? mutex_trylock+0x152/0x1a0 [ 1772.154312] __alloc_pages_nodemask+0x23e1/0x2720 [ 1772.159153] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1772.163997] alloc_pages_current+0x155/0x260 [ 1772.168420] filemap_fault+0x11a1/0x1ad0 [ 1772.173001] ext4_filemap_fault+0x84/0xb0 [ 1772.177138] __do_fault+0xfa/0x380 [ 1772.180668] __handle_mm_fault+0x2497/0x4620 [ 1772.185066] ? vm_insert_page+0x7c0/0x7c0 [ 1772.189207] ? lock_downgrade+0x740/0x740 [ 1772.193349] ? mark_held_locks+0xa6/0xf0 [ 1772.197401] handle_mm_fault+0x455/0x9c0 [ 1772.201456] __do_page_fault+0x549/0xad0 [ 1772.205508] ? spurious_fault+0x640/0x640 [ 1772.209644] ? do_page_fault+0x60/0x500 [ 1772.213604] ? page_fault+0x2f/0x50 [ 1772.217214] page_fault+0x45/0x50 [ 1772.220655] RIP: 1fa0:0x1f9f [ 1772.223659] RSP: 0000:000055a996bac9d0 EFLAGS: 7f7bac75eda0 [ 1772.238213] Mem-Info: [ 1772.305537] active_anon:72199 inactive_anon:37179 isolated_anon:0 [ 1772.305537] active_file:10 inactive_file:1 isolated_file:0 [ 1772.305537] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1772.305537] slab_reclaimable:12501 slab_unreclaimable:128291 [ 1772.305537] mapped:52247 shmem:37643 pagetables:4846 bounce:0 [ 1772.305537] free:25137 free_pcp:0 free_cma:0 [ 1772.484083] Node 0 active_anon:285236kB inactive_anon:125988kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153892kB dirty:0kB writeback:0kB shmem:127704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1772.549701] Node 1 active_anon:3560kB inactive_anon:22728kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1772.687578] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.745835] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1772.799053] Node 0 DMA32 free:36168kB min:36200kB low:45248kB high:54296kB active_anon:285232kB inactive_anon:125988kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11968kB pagetables:16692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.957559] lowmem_reserve[]: 0 0 0 0 0 [ 1772.974344] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1773.039519] lowmem_reserve[]: 0 0 0 0 0 [ 1773.043550] Node 1 Normal free:53308kB min:53696kB low:67120kB high:80544kB active_anon:3560kB inactive_anon:22728kB active_file:4kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1773.087923] lowmem_reserve[]: 0 0 0 0 0 [ 1773.091983] Node 0 DMA: 8*4kB (UME) 2*8kB (UM) 3*16kB (ME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11072kB [ 1773.120709] Node 0 DMA32: 530*4kB (ME) 145*8kB (UME) 75*16kB (UME) 22*32kB (UME) 443*64kB (UM) 20*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36096kB [ 1773.148909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1773.173133] Node 1 Normal: 75*4kB (M) 42*8kB (UME) 22*16kB (M) 21*32kB (UME) 3*64kB (UM) 356*128kB (UM) 7*256kB (U) 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 53308kB [ 1773.201591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1773.224365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1773.246508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1773.268907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1773.289116] 37672 total pagecache pages [ 1773.293110] 0 pages in swap cache [ 1773.296556] Swap cache stats: add 0, delete 0, find 0/0 [ 1773.313276] Free swap = 0kB [ 1773.316316] Total swap = 0kB [ 1773.326450] 2097051 pages RAM [ 1773.334076] 0 pages HighMem/MovableOnly [ 1773.338057] 363848 pages reserved [ 1773.348405] 0 pages cma reserved [ 1773.356835] Out of memory (oom_kill_allocating_task): Kill process 7031 (in:imklog) score 0 or sacrifice child [ 1773.378311] Killed process 7029 (rsyslogd) total-vm:254332kB, anon-rss:688kB, file-rss:0kB, shmem-rss:0kB [ 1773.389922] oom_reaper: reaped process 7029 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1773.440231] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1773.501236] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1773.506028] CPU: 0 PID: 7973 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 1773.513467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.522812] Call Trace: [ 1773.525410] dump_stack+0x1b2/0x281 [ 1773.529037] dump_header+0x178/0x82f [ 1773.532749] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1773.537851] ? ___ratelimit+0x2cd/0x530 [ 1773.541827] oom_kill_process.cold+0x10/0xa40 [ 1773.546331] out_of_memory+0xe3e/0x1190 [ 1773.550311] ? oom_killer_disable+0x1c0/0x1c0 [ 1773.554832] ? mutex_trylock+0x152/0x1a0 [ 1773.558893] __alloc_pages_nodemask+0x23e1/0x2720 [ 1773.563776] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1773.568634] alloc_pages_current+0x155/0x260 [ 1773.573047] filemap_fault+0x11a1/0x1ad0 [ 1773.577117] ext4_filemap_fault+0x84/0xb0 [ 1773.581263] __do_fault+0xfa/0x380 [ 1773.584803] __handle_mm_fault+0x2497/0x4620 [ 1773.589207] ? vm_insert_page+0x7c0/0x7c0 [ 1773.593364] ? mark_held_locks+0xa6/0xf0 [ 1773.597422] handle_mm_fault+0x455/0x9c0 [ 1773.601481] __do_page_fault+0x549/0xad0 [ 1773.605545] ? spurious_fault+0x640/0x640 [ 1773.609693] ? do_page_fault+0x60/0x500 [ 1773.613667] ? page_fault+0x2f/0x50 [ 1773.617288] page_fault+0x45/0x50 [ 1773.620735] RIP: 0900:0x1a731d24601 [ 1773.624352] RSP: 024f:000000c00003fe40 EFLAGS: 00000003 [ 1773.629175] syz-executor.3: [ 1773.634586] syz-executor.0: [ 1773.635077] Mem-Info: [ 1773.637602] page allocation failure: order:0 [ 1773.643101] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1773.648468] active_anon:71975 inactive_anon:37178 isolated_anon:0 [ 1773.648468] active_file:18 inactive_file:11 isolated_file:0 [ 1773.648468] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1773.648468] slab_reclaimable:12499 slab_unreclaimable:128275 [ 1773.648468] mapped:52225 shmem:37643 pagetables:4858 bounce:0 [ 1773.648468] free:13861 free_pcp:148 free_cma:0 [ 1773.670947] page allocation failure: order:0 [ 1773.697551] Node 0 active_anon:284340kB inactive_anon:125984kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153804kB dirty:0kB writeback:0kB shmem:127704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1773.706738] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1773.739093] Node 1 active_anon:3560kB inactive_anon:22728kB active_file:60kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1773.763496] syz-executor.4 cpuset= [ 1773.777849] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1773.788982] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1773.802807] / [ 1773.809973] (null) [ 1773.813827] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1773.818941] CPU: 1 PID: 7040 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1773.826731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.827175] syz-executor.0 cpuset= [ 1773.836081] Call Trace: [ 1773.836104] dump_stack+0x1b2/0x281 [ 1773.836118] warn_alloc.cold+0x96/0x1cc [ 1773.836130] ? zone_watermark_ok_safe+0x220/0x220 [ 1773.836140] ? usleep_range+0x130/0x130 [ 1773.836149] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1773.836167] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1773.836177] ? run_timer_softirq+0x5a0/0x5a0 [ 1773.836194] __alloc_pages_nodemask+0x2127/0x2720 [ 1773.836217] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1773.836230] ? migrate_swap_stop+0x880/0x880 [ 1773.836238] ? lock_acquire+0x170/0x3f0 [ 1773.836261] alloc_pages_current+0x155/0x260 [ 1773.854304] / [ 1773.854806] ion_page_pool_alloc+0x118/0x1b0 [ 1773.858773] mems_allowed=0-1 [ 1773.863879] ion_system_heap_allocate+0x133/0x8c0 [ 1773.863890] ? ion_alloc+0x187/0x810 [ 1773.863900] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1773.863909] ? ion_system_contig_heap_create+0x130/0x130 [ 1773.863918] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1773.863929] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1773.863939] ion_alloc+0x204/0x810 [ 1773.863952] ? ion_dma_buf_release+0x40/0x40 [ 1773.863964] ? __might_fault+0x177/0x1b0 [ 1773.863975] ion_ioctl+0xea/0x1f0 [ 1773.863984] ? ion_query_heaps+0x360/0x360 [ 1773.863997] ? ion_query_heaps+0x360/0x360 [ 1773.864007] do_vfs_ioctl+0x75a/0xff0 [ 1773.864018] ? ioctl_preallocate+0x1a0/0x1a0 [ 1773.864028] ? lock_downgrade+0x740/0x740 [ 1773.864041] ? __fget+0x225/0x360 [ 1773.883964] Node 0 [ 1773.887536] ? do_vfs_ioctl+0xff0/0xff0 [ 1773.914983] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1773.919125] ? security_file_ioctl+0x83/0xb0 [ 1773.919137] SyS_ioctl+0x7f/0xb0 [ 1773.919146] ? do_vfs_ioctl+0xff0/0xff0 [ 1773.919158] do_syscall_64+0x1d5/0x640 [ 1773.919174] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1773.919183] RIP: 0033:0x466459 [ 1773.919189] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1773.919199] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1773.919204] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1773.919215] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1773.919223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1773.961106] lowmem_reserve[]: [ 1773.962784] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1773.967187] 0 [ 1773.979065] mems_allowed=0-1 [ 1773.996161] CPU: 0 PID: 7050 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1774.008913] (null) [ 1774.011064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1774.011068] Call Trace: [ 1774.011088] dump_stack+0x1b2/0x281 [ 1774.011102] warn_alloc.cold+0x96/0x1cc [ 1774.014446] syz-executor.3 cpuset= [ 1774.018408] ? zone_watermark_ok_safe+0x220/0x220 [ 1774.027822] / [ 1774.030635] ? usleep_range+0x130/0x130 [ 1774.038359] mems_allowed=0-1 [ 1774.045589] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1774.045604] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1774.045616] ? run_timer_softirq+0x5a0/0x5a0 [ 1774.145779] __alloc_pages_nodemask+0x2127/0x2720 [ 1774.150626] ? lock_acquire+0x170/0x3f0 [ 1774.154619] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1774.159454] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1774.164561] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1774.170022] alloc_pages_current+0x155/0x260 [ 1774.174427] ion_page_pool_alloc+0x118/0x1b0 [ 1774.178832] ion_system_heap_allocate+0x133/0x8c0 [ 1774.183667] ? ion_alloc+0x187/0x810 [ 1774.187373] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1774.192821] ? ion_system_contig_heap_create+0x130/0x130 [ 1774.198272] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1774.203282] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1774.208119] ion_alloc+0x204/0x810 [ 1774.212262] ? ion_dma_buf_release+0x40/0x40 [ 1774.216679] ? __might_fault+0x177/0x1b0 [ 1774.220732] ion_ioctl+0xea/0x1f0 [ 1774.224276] ? ion_query_heaps+0x360/0x360 [ 1774.228507] ? ion_query_heaps+0x360/0x360 [ 1774.232735] do_vfs_ioctl+0x75a/0xff0 [ 1774.236530] ? ioctl_preallocate+0x1a0/0x1a0 [ 1774.240927] ? lock_downgrade+0x740/0x740 [ 1774.245071] ? __fget+0x225/0x360 [ 1774.248515] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.252498] ? security_file_ioctl+0x83/0xb0 [ 1774.256913] SyS_ioctl+0x7f/0xb0 [ 1774.260268] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.264236] do_syscall_64+0x1d5/0x640 [ 1774.268119] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1774.273304] RIP: 0033:0x466459 [ 1774.276479] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1774.284193] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1774.291483] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1774.298741] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1774.305998] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1774.309020] Mem-Info: [ 1774.313253] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1774.323154] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1774.334223] 2717 2718 2718 2718 [ 1774.337623] CPU: 1 PID: 7047 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1774.338340] Node 0 [ 1774.346125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1774.346129] Call Trace: [ 1774.346151] dump_stack+0x1b2/0x281 [ 1774.346165] warn_alloc.cold+0x96/0x1cc [ 1774.346177] ? zone_watermark_ok_safe+0x220/0x220 [ 1774.346186] ? usleep_range+0x130/0x130 [ 1774.346195] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1774.346208] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1774.346218] ? run_timer_softirq+0x5a0/0x5a0 [ 1774.346235] __alloc_pages_nodemask+0x2127/0x2720 [ 1774.346259] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1774.346272] ? migrate_swap_stop+0x880/0x880 [ 1774.346279] ? lock_acquire+0x170/0x3f0 [ 1774.346299] ? alloc_pages_current+0x73/0x260 [ 1774.362892] DMA32 free:17788kB min:36200kB low:45248kB high:54296kB active_anon:284284kB inactive_anon:125984kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11840kB pagetables:16612kB bounce:0kB free_pcp:684kB local_pcp:288kB free_cma:0kB [ 1774.364064] alloc_pages_current+0x155/0x260 [ 1774.368029] lowmem_reserve[]: [ 1774.372879] ion_page_pool_alloc+0x118/0x1b0 [ 1774.372889] ion_system_heap_allocate+0x133/0x8c0 [ 1774.372898] ? ion_alloc+0x187/0x810 [ 1774.372908] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1774.372917] ? ion_system_contig_heap_create+0x130/0x130 [ 1774.372926] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1774.372938] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1774.372948] ion_alloc+0x204/0x810 [ 1774.372962] ? ion_dma_buf_release+0x40/0x40 [ 1774.372974] ? __might_fault+0x177/0x1b0 [ 1774.372986] ion_ioctl+0xea/0x1f0 [ 1774.372995] ? ion_query_heaps+0x360/0x360 [ 1774.373006] ? cp_compat_stat+0x890/0x890 [ 1774.373018] ? ion_query_heaps+0x360/0x360 [ 1774.391297] 0 [ 1774.391493] do_vfs_ioctl+0x75a/0xff0 [ 1774.396325] 0 [ 1774.401158] ? ioctl_preallocate+0x1a0/0x1a0 [ 1774.401168] ? lock_downgrade+0x740/0x740 [ 1774.401181] ? __fget+0x225/0x360 [ 1774.401190] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.401201] ? security_file_ioctl+0x83/0xb0 [ 1774.401212] SyS_ioctl+0x7f/0xb0 [ 1774.401220] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.401231] do_syscall_64+0x1d5/0x640 [ 1774.401247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1774.401256] RIP: 0033:0x466459 [ 1774.401261] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1774.401272] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1774.401278] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1774.401285] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1774.421894] 0 [ 1774.442816] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1774.442822] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1774.445138] syz-executor.2 cpuset= [ 1774.461911] 0 [ 1774.466305] CPU: 1 PID: 7048 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1774.483245] 0 [ 1774.484423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1774.492328] Call Trace: [ 1774.492349] dump_stack+0x1b2/0x281 [ 1774.492364] warn_alloc.cold+0x96/0x1cc [ 1774.492376] ? zone_watermark_ok_safe+0x220/0x220 [ 1774.492386] ? usleep_range+0x130/0x130 [ 1774.492396] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1774.492409] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1774.492419] ? run_timer_softirq+0x5a0/0x5a0 [ 1774.492437] __alloc_pages_nodemask+0x2127/0x2720 [ 1774.492462] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1774.509365] Node 0 [ 1774.512503] ? migrate_swap_stop+0x880/0x880 [ 1774.514288] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1774.518061] ? lock_acquire+0x170/0x3f0 [ 1774.518087] alloc_pages_current+0x155/0x260 [ 1774.535271] / [ 1774.535772] ion_page_pool_alloc+0x118/0x1b0 [ 1774.546287] lowmem_reserve[]: [ 1774.547500] ion_system_heap_allocate+0x133/0x8c0 [ 1774.565610] mems_allowed=0-1 [ 1774.567412] ? ion_alloc+0x187/0x810 [ 1774.588852] 0 [ 1774.589279] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1774.589290] ? ion_system_contig_heap_create+0x130/0x130 [ 1774.589301] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1774.589313] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1774.589325] ion_alloc+0x204/0x810 [ 1774.589339] ? ion_dma_buf_release+0x40/0x40 [ 1774.589352] ? __might_fault+0x177/0x1b0 [ 1774.595257] 0 [ 1774.598409] ion_ioctl+0xea/0x1f0 [ 1774.643093] 0 [ 1774.645128] ? ion_query_heaps+0x360/0x360 [ 1774.677770] 0 [ 1774.680005] ? ion_query_heaps+0x360/0x360 [ 1774.680022] do_vfs_ioctl+0x75a/0xff0 [ 1774.680036] ? ioctl_preallocate+0x1a0/0x1a0 [ 1774.680045] ? lock_downgrade+0x740/0x740 [ 1774.680058] ? __fget+0x225/0x360 [ 1774.680067] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.680079] ? security_file_ioctl+0x83/0xb0 [ 1774.680090] SyS_ioctl+0x7f/0xb0 [ 1774.680097] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.680109] do_syscall_64+0x1d5/0x640 [ 1774.680124] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1774.680134] RIP: 0033:0x466459 [ 1774.817468] 0 [ 1774.818272] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 [ 1774.830499] ORIG_RAX: 0000000000000010 [ 1774.830506] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1774.830511] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1774.830516] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1774.830521] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1774.830526] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1774.840704] active_anon:71962 inactive_anon:37178 isolated_anon:0 [ 1774.840704] active_file:15 inactive_file:14 isolated_file:0 [ 1774.840704] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1774.840704] slab_reclaimable:12499 slab_unreclaimable:128155 [ 1774.840704] mapped:52225 shmem:37643 pagetables:4826 bounce:0 [ 1774.840704] free:13888 free_pcp:210 free_cma:0 [ 1774.849550] CPU: 0 PID: 7066 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1774.864940] Node 0 active_anon:284288kB inactive_anon:125984kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153804kB dirty:0kB writeback:0kB shmem:127704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1774.870892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1774.870897] Call Trace: [ 1774.870919] dump_stack+0x1b2/0x281 [ 1774.870933] warn_alloc.cold+0x96/0x1cc [ 1774.870947] ? zone_watermark_ok_safe+0x220/0x220 [ 1774.878236] Node 1 active_anon:3560kB inactive_anon:22728kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:55096kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1774.911549] ? usleep_range+0x130/0x130 [ 1774.911560] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1774.911571] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1774.911581] ? run_timer_softirq+0x5a0/0x5a0 [ 1774.911600] __alloc_pages_nodemask+0x2127/0x2720 [ 1774.919419] Node 0 [ 1774.947419] ? lock_acquire+0x170/0x3f0 [ 1774.947437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1774.947451] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1774.979043] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1774.998946] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1774.998968] alloc_pages_current+0x155/0x260 [ 1775.019023] lowmem_reserve[]: [ 1775.022263] ion_page_pool_alloc+0x118/0x1b0 [ 1775.024493] 0 [ 1775.028454] ion_system_heap_allocate+0x133/0x8c0 [ 1775.049044] 2717 [ 1775.063259] ? ion_alloc+0x187/0x810 [ 1775.063271] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1775.063281] ? ion_system_contig_heap_create+0x130/0x130 [ 1775.063291] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1775.063307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1775.089039] 2718 [ 1775.089276] ion_alloc+0x204/0x810 [ 1775.092964] 2718 [ 1775.098417] ? ion_dma_buf_release+0x40/0x40 [ 1775.119028] 2718 [ 1775.119231] ? __might_fault+0x177/0x1b0 [ 1775.125663] ion_ioctl+0xea/0x1f0 [ 1775.127700] Node 0 [ 1775.131758] ? ion_query_heaps+0x360/0x360 [ 1775.131769] ? ion_query_heaps+0x360/0x360 [ 1775.131780] do_vfs_ioctl+0x75a/0xff0 [ 1775.131792] ? ioctl_preallocate+0x1a0/0x1a0 [ 1775.149053] DMA32 free:66460kB min:36200kB low:45248kB high:54296kB active_anon:284284kB inactive_anon:125984kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11840kB pagetables:16612kB bounce:0kB free_pcp:980kB local_pcp:700kB free_cma:0kB [ 1775.149703] ? lock_downgrade+0x740/0x740 [ 1775.154087] lowmem_reserve[]: [ 1775.182913] ? __fget+0x225/0x360 [ 1775.182923] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.182935] ? security_file_ioctl+0x83/0xb0 [ 1775.182947] SyS_ioctl+0x7f/0xb0 [ 1775.201880] 0 [ 1775.202040] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.205394] 0 [ 1775.207198] do_syscall_64+0x1d5/0x640 [ 1775.211171] 0 [ 1775.212949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1775.216814] 0 [ 1775.218602] RIP: 0033:0x466459 [ 1775.223802] 0 [ 1775.225551] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 [ 1775.230511] ORIG_RAX: 0000000000000010 [ 1775.230517] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1775.230523] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1775.230528] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1775.230534] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1775.230542] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1775.235902] Node 0 [ 1775.249535] Node 1 Normal free:26884kB min:53696kB low:67120kB high:80544kB active_anon:3560kB inactive_anon:22728kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1216kB pagetables:2692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1775.283043] syz-executor.3: [ 1775.308540] lowmem_reserve[]: 0 0 0 0 0 [ 1775.316244] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 4*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 1775.332146] Node 0 DMA32: 374*4kB (U) 1422*8kB (UE) 771*16kB (UE) 341*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 1775.336511] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1775.345893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1775.345943] Node 1 Normal: 246*4kB (UM) 1048*8kB (UME) 529*16kB (UM) 206*32kB (UME) 1*64kB (M) 1*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 26920kB [ 1775.346014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1775.346021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1775.346027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1775.346032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1775.346041] 38584 total pagecache pages [ 1775.423339] lowmem_reserve[]: 0 0 0 0 0 [ 1775.423365] Node 1 Normal free:26884kB min:53696kB low:67120kB high:80544kB active_anon:3560kB inactive_anon:22728kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1216kB pagetables:2692kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1775.470442] warn_alloc_show_mem: 1 callbacks suppressed [ 1775.470446] Mem-Info: [ 1775.479195] 0 pages in swap cache [ 1775.482003] active_anon:71962 inactive_anon:37178 isolated_anon:0 [ 1775.482003] active_file:78 inactive_file:277 isolated_file:0 [ 1775.482003] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1775.482003] slab_reclaimable:12499 slab_unreclaimable:128052 [ 1775.482003] mapped:52375 shmem:37643 pagetables:4826 bounce:0 [ 1775.482003] free:19179 free_pcp:338 free_cma:0 [ 1775.492930] Swap cache stats: add 0, delete 0, find 0/0 [ 1775.516864] page allocation failure: order:4 [ 1775.525619] lowmem_reserve[]: [ 1775.531181] Free swap = 0kB [ 1775.543500] Total swap = 0kB [ 1775.546549] 2097051 pages RAM [ 1775.546747] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1775.549695] 0 pages HighMem/MovableOnly [ 1775.549699] 363848 pages reserved [ 1775.549702] 0 pages cma reserved [ 1775.549709] Out of memory (oom_kill_allocating_task): Kill process 7973 (syz-fuzzer) score 0 or sacrifice child [ 1775.550285] Killed process 6136 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1775.557575] 0 [ 1775.585750] oom_reaper: reaped process 7066 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1775.588604] (null) [ 1775.602613] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1775.607747] CPU: 1 PID: 7047 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1775.615537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.624975] Call Trace: [ 1775.627568] dump_stack+0x1b2/0x281 [ 1775.631199] warn_alloc.cold+0x96/0x1cc [ 1775.635198] ? zone_watermark_ok_safe+0x220/0x220 [ 1775.640055] __alloc_pages_nodemask+0x2127/0x2720 [ 1775.644909] ? lock_acquire+0x170/0x3f0 [ 1775.648886] ? lock_acquire+0x170/0x3f0 [ 1775.652876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1775.657736] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1775.663195] ? __mutex_unlock_slowpath+0x75/0x770 [ 1775.668134] alloc_pages_current+0x155/0x260 [ 1775.672558] ion_page_pool_alloc+0x118/0x1b0 [ 1775.676961] ion_system_heap_allocate+0x133/0x8c0 [ 1775.681798] ? _raw_spin_unlock+0x29/0x40 [ 1775.685935] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1775.690859] ? ion_system_contig_heap_create+0x130/0x130 [ 1775.696307] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1775.701321] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1775.706176] ion_alloc+0x27a/0x810 [ 1775.709730] ? ion_dma_buf_release+0x40/0x40 [ 1775.714138] ? __might_fault+0x177/0x1b0 [ 1775.718198] ion_ioctl+0xea/0x1f0 [ 1775.721653] ? ion_query_heaps+0x360/0x360 [ 1775.725889] ? cp_compat_stat+0x890/0x890 [ 1775.731017] ? ion_query_heaps+0x360/0x360 [ 1775.735245] do_vfs_ioctl+0x75a/0xff0 [ 1775.739042] ? ioctl_preallocate+0x1a0/0x1a0 [ 1775.743446] ? lock_downgrade+0x740/0x740 [ 1775.747590] ? __fget+0x225/0x360 [ 1775.751039] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.755012] ? security_file_ioctl+0x83/0xb0 [ 1775.759418] SyS_ioctl+0x7f/0xb0 [ 1775.762780] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.766756] do_syscall_64+0x1d5/0x640 [ 1775.770748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1775.775933] RIP: 0033:0x466459 [ 1775.779112] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1775.786809] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1775.794243] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1775.801516] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1775.808776] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1775.816052] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1775.829636] Node 0 active_anon:284188kB inactive_anon:125984kB active_file:296kB inactive_file:1116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154704kB dirty:0kB writeback:0kB shmem:127704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1775.877150] 0 0 0 0 [ 1775.886283] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 4*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 1775.915377] Node 0 DMA32: 298*4kB (UME) 1676*8kB (UME) 785*16kB (UME) 349*32kB (UME) 412*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64696kB [ 1775.930445] Node 1 active_anon:3560kB inactive_anon:22728kB active_file:48kB inactive_file:3544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24396kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1775.959302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1775.970742] Node 1 Normal: 214*4kB (UM) 1043*8kB (UME) 536*16kB (U) 263*32kB (UME) 15*64kB (UM) 37*128kB (UM) 5*256kB (U) 3*512kB (U) 299*1024kB (U) 1*2048kB (U) 0*4096kB = 342928kB [ 1775.987768] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.014867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1776.024173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1776.033444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1776.043416] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1776.052973] Node 0 DMA32 free:62236kB min:36200kB low:45248kB high:54296kB active_anon:284088kB inactive_anon:125984kB active_file:396kB inactive_file:3252kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11936kB pagetables:16604kB bounce:0kB free_pcp:820kB local_pcp:192kB free_cma:0kB [ 1776.087278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1776.099309] 39589 total pagecache pages [ 1776.103352] 0 pages in swap cache [ 1776.107498] Swap cache stats: add 0, delete 0, find 0/0 [ 1776.117205] Free swap = 0kB [ 1776.120585] Total swap = 0kB [ 1776.124087] 2097051 pages RAM [ 1776.127653] 0 pages HighMem/MovableOnly [ 1776.140129] lowmem_reserve[]: 0 0 0 0 0 [ 1776.156797] 363848 pages reserved [ 1776.161094] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.187514] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1776.202239] 0 pages cma reserved [ 1776.213651] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1776.263206] systemd[1]: rsyslog.service: Unit entered failed state. [ 1776.270659] lowmem_reserve[]: 0 0 0 0 0 [ 1776.275034] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1776.299048] Node 1 Normal free:58992kB min:53696kB low:67120kB high:80544kB active_anon:3504kB inactive_anon:22728kB active_file:656kB inactive_file:2988kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2520kB bounce:0kB free_pcp:932kB local_pcp:312kB free_cma:0kB [ 1776.333631] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1776.341243] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1776.380909] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1776.387900] systemd[1]: Stopped Journal Service. [ 1776.393027] lowmem_reserve[]: 0 0 0 0 0 [ 1776.397048] Node 0 DMA: 12*4kB (UME) 1*8kB (M) 4*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11000kB [ 1776.435410] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1776.435584] systemd[1]: Starting Journal Service... [ 1776.463359] Node 0 DMA32: 3936*4kB (UME) 7042*8kB (UME) 2806*16kB (UME) 1459*32kB (UME) 32*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165712kB [ 1776.465199] CPU: 0 PID: 7066 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1776.485952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.487060] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1776.495486] Call Trace: [ 1776.495509] dump_stack+0x1b2/0x281 [ 1776.495522] warn_alloc.cold+0x96/0x1cc [ 1776.495534] ? zone_watermark_ok_safe+0x220/0x220 [ 1776.495555] __alloc_pages_nodemask+0x2127/0x2720 [ 1776.523601] ? lock_acquire+0x170/0x3f0 [ 1776.527594] ? lock_acquire+0x170/0x3f0 [ 1776.531574] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.536423] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1776.539025] Node 0 Normal: [ 1776.541869] ? __mutex_unlock_slowpath+0x75/0x770 [ 1776.541884] alloc_pages_current+0x155/0x260 [ 1776.544798] 0*4kB [ 1776.549628] ion_page_pool_alloc+0x118/0x1b0 [ 1776.549638] ion_system_heap_allocate+0x133/0x8c0 [ 1776.549651] ? _raw_spin_unlock+0x29/0x40 [ 1776.549662] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1776.574464] ? ion_system_contig_heap_create+0x130/0x130 [ 1776.576031] systemd[1]: Stopped System Logging Service. [ 1776.579918] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.579932] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1776.579943] ion_alloc+0x27a/0x810 [ 1776.579956] ? ion_dma_buf_release+0x40/0x40 [ 1776.579968] ? __might_fault+0x177/0x1b0 [ 1776.579979] ion_ioctl+0xea/0x1f0 [ 1776.610588] ? ion_query_heaps+0x360/0x360 [ 1776.614832] ? ion_query_heaps+0x360/0x360 [ 1776.619052] 0*8kB 0*16kB [ 1776.619068] do_vfs_ioctl+0x75a/0xff0 [ 1776.619080] ? ioctl_preallocate+0x1a0/0x1a0 [ 1776.621821] 0*32kB [ 1776.625612] ? lock_downgrade+0x740/0x740 [ 1776.636381] ? __fget+0x225/0x360 [ 1776.639844] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.643827] ? security_file_ioctl+0x83/0xb0 [ 1776.648229] SyS_ioctl+0x7f/0xb0 [ 1776.651598] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.655578] do_syscall_64+0x1d5/0x640 [ 1776.659464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1776.664644] RIP: 0033:0x466459 [ 1776.667839] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.675546] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1776.682810] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.690103] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1776.697362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1776.704644] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1776.727324] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1776.727813] oom_reaper: reaped process 7047 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1776.747043] Node 1 Normal: 2267*4kB (UM) 2414*8kB (UME) 1800*16kB (UM) 902*32kB (UE) 10*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 86684kB [ 1776.813032] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1776.825038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1776.838494] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1776.868633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1776.877281] oom_reaper: reaped process 7048 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1776.879968] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1776.889647] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1776.904189] CPU: 1 PID: 7040 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1776.911977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.921317] Call Trace: [ 1776.923926] dump_stack+0x1b2/0x281 [ 1776.927550] warn_alloc.cold+0x96/0x1cc [ 1776.931519] ? zone_watermark_ok_safe+0x220/0x220 [ 1776.936383] __alloc_pages_nodemask+0x2127/0x2720 [ 1776.941324] ? lock_acquire+0x170/0x3f0 [ 1776.945296] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.950140] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1776.955601] ? __mutex_unlock_slowpath+0x75/0x770 [ 1776.960440] alloc_pages_current+0x155/0x260 [ 1776.964848] ion_page_pool_alloc+0x118/0x1b0 [ 1776.969250] ion_system_heap_allocate+0x133/0x8c0 [ 1776.974104] ? _raw_spin_unlock+0x29/0x40 [ 1776.978244] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1776.983177] ? ion_system_contig_heap_create+0x130/0x130 [ 1776.988629] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.993659] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1776.998492] ion_alloc+0x27a/0x810 [ 1777.002028] ? ion_dma_buf_release+0x40/0x40 [ 1777.006429] ? __might_fault+0x177/0x1b0 [ 1777.010483] ion_ioctl+0xea/0x1f0 [ 1777.013927] ? ion_query_heaps+0x360/0x360 [ 1777.018159] ? ion_query_heaps+0x360/0x360 [ 1777.022400] do_vfs_ioctl+0x75a/0xff0 [ 1777.026207] ? ioctl_preallocate+0x1a0/0x1a0 [ 1777.030611] ? lock_downgrade+0x740/0x740 [ 1777.034757] ? __fget+0x225/0x360 [ 1777.038225] ? do_vfs_ioctl+0xff0/0xff0 [ 1777.042192] ? security_file_ioctl+0x83/0xb0 [ 1777.046593] SyS_ioctl+0x7f/0xb0 [ 1777.049968] ? do_vfs_ioctl+0xff0/0xff0 [ 1777.053936] do_syscall_64+0x1d5/0x640 [ 1777.057819] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1777.063002] RIP: 0033:0x466459 [ 1777.066180] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1777.073881] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1777.081154] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1777.088418] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1777.095676] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1777.102938] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1777.128704] CPU: 0 PID: 7050 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1777.132868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.136539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1777.154700] Call Trace: [ 1777.157289] dump_stack+0x1b2/0x281 [ 1777.160920] warn_alloc.cold+0x96/0x1cc [ 1777.164891] ? zone_watermark_ok_safe+0x220/0x220 [ 1777.169741] __alloc_pages_nodemask+0x2127/0x2720 [ 1777.174947] ? lock_acquire+0x170/0x3f0 [ 1777.178931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1777.183771] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1777.189218] ? __mutex_unlock_slowpath+0x75/0x770 [ 1777.194058] alloc_pages_current+0x155/0x260 [ 1777.198474] ion_page_pool_alloc+0x118/0x1b0 [ 1777.202875] ion_system_heap_allocate+0x133/0x8c0 [ 1777.207711] ? _raw_spin_unlock+0x29/0x40 [ 1777.211850] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1777.216772] ? ion_system_contig_heap_create+0x130/0x130 [ 1777.222218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1777.227226] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1777.232058] ion_alloc+0x27a/0x810 [ 1777.235589] ? ion_dma_buf_release+0x40/0x40 [ 1777.239990] ? __might_fault+0x177/0x1b0 [ 1777.244042] ion_ioctl+0xea/0x1f0 [ 1777.247489] ? ion_query_heaps+0x360/0x360 [ 1777.251729] ? ion_query_heaps+0x360/0x360 [ 1777.255955] do_vfs_ioctl+0x75a/0xff0 [ 1777.259771] ? ioctl_preallocate+0x1a0/0x1a0 [ 1777.264176] ? lock_downgrade+0x740/0x740 [ 1777.268340] ? __fget+0x225/0x360 [ 1777.271785] ? do_vfs_ioctl+0xff0/0xff0 [ 1777.275758] ? security_file_ioctl+0x83/0xb0 [ 1777.280170] SyS_ioctl+0x7f/0xb0 [ 1777.283526] ? do_vfs_ioctl+0xff0/0xff0 [ 1777.287493] do_syscall_64+0x1d5/0x640 [ 1777.291376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1777.296554] RIP: 0033:0x466459 [ 1777.299731] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1777.307435] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1777.314696] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1777.321974] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1777.329237] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1777.336498] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1777.347393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.369671] 40391 total pagecache pages [ 1777.379749] 0 pages in swap cache [ 1777.389477] Swap cache stats: add 0, delete 0, find 0/0 [ 1777.399100] Free swap = 0kB [ 1777.402672] Total swap = 0kB [ 1777.408649] 2097051 pages RAM [ 1777.423057] oom_reaper: reaped process 7050 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1777.429050] 0 pages HighMem/MovableOnly [ 1777.444567] warn_alloc_show_mem: 3 callbacks suppressed [ 1777.444571] Mem-Info: [ 1777.449065] 363848 pages reserved [ 1777.455958] 0 pages cma reserved [ 1777.456243] active_anon:72028 inactive_anon:37175 isolated_anon:0 [ 1777.456243] active_file:1155 inactive_file:1783 isolated_file:0 [ 1777.456243] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1777.456243] slab_reclaimable:12478 slab_unreclaimable:127296 [ 1777.456243] mapped:45591 shmem:37639 pagetables:4862 bounce:0 [ 1777.456243] free:49845 free_pcp:84 free_cma:0 [ 1777.515493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.523109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.534875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.589100] Node 0 active_anon:285296kB inactive_anon:125972kB active_file:3916kB inactive_file:5064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157808kB dirty:0kB writeback:0kB shmem:127688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1777.596878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.673560] systemd-journald[7081]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1777.709832] Node 1 active_anon:2916kB inactive_anon:22728kB active_file:1104kB inactive_file:2268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24856kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1777.739938] device bridge_slave_1 left promiscuous mode [ 1777.773217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.822402] device bridge_slave_0 left promiscuous mode [ 1777.827996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.889057] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.917691] in:imklog invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1777.943363] device veth1_macvtap left promiscuous mode [ 1777.948691] device veth0_macvtap left promiscuous mode [ 1777.969071] in:imklog cpuset=/ mems_allowed=0-1 [ 1777.973784] CPU: 0 PID: 7084 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 1777.981141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1777.990493] Call Trace: [ 1777.993073] dump_stack+0x1b2/0x281 [ 1777.997136] dump_header+0x178/0x82f [ 1778.000844] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1778.005940] ? ___ratelimit+0x2cd/0x530 [ 1778.009923] oom_kill_process.cold+0x10/0xa40 [ 1778.015123] out_of_memory+0xe3e/0x1190 [ 1778.019106] ? oom_killer_disable+0x1c0/0x1c0 [ 1778.023589] ? mutex_trylock+0x152/0x1a0 [ 1778.027684] __alloc_pages_nodemask+0x23e1/0x2720 [ 1778.032524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1778.037355] ? mark_held_locks+0xa6/0xf0 [ 1778.041404] ? _raw_spin_unlock_irq+0x24/0x80 [ 1778.045892] ? __lock_acquire+0x5fc/0x3f20 [ 1778.050132] ? __schedule+0x893/0x1de0 [ 1778.054012] alloc_pages_vma+0xd2/0x6d0 [ 1778.057978] __handle_mm_fault+0x25fa/0x4620 [ 1778.062377] ? vm_insert_page+0x7c0/0x7c0 [ 1778.066528] ? rt_mutex_futex_unlock+0xc0/0xc0 [ 1778.071117] ? do_sched_setscheduler+0x15d/0x270 [ 1778.075876] ? mark_held_locks+0xa6/0xf0 [ 1778.079952] handle_mm_fault+0x455/0x9c0 [ 1778.084015] __do_page_fault+0x549/0xad0 [ 1778.088082] ? spurious_fault+0x640/0x640 [ 1778.092219] ? do_page_fault+0x60/0x500 [ 1778.096198] ? page_fault+0x2f/0x50 [ 1778.099828] page_fault+0x45/0x50 [ 1778.103268] RIP: 1c000078:0x7fb81c002e50 [ 1778.107310] RSP: 005c:0000000000002710 EFLAGS: 00000270 [ 1778.114769] syz-executor.4: [ 1778.138293] device veth1_vlan left promiscuous mode [ 1778.144857] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1778.148237] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1778.178614] Node 0 DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:285732kB inactive_anon:134104kB active_file:2264kB inactive_file:1660kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12032kB pagetables:16884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.184466] device veth0_vlan left promiscuous mode [ 1778.219031] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1778.224162] CPU: 1 PID: 7048 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1778.232052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1778.241417] Call Trace: [ 1778.244006] dump_stack+0x1b2/0x281 [ 1778.247631] warn_alloc.cold+0x96/0x1cc [ 1778.251792] ? zone_watermark_ok_safe+0x220/0x220 [ 1778.256641] __alloc_pages_nodemask+0x2127/0x2720 [ 1778.261487] ? lock_acquire+0x170/0x3f0 [ 1778.265473] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1778.270317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1778.275762] ? __mutex_unlock_slowpath+0x75/0x770 [ 1778.280601] alloc_pages_current+0x155/0x260 [ 1778.285004] ion_page_pool_alloc+0x118/0x1b0 [ 1778.290896] ion_system_heap_allocate+0x133/0x8c0 [ 1778.295734] ? _raw_spin_unlock+0x29/0x40 [ 1778.299901] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1778.304826] ? ion_system_contig_heap_create+0x130/0x130 [ 1778.310271] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1778.315281] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1778.320118] ion_alloc+0x27a/0x810 [ 1778.323666] ? ion_dma_buf_release+0x40/0x40 [ 1778.328070] ? __might_fault+0x177/0x1b0 [ 1778.332127] ion_ioctl+0xea/0x1f0 [ 1778.335573] ? ion_query_heaps+0x360/0x360 [ 1778.339802] ? ion_query_heaps+0x360/0x360 [ 1778.344032] do_vfs_ioctl+0x75a/0xff0 [ 1778.347835] ? ioctl_preallocate+0x1a0/0x1a0 [ 1778.352239] ? lock_downgrade+0x740/0x740 [ 1778.356392] ? __fget+0x225/0x360 [ 1778.359843] ? do_vfs_ioctl+0xff0/0xff0 [ 1778.363813] ? security_file_ioctl+0x83/0xb0 [ 1778.368220] SyS_ioctl+0x7f/0xb0 [ 1778.371599] ? do_vfs_ioctl+0xff0/0xff0 [ 1778.375579] do_syscall_64+0x1d5/0x640 [ 1778.379468] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1778.384652] RIP: 0033:0x466459 [ 1778.387849] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1778.395549] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1778.402808] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1778.410504] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1778.417762] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1778.425036] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1778.455023] lowmem_reserve[]: 0 0 0 0 0 [ 1778.460736] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.486365] lowmem_reserve[]: 0 0 0 0 0 [ 1778.490413] Node 1 Normal free:26284kB min:53696kB low:67120kB high:80544kB active_anon:2988kB inactive_anon:22728kB active_file:88kB inactive_file:128kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.501970] warn_alloc_show_mem: 2 callbacks suppressed [ 1778.501974] Mem-Info: [ 1778.519137] lowmem_reserve[]: 0 0 0 0 0 [ 1778.519160] Node 0 DMA: 12*4kB (UME) 3*8kB (UM) 4*16kB [ 1778.529440] active_anon:72181 inactive_anon:39208 isolated_anon:0 [ 1778.529440] active_file:52 inactive_file:29 isolated_file:1 [ 1778.529440] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1778.529440] slab_reclaimable:12511 slab_unreclaimable:126825 [ 1778.529440] mapped:43868 shmem:39687 pagetables:4855 bounce:0 [ 1778.529440] free:14673 free_pcp:94 free_cma:0 [ 1778.532100] (UME) [ 1778.537064] Node 0 active_anon:285736kB inactive_anon:134104kB active_file:136kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153540kB dirty:0kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1778.576913] 2*32kB (UM) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 1778.606234] Mem-Info: [ 1778.613940] Node 0 DMA32: 698*4kB (UME) 143*8kB (ME) 43*16kB (UME) 418*32kB (UME) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18192kB [ 1778.616682] active_anon:72181 inactive_anon:39208 isolated_anon:0 [ 1778.616682] active_file:52 inactive_file:29 isolated_file:1 [ 1778.616682] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1778.616682] slab_reclaimable:12511 slab_unreclaimable:126825 [ 1778.616682] mapped:43868 shmem:39687 pagetables:4855 bounce:0 [ 1778.616682] free:13743 free_pcp:0 free_cma:0 [ 1778.630352] Node 0 [ 1778.666619] Node 1 active_anon:2988kB inactive_anon:22728kB active_file:72kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:21832kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1778.678118] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1778.705364] Node 0 active_anon:285736kB inactive_anon:134104kB active_file:136kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153540kB dirty:0kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1778.706278] Node 1 [ 1778.745953] Node 1 active_anon:2988kB inactive_anon:22728kB active_file:72kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:21832kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1778.749177] Node 0 [ 1778.779501] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.789174] Normal: 84*4kB (UM) 44*8kB (ME) 17*16kB (UM) 22*32kB (UME) 1*64kB (M) 2*128kB (UM) 34*256kB (UM) 29*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26560kB [ 1778.812244] lowmem_reserve[]: [ 1778.825293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1778.825300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1778.825308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1778.825318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1778.828497] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.837459] 39761 total pagecache pages [ 1778.837471] 0 pages in swap cache [ 1778.837477] Swap cache stats: add 0, delete 0, find 0/0 [ 1778.837481] Free swap = 0kB [ 1778.837484] Total swap = 0kB [ 1778.837491] 2097051 pages RAM [ 1778.837498] 0 pages HighMem/MovableOnly [ 1778.850964] 0 [ 1778.869068] 363848 pages reserved [ 1778.899388] lowmem_reserve[]: [ 1778.916628] 0 pages cma reserved [ 1778.919014] 0 2717 2718 2718 2718 [ 1778.932667] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:285732kB inactive_anon:134104kB active_file:48kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12032kB pagetables:16884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.965218] 2717 2718 2718 2718 [ 1778.968698] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:285732kB inactive_anon:134104kB active_file:48kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12032kB pagetables:16884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.990296] lowmem_reserve[]: [ 1779.001836] lowmem_reserve[]: [ 1779.003795] 0 [ 1779.004947] 0 [ 1779.008046] 0 0 0 0 [ 1779.032772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1779.036535] 0 0 0 0 [ 1779.113993] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1779.216515] lowmem_reserve[]: 0 0 0 0 0 [ 1779.228687] Node 1 Normal free:26560kB min:53696kB low:67120kB high:80544kB active_anon:2988kB inactive_anon:22728kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1779.234762] lowmem_reserve[]: [ 1779.262121] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1779.262145] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1779.262169] CPU: 1 PID: 7047 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1779.282461] 0 [ 1779.289958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.289963] Call Trace: [ 1779.289985] dump_stack+0x1b2/0x281 [ 1779.290000] warn_alloc.cold+0x96/0x1cc [ 1779.290012] ? zone_watermark_ok_safe+0x220/0x220 [ 1779.290029] ? usleep_range+0x130/0x130 [ 1779.290041] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1779.296057] 0 [ 1779.301192] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1779.301203] ? run_timer_softirq+0x5a0/0x5a0 [ 1779.301221] __alloc_pages_nodemask+0x2127/0x2720 [ 1779.301239] ? lock_acquire+0x170/0x3f0 [ 1779.301254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1779.301265] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1779.301281] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1779.303967] syz-executor.0: [ 1779.308010] ? retint_kernel+0x2d/0x2d [ 1779.312027] syz-executor.2: [ 1779.316791] alloc_pages_current+0x155/0x260 [ 1779.327053] 0 [ 1779.327724] ion_page_pool_alloc+0x118/0x1b0 [ 1779.332755] page allocation failure: order:0 [ 1779.337118] ion_system_heap_allocate+0x133/0x8c0 [ 1779.348222] page allocation failure: order:0 [ 1779.350918] ? _raw_spin_unlock+0x29/0x40 [ 1779.350929] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1779.350938] ? ion_system_contig_heap_create+0x130/0x130 [ 1779.350954] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1779.350967] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1779.350978] ion_alloc+0x27a/0x810 [ 1779.355762] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1779.361210] ? ion_dma_buf_release+0x40/0x40 [ 1779.361222] ? __might_fault+0x177/0x1b0 [ 1779.361233] ion_ioctl+0xea/0x1f0 [ 1779.361241] ? ion_query_heaps+0x360/0x360 [ 1779.361251] ? cp_compat_stat+0x890/0x890 [ 1779.361259] ? ion_query_heaps+0x360/0x360 [ 1779.361268] do_vfs_ioctl+0x75a/0xff0 [ 1779.361280] ? ioctl_preallocate+0x1a0/0x1a0 [ 1779.361290] ? lock_downgrade+0x740/0x740 [ 1779.361302] ? __fget+0x225/0x360 [ 1779.361312] ? do_vfs_ioctl+0xff0/0xff0 [ 1779.361326] ? security_file_ioctl+0x83/0xb0 [ 1779.370795] 0 [ 1779.371239] SyS_ioctl+0x7f/0xb0 [ 1779.375643] 0 [ 1779.377459] ? do_vfs_ioctl+0xff0/0xff0 [ 1779.386125] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1779.386296] do_syscall_64+0x1d5/0x640 [ 1779.393224] Node 1 [ 1779.395517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1779.403826] (null) [ 1779.404661] RIP: 0033:0x466459 [ 1779.412163] (null) [ 1779.415110] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 [ 1779.424137] Normal free:26560kB min:53696kB low:67120kB high:80544kB active_anon:2988kB inactive_anon:22728kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1779.430729] ORIG_RAX: 0000000000000010 [ 1779.430735] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1779.430740] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1779.430745] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1779.430751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1779.430757] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1779.439031] syz-executor.0: [ 1779.448468] syz-executor.2 cpuset= [ 1779.454426] lowmem_reserve[]: [ 1779.458157] / [ 1779.467575] page allocation failure: order:0 [ 1779.477021] syz-executor.0 cpuset= [ 1779.484767] 0 [ 1779.487641] / [ 1779.489548] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1779.499747] lowmem_reserve[]: [ 1779.509018] 0 [ 1779.517680] mems_allowed=0-1 [ 1779.522121] 0 [ 1779.527503] CPU: 0 PID: 7050 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1779.563559] (null) [ 1779.574562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.574567] Call Trace: [ 1779.574588] dump_stack+0x1b2/0x281 [ 1779.574604] warn_alloc.cold+0x96/0x1cc [ 1779.574621] ? zone_watermark_ok_safe+0x220/0x220 [ 1779.581931] syz-executor.0 cpuset= [ 1779.589722] ? usleep_range+0x130/0x130 [ 1779.589732] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1779.589745] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1779.589757] ? run_timer_softirq+0x5a0/0x5a0 [ 1779.597020] / [ 1779.604293] __alloc_pages_nodemask+0x2127/0x2720 [ 1779.607336] 0 [ 1779.610811] ? lock_acquire+0x170/0x3f0 [ 1779.610828] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1779.613933] 0 [ 1779.615641] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1779.620075] mems_allowed=0-1 [ 1779.623563] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1779.634149] alloc_pages_current+0x155/0x260 [ 1779.637259] Node 0 [ 1779.639053] ion_page_pool_alloc+0x118/0x1b0 [ 1779.639065] ion_system_heap_allocate+0x133/0x8c0 [ 1779.639078] ? _raw_spin_unlock+0x29/0x40 [ 1779.659027] DMA: [ 1779.668343] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1779.679025] 12*4kB [ 1779.683644] ? ion_system_contig_heap_create+0x130/0x130 [ 1779.687162] (UME) [ 1779.691129] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1779.691147] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1779.691159] ion_alloc+0x27a/0x810 [ 1779.691173] ? ion_dma_buf_release+0x40/0x40 [ 1779.709024] 3*8kB [ 1779.712625] ? __might_fault+0x177/0x1b0 [ 1779.714398] (UM) [ 1779.718380] ion_ioctl+0xea/0x1f0 [ 1779.739022] 4*16kB [ 1779.742771] ? ion_query_heaps+0x360/0x360 [ 1779.745783] (UME) [ 1779.750291] ? ion_query_heaps+0x360/0x360 [ 1779.750302] do_vfs_ioctl+0x75a/0xff0 [ 1779.750315] ? ioctl_preallocate+0x1a0/0x1a0 [ 1779.750328] ? lock_downgrade+0x740/0x740 [ 1779.769043] 2*32kB [ 1779.773945] ? __fget+0x225/0x360 [ 1779.776066] (UM) [ 1779.781067] ? do_vfs_ioctl+0xff0/0xff0 [ 1779.781078] ? security_file_ioctl+0x83/0xb0 [ 1779.781088] SyS_ioctl+0x7f/0xb0 [ 1779.781097] ? do_vfs_ioctl+0xff0/0xff0 [ 1779.781109] do_syscall_64+0x1d5/0x640 [ 1779.809025] 2*64kB [ 1779.811931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1779.814071] (ME) [ 1779.818289] RIP: 0033:0x466459 [ 1779.829016] Mem-Info: [ 1779.830844] RSP: 002b:00007fa85c11a188 EFLAGS: 00000246 [ 1779.833076] active_anon:72181 inactive_anon:39208 isolated_anon:0 [ 1779.833076] active_file:67 inactive_file:0 isolated_file:0 [ 1779.833076] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1779.833076] slab_reclaimable:12511 slab_unreclaimable:126809 [ 1779.833076] mapped:43827 shmem:39687 pagetables:4855 bounce:0 [ 1779.833076] free:13894 free_pcp:30 free_cma:0 [ 1779.836574] ORIG_RAX: 0000000000000010 [ 1779.836583] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1779.838637] Node 0 active_anon:285736kB inactive_anon:134104kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153480kB dirty:0kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1779.842574] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1779.842579] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1779.842584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1779.842589] R13: 00007fff7edb3daf R14: 00007fa85c11a300 R15: 0000000000022000 [ 1779.848676] mems_allowed=0-1 [ 1779.862080] 3*128kB [ 1779.870608] 0 [ 1779.879222] CPU: 1 PID: 7040 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1779.973373] 0 [ 1779.980501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.980506] Call Trace: [ 1779.980528] dump_stack+0x1b2/0x281 [ 1779.980541] warn_alloc.cold+0x96/0x1cc [ 1779.980553] ? zone_watermark_ok_safe+0x220/0x220 [ 1779.980566] ? usleep_range+0x130/0x130 [ 1779.993314] 0 [ 1779.995682] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1779.997456] 0 [ 1780.006805] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1780.006816] ? run_timer_softirq+0x5a0/0x5a0 [ 1780.006833] __alloc_pages_nodemask+0x2127/0x2720 [ 1780.006861] ? lock_acquire+0x170/0x3f0 [ 1780.006876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1780.006886] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1780.006903] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1780.006915] ? retint_kernel+0x2d/0x2d [ 1780.039142] 0 [ 1780.039537] alloc_pages_current+0x155/0x260 [ 1780.048767] ion_page_pool_alloc+0x118/0x1b0 [ 1780.075960] Node 0 [ 1780.078060] ion_system_heap_allocate+0x133/0x8c0 [ 1780.089537] ? _raw_spin_unlock+0x29/0x40 [ 1780.093689] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1780.095884] DMA: [ 1780.098633] ? ion_system_contig_heap_create+0x130/0x130 [ 1780.098636] 12*4kB (UME) [ 1780.100690] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1780.100702] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1780.100713] ion_alloc+0x27a/0x810 [ 1780.100726] ? ion_dma_buf_release+0x40/0x40 [ 1780.100739] ? __might_fault+0x177/0x1b0 [ 1780.100750] ion_ioctl+0xea/0x1f0 [ 1780.134265] ? ion_query_heaps+0x360/0x360 [ 1780.135915] 3*8kB (UM) [ 1780.138497] ? ion_query_heaps+0x360/0x360 [ 1780.138505] 4*16kB [ 1780.141079] do_vfs_ioctl+0x75a/0xff0 [ 1780.141091] ? ioctl_preallocate+0x1a0/0x1a0 [ 1780.141101] ? lock_downgrade+0x740/0x740 [ 1780.141115] ? __fget+0x225/0x360 [ 1780.141125] ? do_vfs_ioctl+0xff0/0xff0 [ 1780.155901] (UME) [ 1780.159872] ? security_file_ioctl+0x83/0xb0 [ 1780.159884] SyS_ioctl+0x7f/0xb0 [ 1780.159892] ? do_vfs_ioctl+0xff0/0xff0 [ 1780.159904] do_syscall_64+0x1d5/0x640 [ 1780.159919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1780.163368] 2*32kB [ 1780.167333] RIP: 0033:0x466459 [ 1780.195577] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1780.203282] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1780.210544] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1780.216101] (UM) [ 1780.217806] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1780.217814] 2*64kB [ 1780.219852] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1780.219858] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1780.225820] (UME) [ 1780.235358] (ME) [ 1780.236713] 4*256kB [ 1780.250404] Node 1 active_anon:2988kB inactive_anon:22728kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1780.256338] CPU: 0 PID: 7066 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1780.280566] (UME) [ 1780.287765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1780.287775] 4*512kB [ 1780.289901] Call Trace: [ 1780.289922] dump_stack+0x1b2/0x281 [ 1780.289936] warn_alloc.cold+0x96/0x1cc [ 1780.289949] ? zone_watermark_ok_safe+0x220/0x220 [ 1780.299310] (UME) [ 1780.301601] ? usleep_range+0x130/0x130 [ 1780.304180] 3*1024kB [ 1780.307808] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1780.311795] Node 0 [ 1780.316589] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1780.318725] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1780.322670] ? run_timer_softirq+0x5a0/0x5a0 [ 1780.322688] __alloc_pages_nodemask+0x2127/0x2720 [ 1780.322706] ? lock_acquire+0x170/0x3f0 [ 1780.325101] (UME) [ 1780.330188] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1780.330198] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1780.330216] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1780.332425] 2*2048kB [ 1780.337439] alloc_pages_current+0x155/0x260 [ 1780.363325] lowmem_reserve[]: [ 1780.367674] ion_page_pool_alloc+0x118/0x1b0 [ 1780.372567] 0 [ 1780.376451] ion_system_heap_allocate+0x133/0x8c0 [ 1780.378592] 2717 [ 1780.383423] ? _raw_spin_unlock+0x29/0x40 [ 1780.383432] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1780.383442] ? ion_system_contig_heap_create+0x130/0x130 [ 1780.383457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1780.387929] 2718 [ 1780.393375] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1780.393388] ion_alloc+0x27a/0x810 [ 1780.393402] ? ion_dma_buf_release+0x40/0x40 [ 1780.393415] ? __might_fault+0x177/0x1b0 [ 1780.395825] (M) [ 1780.400206] ion_ioctl+0xea/0x1f0 [ 1780.400216] ? ion_query_heaps+0x360/0x360 [ 1780.400230] ? ion_query_heaps+0x360/0x360 [ 1780.403321] 2718 [ 1780.407709] do_vfs_ioctl+0x75a/0xff0 [ 1780.409514] 0*4096kB [ 1780.414312] ? ioctl_preallocate+0x1a0/0x1a0 [ 1780.416358] = 10952kB [ 1780.420521] ? lock_downgrade+0x740/0x740 [ 1780.420536] ? __fget+0x225/0x360 [ 1780.420545] ? do_vfs_ioctl+0xff0/0xff0 [ 1780.425993] 2718 [ 1780.431433] ? security_file_ioctl+0x83/0xb0 [ 1780.431444] SyS_ioctl+0x7f/0xb0 [ 1780.431453] ? do_vfs_ioctl+0xff0/0xff0 [ 1780.431465] do_syscall_64+0x1d5/0x640 [ 1780.438510] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1780.443390] Node 0 [ 1780.446881] RIP: 0033:0x466459 [ 1780.451317] Node 0 [ 1780.455321] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1780.457307] DMA32 free:18148kB min:36200kB low:45248kB high:54296kB active_anon:285732kB inactive_anon:134104kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12032kB pagetables:16884kB bounce:0kB free_pcp:148kB local_pcp:148kB free_cma:0kB [ 1780.460721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1780.460726] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1780.460731] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1780.460736] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1780.460741] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1780.478979] 3*128kB [ 1780.495846] DMA32: [ 1780.498184] (UME) [ 1780.498950] 703*4kB [ 1780.510479] 4*256kB [ 1780.512885] (UME) [ 1780.514593] (UME) [ 1780.519928] 146*8kB (UME) 43*16kB (UME) 416*32kB (UME) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 1780.519978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1780.520035] Node 1 Normal: 84*4kB (UM) 44*8kB (ME) 17*16kB (UM) 22*32kB (UME) 1*64kB (M) 2*128kB (UM) 34*256kB (UM) 29*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26560kB [ 1780.520110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.520116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.520121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.520128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.520132] 39721 total pagecache pages [ 1780.520141] 0 pages in swap cache [ 1780.520146] Swap cache stats: add 0, delete 0, find 0/0 [ 1780.520149] Free swap = 0kB [ 1780.520152] Total swap = 0kB [ 1780.520161] 2097051 pages RAM [ 1780.547396] 4*512kB [ 1780.570201] lowmem_reserve[]: [ 1780.579799] (UME) [ 1780.588348] 0 [ 1780.601493] 3*1024kB [ 1780.609869] 0 [ 1780.610685] (UME) [ 1780.616614] 0 [ 1780.617167] 2*2048kB [ 1780.635403] 0 pages HighMem/MovableOnly [ 1780.643699] (M) [ 1780.664826] 0 [ 1780.676589] 0*4096kB [ 1780.691588] 363848 pages reserved [ 1780.698354] = 10952kB [ 1780.710149] 0 [ 1780.716115] Node 0 [ 1780.723696] DMA32: [ 1780.729920] 0 pages cma reserved [ 1780.736655] 703*4kB [ 1780.738183] Out of memory (oom_kill_allocating_task): Kill process 7084 (in:imklog) score 0 or sacrifice child [ 1780.744259] (UME) [ 1780.745927] Node 0 [ 1780.748315] 146*8kB [ 1780.756942] Killed process 7082 (rsyslogd) total-vm:254332kB, anon-rss:412kB, file-rss:0kB, shmem-rss:0kB [ 1780.766735] Mem-Info: [ 1780.776760] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1780.777274] active_anon:72181 inactive_anon:39208 isolated_anon:0 [ 1780.777274] active_file:16 inactive_file:18 isolated_file:0 [ 1780.777274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1780.777274] slab_reclaimable:12511 slab_unreclaimable:126788 [ 1780.777274] mapped:43827 shmem:39687 pagetables:4855 bounce:0 [ 1780.777274] free:13915 free_pcp:37 free_cma:0 [ 1780.787029] lowmem_reserve[]: 0 0 0 0 0 [ 1780.787054] Node 1 Normal free:26560kB min:53696kB low:67120kB high:80544kB active_anon:2988kB inactive_anon:22728kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1780.787076] lowmem_reserve[]: 0 [ 1780.797785] (UME) [ 1780.827016] kworker/1:2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1780.859141] Node 0 active_anon:285336kB inactive_anon:134104kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153480kB dirty:0kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1780.891385] 0 [ 1780.914215] 43*16kB [ 1780.946105] Node 1 active_anon:2988kB inactive_anon:22728kB active_file:28kB inactive_file:1832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22928kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1780.966828] (null) [ 1780.999094] 0 [ 1781.000560] (UME) [ 1781.001267] 0 [ 1781.004046] 416*32kB [ 1781.007068] 0 [ 1781.008861] (UME) [ 1781.019063] , order=1, oom_score_adj=0 [ 1781.025218] kworker/1:2 cpuset=/ mems_allowed=0-1 [ 1781.040603] 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 1781.048470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1781.059523] CPU: 1 PID: 5503 Comm: kworker/1:2 Not tainted 4.14.229-syzkaller #0 [ 1781.067069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1781.076427] Workqueue: events cgroup1_release_agent [ 1781.081441] Call Trace: [ 1781.084029] dump_stack+0x1b2/0x281 [ 1781.087654] dump_header+0x178/0x82f [ 1781.091364] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1781.096462] ? ___ratelimit+0x2cd/0x530 [ 1781.101222] oom_kill_process.cold+0x10/0xa40 [ 1781.102874] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1781.105728] ? lock_downgrade+0x740/0x740 [ 1781.105743] out_of_memory+0x2dc/0x1190 [ 1781.141283] ? oom_killer_disable+0x1c0/0x1c0 [ 1781.145777] ? mutex_trylock+0x152/0x1a0 [ 1781.149839] __alloc_pages_nodemask+0x23e1/0x2720 [ 1781.153181] Node 1 Normal: 2*4kB [ 1781.154691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1781.154693] (UM) 2*8kB [ 1781.158143] ? mark_held_locks+0xa6/0xf0 [ 1781.169618] ? cache_grow_begin+0x3f/0x700 [ 1781.172879] (UE) 0*16kB [ 1781.173851] cache_grow_begin+0x91/0x700 [ 1781.173865] fallback_alloc+0x207/0x2c0 [ 1781.176520] 1*32kB [ 1781.180660] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1781.180672] cgroup1_release_agent+0xa1/0x250 [ 1781.180679] ? cgroup1_check_for_release+0x1b0/0x1b0 [ 1781.180695] ? lock_acquire+0x170/0x3f0 [ 1781.180707] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1781.180718] process_one_work+0x793/0x14a0 [ 1781.214782] ? work_busy+0x320/0x320 [ 1781.218507] ? worker_thread+0x158/0xff0 [ 1781.219043] (E) 2235*64kB [ 1781.222584] ? _raw_spin_unlock_irq+0x24/0x80 [ 1781.222596] worker_thread+0x5cc/0xff0 [ 1781.225442] (UM) [ 1781.229930] ? rescuer_thread+0xc80/0xc80 [ 1781.229938] kthread+0x30d/0x420 [ 1781.229944] ? kthread_create_on_node+0xd0/0xd0 [ 1781.229953] ret_from_fork+0x24/0x30 [ 1781.238005] Node 0 DMA: 12*4kB (UME) 3*8kB (UM) 4*16kB (UME) 2*32kB (UM) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 1781.283447] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1781.287587] Node 0 DMA32: [ 1781.288527] Node 0 DMA32 free:28684kB min:36200kB low:45248kB high:54296kB active_anon:285332kB inactive_anon:134104kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11904kB pagetables:16736kB bounce:0kB free_pcp:740kB local_pcp:16kB free_cma:0kB [ 1781.292053] 685*4kB (UME) 149*8kB (UME) 45*16kB (UME) 421*32kB (UME) 49*64kB (UM) 6*128kB (U) 18*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 28684kB [ 1781.343987] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1781.354818] Node 1 Normal: 1*4kB (U) 1*8kB (E) 0*16kB 3*32kB (UME) 2049*64kB (U) 83*128kB (UM) 88*256kB (UM) 35*512kB (UM) 215*1024kB (UM) 1*2048kB (U) 0*4096kB = 404524kB [ 1781.370527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.379109] 83*128kB (UM) 87*256kB (U) 35*512kB (UM) 214*1024kB (U) 2*2048kB (U) 0*4096kB = 417144kB [ 1781.379479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.388707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.397353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.397361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.397365] 40627 total pagecache pages [ 1781.397374] 0 pages in swap cache [ 1781.397379] Swap cache stats: add 0, delete 0, find 0/0 [ 1781.397386] Free swap = 0kB [ 1781.440887] Mem-Info: [ 1781.445086] active_anon:72081 inactive_anon:39208 isolated_anon:0 [ 1781.445086] active_file:192 inactive_file:727 isolated_file:0 [ 1781.445086] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1781.445086] slab_reclaimable:12511 slab_unreclaimable:126519 [ 1781.445086] mapped:44474 shmem:39687 pagetables:4818 bounce:0 [ 1781.445086] free:109229 free_pcp:258 free_cma:0 [ 1781.463356] lowmem_reserve[]: [ 1781.478948] Total swap = 0kB [ 1781.485120] 2097051 pages RAM [ 1781.499089] 0 pages HighMem/MovableOnly [ 1781.502827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.503078] 363848 pages reserved [ 1781.524637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.539049] 0 pages cma reserved [ 1781.542831] 0 0 0 0 0 [ 1781.548609] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1781.559046] Node 0 active_anon:285336kB inactive_anon:134104kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153480kB dirty:0kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 217088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1781.600539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.631394] 40738 total pagecache pages [ 1781.635435] 0 pages in swap cache [ 1781.652134] Swap cache stats: add 0, delete 0, find 0/0 [ 1781.658008] Free swap = 0kB [ 1781.671664] lowmem_reserve[]: 0 0 0 0 0 [ 1781.675707] Node 1 Normal free:367628kB min:53696kB low:67120kB high:80544kB active_anon:2988kB inactive_anon:22728kB active_file:832kB inactive_file:3068kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2536kB bounce:0kB free_pcp:176kB local_pcp:120kB free_cma:0kB [ 1781.709415] Node 1 active_anon:2988kB inactive_anon:22728kB active_file:832kB inactive_file:3068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24616kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1781.719065] Total swap = 0kB [ 1781.744095] 2097051 pages RAM [ 1781.749879] 0 pages HighMem/MovableOnly [ 1781.753853] 363848 pages reserved [ 1781.757301] 0 pages cma reserved [ 1781.772901] lowmem_reserve[]: 0 0 0 0 0 [ 1781.776926] Node 0 DMA: 12*4kB (UME) 3*8kB (UM) 4*16kB (UME) 2*32kB (UM) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 1781.779058] Node 0 [ 1781.813235] Node 0 DMA32: 717*4kB (UME) 300*8kB (UME) 202*16kB (UME) 489*32kB (UME) 78*64kB (UM) 6*128kB (U) 18*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 36564kB [ 1781.829077] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1781.835244] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1781.881960] Bluetooth: hci3 command 0x0406 tx timeout [ 1781.900382] Node 1 Normal: 1*4kB (U) 3*8kB (UME) 0*16kB 3*32kB (UME) 1406*64kB (U) 83*128kB (UM) 87*256kB (U) 35*512kB (UM) 215*1024kB (UM) 1*2048kB (U) 0*4096kB = 363132kB [ 1781.909344] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1781.918733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.929035] Node 0 DMA32 free:36348kB min:36200kB low:45248kB high:54296kB active_anon:285332kB inactive_anon:134104kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11904kB pagetables:16736kB bounce:0kB free_pcp:888kB local_pcp:668kB free_cma:0kB [ 1781.933915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.992982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.029045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.033365] lowmem_reserve[]: 0 0 0 [ 1782.037673] 40738 total pagecache pages [ 1782.037683] 0 pages in swap cache [ 1782.042339] 0 [ 1782.045460] Swap cache stats: add 0, delete 0, find 0/0 [ 1782.048826] 0 [ 1782.069042] Free swap = 0kB [ 1782.073868] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.073901] Total swap = 0kB [ 1782.129156] 2097051 pages RAM [ 1782.129548] lowmem_reserve[]: [ 1782.132337] 0 pages HighMem/MovableOnly [ 1782.132345] 0 [ 1782.135428] 363848 pages reserved [ 1782.135435] 0 pages cma reserved [ 1782.149028] 0 0 0 0 [ 1782.151370] Node 1 Normal free:290296kB min:53696kB low:67120kB high:80544kB active_anon:2988kB inactive_anon:22728kB active_file:872kB inactive_file:3092kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2536kB bounce:0kB free_pcp:288kB local_pcp:132kB free_cma:0kB [ 1782.219153] lowmem_reserve[]: 0 0 0 0 0 [ 1782.223175] Node 0 DMA: 13*4kB (UME) 3*8kB (UM) 4*16kB (UME) 2*32kB (UM) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10956kB [ 1782.244641] Node 0 DMA32: 772*4kB (UME) 226*8kB (UME) 146*16kB (UME) 503*32kB (UME) 95*64kB (UM) 6*128kB (U) 18*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 36832kB [ 1782.293204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1782.313092] Node 1 Normal: 0*4kB 3*8kB (UME) 1*16kB (U) 3*32kB (UME) 0*64kB 2*128kB (UM) 1*256kB (U) 22*512kB (UM) 215*1024kB (UM) 1*2048kB (U) 0*4096kB = 234120kB [ 1782.349069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.358030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.411603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.433486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.448055] 40773 total pagecache pages [ 1782.452378] 0 pages in swap cache [ 1782.455832] Swap cache stats: add 0, delete 0, find 0/0 [ 1782.466690] Free swap = 0kB [ 1782.469866] Total swap = 0kB [ 1782.472988] 2097051 pages RAM [ 1782.476187] 0 pages HighMem/MovableOnly [ 1782.486794] 363848 pages reserved [ 1782.491219] 0 pages cma reserved [ 1782.495564] Out of memory: Kill process 5317 (syz-executor.0) score 1005 or sacrifice child [ 1782.510789] Killed process 5317 (syz-executor.0) total-vm:93384kB, anon-rss:2208kB, file-rss:34820kB, shmem-rss:0kB [ 1782.544253] device hsr_slave_1 left promiscuous mode [ 1782.562514] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1782.565936] oom_reaper: reaped process 5317 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1782.599024] device hsr_slave_0 left promiscuous mode [ 1782.656572] systemd[1]: rsyslog.service: Unit entered failed state. 04:33:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 04:33:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', r1) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:33:19 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x2000, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x181542, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3ff, 0x2}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x4, "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", 0x63, 0x7, 0x73, 0x5, 0x54, 0xf, 0x2c}}}, 0x128) [ 1782.719088] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1782.739718] team0 (unregistering): Port device team_slave_1 removed [ 1782.798651] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1782.807644] team0 (unregistering): Port device team_slave_0 removed [ 1782.850053] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1782.862215] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1782.874182] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1782.919559] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1782.927130] systemd[1]: Stopped System Logging Service. [ 1783.083597] bond0 (unregistering): Released all slaves [ 1783.090477] systemd[1]: Starting System Logging Service... [ 1783.839103] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1783.889053] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1783.894222] CPU: 0 PID: 7094 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1783.902017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1783.911375] Call Trace: [ 1783.913962] dump_stack+0x1b2/0x281 [ 1783.917590] warn_alloc.cold+0x96/0x1cc [ 1783.921563] ? zone_watermark_ok_safe+0x220/0x220 [ 1783.926413] __alloc_pages_nodemask+0x2127/0x2720 [ 1783.931279] ? lock_acquire+0x170/0x3f0 [ 1783.935267] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1783.940819] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1783.946621] ? __mutex_unlock_slowpath+0x75/0x770 [ 1783.951465] alloc_pages_current+0x155/0x260 [ 1783.955878] ion_page_pool_alloc+0x118/0x1b0 [ 1783.960283] ion_system_heap_allocate+0x133/0x8c0 [ 1783.965120] ? ion_alloc+0x187/0x810 [ 1783.968932] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1783.974392] ? ion_system_contig_heap_create+0x130/0x130 [ 1783.979852] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1783.984864] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1783.989699] ion_alloc+0x204/0x810 [ 1783.993237] ? ion_dma_buf_release+0x40/0x40 [ 1783.997640] ? __might_fault+0x177/0x1b0 [ 1784.001696] ion_ioctl+0xea/0x1f0 [ 1784.005141] ? ion_query_heaps+0x360/0x360 [ 1784.009389] ? cp_compat_stat+0x890/0x890 [ 1784.013542] ? ion_query_heaps+0x360/0x360 [ 1784.017786] do_vfs_ioctl+0x75a/0xff0 [ 1784.021584] ? ioctl_preallocate+0x1a0/0x1a0 [ 1784.025988] ? lock_downgrade+0x740/0x740 [ 1784.031700] ? __fget+0x225/0x360 [ 1784.035159] ? do_vfs_ioctl+0xff0/0xff0 [ 1784.039580] ? security_file_ioctl+0x83/0xb0 [ 1784.044856] SyS_ioctl+0x7f/0xb0 [ 1784.048344] ? do_vfs_ioctl+0xff0/0xff0 [ 1784.052498] do_syscall_64+0x1d5/0x640 [ 1784.056385] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1784.061762] RIP: 0033:0x466459 [ 1784.064953] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1784.072654] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1784.079921] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1784.087200] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1784.094479] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1784.101738] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1784.345944] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1784.394120] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1784.399031] systemd[1]: Started System Logging Service. [ 1784.419065] CPU: 0 PID: 7091 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1784.427251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.436628] Call Trace: [ 1784.439234] dump_stack+0x1b2/0x281 [ 1784.442868] warn_alloc.cold+0x96/0x1cc [ 1784.446840] ? try_to_compact_pages+0x70/0x860 [ 1784.451434] ? zone_watermark_ok_safe+0x220/0x220 [ 1784.456292] __alloc_pages_nodemask+0x2127/0x2720 [ 1784.461144] ? lock_acquire+0x170/0x3f0 [ 1784.465130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1784.469983] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1784.475436] ? __mutex_unlock_slowpath+0x75/0x770 [ 1784.480308] alloc_pages_current+0x155/0x260 [ 1784.484723] ion_page_pool_alloc+0x118/0x1b0 [ 1784.489221] ion_system_heap_allocate+0x133/0x8c0 [ 1784.494063] ? ion_alloc+0x187/0x810 [ 1784.497781] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1784.503229] ? ion_system_contig_heap_create+0x130/0x130 [ 1784.508674] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1784.513697] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1784.514537] warn_alloc_show_mem: 2 callbacks suppressed [ 1784.514540] Mem-Info: [ 1784.518534] ion_alloc+0x204/0x810 [ 1784.518550] ? ion_dma_buf_release+0x40/0x40 [ 1784.518562] ? __might_fault+0x177/0x1b0 [ 1784.534058] active_anon:71819 inactive_anon:39208 isolated_anon:0 [ 1784.534058] active_file:465 inactive_file:969 isolated_file:17 [ 1784.534058] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1784.534058] slab_reclaimable:12446 slab_unreclaimable:127885 [ 1784.534058] mapped:44937 shmem:39687 pagetables:4754 bounce:0 [ 1784.534058] free:32697 free_pcp:130 free_cma:0 [ 1784.534224] ion_ioctl+0xea/0x1f0 [ 1784.542734] Node 0 active_anon:283592kB inactive_anon:134104kB active_file:1304kB inactive_file:3404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157004kB dirty:0kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1784.571870] ? ion_query_heaps+0x360/0x360 [ 1784.571883] ? ion_query_heaps+0x360/0x360 [ 1784.571894] do_vfs_ioctl+0x75a/0xff0 [ 1784.571904] ? ioctl_preallocate+0x1a0/0x1a0 [ 1784.571914] ? lock_downgrade+0x740/0x740 [ 1784.571927] ? __fget+0x225/0x360 [ 1784.571939] ? do_vfs_ioctl+0xff0/0xff0 [ 1784.606153] Node 1 active_anon:3684kB inactive_anon:22728kB active_file:556kB inactive_file:472kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:22744kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1784.607976] ? security_file_ioctl+0x83/0xb0 [ 1784.607993] SyS_ioctl+0x7f/0xb0 [ 1784.618882] Node 0 [ 1784.620424] ? do_vfs_ioctl+0xff0/0xff0 [ 1784.620437] do_syscall_64+0x1d5/0x640 [ 1784.620454] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1784.620463] RIP: 0033:0x466459 [ 1784.620471] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 [ 1784.627204] DMA free:11100kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1784.628033] ORIG_RAX: 0000000000000010 [ 1784.628042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1784.637574] lowmem_reserve[]: [ 1784.659326] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1784.659331] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1784.659336] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1784.659341] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1784.769649] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1784.807699] systemd-journal cpuset=/ mems_allowed=0-1 [ 1784.813013] CPU: 0 PID: 7081 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1784.820914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.830266] Call Trace: [ 1784.832861] dump_stack+0x1b2/0x281 [ 1784.836502] dump_header+0x178/0x82f [ 1784.840232] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1784.845335] ? ___ratelimit+0x2cd/0x530 [ 1784.849319] oom_kill_process.cold+0x10/0xa40 [ 1784.853829] out_of_memory+0xe3e/0x1190 [ 1784.857810] ? oom_killer_disable+0x1c0/0x1c0 [ 1784.862307] ? mutex_trylock+0x152/0x1a0 [ 1784.866394] __alloc_pages_nodemask+0x23e1/0x2720 [ 1784.871256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1784.876097] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1784.881469] ? cache_grow_begin+0x3f/0x700 [ 1784.885704] cache_grow_begin+0x91/0x700 [ 1784.889769] fallback_alloc+0x207/0x2c0 [ 1784.893838] kmem_cache_alloc+0x1e5/0x3c0 [ 1784.897999] getname_flags+0xc8/0x550 [ 1784.901799] user_path_at_empty+0x2a/0x50 [ 1784.905941] SyS_faccessat+0x21b/0x680 [ 1784.909824] ? SyS_fallocate+0x80/0x80 [ 1784.913861] ? do_syscall_64+0x4c/0x640 [ 1784.917828] ? SyS_faccessat+0x680/0x680 [ 1784.921904] do_syscall_64+0x1d5/0x640 [ 1784.925791] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1784.930972] RIP: 0033:0x7f3bd96e89c7 [ 1784.934675] RSP: 002b:00007ffee026d9a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1784.942378] RAX: ffffffffffffffda RBX: 00007ffee02708c0 RCX: 00007f3bd96e89c7 [ 1784.949678] RDX: 00007f3bda159a00 RSI: 0000000000000000 RDI: 000055b7b038a9a3 [ 1784.956947] RBP: 00007ffee026d9e0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.964213] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1784.971483] R13: 0000000000000000 R14: 00007ffee02708c0 R15: 00007ffee026ded0 [ 1784.973178] 0 2717 2718 2718 2718 [ 1785.015218] Node 0 DMA32 free:146584kB min:36200kB low:45248kB high:54296kB active_anon:283828kB inactive_anon:134104kB active_file:136kB inactive_file:1220kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11872kB pagetables:16548kB bounce:0kB free_pcp:820kB local_pcp:620kB free_cma:0kB [ 1785.134457] lowmem_reserve[]: 0 0 0 0 0 [ 1785.146324] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.179028] Mem-Info: [ 1785.181467] active_anon:71886 inactive_anon:39208 isolated_anon:0 [ 1785.181467] active_file:166 inactive_file:512 isolated_file:0 [ 1785.181467] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1785.181467] slab_reclaimable:12460 slab_unreclaimable:127702 [ 1785.181467] mapped:44468 shmem:39687 pagetables:4760 bounce:0 [ 1785.181467] free:39311 free_pcp:397 free_cma:0 [ 1785.238094] lowmem_reserve[]: 0 0 0 0 0 [ 1785.254825] Node 1 Normal free:111668kB min:53696kB low:67120kB high:80544kB active_anon:3684kB inactive_anon:22728kB active_file:512kB inactive_file:400kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2476kB bounce:0kB free_pcp:732kB local_pcp:712kB free_cma:0kB [ 1785.289339] Node 0 active_anon:283860kB inactive_anon:134104kB active_file:152kB inactive_file:1648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155248kB dirty:28kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1785.354442] lowmem_reserve[]: 0 0 0 0 0 [ 1785.367442] Node 0 DMA: 3*4kB (UME) 2*8kB (UM) 14*16kB (UME) 24*32kB (UM) 4*64kB (UME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11132kB [ 1785.369081] Node 1 active_anon:3684kB inactive_anon:22728kB active_file:512kB inactive_file:400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22624kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1785.424440] Node 0 DMA32: 219*4kB (ME) 158*8kB (ME) 137*16kB (UME) 355*32kB (UME) 628*64kB (UM) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57164kB [ 1785.478862] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1785.499314] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.541045] Node 1 Normal: 85*4kB (M) 93*8kB (UME) 53*16kB (M) 229*32kB (UME) 753*64kB (UM) 71*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 66540kB [ 1785.579061] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1785.584123] Node 0 DMA32 free:34308kB min:36200kB low:45248kB high:54296kB active_anon:283856kB inactive_anon:134104kB active_file:124kB inactive_file:36kB unevictable:0kB writepending:28kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11872kB pagetables:16564kB bounce:0kB free_pcp:776kB local_pcp:128kB free_cma:0kB [ 1785.604302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.692430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.693635] lowmem_reserve[]: 0 0 0 0 0 [ 1785.723094] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.735568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.824787] lowmem_reserve[]: 0 0 0 0 0 [ 1785.829309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.839982] 39926 total pagecache pages [ 1785.849081] Node 1 Normal free:57828kB min:53696kB low:67120kB high:80544kB active_anon:3684kB inactive_anon:22728kB active_file:512kB inactive_file:380kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2476kB bounce:0kB free_pcp:1064kB local_pcp:412kB free_cma:0kB [ 1785.859033] 0 pages in swap cache [ 1785.959371] Swap cache stats: add 0, delete 0, find 0/0 [ 1785.974689] lowmem_reserve[]: 0 0 0 0 0 [ 1785.976475] Free swap = 0kB [ 1785.978704] Node 0 DMA: 5*4kB (UME) 3*8kB (UM) 4*16kB (UME) 7*32kB (UM) 12*64kB (UME) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11084kB [ 1785.992701] Total swap = 0kB [ 1786.019352] 2097051 pages RAM [ 1786.032522] 0 pages HighMem/MovableOnly [ 1786.063390] 363848 pages reserved [ 1786.066882] 0 pages cma reserved [ 1786.072318] Node 0 DMA32: 1528*4kB (UME) 168*8kB (UME) 395*16kB (UME) 178*32kB (UME) 313*64kB (UM) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40784kB [ 1786.112794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1786.139065] Node 1 Normal: 113*4kB (M) 1552*8kB (UME) 129*16kB (UM) 125*32kB (UME) 706*64kB (UM) 77*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 73972kB [ 1786.181759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.232378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.274955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.300003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.308598] 40010 total pagecache pages [ 1786.326334] 0 pages in swap cache [ 1786.329908] Swap cache stats: add 0, delete 0, find 0/0 [ 1786.335270] Free swap = 0kB [ 1786.338280] Total swap = 0kB [ 1786.341496] 2097051 pages RAM [ 1786.344595] 0 pages HighMem/MovableOnly [ 1786.348563] 363848 pages reserved [ 1786.352342] 0 pages cma reserved [ 1786.355716] Out of memory (oom_kill_allocating_task): Kill process 7081 (systemd-journal) score 0 or sacrifice child [ 1786.366793] Killed process 7081 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:84kB, shmem-rss:1616kB [ 1786.407022] oom_reaper: reaped process 7081 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1616kB [ 1786.626500] oom_reaper: reaped process 7091 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1786.661240] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1786.669092] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1786.691871] in:imklog cpuset=/ mems_allowed=0-1 [ 1786.696578] CPU: 1 PID: 7102 Comm: in:imklog Not tainted 4.14.229-syzkaller #0 [ 1786.703076] syz-executor.5 cpuset= [ 1786.703935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.703942] / [ 1786.707462] Call Trace: [ 1786.721371] dump_stack+0x1b2/0x281 [ 1786.725006] dump_header+0x178/0x82f [ 1786.728722] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1786.728906] mems_allowed=0-1 [ 1786.733948] ? ___ratelimit+0x2cd/0x530 [ 1786.733959] oom_kill_process.cold+0x10/0xa40 [ 1786.733978] out_of_memory+0xe3e/0x1190 [ 1786.733990] ? oom_killer_disable+0x1c0/0x1c0 [ 1786.733997] ? mutex_trylock+0x152/0x1a0 [ 1786.734007] __alloc_pages_nodemask+0x23e1/0x2720 [ 1786.734028] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1786.734052] alloc_pages_current+0x155/0x260 [ 1786.772269] filemap_fault+0x11a1/0x1ad0 [ 1786.776329] ext4_filemap_fault+0x84/0xb0 [ 1786.780469] __do_fault+0xfa/0x380 [ 1786.784009] __handle_mm_fault+0x2497/0x4620 [ 1786.788416] ? vm_insert_page+0x7c0/0x7c0 [ 1786.792559] ? lock_downgrade+0x740/0x740 [ 1786.796699] ? mark_held_locks+0xa6/0xf0 [ 1786.800754] handle_mm_fault+0x455/0x9c0 [ 1786.804815] __do_page_fault+0x549/0xad0 [ 1786.808878] ? spurious_fault+0x640/0x640 [ 1786.813014] ? do_page_fault+0x60/0x500 [ 1786.817005] ? page_fault+0x2f/0x50 [ 1786.820641] page_fault+0x45/0x50 [ 1786.824090] RIP: 1fa0:0x1f9f [ 1786.827097] RSP: 0000:00005582e0e999d0 EFLAGS: 7fc6764b8da0 [ 1786.828595] CPU: 0 PID: 7091 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1786.831434] syz-executor.4: [ 1786.834336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.854470] Call Trace: [ 1786.857061] dump_stack+0x1b2/0x281 [ 1786.857813] page allocation failure: order:0 [ 1786.860693] warn_alloc.cold+0x96/0x1cc [ 1786.860707] ? zone_watermark_ok_safe+0x220/0x220 [ 1786.860717] ? usleep_range+0x130/0x130 [ 1786.860729] ? try_to_free_pages+0x23f/0x6e0 [ 1786.865128] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1786.869093] ? _find_next_bit+0xdb/0x100 [ 1786.869104] ? run_timer_softirq+0x5a0/0x5a0 [ 1786.869122] __alloc_pages_nodemask+0x2127/0x2720 [ 1786.873961] (null) [ 1786.877928] ? lock_acquire+0x170/0x3f0 [ 1786.882339] syz-executor.4 cpuset= [ 1786.889396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1786.889408] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1786.889425] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1786.893483] / [ 1786.897900] alloc_pages_current+0x155/0x260 [ 1786.902742] mems_allowed=0-1 [ 1786.904847] ion_page_pool_alloc+0x118/0x1b0 [ 1786.940629] ion_system_heap_allocate+0x133/0x8c0 [ 1786.945464] ? ion_alloc+0x187/0x810 [ 1786.949282] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1786.954727] ? ion_system_contig_heap_create+0x130/0x130 [ 1786.960181] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1786.965189] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1786.970041] ion_alloc+0x204/0x810 [ 1786.973583] ? ion_dma_buf_release+0x40/0x40 [ 1786.977983] ? __might_fault+0x177/0x1b0 [ 1786.982035] ion_ioctl+0xea/0x1f0 [ 1786.985476] ? ion_query_heaps+0x360/0x360 [ 1786.989019] Mem-Info: [ 1786.989728] ? ion_query_heaps+0x360/0x360 [ 1786.992151] active_anon:71764 inactive_anon:39208 isolated_anon:0 [ 1786.992151] active_file:31 inactive_file:8 isolated_file:0 [ 1786.992151] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1786.992151] slab_reclaimable:12460 slab_unreclaimable:127571 [ 1786.992151] mapped:43550 shmem:39687 pagetables:4760 bounce:0 [ 1786.992151] free:13937 free_pcp:0 free_cma:0 [ 1786.996372] do_vfs_ioctl+0x75a/0xff0 [ 1787.033217] ? ioctl_preallocate+0x1a0/0x1a0 [ 1787.037619] ? lock_downgrade+0x740/0x740 [ 1787.041785] ? __fget+0x225/0x360 [ 1787.045230] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.049196] ? security_file_ioctl+0x83/0xb0 [ 1787.053598] SyS_ioctl+0x7f/0xb0 [ 1787.056954] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.060933] do_syscall_64+0x1d5/0x640 [ 1787.064816] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1787.069042] Node 0 active_anon:283472kB inactive_anon:134104kB active_file:12kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152216kB dirty:16kB writeback:0kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.070609] RIP: 0033:0x466459 [ 1787.101900] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.109600] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1787.116860] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1787.124118] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1787.129041] Node 1 active_anon:3584kB inactive_anon:22728kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21984kB dirty:0kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.131378] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1787.131387] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1787.173062] CPU: 1 PID: 7048 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1787.180859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1787.190217] Call Trace: [ 1787.192809] dump_stack+0x1b2/0x281 [ 1787.196439] warn_alloc.cold+0x96/0x1cc [ 1787.197986] warn_alloc_show_mem: 1 callbacks suppressed [ 1787.197990] Mem-Info: [ 1787.200410] ? zone_watermark_ok_safe+0x220/0x220 [ 1787.200420] ? usleep_range+0x130/0x130 [ 1787.200429] ? try_to_free_pages+0x23f/0x6e0 [ 1787.200440] ? _find_next_bit+0xdb/0x100 [ 1787.200450] ? run_timer_softirq+0x5a0/0x5a0 [ 1787.200467] __alloc_pages_nodemask+0x2127/0x2720 [ 1787.200485] ? lock_acquire+0x170/0x3f0 [ 1787.200500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1787.200513] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1787.216686] active_anon:71765 inactive_anon:39207 isolated_anon:0 [ 1787.216686] active_file:2 inactive_file:18 isolated_file:0 [ 1787.216686] unevictable:0 dirty:0 writeback:18 unstable:0 [ 1787.216686] slab_reclaimable:12460 slab_unreclaimable:127425 [ 1787.216686] mapped:43526 shmem:39687 pagetables:4736 bounce:0 [ 1787.216686] free:13986 free_pcp:21 free_cma:0 [ 1787.217060] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1787.221502] Node 0 active_anon:283476kB inactive_anon:134100kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152200kB dirty:0kB writeback:72kB shmem:135880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.225511] alloc_pages_current+0x155/0x260 [ 1787.240348] Node 1 active_anon:3584kB inactive_anon:22728kB active_file:40kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21904kB dirty:8kB writeback:0kB shmem:22868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.243539] ion_page_pool_alloc+0x118/0x1b0 [ 1787.248024] Node 0 [ 1787.281261] ion_system_heap_allocate+0x133/0x8c0 [ 1787.281275] ? _raw_spin_unlock+0x29/0x40 [ 1787.281283] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1787.281292] ? ion_system_contig_heap_create+0x130/0x130 [ 1787.281302] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1787.281314] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1787.281323] ion_alloc+0x27a/0x810 [ 1787.281335] ? ion_dma_buf_release+0x40/0x40 [ 1787.281347] ? __might_fault+0x177/0x1b0 [ 1787.281359] ion_ioctl+0xea/0x1f0 [ 1787.281368] ? ion_query_heaps+0x360/0x360 [ 1787.281380] ? ion_query_heaps+0x360/0x360 [ 1787.281391] do_vfs_ioctl+0x75a/0xff0 [ 1787.281402] ? ioctl_preallocate+0x1a0/0x1a0 [ 1787.281411] ? lock_downgrade+0x740/0x740 [ 1787.281425] ? __fget+0x225/0x360 [ 1787.281433] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.281445] ? security_file_ioctl+0x83/0xb0 [ 1787.281457] SyS_ioctl+0x7f/0xb0 [ 1787.297197] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.315443] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.315458] do_syscall_64+0x1d5/0x640 [ 1787.315471] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1787.315480] RIP: 0033:0x466459 [ 1787.315484] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.315493] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1787.315498] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1787.315503] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1787.315508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1787.315513] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1787.322828] Node 0 [ 1787.357689] lowmem_reserve[]: [ 1787.366162] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.378456] 0 [ 1787.385694] lowmem_reserve[]: [ 1787.387996] 2717 [ 1787.392484] 0 2717 2718 2718 2718 [ 1787.392503] Node 0 DMA32 free:18528kB min:36200kB low:45248kB high:54296kB active_anon:283464kB inactive_anon:134100kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11872kB pagetables:16468kB bounce:0kB free_pcp:104kB local_pcp:16kB free_cma:0kB [ 1787.392523] lowmem_reserve[]: 0 0 0 0 0 [ 1787.392543] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.392564] lowmem_reserve[]: [ 1787.406339] 2718 [ 1787.413038] 0 [ 1787.416832] 2718 [ 1787.424789] 0 [ 1787.436266] 2718 [ 1787.464525] 0 [ 1787.478956] Node 0 [ 1787.499022] 0 [ 1787.559061] DMA32 free:72260kB min:36200kB low:45248kB high:54296kB active_anon:283464kB inactive_anon:134100kB active_file:28kB inactive_file:328kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:11872kB pagetables:16468kB bounce:0kB free_pcp:104kB local_pcp:812kB free_cma:0kB [ 1787.681160] lowmem_reserve[]: 0 0 0 0 0 [ 1787.689102] 0 [ 1787.690917] Node 1 Normal free:84564kB min:53696kB low:67120kB high:80544kB active_anon:3572kB inactive_anon:22728kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2496kB bounce:0kB free_pcp:676kB local_pcp:0kB free_cma:0kB [ 1787.699366] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.789067] lowmem_reserve[]: 0 0 0 [ 1787.799144] lowmem_reserve[]: [ 1787.802238] 0 [ 1787.802811] 0 [ 1787.805914] 0 [ 1787.807714] 0 [ 1787.809646] Node 1 Normal free:142364kB min:53696kB low:67120kB high:80544kB active_anon:3572kB inactive_anon:22728kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1152kB pagetables:2496kB bounce:0kB free_pcp:696kB local_pcp:672kB free_cma:0kB [ 1787.839027] 0 0 0 [ 1787.900985] Node 0 DMA: 9*4kB (UME) 1*8kB (M) 4*16kB (UME) 2*32kB (UM) 10*64kB (UME) 6*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 1787.911589] lowmem_reserve[]: 0 0 0 0 0 [ 1787.936993] Node 0 DMA: 9*4kB (UME) 1*8kB (M) 4*16kB (UME) 2*32kB (UM) 10*64kB (UME) 6*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11052kB [ 1787.949024] Node 0 DMA32: 1745*4kB (UME) 3305*8kB (UME) 358*16kB (UME) 117*32kB (UME) 201*64kB (UM) 38*128kB (U) 16*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 66764kB [ 1787.956574] Node 0 DMA32: 1744*4kB (UE) 3304*8kB (UE) 358*16kB (UME) 116*32kB (UE) 200*64kB (U) 38*128kB (U) 16*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 66144kB [ 1787.994435] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1787.999610] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1788.005931] Node 0 [ 1788.022979] systemd[1]: Failed to start Journal Service. [ 1788.034908] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1788.046009] Node 1 Normal: 11162*4kB (UM) 158*8kB (UME) 102*16kB (UM) 258*32kB (UME) 568*64kB (UM) 216*128kB (UM) 41*256kB (UM) 13*512kB (U) 47*1024kB (U) 0*2048kB 0*4096kB = 185080kB [ 1788.059024] Node 1 Normal: 11162*4kB (UM) 158*8kB (UME) 102*16kB (UM) 258*32kB (UME) 568*64kB (UM) 216*128kB (UM) 41*256kB (UM) 13*512kB (U) 47*1024kB (U) 0*2048kB 0*4096kB = 185080kB [ 1788.066668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.093249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.099037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.102693] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1788.123040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.132667] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1788.139118] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.145815] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1788.148766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.158740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.179469] 42074 total pagecache pages [ 1788.183963] systemd[1]: Stopped Journal Service. [ 1788.193303] 0 pages in swap cache [ 1788.197431] Swap cache stats: add 0, delete 0, find 0/0 [ 1788.209064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.237734] systemd[1]: Starting Journal Service... [ 1788.242877] 42296 total pagecache pages [ 1788.246884] 0 pages in swap cache [ 1788.255242] Free swap = 0kB [ 1788.258281] Total swap = 0kB [ 1788.259037] Swap cache stats: add 0, delete 0, find 0/0 [ 1788.266714] Free swap = 0kB [ 1788.274403] 2097051 pages RAM [ 1788.277520] 0 pages HighMem/MovableOnly [ 1788.285634] 363848 pages reserved [ 1788.289201] Total swap = 0kB [ 1788.289209] 2097051 pages RAM [ 1788.289212] 0 pages HighMem/MovableOnly [ 1788.289216] 363848 pages reserved [ 1788.289219] 0 pages cma reserved [ 1788.289227] Out of memory (oom_kill_allocating_task): Kill process 7102 (in:imklog) score 0 or sacrifice child [ 1788.289274] Killed process 7100 (rsyslogd) total-vm:254332kB, anon-rss:1584kB, file-rss:0kB, shmem-rss:0kB [ 1788.331469] 0 pages cma reserved [ 1788.336266] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1788.366714] systemd[1]: rsyslog.service: Unit entered failed state. 04:33:25 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2ab00, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) 04:33:25 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x5, 0x14}) 04:33:25 executing program 1: r0 = syz_open_dev$sndpcmp(0x0, 0xf1, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) 04:33:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x9}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r3, 0x1, "63c38b", "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"}}, 0x110) [ 1788.409391] systemd[1]: rsyslog.service: Failed with result 'signal'. 04:33:25 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000000)={0x7ff, [[0x7f, 0x6, 0x0, 0xffff, 0x234, 0x978, 0xffffffcc, 0x7ff], [0x4, 0x4, 0x3, 0x75, 0x4, 0x1, 0xfffffffe, 0x120000], [0x7, 0x491, 0x0, 0x8, 0x800, 0x7, 0x1, 0x1]], [], [{0x9, 0x8, 0x1}, {0x9, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x501, 0x101, 0x0, 0x1, 0x1, 0x1}, {0xffffff00, 0x4, 0x0, 0x0, 0x1}, {0xfffffffc}, {0x2, 0xbf1, 0x1}, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1f, 0x0, 0x1, 0x1}, {0x80, 0x8, 0x1, 0x1, 0x1}, {0xaa34, 0x5cd, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1, 0x1}], [], 0xfffeffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) [ 1788.486426] systemd-journald[7105]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1788.811323] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1788.832587] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1788.833926] syz-executor.0: [ 1788.851524] syz-executor.2: [ 1788.859202] page allocation failure: order:4 [ 1788.861325] page allocation failure: order:4 [ 1788.868184] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1788.875597] syz-executor.4 cpuset= [ 1788.882882] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1788.885833] (null) [ 1788.887616] syz-executor.5 cpuset= [ 1788.897981] (null) [ 1788.907140] / mems_allowed=0-1 [ 1788.911603] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1788.916842] / mems_allowed=0-1 [ 1788.917786] syz-executor.0 cpuset= [ 1788.923512] CPU: 0 PID: 7113 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1788.930282] / [ 1788.934845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.945006] mems_allowed=0-1 [ 1788.945894] Call Trace: [ 1788.951605] dump_stack+0x1b2/0x281 [ 1788.955244] warn_alloc.cold+0x96/0x1cc [ 1788.959230] ? zone_watermark_ok_safe+0x220/0x220 [ 1788.964116] __alloc_pages_nodemask+0x2127/0x2720 [ 1788.968966] ? lock_acquire+0x170/0x3f0 [ 1788.972961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1788.977818] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1788.983269] ? __mutex_unlock_slowpath+0x75/0x770 [ 1788.988110] ? __list_del_entry_valid+0xb3/0xf0 [ 1788.992781] alloc_pages_current+0x155/0x260 [ 1788.997274] ion_page_pool_alloc+0x118/0x1b0 [ 1789.001682] ion_system_heap_allocate+0x133/0x8c0 [ 1789.006524] ? ion_alloc+0x187/0x810 [ 1789.010260] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1789.015900] ? ion_system_contig_heap_create+0x130/0x130 [ 1789.021351] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1789.026366] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1789.031223] ion_alloc+0x204/0x810 [ 1789.034767] ? ion_dma_buf_release+0x40/0x40 [ 1789.039177] ? __might_fault+0x177/0x1b0 [ 1789.043249] ion_ioctl+0xea/0x1f0 [ 1789.046703] ? ion_query_heaps+0x360/0x360 [ 1789.050935] ? ion_query_heaps+0x360/0x360 [ 1789.055165] do_vfs_ioctl+0x75a/0xff0 [ 1789.058976] ? ioctl_preallocate+0x1a0/0x1a0 [ 1789.063393] ? lock_downgrade+0x740/0x740 [ 1789.067552] ? __fget+0x225/0x360 [ 1789.071019] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.074991] ? security_file_ioctl+0x83/0xb0 [ 1789.079431] SyS_ioctl+0x7f/0xb0 [ 1789.082795] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.086764] do_syscall_64+0x1d5/0x640 [ 1789.090663] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1789.095848] RIP: 0033:0x466459 [ 1789.099029] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.106735] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1789.114000] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1789.121270] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1789.128542] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1789.135811] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1789.143090] CPU: 1 PID: 7114 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1789.150995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.160347] Call Trace: [ 1789.162977] dump_stack+0x1b2/0x281 [ 1789.166626] warn_alloc.cold+0x96/0x1cc [ 1789.170603] ? zone_watermark_ok_safe+0x220/0x220 [ 1789.175452] __alloc_pages_nodemask+0x2127/0x2720 [ 1789.180293] ? __schedule+0x893/0x1de0 [ 1789.184192] ? lock_acquire+0x170/0x3f0 [ 1789.188170] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1789.193019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1789.198472] ? __mutex_unlock_slowpath+0x75/0x770 [ 1789.203322] alloc_pages_current+0x155/0x260 [ 1789.207732] ion_page_pool_alloc+0x118/0x1b0 [ 1789.212146] ion_system_heap_allocate+0x133/0x8c0 [ 1789.216986] ? ion_alloc+0x187/0x810 [ 1789.220693] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1789.226145] ? ion_system_contig_heap_create+0x130/0x130 [ 1789.231698] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1789.236710] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1789.241549] ion_alloc+0x204/0x810 [ 1789.245094] ? ion_dma_buf_release+0x40/0x40 [ 1789.249502] ? __might_fault+0x177/0x1b0 [ 1789.253560] ion_ioctl+0xea/0x1f0 [ 1789.257006] ? ion_query_heaps+0x360/0x360 [ 1789.261256] ? ion_query_heaps+0x360/0x360 [ 1789.265486] do_vfs_ioctl+0x75a/0xff0 [ 1789.269282] ? ioctl_preallocate+0x1a0/0x1a0 [ 1789.273699] ? lock_downgrade+0x740/0x740 [ 1789.277868] ? __fget+0x225/0x360 [ 1789.281325] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.285297] ? security_file_ioctl+0x83/0xb0 [ 1789.290237] SyS_ioctl+0x7f/0xb0 [ 1789.293608] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.297591] do_syscall_64+0x1d5/0x640 [ 1789.302006] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1789.307190] RIP: 0033:0x466459 [ 1789.310382] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.318097] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1789.325373] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1789.332641] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1789.339906] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1789.347179] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 04:33:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', r1) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) [ 1789.356230] CPU: 0 PID: 7091 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1789.364043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.373403] Call Trace: [ 1789.376003] dump_stack+0x1b2/0x281 [ 1789.379648] warn_alloc.cold+0x96/0x1cc [ 1789.383637] ? zone_watermark_ok_safe+0x220/0x220 [ 1789.388500] __alloc_pages_nodemask+0x2127/0x2720 [ 1789.393872] ? lock_acquire+0x170/0x3f0 [ 1789.397861] ? lock_acquire+0x170/0x3f0 [ 1789.401846] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1789.406732] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1789.412401] ? __mutex_unlock_slowpath+0x75/0x770 [ 1789.417260] alloc_pages_current+0x155/0x260 [ 1789.418954] warn_alloc_show_mem: 1 callbacks suppressed [ 1789.418958] Mem-Info: [ 1789.421761] ion_page_pool_alloc+0x118/0x1b0 [ 1789.421771] ion_system_heap_allocate+0x133/0x8c0 [ 1789.421785] ? _raw_spin_unlock+0x29/0x40 [ 1789.421794] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1789.421804] ? ion_system_contig_heap_create+0x130/0x130 [ 1789.421816] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1789.421827] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1789.421838] ion_alloc+0x27a/0x810 [ 1789.421853] ? ion_dma_buf_release+0x40/0x40 [ 1789.421867] ? __might_fault+0x177/0x1b0 [ 1789.421880] ion_ioctl+0xea/0x1f0 [ 1789.421889] ? ion_query_heaps+0x360/0x360 [ 1789.421902] ? ion_query_heaps+0x360/0x360 [ 1789.421913] do_vfs_ioctl+0x75a/0xff0 [ 1789.421926] ? ioctl_preallocate+0x1a0/0x1a0 [ 1789.421935] ? lock_downgrade+0x740/0x740 [ 1789.421948] ? __fget+0x225/0x360 [ 1789.434282] active_anon:71494 inactive_anon:41240 isolated_anon:0 [ 1789.434282] active_file:1512 inactive_file:5627 isolated_file:0 [ 1789.434282] unevictable:0 dirty:41 writeback:0 unstable:0 [ 1789.434282] slab_reclaimable:12461 slab_unreclaimable:126982 [ 1789.434282] mapped:48598 shmem:41735 pagetables:4763 bounce:0 [ 1789.434282] free:63390 free_pcp:613 free_cma:0 [ 1789.434305] Node 0 active_anon:283284kB inactive_anon:139680kB active_file:5984kB inactive_file:19460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169880kB dirty:164kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1789.439306] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.439319] ? security_file_ioctl+0x83/0xb0 [ 1789.439330] SyS_ioctl+0x7f/0xb0 [ 1789.439338] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.439349] do_syscall_64+0x1d5/0x640 [ 1789.439364] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1789.439371] RIP: 0033:0x466459 [ 1789.439376] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.439385] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1789.439390] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1789.439395] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1789.439400] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1789.439405] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1789.448277] CPU: 0 PID: 7111 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1789.469094] Node 1 active_anon:2692kB inactive_anon:25280kB active_file:64kB inactive_file:3048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24512kB dirty:0kB writeback:0kB shmem:25420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1789.471828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.471833] Call Trace: [ 1789.471851] dump_stack+0x1b2/0x281 [ 1789.471866] warn_alloc.cold+0x96/0x1cc [ 1789.471878] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1789.471888] ? zone_watermark_ok_safe+0x220/0x220 [ 1789.471912] __alloc_pages_nodemask+0x2127/0x2720 [ 1789.471928] ? lock_acquire+0x170/0x3f0 [ 1789.480514] Node 0 [ 1789.483669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1789.483689] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1789.500267] DMA free:11048kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.500463] ? __mutex_unlock_slowpath+0x75/0x770 [ 1789.511822] lowmem_reserve[]: [ 1789.537939] alloc_pages_current+0x155/0x260 [ 1789.537955] ion_page_pool_alloc+0x118/0x1b0 [ 1789.537965] ion_system_heap_allocate+0x133/0x8c0 [ 1789.537975] ? ion_alloc+0x187/0x810 [ 1789.537985] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1789.537993] ? ion_system_contig_heap_create+0x130/0x130 [ 1789.538009] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1789.742313] 0 [ 1789.766277] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1789.766290] ion_alloc+0x204/0x810 [ 1789.766305] ? ion_dma_buf_release+0x40/0x40 [ 1789.766318] ? __might_fault+0x177/0x1b0 [ 1789.766328] ion_ioctl+0xea/0x1f0 [ 1789.766336] ? ion_query_heaps+0x360/0x360 [ 1789.766347] ? ion_query_heaps+0x360/0x360 [ 1789.766357] do_vfs_ioctl+0x75a/0xff0 [ 1789.766367] ? ioctl_preallocate+0x1a0/0x1a0 [ 1789.766376] ? lock_downgrade+0x740/0x740 [ 1789.766388] ? __fget+0x225/0x360 [ 1789.766397] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.766408] ? security_file_ioctl+0x83/0xb0 [ 1789.766417] SyS_ioctl+0x7f/0xb0 [ 1789.766424] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.766436] do_syscall_64+0x1d5/0x640 [ 1789.766449] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1789.766458] RIP: 0033:0x466459 [ 1789.766463] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.895366] 2717 [ 1789.899922] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1789.899928] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1789.899934] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1789.899940] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1789.899946] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1790.182304] 2718 2718 2718 [ 1790.196529] Node 0 DMA32 free:32896kB min:36200kB low:45248kB high:54296kB active_anon:283776kB inactive_anon:139680kB active_file:9612kB inactive_file:12564kB unevictable:0kB writepending:328kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12128kB pagetables:16972kB bounce:0kB free_pcp:1132kB local_pcp:476kB free_cma:0kB [ 1790.245157] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1790.334385] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1790.339449] lowmem_reserve[]: 0 0 0 0 0 [ 1790.369059] CPU: 0 PID: 7128 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1790.376891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.378689] Node 0 [ 1790.386247] Call Trace: [ 1790.386268] dump_stack+0x1b2/0x281 [ 1790.386283] warn_alloc.cold+0x96/0x1cc [ 1790.386296] ? zone_watermark_ok_safe+0x220/0x220 [ 1790.386319] __alloc_pages_nodemask+0x2127/0x2720 [ 1790.386332] ? __schedule+0x893/0x1de0 [ 1790.411381] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1790.412505] ? lock_acquire+0x170/0x3f0 [ 1790.412524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1790.412542] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1790.451681] ? __mutex_unlock_slowpath+0x75/0x770 [ 1790.456543] alloc_pages_current+0x155/0x260 [ 1790.460963] ion_page_pool_alloc+0x118/0x1b0 [ 1790.465374] ion_system_heap_allocate+0x133/0x8c0 [ 1790.470212] ? ion_alloc+0x187/0x810 [ 1790.473930] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1790.479389] ? ion_system_contig_heap_create+0x130/0x130 [ 1790.484842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1790.489863] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1790.494707] ion_alloc+0x204/0x810 [ 1790.498254] ? ion_dma_buf_release+0x40/0x40 [ 1790.502670] ? __might_fault+0x177/0x1b0 [ 1790.506780] ion_ioctl+0xea/0x1f0 [ 1790.510244] ? ion_query_heaps+0x360/0x360 [ 1790.514476] ? _raw_spin_unlock+0x29/0x40 [ 1790.518609] ? ion_query_heaps+0x360/0x360 [ 1790.522837] do_vfs_ioctl+0x75a/0xff0 [ 1790.526643] ? ioctl_preallocate+0x1a0/0x1a0 [ 1790.531046] ? lock_downgrade+0x740/0x740 [ 1790.535191] ? __fget+0x225/0x360 [ 1790.538646] ? do_vfs_ioctl+0xff0/0xff0 [ 1790.542616] ? security_file_ioctl+0x83/0xb0 [ 1790.547028] SyS_ioctl+0x7f/0xb0 [ 1790.550391] ? do_vfs_ioctl+0xff0/0xff0 [ 1790.554360] do_syscall_64+0x1d5/0x640 [ 1790.558780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1790.563966] RIP: 0033:0x466459 [ 1790.567152] RSP: 002b:00007fa85c0d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1790.574856] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1790.582137] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1790.589435] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1790.596707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1790.604693] R13: 00007fff7edb3daf R14: 00007fa85c0d8300 R15: 0000000000022000 [ 1790.624524] lowmem_reserve[]: 0 0 0 0 0 [ 1790.638484] Node 1 Normal free:57152kB min:53696kB low:67120kB high:80544kB active_anon:2684kB inactive_anon:25280kB active_file:64kB inactive_file:356kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2216kB bounce:0kB free_pcp:808kB local_pcp:728kB free_cma:0kB [ 1790.728640] lowmem_reserve[]: 0 0 0 0 0 [ 1790.741622] Node 0 DMA: 24*4kB (UME) 1*8kB (M) 4*16kB (UME) 2*32kB (UM) 9*64kB (UME) 6*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11048kB [ 1790.793002] Node 0 DMA32: 285*4kB (UME) 81*8kB (UME) 51*16kB (UME) 1050*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36204kB [ 1790.849044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1790.879637] Node 1 Normal: 33*4kB (UM) 62*8kB (UME) 18*16kB (UM) 403*32kB (UME) 52*64kB (UM) 3*128kB (UM) 80*256kB (U) 13*512kB (U) 11*1024kB (U) 0*2048kB 0*4096kB = 55924kB [ 1790.931739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.977704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1791.022459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1791.071150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1791.103422] 42121 total pagecache pages [ 1791.117988] 0 pages in swap cache [ 1791.134713] Swap cache stats: add 0, delete 0, find 0/0 [ 1791.139862] warn_alloc_show_mem: 2 callbacks suppressed [ 1791.139866] Mem-Info: [ 1791.156297] Free swap = 0kB [ 1791.157710] active_anon:71703 inactive_anon:41240 isolated_anon:0 [ 1791.157710] active_file:36 inactive_file:53 isolated_file:1 [ 1791.157710] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1791.157710] slab_reclaimable:12478 slab_unreclaimable:128526 [ 1791.157710] mapped:52645 shmem:41735 pagetables:4855 bounce:0 [ 1791.157710] free:25200 free_pcp:30 free_cma:0 [ 1791.166118] Total swap = 0kB [ 1791.196782] Node 0 active_anon:284076kB inactive_anon:139680kB active_file:128kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:169476kB dirty:8kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1791.225393] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1791.228808] Node 1 active_anon:2736kB inactive_anon:25280kB active_file:16kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41104kB dirty:12kB writeback:0kB shmem:25420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1791.249024] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1791.294176] CPU: 1 PID: 7124 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1791.301965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.311313] Call Trace: [ 1791.313904] dump_stack+0x1b2/0x281 [ 1791.317534] warn_alloc.cold+0x96/0x1cc [ 1791.321513] ? zone_watermark_ok_safe+0x220/0x220 [ 1791.322519] Node 0 DMA free:11048kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.326380] __alloc_pages_nodemask+0x2127/0x2720 [ 1791.326393] ? io_schedule_timeout+0x140/0x140 [ 1791.361928] ? lock_acquire+0x170/0x3f0 [ 1791.365913] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1791.370766] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1791.376217] ? __mutex_unlock_slowpath+0x75/0x770 [ 1791.381057] ? retint_kernel+0x2d/0x2d [ 1791.384945] alloc_pages_current+0x155/0x260 [ 1791.389354] ion_page_pool_alloc+0x118/0x1b0 [ 1791.392219] lowmem_reserve[]: 0 [ 1791.393758] ion_system_heap_allocate+0x133/0x8c0 [ 1791.393768] ? ion_alloc+0x187/0x810 [ 1791.397125] 2717 [ 1791.401953] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1791.401962] ? ion_system_contig_heap_create+0x130/0x130 [ 1791.401971] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1791.401982] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1791.401992] ion_alloc+0x204/0x810 [ 1791.402004] ? ion_dma_buf_release+0x40/0x40 [ 1791.402016] ? __might_fault+0x177/0x1b0 [ 1791.402027] ion_ioctl+0xea/0x1f0 [ 1791.402035] ? ion_query_heaps+0x360/0x360 [ 1791.402049] ? cp_compat_stat+0x890/0x890 [ 1791.419082] 2718 [ 1791.423683] ? ion_query_heaps+0x360/0x360 [ 1791.428514] 2718 [ 1791.432039] do_vfs_ioctl+0x75a/0xff0 [ 1791.432052] ? ioctl_preallocate+0x1a0/0x1a0 [ 1791.432061] ? lock_downgrade+0x740/0x740 [ 1791.432074] ? __fget+0x225/0x360 [ 1791.432083] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.432095] ? security_file_ioctl+0x83/0xb0 [ 1791.432104] SyS_ioctl+0x7f/0xb0 [ 1791.432112] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.432124] do_syscall_64+0x1d5/0x640 [ 1791.432145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1791.432154] RIP: 0033:0x466459 [ 1791.432162] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 [ 1791.459031] 2718 [ 1791.460709] ORIG_RAX: 0000000000000010 [ 1791.468995] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1791.469001] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1791.469007] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1791.469012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1791.469017] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1791.488080] 2097051 pages RAM [ 1791.549053] Node 0 DMA32 free:19532kB min:36200kB low:45248kB high:54296kB active_anon:284072kB inactive_anon:139680kB active_file:648kB inactive_file:296kB unevictable:0kB writepending:8kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12096kB pagetables:17076kB bounce:0kB free_pcp:732kB local_pcp:100kB free_cma:0kB [ 1791.559400] 0 pages HighMem/MovableOnly [ 1791.592741] 363848 pages reserved [ 1791.596190] 0 pages cma reserved [ 1791.659044] lowmem_reserve[]: 0 0 0 0 0 [ 1791.663076] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.737283] lowmem_reserve[]: 0 0 0 0 0 [ 1791.749151] Node 1 Normal free:54128kB min:53696kB low:67120kB high:80544kB active_anon:2736kB inactive_anon:25280kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2344kB bounce:0kB free_pcp:740kB local_pcp:120kB free_cma:0kB [ 1791.809026] lowmem_reserve[]: 0 0 0 0 0 [ 1791.813057] Node 0 DMA: 16*4kB (UME) 4*8kB (UM) 4*16kB (UME) 2*32kB (UM) 9*64kB (UME) 6*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11040kB [ 1791.907134] Node 0 DMA32: 293*4kB (UME) 857*8kB (UME) 327*16kB (UME) 161*32kB (UME) 427*64kB (UM) 22*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48556kB [ 1791.958084] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1792.012821] Node 1 Normal: 865*4kB (UM) 1171*8kB (UME) 167*16kB (UM) 22*32kB (UME) 6*64kB (UM) 20*128kB (UM) 63*256kB (U) 17*512kB (U) 24*1024kB (U) 0*2048kB 0*4096kB = 68556kB [ 1792.089047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.097919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.139634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.150617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.179084] 42885 total pagecache pages [ 1792.183088] 0 pages in swap cache [ 1792.209025] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.214406] Free swap = 0kB [ 1792.217420] Total swap = 0kB [ 1792.230428] 2097051 pages RAM [ 1792.233552] 0 pages HighMem/MovableOnly [ 1792.237520] 363848 pages reserved [ 1792.269021] 0 pages cma reserved [ 1792.308332] oom_reaper: reaped process 7114 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1792.377647] oom_reaper: reaped process 7111 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1792.566272] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1792.621848] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1792.627030] CPU: 1 PID: 4163 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1792.629139] syz-executor.5: [ 1792.634838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.634848] page allocation failure: order:0 [ 1792.637855] Call Trace: [ 1792.651309] syz-executor.0: [ 1792.651646] dump_stack+0x1b2/0x281 [ 1792.654218] page allocation failure: order:0 [ 1792.657318] dump_header+0x178/0x82f [ 1792.662051] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1792.665324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1792.672333] (null) [ 1792.676193] ? ___ratelimit+0x2cd/0x530 [ 1792.682386] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1792.683412] oom_kill_process.cold+0x10/0xa40 [ 1792.687359] (null) [ 1792.694452] out_of_memory+0xe3e/0x1190 [ 1792.694465] ? oom_killer_disable+0x1c0/0x1c0 [ 1792.694474] ? mutex_trylock+0x152/0x1a0 [ 1792.694483] __alloc_pages_nodemask+0x23e1/0x2720 [ 1792.694503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1792.694532] alloc_pages_current+0x155/0x260 [ 1792.694543] filemap_fault+0x11a1/0x1ad0 [ 1792.694561] ext4_filemap_fault+0x84/0xb0 [ 1792.694571] __do_fault+0xfa/0x380 [ 1792.694581] __handle_mm_fault+0x2497/0x4620 [ 1792.703031] syz-executor.0 cpuset= [ 1792.705181] ? vm_insert_page+0x7c0/0x7c0 [ 1792.719154] syz-executor.0: [ 1792.723494] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1792.727889] page allocation failure: order:0 [ 1792.731947] ? nanosleep_copyout+0x100/0x100 [ 1792.731962] ? mark_held_locks+0xa6/0xf0 [ 1792.731974] handle_mm_fault+0x455/0x9c0 [ 1792.731988] __do_page_fault+0x549/0xad0 [ 1792.731998] ? spurious_fault+0x640/0x640 [ 1792.732007] ? do_page_fault+0x60/0x500 [ 1792.732019] ? page_fault+0x2f/0x50 [ 1792.740064] / [ 1792.744086] page_fault+0x45/0x50 [ 1792.747777] syz-executor.5 cpuset= [ 1792.751738] RIP: 1b519d:0x9 [ 1792.751742] RSP: 003c:00007ffcade4e39c EFLAGS: 00000000 [ 1792.779062] syz-executor.2: [ 1792.805189] mems_allowed=0-1 [ 1792.829029] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1792.842272] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1792.849019] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1792.855022] CPU: 1 PID: 7111 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1792.862392] syz-executor.0 cpuset= [ 1792.862812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.862822] / [ 1792.866348] Call Trace: [ 1792.879990] dump_stack+0x1b2/0x281 [ 1792.883617] warn_alloc.cold+0x96/0x1cc [ 1792.887585] ? zone_watermark_ok_safe+0x220/0x220 [ 1792.892423] ? usleep_range+0x130/0x130 [ 1792.896398] ? try_to_free_pages+0x23f/0x6e0 [ 1792.900804] ? _find_next_bit+0xdb/0x100 [ 1792.904862] ? run_timer_softirq+0x5a0/0x5a0 [ 1792.909281] __alloc_pages_nodemask+0x2127/0x2720 [ 1792.914124] ? lock_acquire+0x170/0x3f0 [ 1792.918113] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1792.922950] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1792.925257] mems_allowed=0-1 [ 1792.927446] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1792.935985] alloc_pages_current+0x155/0x260 [ 1792.938447] / [ 1792.940393] ion_page_pool_alloc+0x118/0x1b0 [ 1792.946502] ion_system_heap_allocate+0x133/0x8c0 [ 1792.951603] ? ion_alloc+0x187/0x810 [ 1792.955312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1792.960771] ? ion_system_contig_heap_create+0x130/0x130 [ 1792.963446] mems_allowed=0-1 [ 1792.966235] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1792.974340] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1792.979197] ion_alloc+0x204/0x810 [ 1792.982739] ? ion_dma_buf_release+0x40/0x40 [ 1792.987144] ? __might_fault+0x177/0x1b0 [ 1792.991202] ion_ioctl+0xea/0x1f0 [ 1792.994666] ? ion_query_heaps+0x360/0x360 [ 1792.998911] ? ion_query_heaps+0x360/0x360 [ 1793.003141] do_vfs_ioctl+0x75a/0xff0 [ 1793.006951] ? ioctl_preallocate+0x1a0/0x1a0 [ 1793.011387] ? lock_downgrade+0x740/0x740 [ 1793.015536] ? __fget+0x225/0x360 [ 1793.018989] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.022960] ? security_file_ioctl+0x83/0xb0 [ 1793.027359] SyS_ioctl+0x7f/0xb0 [ 1793.030716] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.034718] do_syscall_64+0x1d5/0x640 [ 1793.038600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.043809] RIP: 0033:0x466459 [ 1793.047008] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.055491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1793.062753] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1793.070374] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1793.077638] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1793.084902] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1793.092183] CPU: 0 PID: 7114 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1793.099984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.109687] Call Trace: [ 1793.112281] dump_stack+0x1b2/0x281 [ 1793.115915] warn_alloc.cold+0x96/0x1cc [ 1793.119894] ? zone_watermark_ok_safe+0x220/0x220 [ 1793.124761] ? usleep_range+0x130/0x130 [ 1793.128735] ? try_to_free_pages+0x23f/0x6e0 [ 1793.133145] ? _find_next_bit+0xdb/0x100 [ 1793.137226] ? run_timer_softirq+0x5a0/0x5a0 [ 1793.141641] __alloc_pages_nodemask+0x2127/0x2720 [ 1793.146492] ? lock_acquire+0x170/0x3f0 [ 1793.150474] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1793.155314] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1793.159831] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1793.165295] alloc_pages_current+0x155/0x260 [ 1793.169795] ion_page_pool_alloc+0x118/0x1b0 [ 1793.174212] ion_system_heap_allocate+0x133/0x8c0 [ 1793.179082] ? ion_alloc+0x187/0x810 [ 1793.182804] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1793.188267] ? ion_system_contig_heap_create+0x130/0x130 [ 1793.193727] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1793.198761] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1793.203634] ion_alloc+0x204/0x810 [ 1793.207209] ? ion_dma_buf_release+0x40/0x40 [ 1793.211641] ? __might_fault+0x177/0x1b0 [ 1793.215708] ion_ioctl+0xea/0x1f0 [ 1793.219185] ? ion_query_heaps+0x360/0x360 [ 1793.223431] ? ion_query_heaps+0x360/0x360 [ 1793.227680] do_vfs_ioctl+0x75a/0xff0 [ 1793.231494] ? ioctl_preallocate+0x1a0/0x1a0 [ 1793.235908] ? lock_downgrade+0x740/0x740 [ 1793.239038] Mem-Info: [ 1793.240062] ? __fget+0x225/0x360 [ 1793.242465] active_anon:71658 inactive_anon:41240 isolated_anon:0 [ 1793.242465] active_file:15 inactive_file:14 isolated_file:0 [ 1793.242465] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1793.242465] slab_reclaimable:12475 slab_unreclaimable:127943 [ 1793.242465] mapped:52607 shmem:41735 pagetables:4855 bounce:0 [ 1793.242465] free:41640 free_pcp:401 free_cma:0 [ 1793.245912] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.283278] ? security_file_ioctl+0x83/0xb0 [ 1793.287692] SyS_ioctl+0x7f/0xb0 [ 1793.291057] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.295027] do_syscall_64+0x1d5/0x640 [ 1793.298925] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.304112] RIP: 0033:0x466459 [ 1793.307300] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.315006] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1793.322298] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1793.329567] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1793.336833] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1793.344106] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1793.360990] CPU: 0 PID: 7091 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1793.368800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.378152] Call Trace: [ 1793.380777] dump_stack+0x1b2/0x281 [ 1793.384407] warn_alloc.cold+0x96/0x1cc [ 1793.388381] ? zone_watermark_ok_safe+0x220/0x220 [ 1793.389998] Node 0 active_anon:283900kB inactive_anon:139680kB active_file:48kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169376kB dirty:0kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1793.393221] ? usleep_range+0x130/0x130 [ 1793.393232] ? try_to_free_pages+0x23f/0x6e0 [ 1793.393242] ? _find_next_bit+0xdb/0x100 [ 1793.393253] ? run_timer_softirq+0x5a0/0x5a0 [ 1793.393270] __alloc_pages_nodemask+0x2127/0x2720 [ 1793.393287] ? lock_acquire+0x170/0x3f0 [ 1793.393304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1793.393314] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1793.393331] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1793.393351] alloc_pages_current+0x155/0x260 [ 1793.467346] ion_page_pool_alloc+0x118/0x1b0 [ 1793.471780] ion_system_heap_allocate+0x133/0x8c0 [ 1793.476626] ? _raw_spin_unlock+0x29/0x40 [ 1793.480777] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1793.485709] ? ion_system_contig_heap_create+0x130/0x130 [ 1793.491163] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1793.496375] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1793.499032] Node 1 active_anon:2732kB inactive_anon:25280kB active_file:1036kB inactive_file:964kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:43352kB dirty:0kB writeback:0kB shmem:25420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1793.501219] ion_alloc+0x27a/0x810 [ 1793.532261] ? ion_dma_buf_release+0x40/0x40 [ 1793.536672] ? __might_fault+0x177/0x1b0 [ 1793.540736] ion_ioctl+0xea/0x1f0 [ 1793.544198] ? ion_query_heaps+0x360/0x360 [ 1793.549477] ? ion_query_heaps+0x360/0x360 [ 1793.553712] do_vfs_ioctl+0x75a/0xff0 [ 1793.559865] ? ioctl_preallocate+0x1a0/0x1a0 [ 1793.564275] ? lock_downgrade+0x740/0x740 [ 1793.568427] ? __fget+0x225/0x360 [ 1793.571894] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.575882] ? security_file_ioctl+0x83/0xb0 [ 1793.579019] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1793.580300] SyS_ioctl+0x7f/0xb0 [ 1793.580310] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.613753] do_syscall_64+0x1d5/0x640 [ 1793.617655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.622868] RIP: 0033:0x466459 [ 1793.626081] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.629013] lowmem_reserve[]: [ 1793.633788] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1793.633796] 0 [ 1793.636887] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1793.653481] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1793.654253] 2717 [ 1793.660744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1793.660750] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1793.667611] CPU: 0 PID: 7128 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1793.686508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.695865] Call Trace: [ 1793.698462] dump_stack+0x1b2/0x281 [ 1793.702091] warn_alloc.cold+0x96/0x1cc [ 1793.706091] ? zone_watermark_ok_safe+0x220/0x220 [ 1793.710935] ? usleep_range+0x130/0x130 [ 1793.714913] ? try_to_free_pages+0x23f/0x6e0 [ 1793.719430] ? _find_next_bit+0xdb/0x100 [ 1793.723493] ? run_timer_softirq+0x5a0/0x5a0 [ 1793.727920] __alloc_pages_nodemask+0x2127/0x2720 [ 1793.729018] 2718 2718 2718 [ 1793.732769] ? lock_acquire+0x170/0x3f0 [ 1793.735697] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1793.744488] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1793.745071] Node 0 [ 1793.748988] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1793.749010] alloc_pages_current+0x155/0x260 [ 1793.749022] ion_page_pool_alloc+0x118/0x1b0 [ 1793.749032] ion_system_heap_allocate+0x133/0x8c0 [ 1793.749043] ? ion_alloc+0x187/0x810 [ 1793.749054] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1793.749063] ? ion_system_contig_heap_create+0x130/0x130 [ 1793.749074] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1793.749086] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1793.749097] ion_alloc+0x204/0x810 [ 1793.749111] ? ion_dma_buf_release+0x40/0x40 [ 1793.749125] ? __might_fault+0x177/0x1b0 [ 1793.749137] ion_ioctl+0xea/0x1f0 [ 1793.749157] ? ion_query_heaps+0x360/0x360 [ 1793.758412] warn_alloc_show_mem: 2 callbacks suppressed [ 1793.758416] Mem-Info: [ 1793.761316] ? _raw_spin_unlock+0x29/0x40 [ 1793.761326] ? ion_query_heaps+0x360/0x360 [ 1793.761336] do_vfs_ioctl+0x75a/0xff0 [ 1793.761348] ? ioctl_preallocate+0x1a0/0x1a0 [ 1793.761358] ? lock_downgrade+0x740/0x740 [ 1793.761371] ? __fget+0x225/0x360 [ 1793.761381] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.761393] ? security_file_ioctl+0x83/0xb0 [ 1793.761403] SyS_ioctl+0x7f/0xb0 [ 1793.761411] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.761423] do_syscall_64+0x1d5/0x640 [ 1793.782840] DMA32 free:35624kB min:36200kB low:45248kB high:54296kB active_anon:283896kB inactive_anon:139680kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12096kB pagetables:17076kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 1793.785244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.790291] active_anon:71658 inactive_anon:41240 isolated_anon:0 [ 1793.790291] active_file:18 inactive_file:11 isolated_file:0 [ 1793.790291] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1793.790291] slab_reclaimable:12475 slab_unreclaimable:127943 [ 1793.790291] mapped:52657 shmem:41735 pagetables:4855 bounce:0 [ 1793.790291] free:25088 free_pcp:248 free_cma:0 [ 1793.795060] RIP: 0033:0x466459 [ 1793.798599] Node 0 active_anon:283900kB inactive_anon:139680kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169376kB dirty:0kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1793.802979] RSP: 002b:00007fa85c0d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.802990] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1793.802995] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1793.802999] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1793.803004] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1793.803013] R13: 00007fff7edb3daf R14: 00007fa85c0d8300 R15: 0000000000022000 [ 1794.036889] lowmem_reserve[]: 0 0 0 0 0 [ 1794.045770] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.116777] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1794.137731] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1794.142957] CPU: 0 PID: 7128 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1794.150427] lowmem_reserve[]: [ 1794.150842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1794.150852] 0 [ 1794.153938] Call Trace: [ 1794.153957] dump_stack+0x1b2/0x281 [ 1794.153971] warn_alloc.cold+0x96/0x1cc [ 1794.153983] ? zone_watermark_ok_safe+0x220/0x220 [ 1794.154005] __alloc_pages_nodemask+0x2127/0x2720 [ 1794.154016] ? lock_acquire+0x170/0x3f0 [ 1794.154029] ? lock_acquire+0x170/0x3f0 [ 1794.165037] 0 [ 1794.165257] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1794.165276] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1794.165289] ? __mutex_unlock_slowpath+0x75/0x770 [ 1794.165304] alloc_pages_current+0x155/0x260 [ 1794.165316] ion_page_pool_alloc+0x118/0x1b0 [ 1794.165326] ion_system_heap_allocate+0x133/0x8c0 [ 1794.165338] ? _raw_spin_unlock+0x29/0x40 [ 1794.168290] 0 [ 1794.171536] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1794.171546] ? ion_system_contig_heap_create+0x130/0x130 [ 1794.171556] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1794.171567] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1794.171578] ion_alloc+0x27a/0x810 [ 1794.171592] ? ion_dma_buf_release+0x40/0x40 [ 1794.171605] ? __might_fault+0x177/0x1b0 [ 1794.171617] ion_ioctl+0xea/0x1f0 [ 1794.171626] ? ion_query_heaps+0x360/0x360 [ 1794.171668] ? _raw_spin_unlock+0x29/0x40 [ 1794.175999] 0 [ 1794.180454] ? ion_query_heaps+0x360/0x360 [ 1794.180465] do_vfs_ioctl+0x75a/0xff0 [ 1794.180477] ? ioctl_preallocate+0x1a0/0x1a0 [ 1794.180486] ? lock_downgrade+0x740/0x740 [ 1794.180500] ? __fget+0x225/0x360 [ 1794.180509] ? do_vfs_ioctl+0xff0/0xff0 [ 1794.180521] ? security_file_ioctl+0x83/0xb0 [ 1794.180532] SyS_ioctl+0x7f/0xb0 [ 1794.180540] ? do_vfs_ioctl+0xff0/0xff0 [ 1794.180555] do_syscall_64+0x1d5/0x640 [ 1794.185758] 0 [ 1794.189347] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1794.189355] RIP: 0033:0x466459 [ 1794.189360] RSP: 002b:00007fa85c0d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1794.189370] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1794.189376] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1794.189382] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1794.189387] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1794.189393] R13: 00007fff7edb3daf R14: 00007fa85c0d8300 R15: 0000000000022000 [ 1794.387683] Node 1 active_anon:2760kB inactive_anon:25280kB active_file:60kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41240kB dirty:0kB writeback:0kB shmem:25420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1794.437502] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.481901] Node 1 Normal free:207680kB min:53696kB low:67120kB high:80544kB active_anon:2760kB inactive_anon:25280kB active_file:132kB inactive_file:436kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2344kB bounce:0kB free_pcp:1288kB local_pcp:648kB free_cma:0kB [ 1794.525120] lowmem_reserve[]: 0 0 0 0 0 [ 1794.548754] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1794.581238] Node 0 DMA: 4*4kB (UME) 1*8kB (M) 3*16kB (ME) 2*32kB (UM) 5*64kB (UME) 9*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11080kB [ 1794.591899] lowmem_reserve[]: [ 1794.648091] Node 0 [ 1794.649536] 0 2717 2718 2718 2718 [ 1794.665164] IPVS: ftp: loaded support on port[0] = 21 [ 1794.689875] Node 0 DMA32 free:44512kB min:36200kB low:45248kB high:54296kB active_anon:283920kB inactive_anon:139680kB active_file:860kB inactive_file:5196kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12224kB pagetables:17124kB bounce:0kB free_pcp:504kB local_pcp:372kB free_cma:0kB [ 1794.699246] DMA32: 16*4kB (E) 163*8kB (UME) 219*16kB (UME) 438*32kB (UME) 398*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44488kB [ 1794.886268] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1794.920676] lowmem_reserve[]: 0 0 0 0 0 [ 1794.924700] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.946574] Node 1 [ 1794.952245] lowmem_reserve[]: [ 1794.953483] Normal: [ 1794.978684] 0 0 0 0 0 [ 1794.983606] Node 1 Normal free:28512kB min:53696kB low:67120kB high:80544kB active_anon:3160kB inactive_anon:25280kB active_file:824kB inactive_file:1148kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2492kB bounce:0kB free_pcp:220kB local_pcp:0kB free_cma:0kB [ 1794.989742] 88*4kB [ 1795.052057] lowmem_reserve[]: 0 0 0 0 0 [ 1795.058332] Node 0 DMA: 2*4kB (ME) 2*8kB (UM) 3*16kB (ME) 2*32kB (UM) 3*64kB (UME) 9*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10952kB [ 1795.079737] (UM) 52*8kB (UME) 214*16kB (UM) 322*32kB (UME) 27*64kB (UM) 1*128kB (U) 24*256kB (UM) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 29152kB [ 1795.129117] Node 0 DMA32: 3448*4kB (UME) 4777*8kB (UME) 1638*16kB (UME) 508*32kB (UME) 62*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 98568kB [ 1795.132187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.144754] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1795.165992] Node 1 Normal: 136*4kB (UM) 75*8kB (UME) 87*16kB (UM) 342*32kB (UME) 75*64kB (UM) 2*128kB (UM) 24*256kB (UM) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 31336kB [ 1795.222637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1795.228200] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.241862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1795.261686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.262499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.271711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1795.282675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1795.290946] 43330 total pagecache pages [ 1795.340691] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1795.361917] 43316 total pagecache pages [ 1795.365920] 0 pages in swap cache [ 1795.377002] 0 pages in swap cache [ 1795.379271] Swap cache stats: add 0, delete 0, find 0/0 [ 1795.386327] Free swap = 0kB [ 1795.402391] Total swap = 0kB [ 1795.405431] 2097051 pages RAM [ 1795.408524] 0 pages HighMem/MovableOnly [ 1795.412890] Swap cache stats: add 0, delete 0, find 0/0 [ 1795.418350] Free swap = 0kB [ 1795.429059] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1795.434423] CPU: 0 PID: 7114 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1795.442225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.444935] Total swap = 0kB [ 1795.451914] Call Trace: [ 1795.451933] dump_stack+0x1b2/0x281 [ 1795.451948] warn_alloc.cold+0x96/0x1cc [ 1795.451961] ? zone_watermark_ok_safe+0x220/0x220 [ 1795.469962] __alloc_pages_nodemask+0x2127/0x2720 [ 1795.474808] ? check_preemption_disabled+0x35/0x240 [ 1795.479832] ? lock_acquire+0x170/0x3f0 [ 1795.482713] 2097051 pages RAM [ 1795.483811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1795.486905] 0 pages HighMem/MovableOnly [ 1795.491755] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1795.491768] ? __mutex_unlock_slowpath+0x75/0x770 [ 1795.491787] alloc_pages_current+0x155/0x260 [ 1795.510425] ion_page_pool_alloc+0x118/0x1b0 [ 1795.514843] ion_system_heap_allocate+0x133/0x8c0 [ 1795.519692] ? _raw_spin_unlock+0x29/0x40 [ 1795.523527] 363848 pages reserved [ 1795.523839] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1795.532213] ? ion_system_contig_heap_create+0x130/0x130 [ 1795.537664] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1795.542771] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1795.547619] ion_alloc+0x27a/0x810 [ 1795.549012] 0 pages cma reserved [ 1795.551167] ? ion_dma_buf_release+0x40/0x40 [ 1795.558920] ? __might_fault+0x177/0x1b0 [ 1795.562982] ion_ioctl+0xea/0x1f0 [ 1795.566437] ? ion_query_heaps+0x360/0x360 [ 1795.570788] ? ion_query_heaps+0x360/0x360 [ 1795.575022] do_vfs_ioctl+0x75a/0xff0 [ 1795.578829] ? ioctl_preallocate+0x1a0/0x1a0 [ 1795.583235] ? lock_downgrade+0x740/0x740 [ 1795.587382] ? __fget+0x225/0x360 [ 1795.590832] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.594828] ? security_file_ioctl+0x83/0xb0 [ 1795.599238] SyS_ioctl+0x7f/0xb0 [ 1795.602596] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.606570] do_syscall_64+0x1d5/0x640 [ 1795.611070] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1795.616256] RIP: 0033:0x466459 [ 1795.619442] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.627144] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1795.634428] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1795.641705] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1795.648978] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1795.656274] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1795.666618] 363848 pages reserved [ 1795.670430] 0 pages cma reserved [ 1795.673956] Out of memory (oom_kill_allocating_task): Kill process 4163 (syz-executor.3) score 0 or sacrifice child [ 1795.674303] syz-executor.2: [ 1795.685177] Killed process 7124 (syz-executor.3) total-vm:93384kB, anon-rss:164kB, file-rss:34820kB, shmem-rss:0kB [ 1795.694458] oom_reaper: reaped process 7124 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1795.702600] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1795.710789] warn_alloc_show_mem: 4 callbacks suppressed [ 1795.710793] Mem-Info: [ 1795.725949] active_anon:71774 inactive_anon:41243 isolated_anon:0 [ 1795.725949] active_file:913 inactive_file:952 isolated_file:18 [ 1795.725949] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1795.725949] slab_reclaimable:12472 slab_unreclaimable:127232 [ 1795.725949] mapped:54019 shmem:41739 pagetables:4840 bounce:0 [ 1795.725949] free:27786 free_pcp:146 free_cma:0 [ 1795.761546] Node 0 active_anon:283908kB inactive_anon:139680kB active_file:3492kB inactive_file:3932kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:174716kB dirty:32kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1795.805922] Node 1 active_anon:3188kB inactive_anon:25292kB active_file:160kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41360kB dirty:8kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1795.836686] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1795.909702] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1795.939730] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1795.950058] Node 0 DMA32 free:27944kB min:36200kB low:45248kB high:54296kB active_anon:283904kB inactive_anon:139680kB active_file:2264kB inactive_file:2188kB unevictable:0kB writepending:32kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12256kB pagetables:17092kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 1795.974210] syz-executor.2 cpuset= [ 1795.980810] lowmem_reserve[]: [ 1795.988708] / mems_allowed=0-1 [ 1795.995080] CPU: 1 PID: 7111 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1795.998691] oom_reaper: reaped process 7113 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1796.002860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.002865] Call Trace: [ 1796.002885] dump_stack+0x1b2/0x281 [ 1796.002899] warn_alloc.cold+0x96/0x1cc [ 1796.002912] ? zone_watermark_ok_safe+0x220/0x220 [ 1796.002934] __alloc_pages_nodemask+0x2127/0x2720 [ 1796.002946] ? lock_acquire+0x170/0x3f0 [ 1796.002959] ? lock_acquire+0x170/0x3f0 [ 1796.049910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1796.054763] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1796.061086] ? __mutex_unlock_slowpath+0x75/0x770 [ 1796.065960] alloc_pages_current+0x155/0x260 [ 1796.066368] 0 [ 1796.070371] ion_page_pool_alloc+0x118/0x1b0 [ 1796.070382] ion_system_heap_allocate+0x133/0x8c0 [ 1796.070394] ? _raw_spin_unlock+0x29/0x40 [ 1796.070403] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1796.070412] ? ion_system_contig_heap_create+0x130/0x130 [ 1796.070426] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1796.092036] 0 [ 1796.096198] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1796.096212] ion_alloc+0x27a/0x810 [ 1796.105867] 0 [ 1796.107833] ? ion_dma_buf_release+0x40/0x40 [ 1796.112612] 0 [ 1796.113138] ? __might_fault+0x177/0x1b0 [ 1796.117521] 0 [ 1796.119311] ion_ioctl+0xea/0x1f0 [ 1796.119322] ? ion_query_heaps+0x360/0x360 [ 1796.119334] ? ion_query_heaps+0x360/0x360 [ 1796.119344] do_vfs_ioctl+0x75a/0xff0 [ 1796.119357] ? ioctl_preallocate+0x1a0/0x1a0 [ 1796.119366] ? lock_downgrade+0x740/0x740 [ 1796.119380] ? __fget+0x225/0x360 [ 1796.119389] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.119400] ? security_file_ioctl+0x83/0xb0 [ 1796.119409] SyS_ioctl+0x7f/0xb0 [ 1796.119416] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.119427] do_syscall_64+0x1d5/0x640 [ 1796.119443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1796.140934] RIP: 0033:0x466459 [ 1796.145323] Node 0 [ 1796.149449] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.149459] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1796.149464] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1796.149468] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1796.149474] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1796.149479] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1796.159231] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1796.181914] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.190293] (null) [ 1796.194575] lowmem_reserve[]: [ 1796.199338] , order=1, oom_score_adj=0 [ 1796.207157] 0 [ 1796.213764] systemd-journal cpuset= [ 1796.226515] 0 [ 1796.227637] / [ 1796.237267] 0 [ 1796.261916] mems_allowed=0-1 [ 1796.261931] CPU: 1 PID: 7105 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1796.261936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.261940] Call Trace: [ 1796.261960] dump_stack+0x1b2/0x281 [ 1796.261972] dump_header+0x178/0x82f [ 1796.261983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1796.261992] ? ___ratelimit+0x2cd/0x530 [ 1796.262004] oom_kill_process.cold+0x10/0xa40 [ 1796.282214] 0 [ 1796.284963] out_of_memory+0xe3e/0x1190 [ 1796.305526] 0 [ 1796.308377] ? oom_killer_disable+0x1c0/0x1c0 [ 1796.317178] ? mutex_trylock+0x152/0x1a0 [ 1796.324624] Node 1 [ 1796.325620] __alloc_pages_nodemask+0x23e1/0x2720 [ 1796.327414] Normal free:26372kB min:53696kB low:67120kB high:80544kB active_anon:3152kB inactive_anon:25288kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2312kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.331368] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1796.331379] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1796.331392] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1796.331406] ? cache_grow_begin+0x3f/0x700 [ 1796.331418] cache_grow_begin+0x91/0x700 [ 1796.333201] lowmem_reserve[]: [ 1796.337683] fallback_alloc+0x207/0x2c0 [ 1796.345916] 0 [ 1796.348785] kmem_cache_alloc+0x1e5/0x3c0 [ 1796.384447] 0 [ 1796.386895] getname_flags+0xc8/0x550 [ 1796.393463] 0 [ 1796.396147] user_path_at_empty+0x2a/0x50 [ 1796.402110] 0 [ 1796.403371] SyS_faccessat+0x21b/0x680 [ 1796.407324] 0 [ 1796.409109] ? SyS_fallocate+0x80/0x80 [ 1796.409119] ? do_syscall_64+0x4c/0x640 [ 1796.409125] ? SyS_faccessat+0x680/0x680 [ 1796.409133] do_syscall_64+0x1d5/0x640 [ 1796.409152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1796.409160] RIP: 0033:0x7fc243bfc9c7 [ 1796.409165] RSP: 002b:00007ffd18938c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1796.409174] RAX: ffffffffffffffda RBX: 00007ffd1893bc70 RCX: 00007fc243bfc9c7 [ 1796.409178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055ab0927d9a3 [ 1796.409186] RBP: 00007ffd18938d90 R08: 000055ab092733e5 R09: 0000000000000018 [ 1796.415104] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1796.418888] Node 0 [ 1796.420667] R13: 0000000000000000 R14: 000055ab0abb4d60 R15: 00007ffd18939280 [ 1796.422756] Mem-Info: [ 1796.426838] DMA: [ 1796.431845] active_anon:71732 inactive_anon:41242 isolated_anon:0 [ 1796.431845] active_file:41 inactive_file:21 isolated_file:12 [ 1796.431845] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1796.431845] slab_reclaimable:12472 slab_unreclaimable:127389 [ 1796.431845] mapped:52656 shmem:41739 pagetables:4851 bounce:0 [ 1796.431845] free:13794 free_pcp:0 free_cma:0 [ 1796.450313] 2*4kB [ 1796.453462] syz-executor.0: [ 1796.457131] (ME) [ 1796.464886] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1796.464909] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1796.464931] CPU: 1 PID: 7113 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1796.464937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.464941] Call Trace: [ 1796.464962] dump_stack+0x1b2/0x281 [ 1796.477734] 2*8kB [ 1796.479484] warn_alloc.cold+0x96/0x1cc [ 1796.479496] ? zone_watermark_ok_safe+0x220/0x220 [ 1796.479507] ? usleep_range+0x130/0x130 [ 1796.479517] ? try_to_free_pages+0x23f/0x6e0 [ 1796.479530] ? _find_next_bit+0xdb/0x100 [ 1796.486782] (UM) [ 1796.494049] ? run_timer_softirq+0x5a0/0x5a0 [ 1796.494066] __alloc_pages_nodemask+0x2127/0x2720 [ 1796.494083] ? lock_acquire+0x170/0x3f0 [ 1796.494097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1796.494107] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1796.494124] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1796.494149] alloc_pages_current+0x155/0x260 [ 1796.494162] ion_page_pool_alloc+0x118/0x1b0 [ 1796.494173] ion_system_heap_allocate+0x133/0x8c0 [ 1796.512320] 3*16kB [ 1796.541335] ? ion_alloc+0x187/0x810 [ 1796.541347] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1796.541357] ? ion_system_contig_heap_create+0x130/0x130 [ 1796.541366] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1796.541378] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1796.541387] ion_alloc+0x204/0x810 [ 1796.541401] ? ion_dma_buf_release+0x40/0x40 [ 1796.541414] ? __might_fault+0x177/0x1b0 [ 1796.541425] ion_ioctl+0xea/0x1f0 [ 1796.541433] ? ion_query_heaps+0x360/0x360 [ 1796.541445] ? ion_query_heaps+0x360/0x360 [ 1796.541455] do_vfs_ioctl+0x75a/0xff0 [ 1796.541467] ? ioctl_preallocate+0x1a0/0x1a0 [ 1796.553425] (ME) [ 1796.560422] ? lock_downgrade+0x740/0x740 [ 1796.560437] ? __fget+0x225/0x360 [ 1796.560447] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.560459] ? security_file_ioctl+0x83/0xb0 [ 1796.560468] SyS_ioctl+0x7f/0xb0 [ 1796.560477] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.560488] do_syscall_64+0x1d5/0x640 [ 1796.560504] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1796.560512] RIP: 0033:0x466459 [ 1796.560521] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 [ 1796.569031] 2*32kB [ 1796.573475] ORIG_RAX: 0000000000000010 [ 1796.586137] (UM) [ 1796.589025] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1796.589031] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1796.589036] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1796.589041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1796.589047] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1796.591991] page allocation failure: order:0 [ 1796.602340] Bluetooth: hci0 command 0x0409 tx timeout [ 1796.604307] Node 0 active_anon:283776kB inactive_anon:139680kB active_file:148kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:169296kB dirty:28kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1796.624078] 3*64kB [ 1796.628002] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1796.642183] (UME) [ 1796.642869] (null) [ 1796.647209] 9*128kB [ 1796.651652] Node 1 active_anon:3152kB inactive_anon:25288kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41328kB dirty:0kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.667893] (UME) [ 1796.673338] syz-executor.0 cpuset=/ [ 1796.678386] 3*256kB [ 1796.683436] mems_allowed=0-1 [ 1796.690366] (UME) [ 1796.691367] CPU: 1 PID: 7128 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1796.695366] 3*512kB [ 1796.698787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.704966] (UME) [ 1796.707218] Call Trace: [ 1796.713127] 3*1024kB [ 1796.715403] dump_stack+0x1b2/0x281 [ 1796.717431] (UME) [ 1796.721566] warn_alloc.cold+0x96/0x1cc [ 1796.721579] ? zone_watermark_ok_safe+0x220/0x220 [ 1796.721589] ? usleep_range+0x130/0x130 [ 1796.721599] ? try_to_free_pages+0x23f/0x6e0 [ 1796.721610] ? _find_next_bit+0xdb/0x100 [ 1796.721620] ? run_timer_softirq+0x5a0/0x5a0 [ 1796.721637] __alloc_pages_nodemask+0x2127/0x2720 [ 1796.721654] ? lock_acquire+0x170/0x3f0 [ 1796.721669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1796.727223] 2*2048kB [ 1796.729074] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1796.729090] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1796.729110] alloc_pages_current+0x155/0x260 [ 1796.729121] ion_page_pool_alloc+0x118/0x1b0 [ 1796.729131] ion_system_heap_allocate+0x133/0x8c0 [ 1796.729150] ? _raw_spin_unlock+0x29/0x40 [ 1796.729159] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1796.729170] ? ion_system_contig_heap_create+0x130/0x130 [ 1796.735076] (M) [ 1796.736948] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1796.763686] 0*4096kB [ 1796.764668] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1796.766704] = 10952kB [ 1796.773970] ion_alloc+0x27a/0x810 [ 1796.773985] ? ion_dma_buf_release+0x40/0x40 [ 1796.773996] ? __might_fault+0x177/0x1b0 [ 1796.774007] ion_ioctl+0xea/0x1f0 [ 1796.774017] ? ion_query_heaps+0x360/0x360 [ 1796.774031] ? _raw_spin_unlock+0x29/0x40 [ 1796.790088] Node 0 [ 1796.795823] ? ion_query_heaps+0x360/0x360 [ 1796.806461] DMA32: [ 1796.807479] do_vfs_ioctl+0x75a/0xff0 [ 1796.813000] 719*4kB [ 1796.840837] ? ioctl_preallocate+0x1a0/0x1a0 [ 1796.840847] ? lock_downgrade+0x740/0x740 [ 1796.840859] ? __fget+0x225/0x360 [ 1796.840868] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.840879] ? security_file_ioctl+0x83/0xb0 [ 1796.840888] SyS_ioctl+0x7f/0xb0 [ 1796.840895] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.840906] do_syscall_64+0x1d5/0x640 [ 1796.840922] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1796.840931] RIP: 0033:0x466459 [ 1796.840935] RSP: 002b:00007fa85c0d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.840945] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1796.840950] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1796.840956] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1796.840961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1796.840967] R13: 00007fff7edb3daf R14: 00007fa85c0d8300 R15: 0000000000022000 [ 1796.857541] Node 0 [ 1796.899234] warn_alloc_show_mem: 1 callbacks suppressed [ 1796.899237] Mem-Info: [ 1796.915194] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.923965] active_anon:71732 inactive_anon:41242 isolated_anon:0 [ 1796.923965] active_file:41 inactive_file:21 isolated_file:12 [ 1796.923965] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1796.923965] slab_reclaimable:12472 slab_unreclaimable:127389 [ 1796.923965] mapped:52656 shmem:41739 pagetables:4851 bounce:0 [ 1796.923965] free:13794 free_pcp:0 free_cma:0 [ 1796.930145] lowmem_reserve[]: [ 1796.934117] Node 0 active_anon:283776kB inactive_anon:139680kB active_file:148kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:169296kB dirty:28kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.938927] 0 [ 1796.942975] Node 1 active_anon:3152kB inactive_anon:25288kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41328kB dirty:0kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.942980] Node 0 [ 1796.949942] 2717 [ 1796.951529] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.955808] 2718 [ 1796.960695] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1796.960720] Node 0 DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:283772kB inactive_anon:139680kB active_file:384kB inactive_file:380kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.960742] lowmem_reserve[]: 0 0 0 0 0 [ 1796.960763] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.960786] lowmem_reserve[]: [ 1796.970081] 2718 [ 1796.979022] 0 [ 1796.985716] 2718 [ 1796.986367] 0 [ 1796.990783] Node 0 DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:283772kB inactive_anon:139680kB active_file:384kB inactive_file:380kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.003136] (UME) [ 1797.007932] lowmem_reserve[]: [ 1797.019226] 178*8kB [ 1797.023819] 0 [ 1797.024482] (UME) [ 1797.026876] 0 [ 1797.038285] 0 [ 1797.038859] 0 [ 1797.042458] 0 0 [ 1797.042469] Node 1 Normal free:26492kB min:53696kB low:67120kB high:80544kB active_anon:3152kB inactive_anon:25288kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2312kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.042492] lowmem_reserve[]: 0 0 0 0 [ 1797.049475] 0 [ 1797.050928] 85*16kB [ 1797.053090] 0 [ 1797.057317] (UME) [ 1797.063767] 0 [ 1797.066064] Node 0 [ 1797.070504] 386*32kB (UME) [ 1797.132719] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.219030] lowmem_reserve[]: [ 1797.339047] 0*64kB 04:33:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x56}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x77, 0xffff7fff, 0x20000003, 0x7, 0x20000007}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000a060104000000000000000003000002380007800c00018008000140ac1414201400170076657468305f746fd4026f6e640000000900130073797a310000000008001c4000000008"], 0x4c}}, 0x4) [ 1797.491985] chnl_net:caif_netlink_parms(): no params data found [ 1797.509739] Node 0 DMA: 2*4kB (ME) 2*8kB (UM) 3*16kB (ME) 2*32kB (UM) 4*64kB (UME) 9*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11016kB [ 1797.557318] Node 0 DMA32: 1250*4kB (UE) 4037*8kB (UE) 763*16kB (UME) 692*32kB (UE) 615*64kB (UM) 22*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 113824kB [ 1797.589604] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1797.614081] Node 1 Normal: 8233*4kB (UM) 1675*8kB (UME) 736*16kB (UM) 830*32kB (UME) 926*64kB (UM) 22*128kB (UM) 2*256kB (UM) 2*512kB (U) 104*1024kB (U) 1*2048kB (U) 0*4096kB = 256828kB [ 1797.647209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.683173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.718429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.733580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.760527] 44014 total pagecache pages [ 1797.764854] 0 pages in swap cache [ 1797.768314] Swap cache stats: add 0, delete 0, find 0/0 [ 1797.793948] Free swap = 0kB [ 1797.798555] Total swap = 0kB [ 1797.804579] 0 0 0 0 0 [ 1797.808097] 2097051 pages RAM [ 1797.812811] Node 1 Normal free:109844kB min:53696kB low:67120kB high:80544kB active_anon:3152kB inactive_anon:25288kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2312kB bounce:0kB free_pcp:792kB local_pcp:164kB free_cma:0kB [ 1797.832259] 0 pages HighMem/MovableOnly [ 1797.873363] 363848 pages reserved [ 1797.876844] 0 pages cma reserved [ 1797.924509] lowmem_reserve[]: 0 0 0 0 0 [ 1797.940733] Node 0 DMA: 2*4kB (ME) 2*8kB (UM) 3*16kB (ME) 2*32kB (UM) 4*64kB (UME) 9*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11016kB [ 1797.959167] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 1797.994122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1798.009246] Node 1 Normal: 236*4kB (UM) 1526*8kB (UME) 816*16kB (UM) 851*32kB (UME) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53632kB [ 1798.025586] Node 0 DMA32: 184*4kB (UME) 74*8kB (UME) 58*16kB (UME) 504*32kB (UME) 126*64kB (UM) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27728kB [ 1798.065693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.109099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1798.111282] Node 0 [ 1798.117701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.117708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1798.117712] 43327 total pagecache pages [ 1798.117722] 0 pages in swap cache [ 1798.117728] Swap cache stats: add 0, delete 0, find 0/0 [ 1798.117731] Free swap = 0kB [ 1798.152088] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1798.181179] Total swap = 0kB [ 1798.206702] 2097051 pages RAM [ 1798.215526] Node 1 Normal: 1110*4kB (UM) 1249*8kB (UME) 1099*16kB (UM) 846*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59088kB [ 1798.229037] 0 pages HighMem/MovableOnly [ 1798.235721] 363848 pages reserved [ 1798.259722] 0 pages cma reserved [ 1798.277768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.304592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1798.351001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.374050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1798.397216] 42461 total pagecache pages [ 1798.408840] 0 pages in swap cache [ 1798.416846] Swap cache stats: add 0, delete 0, find 0/0 [ 1798.432366] Free swap = 0kB [ 1798.438767] Total swap = 0kB [ 1798.450578] 2097051 pages RAM [ 1798.457062] 0 pages HighMem/MovableOnly [ 1798.469275] 363848 pages reserved [ 1798.477181] 0 pages cma reserved [ 1798.488057] Out of memory (oom_kill_allocating_task): Kill process 7105 (systemd-journal) score 0 or sacrifice child [ 1798.539241] Killed process 7105 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1588kB [ 1798.586346] oom_reaper: reaped process 7105 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1588kB [ 1798.679057] Bluetooth: hci0 command 0x041b tx timeout [ 1798.859674] modprobe invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1798.879336] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1798.888694] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1798.899028] modprobe cpuset=/ mems_allowed=0-1 [ 1798.907614] CPU: 0 PID: 7255 Comm: modprobe Not tainted 4.14.229-syzkaller #0 [ 1798.914897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.920860] syz-executor.4 cpuset= [ 1798.924241] Call Trace: [ 1798.924248] / [ 1798.927780] dump_stack+0x1b2/0x281 [ 1798.930365] mems_allowed=0-1 [ 1798.932039] dump_header+0x178/0x82f [ 1798.942426] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1798.947530] ? ___ratelimit+0x2cd/0x530 [ 1798.951511] oom_kill_process.cold+0x10/0xa40 [ 1798.956004] out_of_memory+0xe3e/0x1190 [ 1798.959969] ? oom_killer_disable+0x1c0/0x1c0 [ 1798.964469] ? mutex_trylock+0x152/0x1a0 [ 1798.968556] __alloc_pages_nodemask+0x23e1/0x2720 [ 1798.973401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1798.978245] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1798.983337] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1798.988344] ? __lock_acquire+0x5fc/0x3f20 [ 1798.992577] alloc_pages_vma+0xd2/0x6d0 [ 1798.996578] __handle_mm_fault+0xe4f/0x4620 [ 1799.000890] ? vm_insert_page+0x7c0/0x7c0 [ 1799.005038] ? SyS_mmap_pgoff+0x510/0x510 [ 1799.009199] ? mark_held_locks+0xa6/0xf0 [ 1799.013270] handle_mm_fault+0x455/0x9c0 [ 1799.017337] __do_page_fault+0x549/0xad0 [ 1799.021392] ? spurious_fault+0x640/0x640 [ 1799.025536] ? do_page_fault+0x60/0x500 [ 1799.029500] page_fault+0x25/0x50 [ 1799.032951] RIP: 0010:__clear_user+0x3d/0x60 [ 1799.037340] RSP: 0018:ffff8881cf81fc00 EFLAGS: 00010206 [ 1799.042706] RAX: 0000000000000000 RBX: 00000000000001f0 RCX: 00000000000001f0 [ 1799.049968] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000055782ba0c080 [ 1799.057222] RBP: 000055782ba0c080 R08: ffffffff8b994ac0 R09: 0000000000000000 [ 1799.064481] R10: 0000000000000000 R11: ffff888213d18300 R12: 000055782ba0c080 [ 1799.071737] R13: 000055782ba0d000 R14: 000055782ba0c080 R15: 1ffff11039f03fa4 [ 1799.079031] clear_user+0x74/0xb0 [ 1799.082487] load_elf_binary+0x2bf0/0x4750 [ 1799.086726] ? elf_core_dump+0x4410/0x4410 [ 1799.090973] search_binary_handler.part.0+0xd5/0x640 [ 1799.096065] do_execveat_common+0x1099/0x1f30 [ 1799.100550] ? copy_strings_kernel+0x110/0x110 [ 1799.105125] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1799.110572] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1799.115576] do_execve+0x33/0x50 [ 1799.118934] call_usermodehelper_exec_async+0x2ed/0x510 [ 1799.124284] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1799.129728] ret_from_fork+0x24/0x30 [ 1799.133444] CPU: 1 PID: 7113 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1799.141239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.150590] Call Trace: [ 1799.153187] dump_stack+0x1b2/0x281 [ 1799.156824] warn_alloc.cold+0x96/0x1cc [ 1799.160560] syz-executor.5 cpuset= [ 1799.160794] ? zone_watermark_ok_safe+0x220/0x220 [ 1799.160795] / mems_allowed=0-1 [ 1799.164334] __alloc_pages_nodemask+0x2127/0x2720 [ 1799.177168] ? lock_acquire+0x170/0x3f0 [ 1799.179056] syz-executor.3: page allocation failure: order:0 [ 1799.181144] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1799.181155] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1799.187203] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1799.196352] syz-executor.2: [ 1799.199128] ? __mutex_unlock_slowpath+0x75/0x770 [ 1799.199144] alloc_pages_current+0x155/0x260 [ 1799.199160] ion_page_pool_alloc+0x118/0x1b0 [ 1799.204695] syz-executor.0: [ 1799.207700] ion_system_heap_allocate+0x133/0x8c0 [ 1799.229129] ? _raw_spin_unlock+0x29/0x40 [ 1799.233275] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1799.233451] page allocation failure: order:0 [ 1799.238197] ? ion_system_contig_heap_create+0x130/0x130 [ 1799.238203] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1799.242602] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1799.242614] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1799.242624] ion_alloc+0x27a/0x810 [ 1799.242637] ? ion_dma_buf_release+0x40/0x40 [ 1799.242650] ? __might_fault+0x177/0x1b0 [ 1799.242661] ion_ioctl+0xea/0x1f0 [ 1799.242670] ? ion_query_heaps+0x360/0x360 [ 1799.242680] ? ion_query_heaps+0x360/0x360 [ 1799.242690] do_vfs_ioctl+0x75a/0xff0 [ 1799.242702] ? ioctl_preallocate+0x1a0/0x1a0 [ 1799.242712] ? lock_downgrade+0x740/0x740 [ 1799.242724] ? __fget+0x225/0x360 [ 1799.242732] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.242745] ? security_file_ioctl+0x83/0xb0 [ 1799.242755] SyS_ioctl+0x7f/0xb0 [ 1799.242761] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.242774] do_syscall_64+0x1d5/0x640 [ 1799.242786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1799.242795] RIP: 0033:0x466459 [ 1799.242800] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1799.242811] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1799.242816] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1799.242822] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1799.242827] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1799.242832] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1799.275617] warn_alloc_show_mem: 1 callbacks suppressed [ 1799.275620] Mem-Info: [ 1799.282616] page allocation failure: order:0 [ 1799.291635] active_anon:71649 inactive_anon:41241 isolated_anon:0 [ 1799.291635] active_file:17 inactive_file:17 isolated_file:0 [ 1799.291635] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1799.291635] slab_reclaimable:12467 slab_unreclaimable:127291 [ 1799.291635] mapped:52225 shmem:41739 pagetables:4855 bounce:0 [ 1799.291635] free:13739 free_pcp:0 free_cma:0 [ 1799.293852] (null) [ 1799.298231] Node 0 active_anon:283436kB inactive_anon:139676kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168928kB dirty:0kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1799.306637] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1799.321886] Node 1 active_anon:3160kB inactive_anon:25288kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:0kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1799.329773] CPU: 0 PID: 7248 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1799.340754] Node 0 [ 1799.341622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.348919] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.356159] Call Trace: [ 1799.356182] dump_stack+0x1b2/0x281 [ 1799.356195] warn_alloc.cold+0x96/0x1cc [ 1799.356209] ? zone_watermark_ok_safe+0x220/0x220 [ 1799.356231] __alloc_pages_nodemask+0x2127/0x2720 [ 1799.363515] lowmem_reserve[]: [ 1799.370769] ? __schedule+0x893/0x1de0 [ 1799.370787] ? lock_acquire+0x170/0x3f0 [ 1799.370804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1799.378049] 0 2717 [ 1799.383421] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1799.383434] ? __mutex_unlock_slowpath+0x75/0x770 [ 1799.383449] alloc_pages_current+0x155/0x260 [ 1799.385835] 2718 [ 1799.390232] ion_page_pool_alloc+0x118/0x1b0 [ 1799.390243] ion_system_heap_allocate+0x133/0x8c0 [ 1799.390269] ? ion_alloc+0x187/0x810 [ 1799.423429] 2718 [ 1799.425546] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1799.453590] 2718 [ 1799.460646] ? ion_system_contig_heap_create+0x130/0x130 [ 1799.460659] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1799.460673] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1799.495691] ion_alloc+0x204/0x810 [ 1799.495706] ? ion_dma_buf_release+0x40/0x40 [ 1799.497924] Node 0 [ 1799.507271] ? __might_fault+0x177/0x1b0 [ 1799.507283] ion_ioctl+0xea/0x1f0 [ 1799.507294] ? ion_query_heaps+0x360/0x360 [ 1799.532832] DMA32 free:17708kB min:36200kB low:45248kB high:54296kB active_anon:283432kB inactive_anon:139676kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.535365] ? ion_query_heaps+0x360/0x360 [ 1799.538956] lowmem_reserve[]: [ 1799.542917] do_vfs_ioctl+0x75a/0xff0 [ 1799.542930] ? ioctl_preallocate+0x1a0/0x1a0 [ 1799.542939] ? lock_downgrade+0x740/0x740 [ 1799.542951] ? __fget+0x225/0x360 [ 1799.542959] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.542970] ? security_file_ioctl+0x83/0xb0 [ 1799.542979] SyS_ioctl+0x7f/0xb0 [ 1799.542987] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.543000] do_syscall_64+0x1d5/0x640 [ 1799.547932] 0 [ 1799.552648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1799.552657] RIP: 0033:0x466459 [ 1799.552665] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 [ 1799.555752] 0 [ 1799.559618] ORIG_RAX: 0000000000000010 [ 1799.559624] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1799.559630] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1799.559635] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1799.559645] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1799.563598] 0 [ 1799.571023] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1799.575464] syz-executor.3 cpuset= [ 1799.578707] 0 [ 1799.583584] / mems_allowed=0-1 [ 1799.583605] CPU: 0 PID: 7124 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1799.583611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.583614] Call Trace: [ 1799.583633] dump_stack+0x1b2/0x281 [ 1799.583647] warn_alloc.cold+0x96/0x1cc [ 1799.583659] ? zone_watermark_ok_safe+0x220/0x220 [ 1799.583670] ? usleep_range+0x130/0x130 [ 1799.583680] ? try_to_free_pages+0x23f/0x6e0 [ 1799.583691] ? _find_next_bit+0xdb/0x100 [ 1799.583701] ? run_timer_softirq+0x5a0/0x5a0 [ 1799.583725] __alloc_pages_nodemask+0x2127/0x2720 [ 1799.583739] ? lock_acquire+0x170/0x3f0 [ 1799.583756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1799.583769] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1799.601369] 0 [ 1799.603139] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1799.610618] alloc_pages_current+0x155/0x260 [ 1799.610633] ion_page_pool_alloc+0x118/0x1b0 [ 1799.610644] ion_system_heap_allocate+0x133/0x8c0 [ 1799.612695] (null) [ 1799.618137] ? ion_alloc+0x187/0x810 [ 1799.623162] syz-executor.2 cpuset= [ 1799.627962] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1799.631525] Node 0 [ 1799.635874] ? ion_system_contig_heap_create+0x130/0x130 [ 1799.638095] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.642126] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1799.642139] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1799.642150] ion_alloc+0x204/0x810 [ 1799.642165] ? ion_dma_buf_release+0x40/0x40 [ 1799.645625] syz-executor.0 cpuset= [ 1799.649824] ? __might_fault+0x177/0x1b0 [ 1799.649837] ion_ioctl+0xea/0x1f0 [ 1799.649847] ? ion_query_heaps+0x360/0x360 [ 1799.649860] ? cp_compat_stat+0x890/0x890 [ 1799.678196] / [ 1799.682394] ? ion_query_heaps+0x360/0x360 [ 1799.685520] lowmem_reserve[]: [ 1799.689275] do_vfs_ioctl+0x75a/0xff0 [ 1799.689289] ? ioctl_preallocate+0x1a0/0x1a0 [ 1799.689302] ? lock_downgrade+0x740/0x740 [ 1799.693688] 0 [ 1799.697830] ? __fget+0x225/0x360 [ 1799.701326] mems_allowed=0-1 [ 1799.705249] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.719026] 0 [ 1799.720833] ? security_file_ioctl+0x83/0xb0 [ 1799.722603] 0 [ 1799.728407] SyS_ioctl+0x7f/0xb0 [ 1799.739010] / [ 1799.742765] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.759013] 0 [ 1799.764554] do_syscall_64+0x1d5/0x640 [ 1799.771859] mems_allowed=0-1 [ 1799.773624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1799.799014] 0 [ 1799.806450] RIP: 0033:0x466459 [ 1799.829775] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1799.833828] Node 1 [ 1799.838221] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1799.869052] Normal free:26288kB min:53696kB low:67120kB high:80544kB active_anon:3160kB inactive_anon:25288kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1120kB pagetables:2316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.872304] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1799.877129] lowmem_reserve[]: [ 1799.879368] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1799.879374] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1799.879379] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1799.884087] Mem-Info: [ 1799.886649] CPU: 1 PID: 7111 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1799.892133] active_anon:71649 inactive_anon:41241 isolated_anon:0 [ 1799.892133] active_file:17 inactive_file:17 isolated_file:0 [ 1799.892133] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1799.892133] slab_reclaimable:12467 slab_unreclaimable:127291 [ 1799.892133] mapped:52225 shmem:41739 pagetables:4855 bounce:0 [ 1799.892133] free:13739 free_pcp:0 free_cma:0 [ 1799.894291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.894297] Call Trace: [ 1799.904025] Node 0 active_anon:283436kB inactive_anon:139676kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168928kB dirty:0kB writeback:0kB shmem:141520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1799.924628] dump_stack+0x1b2/0x281 [ 1799.924641] warn_alloc.cold+0x96/0x1cc [ 1799.924653] ? zone_watermark_ok_safe+0x220/0x220 [ 1799.924663] ? usleep_range+0x130/0x130 [ 1799.924672] ? try_to_free_pages+0x23f/0x6e0 [ 1799.924682] ? _find_next_bit+0xdb/0x100 [ 1799.924692] ? run_timer_softirq+0x5a0/0x5a0 [ 1799.924709] __alloc_pages_nodemask+0x2127/0x2720 [ 1799.924731] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1799.936308] Node 1 active_anon:3160kB inactive_anon:25288kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:0kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1799.938099] ? migrate_swap_stop+0x880/0x880 [ 1799.942558] Node 0 [ 1799.946008] ? lock_acquire+0x170/0x3f0 [ 1799.956418] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.957721] alloc_pages_current+0x155/0x260 [ 1799.961884] lowmem_reserve[]: [ 1799.963540] ion_page_pool_alloc+0x118/0x1b0 [ 1799.967746] 0 [ 1799.970837] ion_system_heap_allocate+0x133/0x8c0 [ 1799.970850] ? _raw_spin_unlock+0x29/0x40 [ 1799.970860] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1799.970868] ? ion_system_contig_heap_create+0x130/0x130 [ 1799.970879] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1799.970892] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1799.970902] ion_alloc+0x27a/0x810 [ 1799.970916] ? ion_dma_buf_release+0x40/0x40 [ 1799.981251] 2717 [ 1799.983247] ? __might_fault+0x177/0x1b0 [ 1799.985022] 2718 [ 1799.988464] ion_ioctl+0xea/0x1f0 [ 1799.993690] 2718 [ 1799.995496] ? ion_query_heaps+0x360/0x360 [ 1799.997270] 2718 [ 1800.001667] ? ion_query_heaps+0x360/0x360 [ 1800.001678] do_vfs_ioctl+0x75a/0xff0 [ 1800.001691] ? ioctl_preallocate+0x1a0/0x1a0 [ 1800.001701] ? lock_downgrade+0x740/0x740 [ 1800.001714] ? __fget+0x225/0x360 [ 1800.001723] ? do_vfs_ioctl+0xff0/0xff0 [ 1800.001735] ? security_file_ioctl+0x83/0xb0 [ 1800.001745] SyS_ioctl+0x7f/0xb0 [ 1800.001752] ? do_vfs_ioctl+0xff0/0xff0 [ 1800.001767] do_syscall_64+0x1d5/0x640 [ 1800.008631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1800.023257] Node 0 [ 1800.026509] RIP: 0033:0x466459 [ 1800.028305] DMA32 free:17708kB min:36200kB low:45248kB high:54296kB active_anon:283432kB inactive_anon:139676kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12160kB pagetables:17104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.031465] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1800.031475] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1800.031480] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1800.031485] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1800.031490] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1800.031495] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1800.047418] 0 [ 1800.077322] lowmem_reserve[]: [ 1800.084825] CPU: 1 PID: 7114 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1800.112840] 0 [ 1800.119480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.119485] Call Trace: [ 1800.119506] dump_stack+0x1b2/0x281 [ 1800.119519] warn_alloc.cold+0x96/0x1cc [ 1800.119530] ? zone_watermark_ok_safe+0x220/0x220 [ 1800.119539] ? usleep_range+0x130/0x130 [ 1800.119547] ? try_to_free_pages+0x23f/0x6e0 [ 1800.119557] ? _find_next_bit+0xdb/0x100 [ 1800.119567] ? run_timer_softirq+0x5a0/0x5a0 [ 1800.119585] __alloc_pages_nodemask+0x2127/0x2720 [ 1800.119608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1800.119622] ? migrate_swap_stop+0x880/0x880 [ 1800.119630] ? lock_acquire+0x170/0x3f0 [ 1800.119654] alloc_pages_current+0x155/0x260 [ 1800.119666] ion_page_pool_alloc+0x118/0x1b0 [ 1800.119675] ion_system_heap_allocate+0x133/0x8c0 [ 1800.119686] ? _raw_spin_unlock+0x29/0x40 [ 1800.119695] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1800.119705] ? ion_system_contig_heap_create+0x130/0x130 [ 1800.119714] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1800.119724] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1800.119734] ion_alloc+0x27a/0x810 [ 1800.119746] ? ion_dma_buf_release+0x40/0x40 [ 1800.119758] ? __might_fault+0x177/0x1b0 [ 1800.119768] ion_ioctl+0xea/0x1f0 [ 1800.119777] ? ion_query_heaps+0x360/0x360 [ 1800.119790] ? ion_query_heaps+0x360/0x360 [ 1800.119802] do_vfs_ioctl+0x75a/0xff0 [ 1800.119814] ? ioctl_preallocate+0x1a0/0x1a0 [ 1800.119823] ? lock_downgrade+0x740/0x740 [ 1800.119837] ? __fget+0x225/0x360 [ 1800.119847] ? do_vfs_ioctl+0xff0/0xff0 [ 1800.119859] ? security_file_ioctl+0x83/0xb0 [ 1800.119870] SyS_ioctl+0x7f/0xb0 [ 1800.119878] ? do_vfs_ioctl+0xff0/0xff0 [ 1800.119890] do_syscall_64+0x1d5/0x640 [ 1800.119904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1800.119912] RIP: 0033:0x466459 [ 1800.119917] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1800.119928] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1800.119933] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1800.119938] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1800.119943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1800.119949] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1800.123684] 0 [ 1800.196491] 0 [ 1800.210336] 0 [ 1800.256961] 0 [ 1800.276335] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1800.354299] 0 [ 1800.412796] 0 [ 1800.571620] 0 [ 1800.572953] 0 [ 1800.598877] systemd[1]: Failed to start Journal Service. [ 1800.633983] Node 0 [ 1800.666883] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.686919] Node 0 [ 1800.732886] lowmem_reserve[]: [ 1800.745457] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1800.759284] Bluetooth: hci0 command 0x040f tx timeout [ 1800.789195] DMA: [ 1800.804298] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1800.813887] 0 0 0 0 0 [ 1800.815008] 2*4kB [ 1800.816412] Node 1 Normal free:677784kB min:53696kB low:67120kB high:80544kB active_anon:2860kB inactive_anon:25288kB active_file:2052kB inactive_file:2056kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1088kB pagetables:2316kB bounce:0kB free_pcp:736kB local_pcp:576kB free_cma:0kB [ 1800.816435] lowmem_reserve[]: [ 1800.820835] (ME) [ 1800.861246] 0 0 0 0 0 [ 1800.871131] Node 0 DMA: 2*4kB (ME) 1*8kB (M) 4*16kB (UME) 2*32kB (UM) 3*64kB (UME) 9*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 1800.894195] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1800.905133] Node 0 DMA32: 2*4kB (UE) 46*8kB (UME) 39*16kB (ME) 307*32kB (UME) 1294*64kB (UM) 96*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 0*4096kB = 109256kB [ 1800.921516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1800.932480] Node 1 Normal: 2*4kB (UM) 41*8kB (UE) 18*16kB (U) 787*32kB (UE) 3756*64kB (UM) 428*128kB (U) 149*256kB (U) 61*512kB (U) 224*1024kB (U) 43*2048kB (U) 1*4096kB (U) = 711888kB [ 1800.940364] systemd[1]: Stopped Journal Service. [ 1800.969093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1800.978113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1800.987088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1800.987211] 1*8kB [ 1800.996176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.014799] systemd[1]: Starting Journal Service... [ 1801.039544] 44032 total pagecache pages [ 1801.042792] (M) 4*16kB [ 1801.043542] 0 pages in swap cache [ 1801.043550] Swap cache stats: add 0, delete 0, find 0/0 [ 1801.046126] (UME) [ 1801.061247] Free swap = 0kB [ 1801.063002] 2*32kB [ 1801.063404] Total swap = 0kB [ 1801.066408] (UM) [ 1801.068625] 2097051 pages RAM [ 1801.089043] 3*64kB (UME) 9*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10960kB [ 1801.099108] 0 pages HighMem/MovableOnly [ 1801.104062] 363848 pages reserved [ 1801.107536] 0 pages cma reserved [ 1801.111370] Out of memory (oom_kill_allocating_task): Kill process 7255 (modprobe) score 0 or sacrifice child [ 1801.113920] Node 0 [ 1801.139123] Killed process 7255 (modprobe) total-vm:284kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1801.142809] DMA32: 2*4kB (ME) 47*8kB (UME) 39*16kB (UE) 275*32kB (UE) 2078*64kB (UM) 245*128kB (U) 29*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 182608kB 04:33:38 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xf5, 0x1c1142) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f00000001c0)=0x6) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0xe, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0xbc29f2b912ba8811) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:33:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x10800) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x5, 0x6, 0x5, 0x2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) [ 1801.199102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1801.215617] Node 1 Normal: 2*4kB (UM) 59*8kB (UE) 25*16kB (U) 797*32kB (UE) 5803*64kB (UM) 1119*128kB (U) 289*256kB (U) 81*512kB (U) 1*1024kB (U) 42*2048kB (U) 1*4096kB (U) = 747600kB [ 1801.259089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.293998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 04:33:38 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000000)={0x7ff, [[0x7f, 0x6, 0x0, 0xffff, 0x234, 0x978, 0xffffffcc, 0x7ff], [0x4, 0x4, 0x3, 0x75, 0x4, 0x1, 0xfffffffe, 0x120000], [0x7, 0x491, 0x0, 0x8, 0x800, 0x7, 0x1, 0x1]], [], [{0x9, 0x8, 0x1}, {0x9, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x501, 0x101, 0x0, 0x1, 0x1, 0x1}, {0xffffff00, 0x4, 0x0, 0x0, 0x1}, {0xfffffffc}, {0x2, 0xbf1, 0x1}, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1f, 0x0, 0x1, 0x1}, {0x80, 0x8, 0x1, 0x1, 0x1}, {0xaa34, 0x5cd, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1, 0x1}], [], 0xfffeffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) [ 1801.321586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.350366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.356867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.363660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.380465] device bridge_slave_0 entered promiscuous mode [ 1801.401617] 45799 total pagecache pages [ 1801.412989] 0 pages in swap cache [ 1801.413411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.425310] Swap cache stats: add 0, delete 0, find 0/0 [ 1801.441918] Free swap = 0kB [ 1801.451314] Total swap = 0kB [ 1801.452668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.461082] 2097051 pages RAM [ 1801.472166] 0 pages HighMem/MovableOnly [ 1801.485241] 363848 pages reserved [ 1801.491164] device bridge_slave_1 entered promiscuous mode [ 1801.495519] 0 pages cma reserved [ 1801.604189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1801.647926] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1801.728003] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1801.760502] team0: Port device team_slave_0 added [ 1801.770853] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1801.792448] team0: Port device team_slave_1 added [ 1801.860829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.867371] systemd-journald[7264]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1801.881645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.929219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.955407] systemd-journald[7264]: /dev/kmsg buffer overrun, some messages lost. [ 1801.957173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.990228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.024307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.061276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1802.082708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1802.177025] device hsr_slave_0 entered promiscuous mode [ 1802.213384] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1802.214572] device hsr_slave_1 entered promiscuous mode [ 1802.230769] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1802.247580] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1802.253962] CPU: 1 PID: 7281 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1802.264734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.268230] syz-executor.0 cpuset= [ 1802.274083] Call Trace: [ 1802.274105] dump_stack+0x1b2/0x281 [ 1802.274118] warn_alloc.cold+0x96/0x1cc [ 1802.274138] ? zone_watermark_ok_safe+0x220/0x220 [ 1802.274160] __alloc_pages_nodemask+0x2127/0x2720 [ 1802.274178] ? lock_acquire+0x170/0x3f0 [ 1802.274195] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.274213] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1802.274225] ? __mutex_unlock_slowpath+0x75/0x770 [ 1802.295836] / [ 1802.297714] alloc_pages_current+0x155/0x260 [ 1802.318805] mems_allowed=0-1 [ 1802.319743] ion_page_pool_alloc+0x118/0x1b0 [ 1802.319754] ion_system_heap_allocate+0x133/0x8c0 [ 1802.319763] ? ion_alloc+0x187/0x810 [ 1802.319775] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1802.319784] ? ion_system_contig_heap_create+0x130/0x130 [ 1802.319794] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1802.319806] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1802.319816] ion_alloc+0x204/0x810 [ 1802.319830] ? ion_dma_buf_release+0x40/0x40 [ 1802.369173] ? __might_fault+0x177/0x1b0 [ 1802.373246] ion_ioctl+0xea/0x1f0 [ 1802.380525] ? ion_query_heaps+0x360/0x360 [ 1802.384771] ? ion_query_heaps+0x360/0x360 [ 1802.389009] do_vfs_ioctl+0x75a/0xff0 [ 1802.392813] ? ioctl_preallocate+0x1a0/0x1a0 [ 1802.397223] ? lock_downgrade+0x740/0x740 [ 1802.401377] ? __fget+0x225/0x360 [ 1802.404867] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.408868] ? security_file_ioctl+0x83/0xb0 [ 1802.413279] SyS_ioctl+0x7f/0xb0 [ 1802.416642] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.420619] do_syscall_64+0x1d5/0x640 [ 1802.424520] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1802.429802] RIP: 0033:0x466459 [ 1802.432992] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1802.440709] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1802.447980] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1802.455342] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1802.462611] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1802.469899] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1802.477182] CPU: 0 PID: 7274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1802.484983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.494336] Call Trace: [ 1802.496932] dump_stack+0x1b2/0x281 [ 1802.500577] warn_alloc.cold+0x96/0x1cc [ 1802.504554] ? zone_watermark_ok_safe+0x220/0x220 [ 1802.509411] __alloc_pages_nodemask+0x2127/0x2720 [ 1802.514386] ? lock_acquire+0x170/0x3f0 [ 1802.518492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.523609] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1802.529503] ? __mutex_unlock_slowpath+0x75/0x770 [ 1802.534352] alloc_pages_current+0x155/0x260 [ 1802.538763] ion_page_pool_alloc+0x118/0x1b0 [ 1802.543173] ion_system_heap_allocate+0x133/0x8c0 [ 1802.548023] ? ion_alloc+0x187/0x810 [ 1802.551752] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1802.557202] ? ion_system_contig_heap_create+0x130/0x130 [ 1802.562656] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1802.567673] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1802.572519] ion_alloc+0x204/0x810 [ 1802.576060] ? ion_dma_buf_release+0x40/0x40 [ 1802.580555] ? __might_fault+0x177/0x1b0 [ 1802.584653] ion_ioctl+0xea/0x1f0 [ 1802.588106] ? ion_query_heaps+0x360/0x360 [ 1802.592362] ? ion_query_heaps+0x360/0x360 [ 1802.596627] do_vfs_ioctl+0x75a/0xff0 [ 1802.600431] ? ioctl_preallocate+0x1a0/0x1a0 [ 1802.604837] ? lock_downgrade+0x740/0x740 [ 1802.608986] ? __fget+0x225/0x360 [ 1802.612440] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.616413] ? security_file_ioctl+0x83/0xb0 [ 1802.620820] SyS_ioctl+0x7f/0xb0 [ 1802.624185] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.628177] do_syscall_64+0x1d5/0x640 [ 1802.632073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1802.637260] RIP: 0033:0x466459 [ 1802.640459] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1802.648175] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1802.655456] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1802.662819] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1802.670121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1802.677414] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1802.686305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1802.693444] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1802.699744] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1802.727225] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1802.749386] warn_alloc_show_mem: 4 callbacks suppressed [ 1802.749390] Mem-Info: [ 1802.753452] CPU: 0 PID: 7124 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1802.759060] active_anon:71728 inactive_anon:43273 isolated_anon:0 [ 1802.759060] active_file:1266 inactive_file:2879 isolated_file:0 [ 1802.759060] unevictable:0 dirty:58 writeback:0 unstable:0 [ 1802.759060] slab_reclaimable:12513 slab_unreclaimable:127291 [ 1802.759060] mapped:55277 shmem:43787 pagetables:4856 bounce:0 [ 1802.759060] free:120500 free_pcp:76 free_cma:0 [ 1802.765019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.808314] Call Trace: [ 1802.811013] dump_stack+0x1b2/0x281 [ 1802.814670] warn_alloc.cold+0x96/0x1cc [ 1802.818738] ? zone_watermark_ok_safe+0x220/0x220 [ 1802.824133] __alloc_pages_nodemask+0x2127/0x2720 [ 1802.829026] ? lock_acquire+0x170/0x3f0 [ 1802.833009] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.837869] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1802.839045] Node 0 active_anon:284132kB inactive_anon:147804kB active_file:2760kB inactive_file:9556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177544kB dirty:228kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1802.843319] ? __mutex_unlock_slowpath+0x75/0x770 [ 1802.876736] alloc_pages_current+0x155/0x260 [ 1802.881153] ion_page_pool_alloc+0x118/0x1b0 [ 1802.885680] ion_system_heap_allocate+0x133/0x8c0 [ 1802.890559] ? _raw_spin_unlock+0x29/0x40 [ 1802.894707] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1802.899638] ? ion_system_contig_heap_create+0x130/0x130 [ 1802.905180] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1802.909036] Node 1 active_anon:2780kB inactive_anon:25288kB active_file:2304kB inactive_file:1960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43564kB dirty:4kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1802.910284] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1802.944133] ion_alloc+0x27a/0x810 [ 1802.947813] ? ion_dma_buf_release+0x40/0x40 [ 1802.952330] ? __might_fault+0x177/0x1b0 [ 1802.956484] ion_ioctl+0xea/0x1f0 [ 1802.959942] ? ion_query_heaps+0x360/0x360 [ 1802.964194] ? cp_compat_stat+0x890/0x890 [ 1802.968340] ? ion_query_heaps+0x360/0x360 [ 1802.969016] Node 0 [ 1802.972607] do_vfs_ioctl+0x75a/0xff0 [ 1802.972626] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1802.972631] lowmem_reserve[]: [ 1802.974947] ? ioctl_preallocate+0x1a0/0x1a0 [ 1802.978731] 0 [ 1803.004440] ? lock_downgrade+0x740/0x740 [ 1803.004454] ? __fget+0x225/0x360 [ 1803.004463] ? do_vfs_ioctl+0xff0/0xff0 [ 1803.004475] ? security_file_ioctl+0x83/0xb0 [ 1803.004486] SyS_ioctl+0x7f/0xb0 [ 1803.033331] ? do_vfs_ioctl+0xff0/0xff0 [ 1803.037327] do_syscall_64+0x1d5/0x640 [ 1803.041225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1803.046431] RIP: 0033:0x466459 [ 1803.049025] 2717 [ 1803.049620] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 [ 1803.049628] 2718 [ 1803.051689] ORIG_RAX: 0000000000000010 [ 1803.057041] 2718 [ 1803.059098] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1803.059104] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1803.059108] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1803.059113] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1803.059118] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1803.060042] Bluetooth: hci0 command 0x0419 tx timeout [ 1803.070702] 2718 [ 1803.200568] Node 0 DMA32 free:50940kB min:36200kB low:45248kB high:54296kB active_anon:284140kB inactive_anon:147804kB active_file:2804kB inactive_file:9484kB unevictable:0kB writepending:260kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12416kB pagetables:17188kB bounce:0kB free_pcp:444kB local_pcp:132kB free_cma:0kB [ 1803.302127] lowmem_reserve[]: 0 0 0 0 0 [ 1803.318291] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.370826] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1803.464156] lowmem_reserve[]: 0 0 0 0 0 [ 1803.477456] Node 1 Normal free:53144kB min:53696kB low:67120kB high:80544kB active_anon:2780kB inactive_anon:25288kB active_file:2760kB inactive_file:1424kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2236kB bounce:0kB free_pcp:264kB local_pcp:116kB free_cma:0kB [ 1803.555741] lowmem_reserve[]: 0 0 0 0 0 [ 1803.561636] Node 0 DMA: 69*4kB (UME) 44*8kB (UM) 30*16kB (UME) 24*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10964kB [ 1803.577707] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1803.580594] Node 0 DMA32: 322*4kB (UM) 136*8kB (ME) 84*16kB (UME) 323*32kB (UME) 50*64kB (UM) 3*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17896kB [ 1803.605941] systemd-journal cpuset=/ mems_allowed=0-1 [ 1803.605966] CPU: 0 PID: 7264 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1803.619053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.628400] Call Trace: [ 1803.630988] dump_stack+0x1b2/0x281 [ 1803.634610] dump_header+0x178/0x82f [ 1803.638314] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1803.643407] ? ___ratelimit+0x2cd/0x530 [ 1803.647403] oom_kill_process.cold+0x10/0xa40 [ 1803.651911] out_of_memory+0xe3e/0x1190 [ 1803.655882] ? oom_killer_disable+0x1c0/0x1c0 [ 1803.660390] ? mutex_trylock+0x152/0x1a0 [ 1803.664443] __alloc_pages_nodemask+0x23e1/0x2720 [ 1803.669288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1803.674141] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1803.679527] ? cache_grow_begin+0x3f/0x700 [ 1803.683756] cache_grow_begin+0x91/0x700 [ 1803.687817] fallback_alloc+0x207/0x2c0 [ 1803.691823] kmem_cache_alloc+0x1e5/0x3c0 [ 1803.695981] getname_flags+0xc8/0x550 [ 1803.699788] user_path_at_empty+0x2a/0x50 [ 1803.703932] SyS_faccessat+0x21b/0x680 [ 1803.708078] ? SyS_fallocate+0x80/0x80 [ 1803.711962] ? do_syscall_64+0x4c/0x640 [ 1803.715942] ? SyS_faccessat+0x680/0x680 [ 1803.720004] do_syscall_64+0x1d5/0x640 [ 1803.723903] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1803.729085] RIP: 0033:0x7f55fc4669c7 [ 1803.732787] RSP: 002b:00007ffc5f377358 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1803.740492] RAX: ffffffffffffffda RBX: 00007ffc5f37a270 RCX: 00007f55fc4669c7 [ 1803.747759] RDX: 00007f55fced7a00 RSI: 0000000000000000 RDI: 0000559e140d09a3 [ 1803.755198] RBP: 00007ffc5f377390 R08: 0000000000000000 R09: 0000000000000000 [ 1803.762569] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1803.769833] R13: 0000000000000000 R14: 00007ffc5f37a270 R15: 00007ffc5f377880 [ 1803.801552] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1803.829051] Node 1 Normal: 128*4kB (UM) 63*8kB (ME) 30*16kB (M) 726*32kB (UME) 20*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26264kB [ 1803.845544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.854471] warn_alloc_show_mem: 1 callbacks suppressed [ 1803.854474] Mem-Info: [ 1803.859036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.863836] active_anon:71731 inactive_anon:43273 isolated_anon:0 [ 1803.863836] active_file:668 inactive_file:657 isolated_file:62 [ 1803.863836] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1803.863836] slab_reclaimable:12513 slab_unreclaimable:127517 [ 1803.863836] mapped:53827 shmem:43787 pagetables:4856 bounce:0 [ 1803.863836] free:13892 free_pcp:189 free_cma:0 [ 1803.885682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.913866] Mem-Info: [ 1803.921243] active_anon:71731 inactive_anon:43273 isolated_anon:0 [ 1803.921243] active_file:472 inactive_file:523 isolated_file:48 [ 1803.921243] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1803.921243] slab_reclaimable:12513 slab_unreclaimable:127517 [ 1803.921243] mapped:53502 shmem:43787 pagetables:4856 bounce:0 [ 1803.921243] free:14144 free_pcp:168 free_cma:0 [ 1803.955446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.960778] Node 0 active_anon:284144kB inactive_anon:147804kB active_file:1128kB inactive_file:1136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172244kB dirty:260kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1803.972513] 44684 total pagecache pages [ 1803.997182] Node 0 active_anon:284144kB inactive_anon:147804kB active_file:1128kB inactive_file:1036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172144kB dirty:260kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1804.029950] Node 1 active_anon:2780kB inactive_anon:25288kB active_file:760kB inactive_file:844kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:41564kB dirty:4kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1804.049028] 0 pages in swap cache [ 1804.061919] Node 1 active_anon:2780kB inactive_anon:25288kB active_file:768kB inactive_file:788kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:41488kB dirty:0kB writeback:4kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1804.093932] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.102618] Swap cache stats: add 0, delete 0, find 0/0 [ 1804.126542] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.128818] Free swap = 0kB [ 1804.157189] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1804.162571] Node 0 DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:284140kB inactive_anon:147804kB active_file:176kB inactive_file:268kB unevictable:0kB writepending:192kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12416kB pagetables:17188kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 1804.201212] Total swap = 0kB [ 1804.204240] 2097051 pages RAM [ 1804.205163] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1804.215922] 0 pages HighMem/MovableOnly [ 1804.217188] Node 0 DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:284140kB inactive_anon:147804kB active_file:176kB inactive_file:268kB unevictable:0kB writepending:192kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12416kB pagetables:17188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.233701] 363848 pages reserved [ 1804.259294] lowmem_reserve[]: 0 0 0 0 0 [ 1804.263298] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.269003] lowmem_reserve[]: [ 1804.288866] 0 pages cma reserved [ 1804.298811] 0 0 0 0 0 [ 1804.301435] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.302136] lowmem_reserve[]: [ 1804.327094] lowmem_reserve[]: 0 0 0 0 0 [ 1804.334271] Node 1 Normal free:26392kB min:53696kB low:67120kB high:80544kB active_anon:2780kB inactive_anon:25288kB active_file:204kB inactive_file:248kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.336825] 0 0 0 0 0 [ 1804.372933] Node 1 Normal free:26392kB min:53696kB low:67120kB high:80544kB active_anon:2780kB inactive_anon:25288kB active_file:204kB inactive_file:248kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.379003] lowmem_reserve[]: [ 1804.408654] lowmem_reserve[]: [ 1804.409704] 0 [ 1804.412037] 0 [ 1804.414887] 0 [ 1804.416669] 0 [ 1804.418450] 0 [ 1804.424502] 0 0 0 [ 1804.428467] Node 0 DMA: 69*4kB (UME) 44*8kB (UM) 30*16kB (UME) 24*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10964kB [ 1804.431822] 0 [ 1804.445427] Node 0 DMA32: 695*4kB (UM) 158*8kB (UME) 91*16kB (ME) 197*32kB (UME) 60*64kB (UM) 3*128kB (UM) 6*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1804.461574] 0 [ 1804.463186] Node 0 [ 1804.464476] Node 0 [ 1804.464479] Normal: 0*4kB [ 1804.466713] DMA: [ 1804.468933] 0*8kB 0*16kB [ 1804.474234] 69*4kB (UME) 44*8kB (UM) 30*16kB (UME) 24*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10964kB [ 1804.477628] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1804.504109] Node 1 Normal: 59*4kB (UM) 54*8kB (ME) 19*16kB (M) 696*32kB (UME) 20*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26700kB [ 1804.509029] Node 0 DMA32: 695*4kB (UM) 158*8kB (UME) 91*16kB (ME) 197*32kB (UME) 60*64kB (UM) 3*128kB (UM) 6*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1804.522558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.553858] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.557107] Node 0 Normal: [ 1804.562737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.562747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.565671] 0*4kB [ 1804.578329] 43893 total pagecache pages [ 1804.594938] 0 pages in swap cache [ 1804.598412] Swap cache stats: add 0, delete 0, find 0/0 [ 1804.603434] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1804.603874] Free swap = 0kB [ 1804.619395] Total swap = 0kB [ 1804.622424] 2097051 pages RAM [ 1804.625516] 0 pages HighMem/MovableOnly [ 1804.629575] Node 1 Normal: 59*4kB (UM) 54*8kB (ME) 19*16kB (M) 696*32kB (UME) 20*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26700kB [ 1804.634595] 363848 pages reserved [ 1804.647617] 0 pages cma reserved [ 1804.651079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.654805] Out of memory (oom_kill_allocating_task): Kill process 7264 (systemd-journal) score 0 or sacrifice child [ 1804.662415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.674431] Killed process 7264 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1296kB [ 1804.694853] oom_reaper: reaped process 7264 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1804.698218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.725311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.737112] oom_reaper: reaped process 7274 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1804.751540] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1804.762059] oom_reaper: reaped process 7248 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1804.764015] 43893 total pagecache pages [ 1804.779869] 0 pages in swap cache [ 1804.783326] Swap cache stats: add 0, delete 0, find 0/0 [ 1804.786593] oom_reaper: reaped process 7281 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1804.788683] Free swap = 0kB [ 1804.804073] Total swap = 0kB [ 1804.806956] syz-executor.4 cpuset= [ 1804.807092] 2097051 pages RAM [ 1804.807093] / mems_allowed=0-1 [ 1804.810652] 0 pages HighMem/MovableOnly [ 1804.810657] 363848 pages reserved [ 1804.810660] 0 pages cma reserved [ 1804.836234] CPU: 0 PID: 7113 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1804.844044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.853396] Call Trace: [ 1804.855997] dump_stack+0x1b2/0x281 [ 1804.859635] warn_alloc.cold+0x96/0x1cc [ 1804.863610] ? zone_watermark_ok_safe+0x220/0x220 [ 1804.868444] ? usleep_range+0x130/0x130 [ 1804.872414] ? try_to_free_pages+0x23f/0x6e0 [ 1804.876810] ? _find_next_bit+0xdb/0x100 [ 1804.880859] ? run_timer_softirq+0x5a0/0x5a0 [ 1804.885266] __alloc_pages_nodemask+0x2127/0x2720 [ 1804.890105] ? lock_acquire+0x170/0x3f0 [ 1804.894083] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1804.898917] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1804.903407] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1804.908858] alloc_pages_current+0x155/0x260 [ 1804.913261] ion_page_pool_alloc+0x118/0x1b0 [ 1804.917679] ion_system_heap_allocate+0x133/0x8c0 [ 1804.922514] ? _raw_spin_unlock+0x29/0x40 [ 1804.926651] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1804.931569] ? ion_system_contig_heap_create+0x130/0x130 [ 1804.937011] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1804.942019] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1804.946863] ion_alloc+0x27a/0x810 [ 1804.950398] ? ion_dma_buf_release+0x40/0x40 [ 1804.954800] ? __might_fault+0x177/0x1b0 [ 1804.958853] ion_ioctl+0xea/0x1f0 [ 1804.962297] ? ion_query_heaps+0x360/0x360 [ 1804.966522] ? ion_query_heaps+0x360/0x360 [ 1804.970747] do_vfs_ioctl+0x75a/0xff0 [ 1804.974544] ? ioctl_preallocate+0x1a0/0x1a0 [ 1804.978940] ? lock_downgrade+0x740/0x740 [ 1804.983080] ? __fget+0x225/0x360 [ 1804.986554] ? do_vfs_ioctl+0xff0/0xff0 [ 1804.990528] ? security_file_ioctl+0x83/0xb0 [ 1804.994928] SyS_ioctl+0x7f/0xb0 [ 1804.998279] ? do_vfs_ioctl+0xff0/0xff0 [ 1805.002246] do_syscall_64+0x1d5/0x640 [ 1805.006131] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1805.011313] RIP: 0033:0x466459 [ 1805.014489] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.022195] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1805.029470] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1805.036727] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1805.043988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1805.051265] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1805.061144] Mem-Info: [ 1805.063581] active_anon:71556 inactive_anon:43273 isolated_anon:0 [ 1805.063581] active_file:37 inactive_file:20 isolated_file:1 [ 1805.063581] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1805.063581] slab_reclaimable:12513 slab_unreclaimable:127522 [ 1805.063581] mapped:52579 shmem:43787 pagetables:4856 bounce:0 [ 1805.063581] free:13919 free_pcp:0 free_cma:0 [ 1805.104118] Node 0 active_anon:283396kB inactive_anon:147804kB active_file:36kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170280kB dirty:104kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.132785] Node 1 active_anon:2764kB inactive_anon:25288kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:4kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.160199] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.193996] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1805.199916] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1805.210081] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1805.217795] CPU: 1 PID: 7123 Comm: rs:main Q:Reg Not tainted 4.14.229-syzkaller #0 [ 1805.219063] syz-executor.5: [ 1805.225683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.225694] page allocation failure: order:0 [ 1805.228900] Call Trace: [ 1805.245768] dump_stack+0x1b2/0x281 [ 1805.249058] Node 0 DMA32 free:17740kB min:36200kB low:45248kB high:54296kB active_anon:283392kB inactive_anon:147804kB active_file:136kB inactive_file:36kB unevictable:0kB writepending:104kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12416kB pagetables:17188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.249950] dump_header+0x178/0x82f [ 1805.249963] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1805.289130] ? ___ratelimit+0x2cd/0x530 [ 1805.290886] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1805.293123] oom_kill_process.cold+0x10/0xa40 [ 1805.293144] out_of_memory+0xe3e/0x1190 [ 1805.307448] syz-executor.5 cpuset= [ 1805.309254] ? oom_killer_disable+0x1c0/0x1c0 [ 1805.309265] ? mutex_trylock+0x152/0x1a0 [ 1805.309275] __alloc_pages_nodemask+0x23e1/0x2720 [ 1805.309290] ? trace_hardirqs_on+0x10/0x10 [ 1805.309303] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1805.309314] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1805.309336] alloc_pages_current+0x155/0x260 [ 1805.309347] pagecache_get_page+0x3f5/0xab0 [ 1805.309359] grab_cache_page_write_begin+0x63/0x90 [ 1805.315243] / [ 1805.317651] ext4_da_write_begin+0x249/0xe70 [ 1805.328246] mems_allowed=0-1 [ 1805.330770] ? __ext4_journal_stop+0xe7/0x1b0 [ 1805.330783] ? ext4_write_begin+0x1260/0x1260 [ 1805.330792] ? balance_dirty_pages_ratelimited+0x8be/0x1800 [ 1805.330804] generic_perform_write+0x1c9/0x420 [ 1805.330818] ? __mnt_drop_write_file+0x5f/0x90 [ 1805.330828] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1805.337028] lowmem_reserve[]: [ 1805.341360] ? current_time+0xb0/0xb0 [ 1805.341370] ? ext4_file_write_iter+0x1cc/0xd20 [ 1805.341381] __generic_file_write_iter+0x227/0x590 [ 1805.341393] ext4_file_write_iter+0x276/0xd20 [ 1805.341403] ? aa_file_perm+0x304/0xab0 [ 1805.341412] ? ext4_file_read_iter+0x330/0x330 [ 1805.341423] ? trace_hardirqs_on+0x10/0x10 [ 1805.341433] ? iov_iter_init+0xa6/0x1c0 [ 1805.341443] __vfs_write+0x44c/0x630 [ 1805.341453] ? kernel_read+0x110/0x110 [ 1805.360941] 0 [ 1805.362641] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1805.365725] 0 [ 1805.370298] vfs_write+0x17f/0x4d0 [ 1805.370309] SyS_write+0xf2/0x210 [ 1805.370317] ? SyS_read+0x210/0x210 [ 1805.370325] ? __do_page_fault+0x159/0xad0 [ 1805.370333] ? do_syscall_64+0x4c/0x640 [ 1805.370340] ? SyS_read+0x210/0x210 [ 1805.370347] do_syscall_64+0x1d5/0x640 [ 1805.370360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1805.370367] RIP: 0033:0x7f8ba819a1cd [ 1805.370371] RSP: 002b:00007f8ba5755590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1805.370382] RAX: ffffffffffffffda RBX: 00007f8b9c0273d0 RCX: 00007f8ba819a1cd [ 1805.370391] RDX: 000000000000019d RSI: 00007f8b9c0273d0 RDI: 0000000000000008 [ 1805.403325] 0 [ 1805.406090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1805.406098] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8b9c027150 [ 1805.423268] 0 [ 1805.424046] R13: 00007f8ba57555b0 R14: 000056207f06c800 R15: 000000000000019d [ 1805.428267] 0 [ 1805.440319] systemd-journal: [ 1805.440538] syz-executor.3: [ 1805.446100] page allocation failure: order:1 [ 1805.451175] syz-executor.0: [ 1805.465192] , mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1805.472047] syz-executor.2: [ 1805.477621] (null) [ 1805.494770] CPU: 0 PID: 7248 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1805.500610] systemd-journal cpuset= [ 1805.503285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.510650] / [ 1805.512351] Call Trace: [ 1805.512373] dump_stack+0x1b2/0x281 [ 1805.512388] warn_alloc.cold+0x96/0x1cc [ 1805.519874] mems_allowed=0-1 [ 1805.527103] ? zone_watermark_ok_safe+0x220/0x220 [ 1805.604521] ? usleep_range+0x130/0x130 [ 1805.608492] ? try_to_free_pages+0x23f/0x6e0 [ 1805.612908] ? _find_next_bit+0xdb/0x100 [ 1805.616977] ? run_timer_softirq+0x5a0/0x5a0 [ 1805.621389] __alloc_pages_nodemask+0x2127/0x2720 [ 1805.626249] ? lock_acquire+0x170/0x3f0 [ 1805.630251] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1805.635102] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1805.639598] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1805.645218] ? check_preemption_disabled+0x35/0x240 [ 1805.651562] alloc_pages_current+0x155/0x260 [ 1805.655970] ion_page_pool_alloc+0x118/0x1b0 [ 1805.660408] ion_system_heap_allocate+0x133/0x8c0 [ 1805.665369] ? ion_alloc+0x187/0x810 [ 1805.669015] Mem-Info: [ 1805.669102] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1805.671513] active_anon:71540 inactive_anon:43273 isolated_anon:0 [ 1805.671513] active_file:37 inactive_file:14 isolated_file:0 [ 1805.671513] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1805.671513] slab_reclaimable:12513 slab_unreclaimable:127522 [ 1805.671513] mapped:52563 shmem:43787 pagetables:4856 bounce:0 [ 1805.671513] free:13856 free_pcp:0 free_cma:0 [ 1805.676953] ? ion_system_contig_heap_create+0x130/0x130 [ 1805.715638] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1805.720656] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1805.725754] ion_alloc+0x204/0x810 [ 1805.729293] ? ion_dma_buf_release+0x40/0x40 [ 1805.733710] ? __might_fault+0x177/0x1b0 [ 1805.737768] ion_ioctl+0xea/0x1f0 [ 1805.741215] ? ion_query_heaps+0x360/0x360 [ 1805.746674] ? ion_query_heaps+0x360/0x360 [ 1805.749016] Node 0 active_anon:283396kB inactive_anon:147804kB active_file:136kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170280kB dirty:104kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.750993] do_vfs_ioctl+0x75a/0xff0 [ 1805.751007] ? ioctl_preallocate+0x1a0/0x1a0 [ 1805.795684] ? lock_downgrade+0x740/0x740 [ 1805.799830] ? __fget+0x225/0x360 [ 1805.803292] ? do_vfs_ioctl+0xff0/0xff0 [ 1805.807535] ? security_file_ioctl+0x83/0xb0 [ 1805.812049] SyS_ioctl+0x7f/0xb0 [ 1805.815407] ? do_vfs_ioctl+0xff0/0xff0 [ 1805.819375] do_syscall_64+0x1d5/0x640 [ 1805.823262] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1805.828482] RIP: 0033:0x466459 [ 1805.829021] Node 1 active_anon:2764kB inactive_anon:25288kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:4kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.831762] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.868331] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1805.875610] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1805.882883] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1805.889019] Node 0 [ 1805.890162] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1805.890182] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.892392] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1805.941476] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1805.941816] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.959023] CPU: 1 PID: 7264 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1805.990610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.991339] lowmem_reserve[]: [ 1806.001045] Call Trace: [ 1806.001068] dump_stack+0x1b2/0x281 [ 1806.001080] warn_alloc.cold+0x96/0x1cc [ 1806.001091] ? zone_watermark_ok_safe+0x220/0x220 [ 1806.001100] ? usleep_range+0x130/0x130 [ 1806.001111] ? run_timer_softirq+0x5a0/0x5a0 [ 1806.001129] __alloc_pages_nodemask+0x2127/0x2720 [ 1806.012182] 0 [ 1806.015420] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1806.022531] 0 [ 1806.024190] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1806.028571] 0 [ 1806.033410] ? cache_grow_begin+0x3f/0x700 [ 1806.033421] cache_grow_begin+0x91/0x700 [ 1806.033434] fallback_alloc+0x207/0x2c0 [ 1806.033450] kmem_cache_alloc+0x1e5/0x3c0 [ 1806.037458] page allocation failure: order:0 [ 1806.040098] getname_flags+0xc8/0x550 [ 1806.040109] user_path_at_empty+0x2a/0x50 [ 1806.040119] SyS_faccessat+0x21b/0x680 [ 1806.040129] ? SyS_fallocate+0x80/0x80 [ 1806.040138] ? do_syscall_64+0x4c/0x640 [ 1806.040144] ? SyS_faccessat+0x680/0x680 [ 1806.040153] do_syscall_64+0x1d5/0x640 [ 1806.040165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1806.040173] RIP: 0033:0x7f55fc4669c7 [ 1806.040177] RSP: 002b:00007ffc5f377358 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1806.040186] RAX: ffffffffffffffda RBX: 00007ffc5f37a270 RCX: 00007f55fc4669c7 [ 1806.040191] RDX: 00007f55fced7a00 RSI: 0000000000000000 RDI: 0000559e140d09a3 [ 1806.040195] RBP: 00007ffc5f377390 R08: 0000000000000000 R09: 0000000000000000 [ 1806.040203] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1806.044189] syz-executor.2 cpuset= [ 1806.047346] R13: 0000000000000000 R14: 00007ffc5f37a270 R15: 00007ffc5f377880 [ 1806.059720] page allocation failure: order:0 [ 1806.066209] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1806.077001] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1806.078106] 0 [ 1806.089013] (null) [ 1806.094269] (null) [ 1806.097818] syz-executor.3 cpuset= [ 1806.106800] syz-executor.0 cpuset= [ 1806.121847] lowmem_reserve[]: [ 1806.126406] 0 [ 1806.146264] / [ 1806.191906] / [ 1806.200622] / mems_allowed=0-1 [ 1806.205538] CPU: 0 PID: 7274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1806.210210] 0 [ 1806.213326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.213334] 2717 [ 1806.215141] Call Trace: [ 1806.224623] 2718 [ 1806.226643] dump_stack+0x1b2/0x281 [ 1806.229217] 2718 [ 1806.231255] warn_alloc.cold+0x96/0x1cc [ 1806.234858] 2718 [ 1806.236911] ? zone_watermark_ok_safe+0x220/0x220 [ 1806.240905] mems_allowed=0-1 [ 1806.242930] ? usleep_range+0x130/0x130 [ 1806.250851] ? try_to_free_pages+0x23f/0x6e0 [ 1806.250863] ? _find_next_bit+0xdb/0x100 [ 1806.250873] ? run_timer_softirq+0x5a0/0x5a0 [ 1806.250890] __alloc_pages_nodemask+0x2127/0x2720 [ 1806.250906] ? lock_acquire+0x170/0x3f0 [ 1806.250920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1806.250929] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1806.250947] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1806.250967] alloc_pages_current+0x155/0x260 [ 1806.269028] Node 0 [ 1806.272796] ion_page_pool_alloc+0x118/0x1b0 [ 1806.276755] DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:283392kB inactive_anon:147804kB active_file:140kB inactive_file:16kB unevictable:0kB writepending:104kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12416kB pagetables:17188kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1806.281574] ion_system_heap_allocate+0x133/0x8c0 [ 1806.281584] ? ion_alloc+0x187/0x810 [ 1806.281594] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1806.281603] ? ion_system_contig_heap_create+0x130/0x130 [ 1806.281614] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1806.281627] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1806.286119] mems_allowed=0-1 [ 1806.291537] ion_alloc+0x204/0x810 [ 1806.291552] ? ion_dma_buf_release+0x40/0x40 [ 1806.291568] ? __might_fault+0x177/0x1b0 [ 1806.319003] Mem-Info: [ 1806.331270] ion_ioctl+0xea/0x1f0 [ 1806.331281] ? ion_query_heaps+0x360/0x360 [ 1806.331293] ? ion_query_heaps+0x360/0x360 [ 1806.331309] do_vfs_ioctl+0x75a/0xff0 [ 1806.336155] lowmem_reserve[]: [ 1806.339845] ? ioctl_preallocate+0x1a0/0x1a0 [ 1806.339855] ? lock_downgrade+0x740/0x740 [ 1806.339869] ? __fget+0x225/0x360 [ 1806.369021] 0 [ 1806.371603] ? do_vfs_ioctl+0xff0/0xff0 [ 1806.375638] 0 [ 1806.378041] ? security_file_ioctl+0x83/0xb0 [ 1806.381532] active_anon:71540 inactive_anon:43273 isolated_anon:0 [ 1806.381532] active_file:37 inactive_file:9 isolated_file:0 [ 1806.381532] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1806.381532] slab_reclaimable:12510 slab_unreclaimable:127494 [ 1806.381532] mapped:52563 shmem:43787 pagetables:4856 bounce:0 [ 1806.381532] free:13887 free_pcp:4 free_cma:0 [ 1806.385684] SyS_ioctl+0x7f/0xb0 [ 1806.409030] Node 0 active_anon:283396kB inactive_anon:147804kB active_file:140kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170280kB dirty:104kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1806.410546] ? do_vfs_ioctl+0xff0/0xff0 [ 1806.414515] Node 1 active_anon:2764kB inactive_anon:25288kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:4kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1806.416312] do_syscall_64+0x1d5/0x640 [ 1806.420766] 0 [ 1806.453857] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1806.453866] RIP: 0033:0x466459 [ 1806.453871] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1806.453880] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1806.453886] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1806.453896] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1806.479025] Node 0 [ 1806.485541] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1806.509033] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1806.516591] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1806.542252] lowmem_reserve[]: [ 1806.570227] CPU: 1 PID: 7124 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1806.602308] Node 1 [ 1806.602923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.606027] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:2764kB inactive_anon:25288kB active_file:8kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1806.613782] Call Trace: [ 1806.613802] dump_stack+0x1b2/0x281 [ 1806.613816] warn_alloc.cold+0x96/0x1cc [ 1806.613827] ? zone_watermark_ok_safe+0x220/0x220 [ 1806.613837] ? usleep_range+0x130/0x130 [ 1806.613846] ? try_to_free_pages+0x23f/0x6e0 [ 1806.613856] ? _find_next_bit+0xdb/0x100 [ 1806.613866] ? run_timer_softirq+0x5a0/0x5a0 [ 1806.613882] __alloc_pages_nodemask+0x2127/0x2720 [ 1806.613902] ? lock_acquire+0x170/0x3f0 [ 1806.618432] lowmem_reserve[]: [ 1806.625476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1806.625487] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1806.625503] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1806.625523] alloc_pages_current+0x155/0x260 [ 1806.625536] ion_page_pool_alloc+0x118/0x1b0 [ 1806.625546] ion_system_heap_allocate+0x133/0x8c0 [ 1806.625560] ? _raw_spin_unlock+0x29/0x40 [ 1806.660125] 0 [ 1806.663660] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1806.668482] 0 [ 1806.672453] ? ion_system_contig_heap_create+0x130/0x130 [ 1806.672464] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1806.672481] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1806.672491] ion_alloc+0x27a/0x810 [ 1806.672504] ? ion_dma_buf_release+0x40/0x40 [ 1806.672515] ? __might_fault+0x177/0x1b0 [ 1806.672527] ion_ioctl+0xea/0x1f0 [ 1806.672536] ? ion_query_heaps+0x360/0x360 [ 1806.672547] ? cp_compat_stat+0x890/0x890 [ 1806.672555] ? ion_query_heaps+0x360/0x360 [ 1806.672566] do_vfs_ioctl+0x75a/0xff0 [ 1806.672577] ? ioctl_preallocate+0x1a0/0x1a0 [ 1806.683150] 0 [ 1806.685429] ? lock_downgrade+0x740/0x740 [ 1806.690935] 0 [ 1806.694224] ? __fget+0x225/0x360 [ 1806.697297] 0 [ 1806.702131] ? do_vfs_ioctl+0xff0/0xff0 [ 1806.702143] ? security_file_ioctl+0x83/0xb0 [ 1806.702152] SyS_ioctl+0x7f/0xb0 [ 1806.702161] ? do_vfs_ioctl+0xff0/0xff0 [ 1806.702178] do_syscall_64+0x1d5/0x640 [ 1806.702192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1806.702201] RIP: 0033:0x466459 [ 1806.702205] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1806.702216] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1806.702225] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1806.716541] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1806.721875] Node 0 [ 1806.725778] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1806.734322] DMA: [ 1806.736615] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1806.738405] 69*4kB [ 1806.762311] CPU: 1 PID: 7281 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1806.772484] (UME) [ 1806.773539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.777754] 44*8kB [ 1806.781968] Call Trace: [ 1806.781990] dump_stack+0x1b2/0x281 [ 1806.782004] warn_alloc.cold+0x96/0x1cc [ 1806.782016] ? zone_watermark_ok_safe+0x220/0x220 [ 1806.782027] ? usleep_range+0x130/0x130 [ 1806.782039] ? queue_work_on+0x10d/0x1d0 [ 1806.785821] (UM) [ 1806.790213] ? _find_next_bit+0xdb/0x100 [ 1806.790223] ? run_timer_softirq+0x5a0/0x5a0 [ 1806.790239] __alloc_pages_nodemask+0x2127/0x2720 [ 1806.790255] ? lock_acquire+0x170/0x3f0 [ 1806.790270] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1806.790281] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1806.790297] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1806.790321] alloc_pages_current+0x155/0x260 [ 1806.798640] 30*16kB [ 1806.801487] ion_page_pool_alloc+0x118/0x1b0 [ 1806.801497] ion_system_heap_allocate+0x133/0x8c0 [ 1806.801506] ? ion_alloc+0x187/0x810 [ 1806.801516] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1806.801525] ? ion_system_contig_heap_create+0x130/0x130 [ 1806.801535] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1806.801549] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1806.803332] (UME) [ 1806.807293] ion_alloc+0x204/0x810 [ 1806.818168] 24*32kB [ 1806.819000] ? ion_dma_buf_release+0x40/0x40 [ 1806.819013] ? __might_fault+0x177/0x1b0 [ 1806.819024] ion_ioctl+0xea/0x1f0 [ 1806.819034] ? ion_query_heaps+0x360/0x360 [ 1806.819046] ? ion_query_heaps+0x360/0x360 [ 1806.822915] (UM) [ 1806.828106] do_vfs_ioctl+0x75a/0xff0 [ 1806.837732] 2*64kB [ 1806.838977] ? ioctl_preallocate+0x1a0/0x1a0 [ 1806.838987] ? lock_downgrade+0x740/0x740 [ 1806.839001] ? __fget+0x225/0x360 [ 1806.839011] ? do_vfs_ioctl+0xff0/0xff0 [ 1806.846270] (ME) [ 1806.853543] ? security_file_ioctl+0x83/0xb0 [ 1806.853554] SyS_ioctl+0x7f/0xb0 [ 1806.853562] ? do_vfs_ioctl+0xff0/0xff0 [ 1806.853573] do_syscall_64+0x1d5/0x640 [ 1806.853587] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1806.853596] RIP: 0033:0x466459 [ 1806.853600] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1806.853610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1806.853616] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1806.853622] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1806.853627] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1806.853632] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1806.867738] 0 [ 1806.876891] 2*128kB [ 1806.897889] 0 [ 1806.929516] (ME) [ 1806.943377] 0 [ 1806.974389] 2*256kB [ 1806.985163] 2717 [ 1807.020622] (ME) [ 1807.068443] 2*512kB [ 1807.079934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1807.131415] (ME) [ 1807.134105] 2718 [ 1807.139156] 3*1024kB [ 1807.144787] 2718 [ 1807.163365] (UME) 2*2048kB (M) 0*4096kB = 10964kB [ 1807.168326] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.189062] Node 0 DMA32: 2360*4kB (UME) 470*8kB (UME) 1035*16kB (UME) 356*32kB (UME) 86*64kB (UM) 4*128kB (UM) 6*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 49216kB [ 1807.209003] 2718 [ 1807.212615] warn_alloc_show_mem: 2 callbacks suppressed [ 1807.212618] Mem-Info: [ 1807.214102] Node 0 [ 1807.219615] active_anon:71541 inactive_anon:43273 isolated_anon:0 [ 1807.219615] active_file:20 inactive_file:1623 isolated_file:0 [ 1807.219615] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1807.219615] slab_reclaimable:12510 slab_unreclaimable:127068 [ 1807.219615] mapped:53693 shmem:43787 pagetables:4856 bounce:0 [ 1807.219615] free:27094 free_pcp:257 free_cma:0 [ 1807.229233] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1807.258205] Node 0 [ 1807.279060] DMA32 free:50136kB min:36200kB low:45248kB high:54296kB active_anon:283492kB inactive_anon:147804kB active_file:60kB inactive_file:1660kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12416kB pagetables:17188kB bounce:0kB free_pcp:792kB local_pcp:628kB free_cma:0kB [ 1807.282954] Normal: [ 1807.311039] lowmem_reserve[]: 0 0 0 0 0 [ 1807.314267] 0*4kB 0*8kB [ 1807.317365] Node 1 Normal free:26876kB min:53696kB low:67120kB high:80544kB active_anon:2768kB inactive_anon:25288kB active_file:20kB inactive_file:4832kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2236kB bounce:0kB free_pcp:236kB local_pcp:140kB free_cma:0kB [ 1807.320420] Node 0 active_anon:283496kB inactive_anon:147804kB active_file:60kB inactive_file:1660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171380kB dirty:0kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1807.320439] Node 1 active_anon:2768kB inactive_anon:25288kB active_file:20kB inactive_file:4832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43392kB dirty:0kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1807.320443] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.320464] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1807.320486] Node 0 DMA32 free:50136kB min:36200kB low:45248kB high:54296kB active_anon:283492kB inactive_anon:147804kB active_file:60kB inactive_file:1660kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12416kB pagetables:17188kB bounce:0kB free_pcp:1484kB local_pcp:856kB free_cma:0kB [ 1807.320513] lowmem_reserve[]: [ 1807.379027] lowmem_reserve[]: [ 1807.420965] 0*16kB [ 1807.434521] lowmem_reserve[]: [ 1807.481843] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1807.492925] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1807.497216] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1807.505284] syz-executor.5: [ 1807.519047] CPU: 1 PID: 7281 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1807.529870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.531000] page allocation failure: order:4 [ 1807.539245] Call Trace: [ 1807.539267] dump_stack+0x1b2/0x281 [ 1807.539281] warn_alloc.cold+0x96/0x1cc [ 1807.539294] ? zone_watermark_ok_safe+0x220/0x220 [ 1807.539318] __alloc_pages_nodemask+0x2127/0x2720 [ 1807.539341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1807.539354] ? migrate_swap_stop+0x880/0x880 [ 1807.561923] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1807.563972] ? lock_acquire+0x170/0x3f0 [ 1807.568795] (null) [ 1807.573197] ? wake_up_q+0x82/0xd0 [ 1807.573209] ? __mutex_unlock_slowpath+0x261/0x770 [ 1807.573219] ? __list_del_entry_valid+0xaf/0xf0 [ 1807.573232] alloc_pages_current+0x155/0x260 [ 1807.573246] ion_page_pool_alloc+0x118/0x1b0 [ 1807.573256] ion_system_heap_allocate+0x133/0x8c0 [ 1807.573267] ? _raw_spin_unlock+0x29/0x40 [ 1807.573276] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1807.573285] ? ion_system_contig_heap_create+0x130/0x130 [ 1807.573296] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1807.573308] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1807.584222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1807.584439] ion_alloc+0x27a/0x810 [ 1807.587211] Node 1 [ 1807.590105] ? ion_dma_buf_release+0x40/0x40 [ 1807.590117] ? __might_fault+0x177/0x1b0 [ 1807.590128] ion_ioctl+0xea/0x1f0 [ 1807.590137] ? ion_query_heaps+0x360/0x360 [ 1807.590154] ? ion_query_heaps+0x360/0x360 [ 1807.590165] do_vfs_ioctl+0x75a/0xff0 [ 1807.590176] ? ioctl_preallocate+0x1a0/0x1a0 [ 1807.598533] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1807.599749] ? lock_downgrade+0x740/0x740 [ 1807.599765] ? __fget+0x225/0x360 [ 1807.599774] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.599786] ? security_file_ioctl+0x83/0xb0 [ 1807.599796] SyS_ioctl+0x7f/0xb0 [ 1807.599804] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.599816] do_syscall_64+0x1d5/0x640 [ 1807.599831] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1807.599839] RIP: 0033:0x466459 [ 1807.599844] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.599853] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1807.599859] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1807.599865] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1807.599871] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1807.599877] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1807.619020] 0 [ 1807.623104] Normal: [ 1807.628054] 0 [ 1807.644373] 6474*4kB [ 1807.652479] 0 [ 1807.659098] syz-executor.5 cpuset= [ 1807.664184] 0 [ 1807.666484] (UM) [ 1807.672895] 0 [ 1807.674701] / [ 1807.679046] 0 [ 1807.689028] 2090*8kB [ 1807.693321] 0 [ 1807.719096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1807.724953] 0 [ 1807.726604] mems_allowed=0-1 [ 1807.729586] 0 [ 1807.737395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1807.772820] 0 [ 1807.775593] CPU: 0 PID: 7248 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1807.779475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.779480] Call Trace: [ 1807.779500] dump_stack+0x1b2/0x281 [ 1807.779515] warn_alloc.cold+0x96/0x1cc [ 1807.779527] ? zone_watermark_ok_safe+0x220/0x220 [ 1807.783732] __alloc_pages_nodemask+0x2127/0x2720 [ 1807.785501] Node 0 [ 1807.789026] ? __schedule+0x893/0x1de0 [ 1807.789042] ? lock_acquire+0x170/0x3f0 [ 1807.789060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1807.789077] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1807.799015] Node 0 [ 1807.800599] ? __mutex_unlock_slowpath+0x75/0x770 [ 1807.802387] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.808269] ? retint_kernel+0x2d/0x2d [ 1807.810111] DMA: [ 1807.813167] alloc_pages_current+0x155/0x260 [ 1807.814942] 69*4kB [ 1807.821455] ion_page_pool_alloc+0x118/0x1b0 [ 1807.821465] ion_system_heap_allocate+0x133/0x8c0 [ 1807.821479] ? _raw_spin_unlock+0x29/0x40 [ 1807.821490] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1807.849034] lowmem_reserve[]: [ 1807.850109] ? ion_system_contig_heap_create+0x130/0x130 [ 1807.854057] 0 [ 1807.859977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1807.859991] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1807.860003] ion_alloc+0x27a/0x810 [ 1807.860022] ? ion_dma_buf_release+0x40/0x40 [ 1807.864979] (UME) [ 1807.867203] ? __might_fault+0x177/0x1b0 [ 1807.889009] 44*8kB [ 1807.892747] ion_ioctl+0xea/0x1f0 [ 1807.917669] 0 [ 1807.922372] ? ion_query_heaps+0x360/0x360 [ 1807.922385] ? ion_query_heaps+0x360/0x360 [ 1807.922397] do_vfs_ioctl+0x75a/0xff0 [ 1807.949021] 0 [ 1807.952507] ? ioctl_preallocate+0x1a0/0x1a0 [ 1807.955584] 0 [ 1807.961018] ? lock_downgrade+0x740/0x740 [ 1807.961032] ? __fget+0x225/0x360 [ 1807.961041] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.961055] ? security_file_ioctl+0x83/0xb0 [ 1807.989005] 0 [ 1807.992405] SyS_ioctl+0x7f/0xb0 [ 1807.998425] ? do_vfs_ioctl+0xff0/0xff0 [ 1808.002674] (UM) [ 1808.006425] do_syscall_64+0x1d5/0x640 [ 1808.008203] 30*16kB [ 1808.012600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1808.012609] RIP: 0033:0x466459 [ 1808.012614] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.039013] (UME) [ 1808.039942] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1808.041990] 24*32kB [ 1808.045858] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1808.045866] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1808.048167] (UM) [ 1808.053354] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1808.053359] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1808.055310] (UME) [ 1808.069024] Node 1 [ 1808.073916] 695*16kB [ 1808.076082] Normal free:596700kB min:53696kB low:67120kB high:80544kB active_anon:2768kB inactive_anon:25288kB active_file:1048kB inactive_file:3728kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2236kB bounce:0kB free_pcp:200kB local_pcp:112kB free_cma:0kB [ 1808.083988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1808.113171] 0 [ 1808.115239] (UM) [ 1808.152793] 2*64kB [ 1808.155566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1808.164963] (ME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10964kB [ 1808.165605] 686*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 109*1024kB (U) 0*2048kB 0*4096kB = 187304kB [ 1808.188731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.198117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1808.199030] lowmem_reserve[]: 0 0 0 0 0 [ 1808.209588] Node 0 DMA32: 143*4kB (UME) 73*8kB (UME) 48*16kB (ME) 9*32kB (ME) 1123*64kB (U) 25*128kB (U) 0*256kB 0*512kB 5*1024kB (U) 1*2048kB (U) 0*4096kB = 84452kB [ 1808.211958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1808.232409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.241143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.250212] 0 0 0 0 [ 1808.252582] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1808.262872] Node 0 [ 1808.279254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.287831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1808.289014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1808.295078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.316912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1808.324614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1808.332498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1808.339033] DMA: 3*4kB (UME) 32*8kB (UM) 30*16kB (UME) 24*32kB (UM) 10*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11116kB [ 1808.340094] 45304 total pagecache pages [ 1808.359881] lowmem_reserve[]: 0 0 0 0 0 [ 1808.363889] Node 1 Normal free:677212kB min:53696kB low:67120kB high:80544kB active_anon:2780kB inactive_anon:25288kB active_file:1068kB inactive_file:3380kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1056kB pagetables:2236kB bounce:0kB free_pcp:200kB local_pcp:88kB free_cma:0kB [ 1808.369111] Node 1 [ 1808.397725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1808.407871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.414290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1808.419692] Node 0 DMA32: 142*4kB (ME) 72*8kB (ME) 48*16kB (ME) 10*32kB (UME) 972*64kB (U) 110*128kB (U) 14*256kB (U) 0*512kB 5*1024kB (U) 1*2048kB (U) 0*4096kB = 89272kB [ 1808.421350] 0 pages in swap cache [ 1808.442823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1808.450225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1808.457642] Normal: 1129*4kB (UM) 2081*8kB (UME) 695*16kB (UM) 686*32kB (UME) 3917*64kB (U) 482*128kB (U) 75*256kB (U) 35*512kB (U) 258*1024kB (U) 45*2048kB (U) 1*4096kB (U) = 764188kB [ 1808.461886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1808.483433] lowmem_reserve[]: 0 0 0 0 0 [ 1808.487440] Node 0 DMA: 3*4kB (UME) 32*8kB (UM) 30*16kB (UME) 24*32kB (UM) 11*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11180kB [ 1808.489049] Node 0 [ 1808.503882] Swap cache stats: add 0, delete 0, find 0/0 [ 1808.512219] Free swap = 0kB [ 1808.515237] Total swap = 0kB [ 1808.518248] 2097051 pages RAM [ 1808.521871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1808.532677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1808.539054] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1808.539860] 0 pages HighMem/MovableOnly [ 1808.553645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.553879] Node 0 [ 1808.563250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1808.574109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1808.581405] 363848 pages reserved [ 1808.584907] 0 pages cma reserved [ 1808.585422] Node 1 Normal: 1129*4kB (UM) 2081*8kB (UME) 695*16kB (UM) 686*32kB (UME) 4180*64kB (UM) 769*128kB (U) 143*256kB (U) 78*512kB (U) 261*1024kB (U) 45*2048kB (U) 1*4096kB (U) = 860252kB [ 1808.589494] DMA32: [ 1808.609030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.610076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1808.612222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.629246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1808.642528] 142*4kB (ME) 173*8kB (UME) 53*16kB (UME) 34*32kB (UME) 465*64kB (U) 111*128kB (U) 14*256kB (U) 0*512kB 5*1024kB (U) 1*2048kB (U) 0*4096kB = 58608kB [ 1808.660124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1808.669156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.670044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1808.678140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.699091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1808.714958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.722300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1808.731093] Node 1 Normal: 1703*4kB (UM) 2205*8kB (UME) 883*16kB (UM) 831*32kB (UME) 4326*64kB (UM) 781*128kB (U) 155*256kB (U) 79*512kB (U) 261*1024kB (U) 45*2048kB (U) 1*4096kB (U) = 885652kB [ 1808.743470] 45304 total pagecache pages [ 1808.749477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1808.756370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.761756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1808.775367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.775718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.788040] 0 pages in swap cache [ 1808.796313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1808.809076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.814000] Swap cache stats: add 0, delete 0, find 0/0 [ 1808.817772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1808.826508] 45279 total pagecache pages [ 1808.839064] 0 pages in swap cache [ 1808.839545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.842618] Free swap = 0kB [ 1808.851792] warn_alloc_show_mem: 2 callbacks suppressed [ 1808.851795] Mem-Info: [ 1808.858834] Swap cache stats: add 0, delete 0, find 0/0 [ 1808.860933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1808.870206] Free swap = 0kB [ 1808.875407] active_anon:71593 inactive_anon:43273 isolated_anon:0 [ 1808.875407] active_file:458 inactive_file:999 isolated_file:0 [ 1808.875407] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1808.875407] slab_reclaimable:12509 slab_unreclaimable:126709 [ 1808.875407] mapped:53731 shmem:43787 pagetables:4856 bounce:0 [ 1808.875407] free:240045 free_pcp:226 free_cma:0 [ 1808.889083] Total swap = 0kB [ 1808.914980] Total swap = 0kB [ 1808.916135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.918063] 2097051 pages RAM [ 1808.929495] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1808.935751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1808.946824] 45279 total pagecache pages [ 1808.950894] 0 pages in swap cache [ 1808.954344] Swap cache stats: add 0, delete 0, find 0/0 [ 1808.956910] 0 pages HighMem/MovableOnly [ 1808.971654] 363848 pages reserved [ 1808.972199] Free swap = 0kB [ 1808.978139] Total swap = 0kB [ 1808.981195] 2097051 pages RAM [ 1808.981200] 0 pages HighMem/MovableOnly [ 1808.981203] 363848 pages reserved [ 1808.981206] 0 pages cma reserved [ 1808.981877] 0 pages cma reserved [ 1808.991188] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1809.003085] Out of memory (oom_kill_allocating_task): Kill process 7123 (rs:main Q:Reg) score 0 or sacrifice child [ 1809.018647] 2097051 pages RAM [ 1809.022187] 0 pages HighMem/MovableOnly [ 1809.026469] Node 0 active_anon:283592kB inactive_anon:147804kB active_file:676kB inactive_file:936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171452kB dirty:0kB writeback:0kB shmem:149712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1809.028377] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1809.064011] 363848 pages reserved [ 1809.064086] Killed process 7118 (rsyslogd) total-vm:254332kB, anon-rss:948kB, file-rss:0kB, shmem-rss:0kB [ 1809.067469] 0 pages cma reserved [ 1809.075218] Node 1 active_anon:2780kB inactive_anon:25288kB active_file:1232kB inactive_file:3056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:43476kB dirty:0kB writeback:0kB shmem:25436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1809.104721] oom_reaper: reaped process 7118 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1809.120666] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1809.143130] systemd[1]: Failed to start Journal Service. [ 1809.169499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1809.176484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1809.180330] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1809.211322] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1809.222292] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1809.232521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1809.239596] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:440kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:33:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', r1) [ 1809.307752] systemd[1]: rsyslog.service: Unit entered failed state. [ 1809.327576] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1809.368778] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1809.382262] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1809.391797] Node 0 DMA32 free:44484kB min:36200kB low:45248kB high:54296kB active_anon:282568kB inactive_anon:147804kB active_file:1776kB inactive_file:3140kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12288kB pagetables:16892kB bounce:0kB free_pcp:924kB local_pcp:308kB free_cma:0kB [ 1809.428453] systemd[1]: Stopped Journal Service. [ 1809.477244] systemd[1]: Starting Journal Service... [ 1809.535996] lowmem_reserve[]: 0 0 0 0 0 [ 1809.558730] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.660696] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1809.670805] lowmem_reserve[]: 0 0 0 0 0 [ 1809.682411] systemd-journald[7364]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1809.694895] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1809.707613] Node 1 Normal free:253364kB min:53696kB low:67120kB high:80544kB active_anon:3588kB inactive_anon:25288kB active_file:4032kB inactive_file:5052kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1216kB pagetables:2384kB bounce:0kB free_pcp:1028kB local_pcp:380kB free_cma:0kB [ 1809.736668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1809.758542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1809.813149] lowmem_reserve[]: 0 0 0 0 0 [ 1809.847990] Node 0 DMA: 4*4kB (UME) 26*8kB (UM) 30*16kB (UME) 24*32kB (UM) 15*64kB (UE) 4*128kB (UE) 2*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 11136kB [ 1809.940943] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1809.945738] systemd-journald[7364]: /dev/kmsg buffer overrun, some messages lost. [ 1809.962952] Node 0 DMA32: 1408*4kB (UME) 243*8kB (UME) 1167*16kB (UME) 296*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35848kB 04:33:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x9}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r3, 0x1, "63c38b", "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"}}, 0x110) [ 1809.991441] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1809.993700] Node 0 [ 1810.005966] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.014389] CPU: 1 PID: 7360 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1810.027907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.033784] Normal: [ 1810.037256] Call Trace: [ 1810.037276] dump_stack+0x1b2/0x281 [ 1810.037290] warn_alloc.cold+0x96/0x1cc [ 1810.049785] ? zone_watermark_ok_safe+0x220/0x220 [ 1810.054660] __alloc_pages_nodemask+0x2127/0x2720 [ 1810.056838] 0*4kB [ 1810.059535] ? lock_acquire+0x170/0x3f0 [ 1810.059551] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.059569] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1810.059581] ? __mutex_unlock_slowpath+0x75/0x770 [ 1810.059596] alloc_pages_current+0x155/0x260 [ 1810.059609] ion_page_pool_alloc+0x118/0x1b0 [ 1810.059619] ion_system_heap_allocate+0x133/0x8c0 [ 1810.059629] ? ion_alloc+0x187/0x810 [ 1810.059639] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1810.059648] ? ion_system_contig_heap_create+0x130/0x130 [ 1810.059657] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1810.059668] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1810.059679] ion_alloc+0x204/0x810 [ 1810.064504] syz-executor.0 cpuset= [ 1810.065791] ? ion_dma_buf_release+0x40/0x40 [ 1810.065804] ? __might_fault+0x177/0x1b0 [ 1810.075133] 0*8kB [ 1810.076081] ion_ioctl+0xea/0x1f0 [ 1810.087662] / [ 1810.089716] ? ion_query_heaps+0x360/0x360 [ 1810.098196] 0*16kB [ 1810.098257] ? cp_compat_stat+0x890/0x890 [ 1810.113594] mems_allowed=0-1 [ 1810.114130] ? ion_query_heaps+0x360/0x360 [ 1810.121766] 0*32kB [ 1810.122495] do_vfs_ioctl+0x75a/0xff0 [ 1810.131458] 0*64kB [ 1810.134458] ? ioctl_preallocate+0x1a0/0x1a0 [ 1810.134470] ? lock_downgrade+0x740/0x740 [ 1810.146038] 0*128kB [ 1810.148278] ? __fget+0x225/0x360 [ 1810.148290] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.170335] 0*256kB [ 1810.172384] ? security_file_ioctl+0x83/0xb0 [ 1810.172396] SyS_ioctl+0x7f/0xb0 [ 1810.192799] 0*512kB [ 1810.192944] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.202572] do_syscall_64+0x1d5/0x640 [ 1810.206463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1810.211646] RIP: 0033:0x466459 [ 1810.213486] 0*1024kB [ 1810.214823] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.214834] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1810.214840] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1810.214848] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1810.229263] 0*2048kB [ 1810.232191] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1810.232197] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1810.265097] CPU: 0 PID: 7274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1810.272985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.274892] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1810.284246] Call Trace: [ 1810.284268] dump_stack+0x1b2/0x281 [ 1810.284281] warn_alloc.cold+0x96/0x1cc [ 1810.284293] ? zone_watermark_ok_safe+0x220/0x220 [ 1810.284315] __alloc_pages_nodemask+0x2127/0x2720 [ 1810.310628] ? lock_acquire+0x170/0x3f0 [ 1810.314638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.319514] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1810.325001] ? __mutex_unlock_slowpath+0x75/0x770 [ 1810.330086] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1810.333327] alloc_pages_current+0x155/0x260 [ 1810.333341] ion_page_pool_alloc+0x118/0x1b0 [ 1810.348227] ion_system_heap_allocate+0x133/0x8c0 [ 1810.353080] ? _raw_spin_unlock+0x29/0x40 [ 1810.357234] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1810.357509] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1810.362169] ? ion_system_contig_heap_create+0x130/0x130 [ 1810.362181] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1810.362193] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1810.362203] ion_alloc+0x27a/0x810 [ 1810.362224] ? ion_dma_buf_release+0x40/0x40 [ 1810.391522] ? __might_fault+0x177/0x1b0 [ 1810.395596] ion_ioctl+0xea/0x1f0 [ 1810.399051] ? ion_query_heaps+0x360/0x360 [ 1810.400460] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1810.403311] ? ion_query_heaps+0x360/0x360 [ 1810.403323] do_vfs_ioctl+0x75a/0xff0 [ 1810.403335] ? ioctl_preallocate+0x1a0/0x1a0 [ 1810.423379] ? lock_downgrade+0x740/0x740 [ 1810.427534] ? __fget+0x225/0x360 [ 1810.428681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1810.430985] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.430998] ? security_file_ioctl+0x83/0xb0 [ 1810.431008] SyS_ioctl+0x7f/0xb0 [ 1810.431020] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.438595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1810.441898] do_syscall_64+0x1d5/0x640 [ 1810.441915] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1810.441924] RIP: 0033:0x466459 [ 1810.441929] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.457398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1810.460586] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1810.460593] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1810.460598] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1810.460603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1810.460607] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1810.579065] 0*4096kB = 0kB [ 1810.581943] Node 1 Normal: 42*4kB (M) 69*8kB (UME) 1126*16kB (UM) 1090*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53680kB [ 1810.623533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.650157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.672241] systemd-journal invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1810.677813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1810.694999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.723779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.737394] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.739283] Mem-Info: [ 1810.757806] systemd-journal cpuset=/ mems_allowed=0-1 [ 1810.766679] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1810.775151] active_anon:71616 inactive_anon:45309 isolated_anon:0 [ 1810.775151] active_file:458 inactive_file:558 isolated_file:47 [ 1810.775151] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1810.775151] slab_reclaimable:12565 slab_unreclaimable:126893 [ 1810.775151] mapped:53515 shmem:45835 pagetables:4824 bounce:0 [ 1810.775151] free:13907 free_pcp:169 free_cma:0 [ 1810.775414] CPU: 0 PID: 7364 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1810.817333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.826676] Call Trace: [ 1810.829261] dump_stack+0x1b2/0x281 [ 1810.832892] dump_header+0x178/0x82f [ 1810.836603] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1810.841698] ? ___ratelimit+0x2cd/0x530 [ 1810.845663] oom_kill_process.cold+0x10/0xa40 [ 1810.850177] out_of_memory+0xe3e/0x1190 [ 1810.854152] ? oom_killer_disable+0x1c0/0x1c0 [ 1810.858639] ? mutex_trylock+0x152/0x1a0 [ 1810.862701] __alloc_pages_nodemask+0x23e1/0x2720 [ 1810.867561] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.872392] ? filemap_map_pages+0x51b/0xe40 [ 1810.876793] ? __lock_acquire+0x5fc/0x3f20 [ 1810.881020] alloc_pages_vma+0xd2/0x6d0 [ 1810.884984] __handle_mm_fault+0x25fa/0x4620 [ 1810.889380] ? vm_insert_page+0x7c0/0x7c0 [ 1810.893519] ? __fsnotify_inode_delete+0x20/0x20 [ 1810.898264] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1810.904927] ? mark_held_locks+0xa6/0xf0 [ 1810.908998] handle_mm_fault+0x455/0x9c0 [ 1810.913060] __do_page_fault+0x549/0xad0 [ 1810.917110] ? spurious_fault+0x640/0x640 [ 1810.921250] ? do_page_fault+0x60/0x500 [ 1810.925214] ? page_fault+0x2f/0x50 [ 1810.928828] page_fault+0x45/0x50 [ 1810.932270] RIP: b22dffc8:0x7fff229ed1a8 [ 1810.936313] RSP: 63cf6b00:0000000000000064 EFLAGS: 7fff229ed2d0 [ 1810.939743] 46823 total pagecache pages [ 1810.952004] CPU: 0 PID: 7381 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1810.959810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.969169] Call Trace: [ 1810.971756] dump_stack+0x1b2/0x281 [ 1810.975381] warn_alloc.cold+0x96/0x1cc [ 1810.979348] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1810.984353] ? zone_watermark_ok_safe+0x220/0x220 [ 1810.989214] __alloc_pages_nodemask+0x2127/0x2720 [ 1810.994084] ? lock_acquire+0x170/0x3f0 [ 1810.998058] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1811.002902] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1811.008348] ? __mutex_unlock_slowpath+0x75/0x770 [ 1811.013186] alloc_pages_current+0x155/0x260 [ 1811.017587] ion_page_pool_alloc+0x118/0x1b0 [ 1811.021986] ion_system_heap_allocate+0x133/0x8c0 [ 1811.026817] ? ion_alloc+0x187/0x810 [ 1811.030523] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1811.035963] ? ion_system_contig_heap_create+0x130/0x130 [ 1811.041407] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1811.046417] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1811.051341] ion_alloc+0x204/0x810 [ 1811.054878] ? ion_dma_buf_release+0x40/0x40 [ 1811.059282] ? __might_fault+0x177/0x1b0 [ 1811.063336] ion_ioctl+0xea/0x1f0 [ 1811.066791] ? ion_query_heaps+0x360/0x360 [ 1811.071032] ? ion_query_heaps+0x360/0x360 [ 1811.075259] do_vfs_ioctl+0x75a/0xff0 [ 1811.079068] ? ioctl_preallocate+0x1a0/0x1a0 [ 1811.083468] ? lock_downgrade+0x740/0x740 [ 1811.087631] ? __fget+0x225/0x360 [ 1811.091075] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.095045] ? security_file_ioctl+0x83/0xb0 [ 1811.099446] SyS_ioctl+0x7f/0xb0 [ 1811.102802] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.106769] do_syscall_64+0x1d5/0x640 [ 1811.110678] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.115855] RIP: 0033:0x466459 [ 1811.119049] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.126749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1811.134011] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1811.141284] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1811.148557] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1811.155818] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1811.179605] Node 0 active_anon:282244kB inactive_anon:147904kB active_file:32kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:168992kB dirty:16kB writeback:0kB shmem:149860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1811.180242] 0 pages in swap cache [ 1811.213068] Node 1 active_anon:4308kB inactive_anon:33332kB active_file:1252kB inactive_file:1268kB unevictable:0kB isolated(anon):0kB isolated(file):164kB mapped:43524kB dirty:104kB writeback:0kB shmem:33480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1811.245437] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.252941] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.256478] Free swap = 0kB [ 1811.283121] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1811.288481] Node 0 DMA32 free:18104kB min:36200kB low:45248kB high:54296kB active_anon:282240kB inactive_anon:147904kB active_file:504kB inactive_file:84kB unevictable:0kB writepending:116kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12192kB pagetables:16772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.317744] Total swap = 0kB [ 1811.317754] 2097051 pages RAM [ 1811.317757] 0 pages HighMem/MovableOnly [ 1811.317761] 363848 pages reserved [ 1811.317764] 0 pages cma reserved [ 1811.351230] lowmem_reserve[]: 0 0 0 0 0 [ 1811.355310] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.385491] lowmem_reserve[]: 0 0 0 0 0 [ 1811.389698] Node 1 Normal free:27104kB min:53696kB low:67120kB high:80544kB active_anon:4308kB inactive_anon:33332kB active_file:556kB inactive_file:496kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1376kB pagetables:2552kB bounce:0kB free_pcp:964kB local_pcp:316kB free_cma:0kB [ 1811.424196] lowmem_reserve[]: 0 0 0 0 0 [ 1811.428310] Node 0 DMA: 2*4kB (ME) 2*8kB (UM) 7*16kB (UME) 24*32kB (UM) 15*64kB (UME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10952kB [ 1811.439512] Mem-Info: [ 1811.449563] Node 0 DMA32: 624*4kB (ME) 57*8kB (ME) 52*16kB (ME) 420*32kB (UME) 4*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 1811.455098] active_anon:71638 inactive_anon:45309 isolated_anon:0 [ 1811.455098] active_file:37 inactive_file:35 isolated_file:43 [ 1811.455098] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1811.455098] slab_reclaimable:12566 slab_unreclaimable:126900 [ 1811.455098] mapped:52579 shmem:45835 pagetables:4831 bounce:0 [ 1811.455098] free:13870 free_pcp:30 free_cma:0 [ 1811.473772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1811.522685] Node 1 Normal: 149*4kB (M) 119*8kB (ME) 65*16kB (UM) 620*32kB (UME) 36*64kB (UM) 9*128kB (M) 4*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26908kB [ 1811.527814] Node 0 active_anon:282244kB inactive_anon:147904kB active_file:32kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:168992kB dirty:16kB writeback:0kB shmem:149860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1811.537437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.537445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.537452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.537463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.611527] 45925 total pagecache pages [ 1811.615517] 0 pages in swap cache [ 1811.619033] Node 1 active_anon:4308kB inactive_anon:33332kB active_file:68kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):92kB mapped:41324kB dirty:4kB writeback:0kB shmem:33480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1811.624770] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.658448] Free swap = 0kB [ 1811.661534] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.661553] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1811.661571] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:282240kB inactive_anon:147904kB active_file:504kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12192kB pagetables:16772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.661590] lowmem_reserve[]: 0 0 0 0 0 [ 1811.661609] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.661625] lowmem_reserve[]: 0 0 0 0 0 [ 1811.661644] Node 1 Normal free:26448kB min:53696kB low:67120kB high:80544kB active_anon:4308kB inactive_anon:33332kB active_file:556kB inactive_file:0kB unevictable:0kB writepending:104kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1376kB pagetables:2552kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.661666] lowmem_reserve[]: [ 1811.687940] Total swap = 0kB [ 1811.716824] 0 [ 1811.722314] 2097051 pages RAM [ 1811.722319] 0 pages HighMem/MovableOnly [ 1811.722323] 363848 pages reserved [ 1811.722326] 0 pages cma reserved [ 1811.813387] 0 0 0 0 [ 1811.815826] Node 0 DMA: 2*4kB (ME) 2*8kB (UM) 7*16kB (UME) 24*32kB (UM) 15*64kB (UME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10952kB [ 1811.836154] Node 0 DMA32: 624*4kB (ME) 57*8kB (ME) 52*16kB (ME) 420*32kB (UME) 4*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 1811.854406] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1811.865353] Node 1 Normal: 144*4kB (UM) 116*8kB (ME) 66*16kB (UM) 622*32kB (UME) 36*64kB (UM) 9*128kB (M) 4*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26944kB [ 1811.884377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.893291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.906128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.915147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.927409] 45925 total pagecache pages [ 1811.933319] 0 pages in swap cache [ 1811.936773] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.946512] Free swap = 0kB [ 1811.949929] Total swap = 0kB [ 1811.952955] 2097051 pages RAM [ 1811.956062] 0 pages HighMem/MovableOnly [ 1811.964238] 363848 pages reserved [ 1811.967698] 0 pages cma reserved [ 1811.971793] Out of memory (oom_kill_allocating_task): Kill process 7364 (systemd-journal) score 0 or sacrifice child [ 1811.986405] Killed process 7364 (systemd-journal) total-vm:46096kB, anon-rss:448kB, file-rss:0kB, shmem-rss:1052kB [ 1811.998428] oom_reaper: reaped process 7364 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1228kB [ 1812.044913] oom_reaper: reaped process 7360 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1812.071344] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1812.075262] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1812.089030] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1812.100769] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1812.105082] CPU: 0 PID: 7972 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 1812.113790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.123146] Call Trace: [ 1812.125739] dump_stack+0x1b2/0x281 [ 1812.129365] dump_header+0x178/0x82f [ 1812.133077] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1812.138180] ? ___ratelimit+0x2cd/0x530 [ 1812.142166] oom_kill_process.cold+0x10/0xa40 [ 1812.146667] out_of_memory+0xe3e/0x1190 [ 1812.150688] ? oom_killer_disable+0x1c0/0x1c0 [ 1812.155223] ? mutex_trylock+0x152/0x1a0 [ 1812.159290] __alloc_pages_nodemask+0x23e1/0x2720 [ 1812.164233] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1812.169233] alloc_pages_current+0x155/0x260 [ 1812.174080] filemap_fault+0x11a1/0x1ad0 [ 1812.178285] ext4_filemap_fault+0x84/0xb0 [ 1812.182434] __do_fault+0xfa/0x380 [ 1812.186148] __handle_mm_fault+0x2497/0x4620 [ 1812.190593] ? vm_insert_page+0x7c0/0x7c0 [ 1812.194775] ? lock_downgrade+0x740/0x740 [ 1812.198928] ? mark_held_locks+0xa6/0xf0 [ 1812.203115] handle_mm_fault+0x455/0x9c0 [ 1812.207226] __do_page_fault+0x549/0xad0 [ 1812.211308] ? spurious_fault+0x640/0x640 [ 1812.215516] ? do_page_fault+0x60/0x500 [ 1812.219489] ? page_fault+0x2f/0x50 [ 1812.223118] page_fault+0x45/0x50 [ 1812.226575] RIP: 0000:0x940aec [ 1812.229812] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1812.229837] CPU: 1 PID: 7281 Comm: syz-executor.2 Not tainted 4.14.229-syzkaller #0 [ 1812.243090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.244389] Mem-Info: [ 1812.252451] Call Trace: [ 1812.252474] dump_stack+0x1b2/0x281 [ 1812.252487] warn_alloc.cold+0x96/0x1cc [ 1812.252499] ? zone_watermark_ok_safe+0x220/0x220 [ 1812.252509] ? usleep_range+0x130/0x130 [ 1812.252517] ? try_to_free_pages+0x23f/0x6e0 [ 1812.252527] ? _find_next_bit+0xdb/0x100 [ 1812.252538] ? run_timer_softirq+0x5a0/0x5a0 [ 1812.252555] __alloc_pages_nodemask+0x2127/0x2720 [ 1812.252571] ? lock_acquire+0x170/0x3f0 [ 1812.252585] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1812.259094] syz-executor.3: [ 1812.261735] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1812.265705] page allocation failure: order:0 [ 1812.270557] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1812.270578] alloc_pages_current+0x155/0x260 [ 1812.270591] ion_page_pool_alloc+0x118/0x1b0 [ 1812.270600] ion_system_heap_allocate+0x133/0x8c0 [ 1812.270612] ? _raw_spin_unlock+0x29/0x40 [ 1812.270621] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1812.270629] ? ion_system_contig_heap_create+0x130/0x130 [ 1812.270645] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1812.270661] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1812.270672] ion_alloc+0x27a/0x810 [ 1812.270685] ? ion_dma_buf_release+0x40/0x40 [ 1812.270696] ? __might_fault+0x177/0x1b0 [ 1812.270708] ion_ioctl+0xea/0x1f0 [ 1812.295584] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1812.296644] ? ion_query_heaps+0x360/0x360 [ 1812.316018] active_anon:71512 inactive_anon:45308 isolated_anon:0 [ 1812.316018] active_file:13 inactive_file:16 isolated_file:0 [ 1812.316018] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1812.316018] slab_reclaimable:12566 slab_unreclaimable:126713 [ 1812.316018] mapped:52225 shmem:45835 pagetables:4832 bounce:0 [ 1812.316018] free:13882 free_pcp:61 free_cma:0 [ 1812.319059] ? ion_query_heaps+0x360/0x360 [ 1812.319072] do_vfs_ioctl+0x75a/0xff0 [ 1812.319085] ? ioctl_preallocate+0x1a0/0x1a0 [ 1812.319096] ? lock_downgrade+0x740/0x740 [ 1812.319111] ? __fget+0x225/0x360 [ 1812.319121] ? do_vfs_ioctl+0xff0/0xff0 [ 1812.319133] ? security_file_ioctl+0x83/0xb0 [ 1812.319144] SyS_ioctl+0x7f/0xb0 [ 1812.319152] ? do_vfs_ioctl+0xff0/0xff0 [ 1812.319164] do_syscall_64+0x1d5/0x640 [ 1812.334591] Node 0 active_anon:282264kB inactive_anon:147900kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168928kB dirty:0kB writeback:0kB shmem:149856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.337060] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1812.348849] (null) [ 1812.353589] RIP: 0033:0x466459 [ 1812.353595] RSP: 002b:00007fab9c78b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.353604] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1812.353609] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1812.353614] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1812.353618] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1812.353623] R13: 00007ffc832abfdf R14: 00007fab9c78b300 R15: 0000000000022000 [ 1812.523525] syz-executor.5: [ 1812.524919] Node 1 active_anon:3784kB inactive_anon:33332kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:0kB writeback:0kB shmem:33484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.571751] page allocation failure: order:0 [ 1812.579161] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.579182] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1812.579203] Node 0 DMA32 free:18016kB min:36200kB low:45248kB high:54296kB active_anon:282260kB inactive_anon:147900kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12224kB pagetables:16856kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1812.579220] lowmem_reserve[]: 0 0 0 0 0 [ 1812.579239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.579255] lowmem_reserve[]: 0 0 0 0 0 [ 1812.579274] Node 1 Normal free:26560kB min:53696kB low:67120kB high:80544kB active_anon:3784kB inactive_anon:33332kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1344kB pagetables:2472kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.579292] lowmem_reserve[]: 0 0 0 0 0 [ 1812.579308] Node 0 DMA: 2*4kB (ME) 2*8kB (UM) 7*16kB (UME) 24*32kB (UM) 15*64kB (UME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10952kB [ 1812.579380] Node 0 DMA32: 627*4kB (UME) 59*8kB (UME) 53*16kB (ME) 417*32kB (UME) 4*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18068kB [ 1812.579443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1812.579484] Node 1 Normal: 164*4kB (UM) 114*8kB (UME) 68*16kB (UM) [ 1812.613326] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1812.619020] 605*32kB [ 1812.669028] syz-executor.0: [ 1812.680109] (UME) 34*64kB (UM) 11*128kB (M) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26880kB [ 1812.680157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.680163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.680169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.680175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.680179] 45864 total pagecache pages [ 1812.680187] 0 pages in swap cache [ 1812.680192] Swap cache stats: add 0, delete 0, find 0/0 [ 1812.680195] Free swap = 0kB [ 1812.680199] Total swap = 0kB [ 1812.680205] 2097051 pages RAM [ 1812.680224] 0 pages HighMem/MovableOnly [ 1812.680227] 363848 pages reserved [ 1812.680231] 0 pages cma reserved [ 1812.680249] Out of memory (oom_kill_allocating_task): Kill process 7972 (syz-fuzzer) score 0 or sacrifice child [ 1812.680325] Killed process 7126 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1812.901279] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1812.906432] CPU: 0 PID: 7360 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1812.908259] (null) [ 1812.914845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.914849] Call Trace: [ 1812.914868] dump_stack+0x1b2/0x281 [ 1812.914883] warn_alloc.cold+0x96/0x1cc [ 1812.914897] ? zone_watermark_ok_safe+0x220/0x220 [ 1812.917046] syz-executor.5 cpuset= [ 1812.926639] ? usleep_range+0x130/0x130 [ 1812.926649] ? try_to_free_pages+0x23f/0x6e0 [ 1812.926660] ? _find_next_bit+0xdb/0x100 [ 1812.926672] ? run_timer_softirq+0x5a0/0x5a0 [ 1812.929369] / [ 1812.932984] __alloc_pages_nodemask+0x2127/0x2720 [ 1812.937261] mems_allowed=0-1 [ 1812.942438] ? lock_acquire+0x170/0x3f0 [ 1812.942456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1812.942468] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1812.959033] warn_alloc_show_mem: 2 callbacks suppressed [ 1812.959038] Mem-Info: [ 1812.960607] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1812.965017] active_anon:71512 inactive_anon:45308 isolated_anon:0 [ 1812.965017] active_file:13 inactive_file:16 isolated_file:0 [ 1812.965017] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1812.965017] slab_reclaimable:12566 slab_unreclaimable:126713 [ 1812.965017] mapped:52225 shmem:45835 pagetables:4832 bounce:0 [ 1812.965017] free:13882 free_pcp:30 free_cma:0 [ 1812.966937] alloc_pages_current+0x155/0x260 [ 1812.979028] Node 0 active_anon:282264kB inactive_anon:147900kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168928kB dirty:0kB writeback:0kB shmem:149856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.979224] ion_page_pool_alloc+0x118/0x1b0 [ 1812.984228] Node 1 active_anon:3784kB inactive_anon:33332kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:0kB writeback:0kB shmem:33484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.989009] ion_system_heap_allocate+0x133/0x8c0 [ 1812.989019] ? ion_alloc+0x187/0x810 [ 1812.989029] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1812.989038] ? ion_system_contig_heap_create+0x130/0x130 [ 1812.989051] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1813.009011] Node 0 [ 1813.036563] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1813.036575] ion_alloc+0x204/0x810 [ 1813.036590] ? ion_dma_buf_release+0x40/0x40 [ 1813.036602] ? __might_fault+0x177/0x1b0 [ 1813.079040] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1813.105006] ion_ioctl+0xea/0x1f0 [ 1813.105018] ? ion_query_heaps+0x360/0x360 [ 1813.105029] ? cp_compat_stat+0x890/0x890 [ 1813.105041] ? ion_query_heaps+0x360/0x360 [ 1813.139018] lowmem_reserve[]: [ 1813.141748] do_vfs_ioctl+0x75a/0xff0 [ 1813.146493] 0 [ 1813.150779] ? ioctl_preallocate+0x1a0/0x1a0 [ 1813.150793] ? lock_downgrade+0x740/0x740 [ 1813.150806] ? __fget+0x225/0x360 [ 1813.150815] ? do_vfs_ioctl+0xff0/0xff0 [ 1813.150829] ? security_file_ioctl+0x83/0xb0 [ 1813.219006] 2717 [ 1813.220774] SyS_ioctl+0x7f/0xb0 [ 1813.225177] 2718 [ 1813.227675] ? do_vfs_ioctl+0xff0/0xff0 [ 1813.237176] do_syscall_64+0x1d5/0x640 [ 1813.241085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1813.247680] RIP: 0033:0x466459 [ 1813.249025] 2718 [ 1813.250880] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.252965] 2718 [ 1813.261366] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1813.261372] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1813.261376] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1813.261381] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1813.261385] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1813.273285] page allocation failure: order:0 [ 1813.297206] CPU: 1 PID: 7248 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1813.312433] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1813.315136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1813.315152] (null) [ 1813.323543] Call Trace: [ 1813.323564] dump_stack+0x1b2/0x281 [ 1813.323577] warn_alloc.cold+0x96/0x1cc [ 1813.323589] ? zone_watermark_ok_safe+0x220/0x220 [ 1813.323598] ? usleep_range+0x130/0x130 [ 1813.323606] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1813.323618] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1813.323628] ? run_timer_softirq+0x5a0/0x5a0 [ 1813.323653] __alloc_pages_nodemask+0x2127/0x2720 [ 1813.323668] ? lock_acquire+0x170/0x3f0 [ 1813.323683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1813.323693] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1813.323710] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1813.323721] ? retint_kernel+0x2d/0x2d [ 1813.323734] alloc_pages_current+0x155/0x260 [ 1813.323744] ion_page_pool_alloc+0x118/0x1b0 [ 1813.323754] ion_system_heap_allocate+0x133/0x8c0 [ 1813.323766] ? _raw_spin_unlock+0x29/0x40 [ 1813.323774] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1813.323782] ? ion_system_contig_heap_create+0x130/0x130 [ 1813.323792] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1813.323803] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1813.323813] ion_alloc+0x27a/0x810 [ 1813.323827] ? ion_dma_buf_release+0x40/0x40 [ 1813.323839] ? __might_fault+0x177/0x1b0 [ 1813.347794] syz-executor.0 cpuset= [ 1813.350835] ion_ioctl+0xea/0x1f0 [ 1813.350845] ? ion_query_heaps+0x360/0x360 [ 1813.350856] ? ion_query_heaps+0x360/0x360 [ 1813.350867] do_vfs_ioctl+0x75a/0xff0 [ 1813.350889] ? ioctl_preallocate+0x1a0/0x1a0 [ 1813.356010] / [ 1813.360189] ? lock_downgrade+0x740/0x740 [ 1813.376037] mems_allowed=0-1 [ 1813.380981] ? __fget+0x225/0x360 [ 1813.380992] ? do_vfs_ioctl+0xff0/0xff0 [ 1813.381004] ? security_file_ioctl+0x83/0xb0 [ 1813.381013] SyS_ioctl+0x7f/0xb0 [ 1813.381021] ? do_vfs_ioctl+0xff0/0xff0 [ 1813.381033] do_syscall_64+0x1d5/0x640 [ 1813.381047] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1813.381058] RIP: 0033:0x466459 [ 1813.524835] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.532703] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1813.540086] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1813.547378] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1813.554919] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1813.562709] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1813.571193] CPU: 0 PID: 7274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1813.571200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1813.571204] Call Trace: [ 1813.571222] dump_stack+0x1b2/0x281 [ 1813.571237] warn_alloc.cold+0x96/0x1cc [ 1813.571250] ? zone_watermark_ok_safe+0x220/0x220 [ 1813.571260] ? usleep_range+0x130/0x130 [ 1813.571270] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1813.571284] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1813.608706] ? run_timer_softirq+0x5a0/0x5a0 [ 1813.616103] Node 0 [ 1813.619061] __alloc_pages_nodemask+0x2127/0x2720 [ 1813.619079] ? lock_acquire+0x170/0x3f0 [ 1813.623581] DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:282256kB inactive_anon:147900kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12224kB pagetables:16856kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 1813.625811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1813.630866] lowmem_reserve[]: [ 1813.634915] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1813.664828] 0 [ 1813.669973] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1813.669994] alloc_pages_current+0x155/0x260 [ 1813.673212] 0 [ 1813.678129] ion_page_pool_alloc+0x118/0x1b0 [ 1813.680221] 0 [ 1813.685905] ion_system_heap_allocate+0x133/0x8c0 [ 1813.690612] 0 [ 1813.692388] ? _raw_spin_unlock+0x29/0x40 [ 1813.696872] 0 [ 1813.698677] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1813.705404] ? ion_system_contig_heap_create+0x130/0x130 [ 1813.710006] Node 0 [ 1813.711783] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1813.716714] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1813.722969] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1813.722982] ion_alloc+0x27a/0x810 [ 1813.722998] ? ion_dma_buf_release+0x40/0x40 [ 1813.723011] ? __might_fault+0x177/0x1b0 [ 1813.725253] lowmem_reserve[]: [ 1813.730638] ion_ioctl+0xea/0x1f0 [ 1813.730654] ? ion_query_heaps+0x360/0x360 [ 1813.730668] ? ion_query_heaps+0x360/0x360 [ 1813.757920] 0 [ 1813.763255] do_vfs_ioctl+0x75a/0xff0 [ 1813.763269] ? ioctl_preallocate+0x1a0/0x1a0 [ 1813.763280] ? lock_downgrade+0x740/0x740 [ 1813.763293] ? __fget+0x225/0x360 [ 1813.767254] 0 [ 1813.772017] ? do_vfs_ioctl+0xff0/0xff0 [ 1813.772029] ? security_file_ioctl+0x83/0xb0 [ 1813.772038] SyS_ioctl+0x7f/0xb0 [ 1813.772050] ? do_vfs_ioctl+0xff0/0xff0 [ 1813.776343] 0 [ 1813.779648] do_syscall_64+0x1d5/0x640 [ 1813.779668] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1813.783291] 0 [ 1813.787766] RIP: 0033:0x466459 [ 1813.792203] 0 [ 1813.793966] RSP: 002b:00007fa85c13b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.802804] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1813.802810] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1813.802815] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1813.802820] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1813.802825] R13: 00007fff7edb3daf R14: 00007fa85c13b300 R15: 0000000000022000 [ 1813.810697] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1813.850984] Node 1 [ 1813.859735] (null), order=0, oom_score_adj=0 [ 1813.914881] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1813.922143] Normal free:26880kB min:53696kB low:67120kB high:80544kB active_anon:3780kB inactive_anon:33332kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1344kB pagetables:2472kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1813.922268] CPU: 0 PID: 7972 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 1813.960445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1813.970159] Call Trace: [ 1813.972764] dump_stack+0x1b2/0x281 [ 1813.976411] dump_header+0x178/0x82f [ 1813.980162] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1813.985803] ? ___ratelimit+0x2cd/0x530 [ 1813.989018] lowmem_reserve[]: 0 [ 1813.989963] oom_kill_process.cold+0x10/0xa40 [ 1813.989982] out_of_memory+0xe3e/0x1190 [ 1813.993264] 0 [ 1813.998091] ? oom_killer_disable+0x1c0/0x1c0 [ 1814.009092] ? mutex_trylock+0x152/0x1a0 [ 1814.013254] __alloc_pages_nodemask+0x23e1/0x2720 [ 1814.018125] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1814.019012] Mem-Info: [ 1814.023292] alloc_pages_current+0x155/0x260 [ 1814.025882] active_anon:71510 inactive_anon:45308 isolated_anon:0 [ 1814.025882] active_file:14 inactive_file:15 isolated_file:0 [ 1814.025882] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1814.025882] slab_reclaimable:12566 slab_unreclaimable:126713 [ 1814.025882] mapped:52225 shmem:45835 pagetables:4832 bounce:0 [ 1814.025882] free:13975 free_pcp:35 free_cma:0 [ 1814.030288] filemap_fault+0x11a1/0x1ad0 [ 1814.030307] ext4_filemap_fault+0x84/0xb0 [ 1814.030336] __do_fault+0xfa/0x380 [ 1814.064979] 0 [ 1814.070183] __handle_mm_fault+0x2497/0x4620 [ 1814.070194] ? vm_insert_page+0x7c0/0x7c0 [ 1814.070204] ? lock_downgrade+0x740/0x740 [ 1814.070218] ? mark_held_locks+0xa6/0xf0 [ 1814.089025] 0 [ 1814.089663] handle_mm_fault+0x455/0x9c0 [ 1814.094395] 0 [ 1814.098821] __do_page_fault+0x549/0xad0 [ 1814.110880] Node 0 [ 1814.110895] ? spurious_fault+0x640/0x640 [ 1814.110906] ? do_page_fault+0x60/0x500 [ 1814.113140] DMA: [ 1814.117292] ? page_fault+0x2f/0x50 [ 1814.126970] page_fault+0x45/0x50 [ 1814.130458] RIP: 0000:0x940aec [ 1814.133650] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1814.133883] 2*4kB (ME) 2*8kB (UM) 7*16kB (UME) 24*32kB (UM) 15*64kB (UME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (M) 0*4096kB = 10952kB [ 1814.207205] Node 0 active_anon:282260kB inactive_anon:147900kB active_file:8kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168928kB dirty:0kB writeback:0kB shmem:149856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1814.257289] Node 0 DMA32: 65*4kB (UM) 61*8kB (UME) 40*16kB (ME) 416*32kB (UME) 209*64kB (UM) 58*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36012kB [ 1814.277479] Node 1 active_anon:3780kB inactive_anon:33332kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39972kB dirty:0kB writeback:0kB shmem:33484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1814.321655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1814.327694] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1814.341705] Node 1 [ 1814.355410] syz-executor.3 cpuset= [ 1814.357071] Normal: [ 1814.357948] / [ 1814.362317] 164*4kB [ 1814.367350] mems_allowed=0-1 [ 1814.373164] CPU: 0 PID: 7360 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1814.381235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.381998] Node 0 [ 1814.390873] Call Trace: [ 1814.390896] dump_stack+0x1b2/0x281 [ 1814.390910] warn_alloc.cold+0x96/0x1cc [ 1814.390924] ? zone_watermark_ok_safe+0x220/0x220 [ 1814.393395] (UM) [ 1814.396074] __alloc_pages_nodemask+0x2127/0x2720 [ 1814.400291] 114*8kB [ 1814.403948] ? lock_acquire+0x170/0x3f0 [ 1814.409035] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1814.411140] ? lock_acquire+0x170/0x3f0 [ 1814.415981] lowmem_reserve[]: [ 1814.418317] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1814.422551] (UME) [ 1814.450224] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1814.450237] ? __mutex_unlock_slowpath+0x75/0x770 [ 1814.450257] alloc_pages_current+0x155/0x260 [ 1814.454345] 0 [ 1814.457535] ion_page_pool_alloc+0x118/0x1b0 [ 1814.462411] 2717 [ 1814.464528] ion_system_heap_allocate+0x133/0x8c0 [ 1814.470175] 2718 [ 1814.475430] ? _raw_spin_unlock+0x29/0x40 [ 1814.480097] 2718 [ 1814.482819] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1814.487473] 2718 [ 1814.489630] ? ion_system_contig_heap_create+0x130/0x130 [ 1814.489641] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1814.489653] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1814.489664] ion_alloc+0x27a/0x810 [ 1814.495605] 68*16kB [ 1814.498172] ? ion_dma_buf_release+0x40/0x40 [ 1814.502434] (UM) [ 1814.504777] ? __might_fault+0x177/0x1b0 [ 1814.510047] 605*32kB [ 1814.512089] ion_ioctl+0xea/0x1f0 [ 1814.517852] (UME) [ 1814.522876] ? ion_query_heaps+0x360/0x360 [ 1814.522888] ? cp_compat_stat+0x890/0x890 [ 1814.522896] ? ion_query_heaps+0x360/0x360 [ 1814.522906] do_vfs_ioctl+0x75a/0xff0 [ 1814.522918] ? ioctl_preallocate+0x1a0/0x1a0 [ 1814.532187] ? lock_downgrade+0x740/0x740 [ 1814.532202] ? __fget+0x225/0x360 [ 1814.532212] ? do_vfs_ioctl+0xff0/0xff0 [ 1814.532226] ? security_file_ioctl+0x83/0xb0 [ 1814.534575] Node 0 [ 1814.539290] SyS_ioctl+0x7f/0xb0 [ 1814.539299] ? do_vfs_ioctl+0xff0/0xff0 [ 1814.539310] do_syscall_64+0x1d5/0x640 [ 1814.539326] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1814.541600] DMA32 free:18036kB min:36200kB low:45248kB high:54296kB active_anon:282256kB inactive_anon:147900kB active_file:512kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12224kB pagetables:16856kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1814.545750] RIP: 0033:0x466459 [ 1814.545754] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1814.545764] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1814.545769] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1814.545773] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1814.545778] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1814.545783] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1814.566066] Mem-Info: [ 1814.663901] 34*64kB [ 1814.664495] active_anon:71510 inactive_anon:45308 isolated_anon:0 [ 1814.664495] active_file:36 inactive_file:301 isolated_file:0 [ 1814.664495] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1814.664495] slab_reclaimable:12566 slab_unreclaimable:126713 [ 1814.664495] mapped:52425 shmem:45835 pagetables:4832 bounce:0 [ 1814.664495] free:88076 free_pcp:71 free_cma:0 [ 1814.719035] (UM) [ 1814.748813] lowmem_reserve[]: [ 1814.766481] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1814.793695] 0 0 0 0 0 [ 1814.797055] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1814.845612] 11*128kB (M) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26880kB [ 1814.911442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1814.924248] device veth0_vlan entered promiscuous mode [ 1814.930193] systemd[1]: Failed to start Journal Service. [ 1814.943587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1814.955302] lowmem_reserve[]: 0 0 0 0 0 [ 1814.956711] device veth1_vlan entered promiscuous mode [ 1814.974515] Node 1 Normal free:576436kB min:53696kB low:67120kB high:80544kB active_anon:4080kB inactive_anon:33332kB active_file:2276kB inactive_file:4876kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1248kB pagetables:2472kB bounce:0kB free_pcp:316kB local_pcp:292kB free_cma:0kB [ 1814.996804] Node 0 active_anon:282460kB inactive_anon:147900kB active_file:596kB inactive_file:716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169828kB dirty:0kB writeback:0kB shmem:149856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1815.006787] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1815.049685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.062402] Node 1 active_anon:4172kB inactive_anon:33332kB active_file:2356kB inactive_file:5400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45056kB dirty:100kB writeback:0kB shmem:33484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1815.073883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.106813] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1815.135424] lowmem_reserve[]: 0 0 0 0 0 [ 1815.147808] Node 0 DMA: 2*4kB (UE) 2*8kB (UM) 4*16kB (UME) 2*32kB (UM) 13*64kB (UME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11096kB [ 1815.151311] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1815.184806] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1815.190973] 48515 total pagecache pages [ 1815.198686] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.200904] 0 pages in swap cache [ 1815.231470] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1815.245116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1815.253914] Node 0 DMA32: 139*4kB (ME) 149*8kB (UM) 40*16kB (UME) 14*32kB (UME) 280*64kB (UM) 115*128kB (UM) 12*256kB (U) 1*512kB (M) 6*1024kB (UM) 0*2048kB 0*4096kB = 45204kB [ 1815.254594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1815.285503] systemd[1]: Stopped Journal Service. [ 1815.292346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1815.297905] lowmem_reserve[]: [ 1815.316659] device veth0_macvtap entered promiscuous mode [ 1815.317652] systemd[1]: Starting Journal Service... [ 1815.326683] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1815.335591] Swap cache stats: add 0, delete 0, find 0/0 [ 1815.349987] 0 2717 2718 2718 2718 [ 1815.355197] Free swap = 0kB [ 1815.358600] Node 1 Normal: 1*4kB (E) 2*8kB (ME) 2*16kB (UM) 2*32kB (ME) 455*64kB (UM) 470*128kB (UME) 76*256kB (UME) 35*512kB (UME) 241*1024kB (UE) 23*2048kB (U) 0*4096kB = 420660kB [ 1815.369297] Node 0 [ 1815.380456] Total swap = 0kB [ 1815.390167] 2097051 pages RAM [ 1815.398206] 0 pages HighMem/MovableOnly [ 1815.407277] 363848 pages reserved [ 1815.408382] DMA32 free:44764kB min:36200kB low:45248kB high:54296kB active_anon:282532kB inactive_anon:147900kB active_file:612kB inactive_file:788kB unevictable:0kB writepending:12kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:12192kB pagetables:16884kB bounce:0kB free_pcp:708kB local_pcp:236kB free_cma:0kB [ 1815.414342] 0 pages cma reserved [ 1815.451172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.465248] device veth1_macvtap entered promiscuous mode [ 1815.473014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.502074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1815.507210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.530299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1815.539070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.555270] lowmem_reserve[]: 0 0 0 0 0 [ 1815.561942] 48737 total pagecache pages [ 1815.563591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1815.566687] 0 pages in swap cache [ 1815.589142] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.600154] Swap cache stats: add 0, delete 0, find 0/0 [ 1815.618325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.618349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1815.618353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.618366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1815.618369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.618387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1815.618390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.618406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1815.618410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.621119] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1815.695073] Free swap = 0kB [ 1815.719067] lowmem_reserve[]: 0 0 0 0 0 [ 1815.759115] Total swap = 0kB [ 1815.763150] Node 1 Normal free:325552kB min:53696kB low:67120kB high:80544kB active_anon:4036kB inactive_anon:33332kB active_file:3712kB inactive_file:6660kB unevictable:0kB writepending:180kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:1280kB pagetables:2384kB bounce:0kB free_pcp:408kB local_pcp:128kB free_cma:0kB [ 1815.763433] 2097051 pages RAM [ 1815.763440] 0 pages HighMem/MovableOnly [ 1815.819051] lowmem_reserve[]: 0 0 0 0 0 [ 1815.823901] Node 0 DMA: 2*4kB (UE) 2*8kB (UM) 4*16kB (UME) 2*32kB (UM) 13*64kB (UME) 5*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11096kB [ 1815.828720] 363848 pages reserved [ 1815.841278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.879559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1815.883091] 0 pages cma reserved [ 1815.887829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1815.898905] systemd-journald[7387]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1815.900833] Node 0 [ 1815.929595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1815.940508] DMA32: 107*4kB (M) 202*8kB (UME) 31*16kB (ME) 13*32kB (UME) 278*64kB (UM) 115*128kB (UM) 12*256kB (U) 1*512kB (M) 6*1024kB (UM) 0*2048kB 0*4096kB = 45196kB [ 1815.961354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1815.972028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.012925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1816.019066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1816.041930] systemd-journald[7387]: /dev/kmsg buffer overrun, some messages lost. [ 1816.052778] Node 1 Normal: 1*4kB (E) 2*8kB (ME) 1*16kB (U) 2*32kB (ME) 1*64kB (U) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 206*1024kB (UME) 18*2048kB (U) 0*4096kB = 250532kB [ 1816.079823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.099056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.109032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1816.114920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1816.139039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.169033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1816.189066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.189327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.198233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1816.243089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1816.269007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.289192] 50907 total pagecache pages [ 1816.293374] 0 pages in swap cache [ 1816.297146] Swap cache stats: add 0, delete 0, find 0/0 [ 1816.325288] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1816.339682] Free swap = 0kB [ 1816.351447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.369498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1816.377538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1816.385923] Total swap = 0kB [ 1816.399329] 2097051 pages RAM [ 1816.403461] 0 pages HighMem/MovableOnly [ 1816.408023] 363848 pages reserved [ 1816.430982] 0 pages cma reserved [ 1816.449920] Out of memory (oom_kill_allocating_task): Kill process 7972 (syz-fuzzer) score 0 or sacrifice child [ 1816.469359] Killed process 7986 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1816.505507] oom_reaper: reaped process 7126 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1816.560365] oom_reaper: reaped process 7986 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:33:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x56}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x77, 0xffff7fff, 0x20000003, 0x7, 0x20000007}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000a060104000000000000000003000002380007800c00018008000140ac1414201400170076657468305f746fd4026f6e640000000900130073797a310000000008001c4000000008"], 0x4c}}, 0x4) [ 1817.436143] systemd[1]: Starting Load/Save RF Kill Switch Status... 04:33:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x4, 0x4, 0x4, 0x104100, 0x800, {0x0, 0xea60}, {0x1, 0x3, 0x1f, 0xa2, 0x3, 0x1, "d71134ad"}, 0x8, 0x2, @planes=&(0x7f0000000000)={0x1f, 0xc, @userptr=0x43eb, 0x4}, 0x9d2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x2000) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000140)={0x38, 0x100000000, 0x2, 0x2}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x80, 0x4) [ 1817.650742] systemd[1]: Started Load/Save RF Kill Switch Status. 04:33:54 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = fanotify_init(0x62, 0x0) fanotify_mark(r2, 0x48, 0x40000000, r1, &(0x7f0000000100)='./file0\x00') statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000040)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x9) statx(0xffffffffffffffff, &(0x7f0000002a80)='./file0\x00', 0x6000, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="04002dbd7000f2bbc46dd6b741a70ffcdbdf250400000808000300840000"], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x20000000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x6b, 0x4, 0x4, 0x6, 0xfffffffa}) [ 1818.199878] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1818.251071] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1818.273932] CPU: 1 PID: 7399 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1818.281781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1818.297039] Call Trace: [ 1818.299641] dump_stack+0x1b2/0x281 [ 1818.303273] warn_alloc.cold+0x96/0x1cc [ 1818.307252] ? zone_watermark_ok_safe+0x220/0x220 [ 1818.312112] __alloc_pages_nodemask+0x2127/0x2720 [ 1818.316956] ? retint_kernel+0x2d/0x2d [ 1818.320841] ? ion_page_pool_alloc+0x28/0x1b0 [ 1818.325347] ? lock_acquire+0x170/0x3f0 [ 1818.329337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1818.334209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1818.339668] ? __mutex_unlock_slowpath+0x75/0x770 [ 1818.344506] ? retint_kernel+0x2d/0x2d [ 1818.348399] alloc_pages_current+0x155/0x260 [ 1818.352810] ion_page_pool_alloc+0x118/0x1b0 [ 1818.357210] ion_system_heap_allocate+0x133/0x8c0 [ 1818.362046] ? ion_alloc+0x187/0x810 [ 1818.365752] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1818.371209] ? ion_system_contig_heap_create+0x130/0x130 [ 1818.376653] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1818.381668] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1818.386514] ion_alloc+0x204/0x810 [ 1818.390060] ? ion_dma_buf_release+0x40/0x40 [ 1818.394467] ? __might_fault+0x177/0x1b0 [ 1818.398518] ion_ioctl+0xea/0x1f0 [ 1818.401974] ? ion_query_heaps+0x360/0x360 [ 1818.406201] ? ion_query_heaps+0x360/0x360 [ 1818.410425] do_vfs_ioctl+0x75a/0xff0 [ 1818.414220] ? ioctl_preallocate+0x1a0/0x1a0 [ 1818.418629] ? lock_downgrade+0x740/0x740 [ 1818.422774] ? __fget+0x225/0x360 [ 1818.426214] ? do_vfs_ioctl+0xff0/0xff0 [ 1818.430179] ? security_file_ioctl+0x83/0xb0 [ 1818.434581] SyS_ioctl+0x7f/0xb0 [ 1818.437934] ? do_vfs_ioctl+0xff0/0xff0 [ 1818.441900] do_syscall_64+0x1d5/0x640 [ 1818.445782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1818.450958] RIP: 0033:0x466459 [ 1818.454134] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1818.461845] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1818.469106] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1818.476367] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1818.483643] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1818.490927] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1818.506416] warn_alloc_show_mem: 3 callbacks suppressed [ 1818.506419] Mem-Info: [ 1818.514290] active_anon:16382 inactive_anon:47337 isolated_anon:0 [ 1818.514290] active_file:1020 inactive_file:966 isolated_file:61 [ 1818.514290] unevictable:0 dirty:46 writeback:0 unstable:0 [ 1818.514290] slab_reclaimable:12673 slab_unreclaimable:123837 [ 1818.514290] mapped:36984 shmem:47875 pagetables:697 bounce:0 [ 1818.514290] free:21531 free_pcp:197 free_cma:0 [ 1818.549761] Node 0 active_anon:63444kB inactive_anon:147896kB active_file:1352kB inactive_file:1172kB unevictable:0kB isolated(anon):0kB isolated(file):192kB mapped:119996kB dirty:132kB writeback:0kB shmem:149844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1818.578760] Node 1 active_anon:2084kB inactive_anon:41452kB active_file:2016kB inactive_file:1952kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:27440kB dirty:52kB writeback:0kB shmem:41656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1818.607655] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1818.634701] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1818.639883] Node 0 DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:63440kB inactive_anon:147896kB active_file:1172kB inactive_file:968kB unevictable:0kB writepending:432kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2452kB bounce:0kB free_pcp:648kB local_pcp:0kB free_cma:0kB [ 1818.669353] lowmem_reserve[]: 0 0 0 0 0 [ 1818.673356] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1818.700358] lowmem_reserve[]: 0 0 0 0 0 [ 1818.704384] Node 1 Normal free:26680kB min:53696kB low:67120kB high:80544kB active_anon:2084kB inactive_anon:41452kB active_file:1588kB inactive_file:1188kB unevictable:0kB writepending:252kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:336kB bounce:0kB free_pcp:640kB local_pcp:0kB free_cma:0kB [ 1818.743986] oom_reaper: reaped process 7381 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1818.754145] lowmem_reserve[]: 0 0 0 0 0 [ 1818.758183] Node 0 DMA: 3*4kB (ME) 1*8kB (M) 4*16kB (UME) 1*32kB (M) 5*64kB (UME) 8*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10932kB [ 1818.780597] Node 0 DMA32: 1518*4kB (UME) 448*8kB (UME) 118*16kB (UME) 31*32kB (UME) 13*64kB (UM) 8*128kB (UM) 4*256kB (UM) 2*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 19512kB [ 1818.800902] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1818.812832] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1818.813828] Node 1 Normal: 353*4kB (M) 179*8kB (ME) 83*16kB (ME) 41*32kB (UM) 32*64kB (UM) 13*128kB (UM) 16*256kB (UM) 28*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27628kB [ 1818.846539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1818.855462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1818.868583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1818.869064] systemd-journal cpuset=/ mems_allowed=0-1 [ 1818.877594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1818.895391] 48034 total pagecache pages [ 1818.901512] 0 pages in swap cache [ 1818.904977] Swap cache stats: add 0, delete 0, find 0/0 [ 1818.907354] CPU: 0 PID: 7387 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1818.910545] Free swap = 0kB [ 1818.918308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1818.921348] Total swap = 0kB [ 1818.930640] Call Trace: [ 1818.930661] dump_stack+0x1b2/0x281 [ 1818.930673] dump_header+0x178/0x82f [ 1818.930685] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1818.933686] 2097051 pages RAM [ 1818.936272] ? ___ratelimit+0x2cd/0x530 [ 1818.939921] 0 pages HighMem/MovableOnly [ 1818.943598] oom_kill_process.cold+0x10/0xa40 [ 1818.948676] 363848 pages reserved [ 1818.951788] out_of_memory+0xe3e/0x1190 [ 1818.951801] ? oom_killer_disable+0x1c0/0x1c0 [ 1818.951810] ? mutex_trylock+0x152/0x1a0 [ 1818.951821] __alloc_pages_nodemask+0x23e1/0x2720 [ 1818.951841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1818.955991] 0 pages cma reserved [ 1818.959959] ? __put_seccomp_filter+0x90/0x90 [ 1818.959973] ? __seccomp_filter+0xbd/0xd60 [ 1818.959982] ? cache_grow_begin+0x3f/0x700 [ 1818.959992] cache_grow_begin+0x91/0x700 [ 1818.960005] fallback_alloc+0x207/0x2c0 [ 1819.014374] kmem_cache_alloc+0x1e5/0x3c0 [ 1819.018526] getname_flags+0xc8/0x550 [ 1819.022322] SyS_mkdirat+0x83/0x270 [ 1819.025938] ? SyS_mknod+0x30/0x30 [ 1819.029465] ? do_syscall_64+0x4c/0x640 [ 1819.033428] ? SyS_mkdirat+0x270/0x270 [ 1819.037334] do_syscall_64+0x1d5/0x640 [ 1819.041220] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1819.046486] RIP: 0033:0x7fa3d3e87687 [ 1819.050192] RSP: 002b:00007ffd2f4e8ec8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1819.058076] RAX: ffffffffffffffda RBX: 00007ffd2f4ebf30 RCX: 00007fa3d3e87687 [ 1819.065479] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055985558bd60 [ 1819.072739] RBP: 00007ffd2f4e8f00 R08: 00005598551223e5 R09: 0000000000000018 [ 1819.080257] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1819.087522] R13: 0000000000000001 R14: 000055985558bd60 R15: 00007ffd2f4e9540 [ 1819.100958] Mem-Info: [ 1819.103387] active_anon:16376 inactive_anon:47337 isolated_anon:0 [ 1819.103387] active_file:50 inactive_file:0 isolated_file:21 [ 1819.103387] unevictable:0 dirty:24 writeback:31 unstable:0 [ 1819.103387] slab_reclaimable:12673 slab_unreclaimable:123812 [ 1819.103387] mapped:35258 shmem:47875 pagetables:697 bounce:0 [ 1819.103387] free:13915 free_pcp:29 free_cma:0 [ 1819.103401] Node 0 active_anon:63356kB inactive_anon:147896kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:117540kB dirty:72kB writeback:88kB shmem:149844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1819.103414] Node 1 active_anon:2148kB inactive_anon:41452kB active_file:48kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:23492kB dirty:24kB writeback:36kB shmem:41656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1819.103417] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.103435] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1819.103453] Node 0 DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:63352kB inactive_anon:147896kB active_file:252kB inactive_file:52kB unevictable:0kB writepending:460kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.103470] lowmem_reserve[]: 0 0 0 0 0 [ 1819.103488] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.103519] lowmem_reserve[]: [ 1819.262907] syz-executor.4: [ 1819.286370] 0 0 0 0 0 [ 1819.292366] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:2072kB inactive_anon:41452kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.310544] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1819.324064] lowmem_reserve[]: 0 0 0 0 0 [ 1819.335284] Node 0 DMA: 3*4kB (ME) 1*8kB (M) 4*16kB (UME) 1*32kB (M) 5*64kB (UME) 8*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10932kB [ 1819.341473] syz-executor.4 cpuset= [ 1819.350851] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1819.361348] / mems_allowed=0-1 [ 1819.366294] syz-executor.3 cpuset= [ 1819.369469] Node 0 DMA32: 1504*4kB (UME) 442*8kB (UME) 115*16kB (ME) 28*32kB (UME) 10*64kB (M) 5*128kB (UM) 3*256kB (UM) 1*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 17920kB [ 1819.377224] CPU: 1 PID: 7381 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1819.388882] / [ 1819.396564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1819.407610] Call Trace: [ 1819.409064] mems_allowed=0-1 [ 1819.410199] dump_stack+0x1b2/0x281 [ 1819.416903] warn_alloc.cold+0x96/0x1cc [ 1819.420884] ? zone_watermark_ok_safe+0x220/0x220 [ 1819.425719] ? usleep_range+0x130/0x130 [ 1819.429033] Node 0 [ 1819.429682] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1819.429690] Normal: [ 1819.431920] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1819.437013] 0*4kB [ 1819.439321] ? run_timer_softirq+0x5a0/0x5a0 [ 1819.439340] __alloc_pages_nodemask+0x2127/0x2720 [ 1819.439357] ? lock_acquire+0x170/0x3f0 [ 1819.459033] 0*8kB 0*16kB 0*32kB [ 1819.459672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1819.459679] 0*64kB [ 1819.463044] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1819.467866] 0*128kB [ 1819.470099] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1819.470118] alloc_pages_current+0x155/0x260 [ 1819.470131] ion_page_pool_alloc+0x118/0x1b0 [ 1819.470142] ion_system_heap_allocate+0x133/0x8c0 [ 1819.470152] ? ion_alloc+0x187/0x810 [ 1819.489009] 0*256kB [ 1819.491165] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1819.495978] 0*512kB [ 1819.499676] ? ion_system_contig_heap_create+0x130/0x130 [ 1819.499687] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1819.499705] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1819.499716] ion_alloc+0x204/0x810 [ 1819.509010] 0*1024kB [ 1819.509769] ? ion_dma_buf_release+0x40/0x40 [ 1819.515207] 0*2048kB [ 1819.520207] ? __might_fault+0x177/0x1b0 [ 1819.520220] ion_ioctl+0xea/0x1f0 [ 1819.520230] ? ion_query_heaps+0x360/0x360 [ 1819.520242] ? ion_query_heaps+0x360/0x360 [ 1819.549013] 0*4096kB [ 1819.549470] do_vfs_ioctl+0x75a/0xff0 [ 1819.553677] = 0kB [ 1819.556076] ? ioctl_preallocate+0x1a0/0x1a0 [ 1819.566301] ? lock_downgrade+0x740/0x740 [ 1819.569015] Node 1 Normal: [ 1819.570443] ? __fget+0x225/0x360 [ 1819.570450] 307*4kB [ 1819.573367] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.576797] (M) [ 1819.579125] ? security_file_ioctl+0x83/0xb0 [ 1819.579136] SyS_ioctl+0x7f/0xb0 [ 1819.579144] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.579156] do_syscall_64+0x1d5/0x640 [ 1819.579172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1819.579181] RIP: 0033:0x466459 [ 1819.599003] 157*8kB [ 1819.600657] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 [ 1819.605824] (ME) [ 1819.608992] ORIG_RAX: 0000000000000010 [ 1819.608998] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1819.609003] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1819.609008] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1819.609013] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1819.609019] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1819.637707] Mem-Info: [ 1819.648599] CPU: 0 PID: 7360 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1819.663095] active_anon:16353 inactive_anon:47337 isolated_anon:0 [ 1819.663095] active_file:14 inactive_file:13 isolated_file:0 [ 1819.663095] unevictable:0 dirty:1 writeback:1 unstable:0 [ 1819.663095] slab_reclaimable:12673 slab_unreclaimable:123808 [ 1819.663095] mapped:35212 shmem:47875 pagetables:697 bounce:0 [ 1819.663095] free:13791 free_pcp:30 free_cma:0 [ 1819.669473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1819.669478] Call Trace: [ 1819.669500] dump_stack+0x1b2/0x281 [ 1819.669529] warn_alloc.cold+0x96/0x1cc [ 1819.702976] Node 0 active_anon:63340kB inactive_anon:147896kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117444kB dirty:4kB writeback:0kB shmem:149844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1819.712286] ? zone_watermark_ok_safe+0x220/0x220 [ 1819.712298] ? usleep_range+0x130/0x130 [ 1819.712308] ? try_to_free_pages+0x23f/0x6e0 [ 1819.712321] ? _find_next_bit+0xdb/0x100 [ 1819.714904] Node 1 active_anon:2072kB inactive_anon:41452kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23404kB dirty:0kB writeback:4kB shmem:41656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1819.718504] ? run_timer_softirq+0x5a0/0x5a0 [ 1819.722485] Node 0 [ 1819.750321] __alloc_pages_nodemask+0x2127/0x2720 [ 1819.750341] ? lock_acquire+0x170/0x3f0 [ 1819.750356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1819.755211] DMA free:10932kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.759156] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1819.759174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1819.759190] ? alloc_pages_current+0xe3/0x260 [ 1819.763576] lowmem_reserve[]: [ 1819.767627] alloc_pages_current+0x155/0x260 [ 1819.794803] 0 [ 1819.799170] ion_page_pool_alloc+0x118/0x1b0 [ 1819.799181] ion_system_heap_allocate+0x133/0x8c0 [ 1819.801398] 2717 [ 1819.806231] ? _raw_spin_unlock+0x29/0x40 [ 1819.810214] 2718 [ 1819.815013] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1819.840528] 2718 [ 1819.844996] ? ion_system_contig_heap_create+0x130/0x130 [ 1819.850475] 2718 [ 1819.854936] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1819.862434] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1819.862446] ion_alloc+0x27a/0x810 [ 1819.862464] ? ion_dma_buf_release+0x40/0x40 [ 1819.864247] Node 0 [ 1819.868641] ? __might_fault+0x177/0x1b0 [ 1819.873519] DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:63336kB inactive_anon:147896kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:4kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.875521] ion_ioctl+0xea/0x1f0 [ 1819.879682] lowmem_reserve[]: [ 1819.881716] ? ion_query_heaps+0x360/0x360 [ 1819.886613] 0 [ 1819.888690] ? cp_compat_stat+0x890/0x890 [ 1819.894137] 0 [ 1819.896186] ? ion_query_heaps+0x360/0x360 [ 1819.901190] 0 [ 1819.906003] do_vfs_ioctl+0x75a/0xff0 [ 1819.909555] 0 [ 1819.913934] ? ioctl_preallocate+0x1a0/0x1a0 [ 1819.916159] 0 [ 1819.920201] ? lock_downgrade+0x740/0x740 [ 1819.920215] ? __fget+0x225/0x360 [ 1819.920225] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.920240] ? security_file_ioctl+0x83/0xb0 [ 1819.951722] SyS_ioctl+0x7f/0xb0 [ 1819.951733] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.951746] do_syscall_64+0x1d5/0x640 [ 1819.954828] Node 0 [ 1819.959056] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1819.959064] RIP: 0033:0x466459 [ 1819.959069] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1819.959082] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1819.960880] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.964998] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1819.966787] lowmem_reserve[]: [ 1819.971000] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1819.971005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1819.971010] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1819.975367] 89*16kB [ 1819.977043] 0 [ 1819.978833] (UME) [ 1819.998837] 0 [ 1820.004926] 48*32kB [ 1820.009001] 0 [ 1820.012406] (M) [ 1820.014580] 0 [ 1820.023668] 36*64kB [ 1820.043805] 0 [ 1820.067833] (M) [ 1820.092101] 16*128kB [ 1820.101512] Node 1 [ 1820.105560] (UM) [ 1820.105893] Normal free:26436kB min:53696kB low:67120kB high:80544kB active_anon:2072kB inactive_anon:41452kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:336kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1820.107662] 7*256kB [ 1820.115486] lowmem_reserve[]: [ 1820.118749] (UM) [ 1820.124457] 0 [ 1820.158853] 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26436kB [ 1820.167496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.169782] 0 0 0 0 [ 1820.178669] Node 0 DMA: 3*4kB (ME) 1*8kB (M) 4*16kB (UME) 1*32kB (M) 5*64kB (UME) 8*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 10932kB [ 1820.184039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1820.204060] Node 0 DMA32: 1504*4kB (UME) 449*8kB (UME) 115*16kB (ME) 28*32kB (UME) 10*64kB (M) 5*128kB (UM) 3*256kB (UM) 1*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 17976kB [ 1820.225083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.230216] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1820.235922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1820.254426] Node 1 Normal: 307*4kB (M) 157*8kB (ME) 89*16kB (UME) 48*32kB (M) 36*64kB (M) 16*128kB (UM) 7*256kB (UM) 29*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26436kB [ 1820.261002] 47900 total pagecache pages [ 1820.280488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.282700] 0 pages in swap cache [ 1820.296214] Swap cache stats: add 0, delete 0, find 0/0 [ 1820.297360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1820.306069] Free swap = 0kB [ 1820.316699] Total swap = 0kB [ 1820.320319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.324275] 2097051 pages RAM [ 1820.335748] 0 pages HighMem/MovableOnly [ 1820.337103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1820.344193] 363848 pages reserved [ 1820.348998] 47900 total pagecache pages [ 1820.354992] 0 pages cma reserved [ 1820.355757] 0 pages in swap cache [ 1820.365653] Out of memory (oom_kill_allocating_task): Kill process 7387 (systemd-journal) score 0 or sacrifice child [ 1820.372111] Swap cache stats: add 0, delete 0, find 0/0 [ 1820.384229] Killed process 7387 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:4kB, shmem-rss:1564kB [ 1820.391556] Free swap = 0kB [ 1820.398680] oom_reaper: reaped process 7387 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1564kB [ 1820.419063] systemd-journal: page allocation failure: order:1, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1820.419885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1820.439804] Total swap = 0kB [ 1820.443638] systemd-journal cpuset=/ mems_allowed=0-1 [ 1820.449005] 2097051 pages RAM [ 1820.452107] 0 pages HighMem/MovableOnly [ 1820.454065] CPU: 0 PID: 7387 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1820.456142] 363848 pages reserved [ 1820.463932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1820.463936] Call Trace: [ 1820.463952] dump_stack+0x1b2/0x281 [ 1820.463964] warn_alloc.cold+0x96/0x1cc [ 1820.463975] ? zone_watermark_ok_safe+0x220/0x220 [ 1820.463984] ? usleep_range+0x130/0x130 [ 1820.463994] ? _find_next_bit+0xdb/0x100 [ 1820.464003] ? run_timer_softirq+0x5a0/0x5a0 [ 1820.464018] __alloc_pages_nodemask+0x2127/0x2720 [ 1820.464039] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1820.464049] ? __put_seccomp_filter+0x90/0x90 [ 1820.464065] ? __seccomp_filter+0xbd/0xd60 [ 1820.464075] ? cache_grow_begin+0x3f/0x700 [ 1820.464085] cache_grow_begin+0x91/0x700 [ 1820.464101] fallback_alloc+0x207/0x2c0 [ 1820.488995] 0 pages cma reserved [ 1820.491859] kmem_cache_alloc+0x1e5/0x3c0 [ 1820.542324] getname_flags+0xc8/0x550 [ 1820.546214] SyS_mkdirat+0x83/0x270 [ 1820.549836] ? SyS_mknod+0x30/0x30 [ 1820.553375] ? do_syscall_64+0x4c/0x640 [ 1820.557340] ? SyS_mkdirat+0x270/0x270 [ 1820.561219] do_syscall_64+0x1d5/0x640 [ 1820.565109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1820.570292] RIP: 0033:0x7fa3d3e87687 [ 1820.573994] RSP: 002b:00007ffd2f4e8ec8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1820.581695] RAX: ffffffffffffffda RBX: 00007ffd2f4ebf30 RCX: 00007fa3d3e87687 [ 1820.588955] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055985558bd60 [ 1820.596214] RBP: 00007ffd2f4e8f00 R08: 00005598551223e5 R09: 0000000000000018 [ 1820.603476] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1820.610741] R13: 0000000000000001 R14: 000055985558bd60 R15: 00007ffd2f4e9540 [ 1820.624127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1820.653556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1820.683580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1820.710262] device bridge_slave_1 left promiscuous mode [ 1820.728056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.757925] device bridge_slave_0 left promiscuous mode [ 1820.763656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.773724] device veth1_macvtap left promiscuous mode [ 1820.780989] device veth0_macvtap left promiscuous mode [ 1820.790004] device veth1_vlan left promiscuous mode [ 1820.796177] device veth0_vlan left promiscuous mode [ 1820.876424] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1820.908846] systemd[1]: Failed to start Journal Service. [ 1820.976443] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1821.016022] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1821.061253] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1821.121548] systemd[1]: Stopped Journal Service. [ 1821.163444] systemd[1]: Starting Journal Service... [ 1821.233832] device hsr_slave_1 left promiscuous mode [ 1821.256558] device hsr_slave_0 left promiscuous mode [ 1821.297474] team0 (unregistering): Port device team_slave_1 removed [ 1821.318900] systemd-journald[7421]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1821.349798] team0 (unregistering): Port device team_slave_0 removed [ 1821.369914] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1821.393188] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1821.499330] bond0 (unregistering): Released all slaves [ 1822.353489] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1822.392421] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1822.397599] CPU: 0 PID: 7381 Comm: syz-executor.4 Not tainted 4.14.229-syzkaller #0 [ 1822.405389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.415362] Call Trace: [ 1822.417952] dump_stack+0x1b2/0x281 [ 1822.421579] warn_alloc.cold+0x96/0x1cc [ 1822.425552] ? zone_watermark_ok_safe+0x220/0x220 [ 1822.430406] __alloc_pages_nodemask+0x2127/0x2720 [ 1822.435243] ? lock_acquire+0x170/0x3f0 [ 1822.439227] ? lock_acquire+0x170/0x3f0 [ 1822.443216] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1822.448061] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1822.453516] ? __mutex_unlock_slowpath+0x75/0x770 [ 1822.458622] alloc_pages_current+0x155/0x260 [ 1822.463030] ion_page_pool_alloc+0x118/0x1b0 [ 1822.467434] ion_system_heap_allocate+0x133/0x8c0 [ 1822.472287] ? _raw_spin_unlock+0x29/0x40 [ 1822.476430] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1822.481352] ? ion_system_contig_heap_create+0x130/0x130 [ 1822.486815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1822.491834] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1822.496683] ion_alloc+0x27a/0x810 [ 1822.500227] ? ion_dma_buf_release+0x40/0x40 [ 1822.504631] ? __might_fault+0x177/0x1b0 [ 1822.508686] ion_ioctl+0xea/0x1f0 [ 1822.512134] ? ion_query_heaps+0x360/0x360 [ 1822.516381] ? ion_query_heaps+0x360/0x360 [ 1822.520631] do_vfs_ioctl+0x75a/0xff0 [ 1822.524430] ? ioctl_preallocate+0x1a0/0x1a0 [ 1822.528837] ? lock_downgrade+0x740/0x740 [ 1822.532995] ? __fget+0x225/0x360 [ 1822.536443] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.540433] ? security_file_ioctl+0x83/0xb0 [ 1822.544840] SyS_ioctl+0x7f/0xb0 [ 1822.548200] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.552171] do_syscall_64+0x1d5/0x640 [ 1822.556062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1822.561247] RIP: 0033:0x466459 [ 1822.564447] RSP: 002b:00007f64a2cc9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1822.572149] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1822.579415] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1822.586768] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1822.594225] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1822.601490] R13: 00007ffc6cd43d5f R14: 00007f64a2cc9300 R15: 0000000000022000 [ 1822.610884] warn_alloc_show_mem: 2 callbacks suppressed [ 1822.610888] Mem-Info: [ 1822.619641] active_anon:16475 inactive_anon:49369 isolated_anon:0 [ 1822.619641] active_file:807 inactive_file:2737 isolated_file:0 [ 1822.619641] unevictable:0 dirty:49 writeback:0 unstable:0 [ 1822.619641] slab_reclaimable:12699 slab_unreclaimable:122355 [ 1822.619641] mapped:54837 shmem:49923 pagetables:761 bounce:0 [ 1822.619641] free:155588 free_pcp:684 free_cma:0 [ 1822.653729] Node 0 active_anon:64008kB inactive_anon:156088kB active_file:1648kB inactive_file:7392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193332kB dirty:88kB writeback:0kB shmem:158036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1822.689345] Node 1 active_anon:1892kB inactive_anon:41388kB active_file:1580kB inactive_file:3556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26016kB dirty:108kB writeback:0kB shmem:41656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1822.749021] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.819055] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1822.829965] Node 0 DMA32 free:409548kB min:36200kB low:45248kB high:54296kB active_anon:64004kB inactive_anon:156088kB active_file:1648kB inactive_file:7392kB unevictable:0kB writepending:88kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2872kB bounce:0kB free_pcp:1328kB local_pcp:648kB free_cma:0kB [ 1822.909361] lowmem_reserve[]: 0 0 0 0 0 [ 1822.913391] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.989392] lowmem_reserve[]: 0 0 0 0 0 [ 1822.993424] Node 1 Normal free:279888kB min:53696kB low:67120kB high:80544kB active_anon:1892kB inactive_anon:41388kB active_file:1880kB inactive_file:3168kB unevictable:0kB writepending:108kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:172kB bounce:0kB free_pcp:1428kB local_pcp:728kB free_cma:0kB [ 1823.059016] lowmem_reserve[]: 0 0 0 0 0 [ 1823.063048] Node 0 DMA: 103*4kB (UME) 34*8kB (UM) 15*16kB (UME) 7*32kB (UM) 2*64kB (ME) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (M) 0*4096kB = 11132kB [ 1823.099048] Node 0 DMA32: 18544*4kB (UME) 11821*8kB (UME) 5944*16kB (UME) 2897*32kB (UE) 23*64kB (U) 27*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 361480kB [ 1823.129572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1823.160002] Node 1 Normal: 20327*4kB (UM) 7892*8kB (UE) 3654*16kB (UE) 1895*32kB (UM) 186*64kB (U) 20*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 280060kB [ 1823.189633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1823.198503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1823.229006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1823.237869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1823.259041] 53488 total pagecache pages [ 1823.263027] 0 pages in swap cache [ 1823.266473] Swap cache stats: add 0, delete 0, find 0/0 [ 1823.289346] Free swap = 0kB [ 1823.292378] Total swap = 0kB [ 1823.295392] 2097051 pages RAM [ 1823.298482] 0 pages HighMem/MovableOnly [ 1823.319051] 363848 pages reserved [ 1823.322520] 0 pages cma reserved [ 1823.683681] systemd[1]: Started Journal Service. [ 1824.031672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.038421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.068929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1824.092443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.114277] device bridge_slave_1 left promiscuous mode [ 1824.125852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.136626] device bridge_slave_0 left promiscuous mode [ 1824.142916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.155763] device veth1_macvtap left promiscuous mode [ 1824.161925] device veth0_macvtap left promiscuous mode [ 1824.167251] device veth1_vlan left promiscuous mode [ 1824.180235] device veth0_vlan left promiscuous mode [ 1824.324849] device hsr_slave_1 left promiscuous mode [ 1824.333817] device hsr_slave_0 left promiscuous mode [ 1824.351898] team0 (unregistering): Port device team_slave_1 removed [ 1824.365004] team0 (unregistering): Port device team_slave_0 removed [ 1824.374993] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1824.387768] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1824.448753] bond0 (unregistering): Released all slaves [ 1825.724288] IPVS: ftp: loaded support on port[0] = 21 [ 1825.786141] IPVS: ftp: loaded support on port[0] = 21 [ 1825.947637] chnl_net:caif_netlink_parms(): no params data found [ 1826.042185] Bluetooth: hci0 command 0x0409 tx timeout [ 1826.119075] Bluetooth: hci5 command 0x0409 tx timeout [ 1826.133463] chnl_net:caif_netlink_parms(): no params data found [ 1826.213702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.224249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.232869] device bridge_slave_0 entered promiscuous mode [ 1826.245131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.252339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.269927] device bridge_slave_1 entered promiscuous mode [ 1826.306920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1826.321637] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1826.392149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.398570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.413671] device bridge_slave_0 entered promiscuous mode [ 1826.421514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1826.432603] team0: Port device team_slave_0 added [ 1826.437725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.454064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.462444] device bridge_slave_1 entered promiscuous mode [ 1826.469488] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1826.476807] team0: Port device team_slave_1 added [ 1826.531427] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1826.544796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.552616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.582365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.595554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1826.608496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.615883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.645519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.679386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1826.687039] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1826.699637] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1826.706976] team0: Port device team_slave_0 added [ 1826.740361] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1826.748560] team0: Port device team_slave_1 added [ 1826.762594] device hsr_slave_0 entered promiscuous mode [ 1826.768828] device hsr_slave_1 entered promiscuous mode [ 1826.792404] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1826.800040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1826.816288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.822840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.849681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.861974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.868220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.895099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.908414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1826.933420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1827.010847] device hsr_slave_0 entered promiscuous mode [ 1827.017036] device hsr_slave_1 entered promiscuous mode [ 1827.036261] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1827.048489] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1827.145173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1827.187348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.198527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1827.207116] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1827.215570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1827.225386] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1827.231718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.238034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1827.245617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1827.257342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1827.265806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1827.273815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1827.282205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.288537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.295854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1827.308351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1827.317142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1827.327448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1827.335397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.341838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1827.352040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1827.361502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1827.371811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1827.383244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1827.393612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1827.404388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1827.412350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1827.426828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1827.437955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.444649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1827.451840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1827.460206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1827.470635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1827.478453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1827.487344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1827.496562] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1827.504321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1827.515460] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1827.522233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1827.530660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1827.538011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1827.545504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1827.555533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1827.562515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1827.571404] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1827.577459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.588072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1827.597446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1827.605441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1827.613332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.619744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.630598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1827.638372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1827.647338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1827.655886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1827.664015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.670423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1827.680969] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1827.687978] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1827.697372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1827.704952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1827.712440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1827.720552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1827.732070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1827.742089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1827.748384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1827.761553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1827.770365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1827.778244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1827.786891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1827.796334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1827.804139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1827.813246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1827.830128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1827.839968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1827.851831] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1827.858234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1827.866552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1827.874513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1827.891045] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1827.898833] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1827.906472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1827.914251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1827.924926] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1827.936576] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1827.945685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1827.954006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1827.969297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.004815] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1828.012497] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1828.020640] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1828.031584] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1828.038180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1828.047004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1828.056828] device veth0_vlan entered promiscuous mode [ 1828.068564] device veth1_vlan entered promiscuous mode [ 1828.075696] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1828.082927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1828.090566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1828.097431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1828.108099] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1828.119940] Bluetooth: hci0 command 0x041b tx timeout [ 1828.122378] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1828.134114] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1828.145324] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1828.153858] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1828.165292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1828.173305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1828.183743] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1828.191802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1828.199343] Bluetooth: hci5 command 0x041b tx timeout [ 1828.200958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1828.214282] device veth0_macvtap entered promiscuous mode [ 1828.224842] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1828.236072] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1828.243353] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1828.250613] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1828.257444] device veth1_macvtap entered promiscuous mode [ 1828.264389] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1828.274377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1828.286269] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1828.295236] device veth0_vlan entered promiscuous mode [ 1828.302611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1828.310049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1828.317017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1828.324508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1828.332239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1828.339691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1828.348843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1828.362850] device veth1_vlan entered promiscuous mode [ 1828.368879] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1828.376797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.387733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.397021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.407046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.416248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.426094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.435265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.445425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.455593] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1828.462862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.471907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1828.479774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1828.487436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1828.498102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.508582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.517811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.528533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.537721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.547932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.557094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.566883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.577102] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1828.584242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.593173] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1828.600855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1828.608154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1828.616083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1828.638595] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1828.653721] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1828.661475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1828.674139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1828.685010] device veth0_macvtap entered promiscuous mode [ 1828.692681] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1828.705343] device veth1_macvtap entered promiscuous mode [ 1828.712533] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1828.722863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1828.733487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1828.744026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.755577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.765982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.776102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.785615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.796759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.807581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.817688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.827204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1828.837310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.848812] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1828.855967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.864441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1828.872229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1828.879784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1828.887465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1828.897275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.907753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.917282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.927490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.936690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.946455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.955694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.965500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.974832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1828.984602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.994648] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1829.002761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.011121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1829.018911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:34:06 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:06 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) 04:34:06 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:06 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) 04:34:06 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) 04:34:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', r1) [ 1829.232001] FAULT_INJECTION: forcing a failure. [ 1829.232001] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.247487] CPU: 1 PID: 7920 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1829.255332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1829.264714] Call Trace: [ 1829.267358] dump_stack+0x1b2/0x281 [ 1829.271008] should_fail.cold+0x10a/0x149 [ 1829.275171] should_failslab+0xd6/0x130 [ 1829.279192] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1829.283887] ion_alloc+0x187/0x810 [ 1829.287437] ? ion_dma_buf_release+0x40/0x40 [ 1829.291860] ? __might_fault+0x177/0x1b0 [ 1829.295931] ion_ioctl+0xea/0x1f0 [ 1829.299424] ? ion_query_heaps+0x360/0x360 [ 1829.303680] ? SyS_write+0x1b7/0x210 [ 1829.307415] ? ion_query_heaps+0x360/0x360 [ 1829.311662] do_vfs_ioctl+0x75a/0xff0 [ 1829.315467] ? ioctl_preallocate+0x1a0/0x1a0 [ 1829.319880] ? lock_downgrade+0x740/0x740 [ 1829.324034] ? __fget+0x225/0x360 [ 1829.327498] ? do_vfs_ioctl+0xff0/0xff0 [ 1829.331481] ? security_file_ioctl+0x83/0xb0 [ 1829.335896] SyS_ioctl+0x7f/0xb0 [ 1829.339275] ? do_vfs_ioctl+0xff0/0xff0 [ 1829.343271] do_syscall_64+0x1d5/0x640 [ 1829.347180] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1829.352387] RIP: 0033:0x466459 [ 1829.355580] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.363308] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1829.370594] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 04:34:06 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1c1142) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) 04:34:06 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x800000000000f1, 0x2402) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/233, 0xe9}], 0x4, &(0x7f00000003c0)=""/87, 0x57}, 0x20) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:06 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0x1b, 0x3, 0x4, 0x100911, 0x7, {}, {0x1, 0x1, 0x6, 0x9, 0x96, 0x1f, "68800487"}, 0x0, 0x4, @planes=&(0x7f0000000080)={0x7fffffff, 0x3ff, @userptr=0xffff, 0xad2e}, 0x7}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r3, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@mcast1, 0x80000001, 0x0, 0x2, 0xe, 0x9, 0x7f}, 0x20) statx(r2, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x9}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x200, @mcast1, 0x5}, @in={0x2, 0x4e23, @multicast1}}}, 0x118) 04:34:06 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) [ 1829.377896] RBP: 00007f29507b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.385220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.392496] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1829.481842] FAULT_INJECTION: forcing a failure. [ 1829.481842] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.526119] CPU: 0 PID: 7937 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1829.533975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1829.543354] Call Trace: [ 1829.545980] dump_stack+0x1b2/0x281 [ 1829.549640] should_fail.cold+0x10a/0x149 [ 1829.553817] should_failslab+0xd6/0x130 [ 1829.557811] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1829.562508] ion_alloc+0x187/0x810 [ 1829.566073] ? ion_dma_buf_release+0x40/0x40 [ 1829.570504] ? __might_fault+0x177/0x1b0 [ 1829.574585] ion_ioctl+0xea/0x1f0 [ 1829.578057] ? ion_query_heaps+0x360/0x360 [ 1829.582307] ? SyS_write+0x1b7/0x210 [ 1829.586037] ? ion_query_heaps+0x360/0x360 [ 1829.590324] do_vfs_ioctl+0x75a/0xff0 [ 1829.594151] ? ioctl_preallocate+0x1a0/0x1a0 [ 1829.598570] ? lock_downgrade+0x740/0x740 [ 1829.602741] ? __fget+0x225/0x360 [ 1829.606214] ? do_vfs_ioctl+0xff0/0xff0 [ 1829.610206] ? security_file_ioctl+0x83/0xb0 [ 1829.614640] SyS_ioctl+0x7f/0xb0 [ 1829.618017] ? do_vfs_ioctl+0xff0/0xff0 [ 1829.622010] do_syscall_64+0x1d5/0x640 [ 1829.625920] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1829.631128] RIP: 0033:0x466459 [ 1829.634327] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.642057] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1829.649345] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1829.656730] RBP: 00007f29507b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.664024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.671360] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 [ 1830.199438] Bluetooth: hci0 command 0x040f tx timeout [ 1830.279598] Bluetooth: hci5 command 0x040f tx timeout [ 1830.568231] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1830.603301] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1830.624802] CPU: 1 PID: 7921 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1830.632624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1830.641976] Call Trace: [ 1830.644571] dump_stack+0x1b2/0x281 [ 1830.648646] warn_alloc.cold+0x96/0x1cc [ 1830.652625] ? zone_watermark_ok_safe+0x220/0x220 [ 1830.657479] __alloc_pages_nodemask+0x2127/0x2720 [ 1830.662327] ? lock_acquire+0x170/0x3f0 [ 1830.666303] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1830.671167] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1830.676718] ? __mutex_unlock_slowpath+0x75/0x770 [ 1830.681560] alloc_pages_current+0x155/0x260 [ 1830.685982] ion_page_pool_alloc+0x118/0x1b0 [ 1830.690383] ion_system_heap_allocate+0x133/0x8c0 [ 1830.695226] ? ion_alloc+0x187/0x810 [ 1830.698958] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1830.704424] ? ion_system_contig_heap_create+0x130/0x130 [ 1830.709865] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1830.714873] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1830.719708] ion_alloc+0x204/0x810 [ 1830.723256] ? ion_dma_buf_release+0x40/0x40 [ 1830.727664] ? __might_fault+0x177/0x1b0 [ 1830.731723] ion_ioctl+0xea/0x1f0 [ 1830.735200] ? ion_query_heaps+0x360/0x360 [ 1830.739433] ? ion_query_heaps+0x360/0x360 [ 1830.743661] do_vfs_ioctl+0x75a/0xff0 [ 1830.747461] ? ioctl_preallocate+0x1a0/0x1a0 [ 1830.751867] ? lock_downgrade+0x740/0x740 [ 1830.756026] ? __fget+0x225/0x360 [ 1830.760619] ? do_vfs_ioctl+0xff0/0xff0 [ 1830.764604] ? security_file_ioctl+0x83/0xb0 [ 1830.769010] SyS_ioctl+0x7f/0xb0 [ 1830.772370] ? do_vfs_ioctl+0xff0/0xff0 [ 1830.776360] do_syscall_64+0x1d5/0x640 [ 1830.780248] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1830.785436] RIP: 0033:0x466459 [ 1830.788611] RSP: 002b:00007f88ffdb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1830.796315] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1830.803578] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1830.810838] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1830.818099] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1830.825363] R13: 00007fff73d9b2bf R14: 00007f88ffdb5300 R15: 0000000000022000 [ 1830.840817] Mem-Info: [ 1830.847112] active_anon:16468 inactive_anon:49373 isolated_anon:12 [ 1830.847112] active_file:1611 inactive_file:2249 isolated_file:12 [ 1830.847112] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1830.847112] slab_reclaimable:12305 slab_unreclaimable:120714 [ 1830.847112] mapped:55330 shmem:49932 pagetables:704 bounce:0 [ 1830.847112] free:209767 free_pcp:240 free_cma:0 [ 1830.893306] Node 0 active_anon:63684kB inactive_anon:156088kB active_file:6352kB inactive_file:9564kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:199708kB dirty:40kB writeback:0kB shmem:158040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1830.932948] Node 1 active_anon:2188kB inactive_anon:41404kB active_file:92kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21912kB dirty:28kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1830.965162] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1830.995037] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1831.000178] Node 0 DMA32 free:765692kB min:36200kB low:45248kB high:54296kB active_anon:63680kB inactive_anon:156088kB active_file:6420kB inactive_file:10176kB unevictable:0kB writepending:340kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2660kB bounce:0kB free_pcp:272kB local_pcp:56kB free_cma:0kB [ 1831.030002] lowmem_reserve[]: 0 0 0 0 0 [ 1831.034013] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1831.059658] lowmem_reserve[]: 0 0 0 0 0 [ 1831.063664] Node 1 Normal free:63640kB min:53696kB low:67120kB high:80544kB active_anon:2172kB inactive_anon:41404kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB [ 1831.092656] lowmem_reserve[]: 0 0 0 0 0 [ 1831.096662] Node 0 DMA: 17*4kB (UME) 36*8kB (UME) 31*16kB (UME) 28*32kB (UM) 22*64kB (UME) 10*128kB (UME) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11092kB [ 1831.112734] Node 0 DMA32: 17693*4kB (UME) 21196*8kB (UE) 16341*16kB (UME) 8154*32kB (UE) 42*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 765412kB [ 1831.127656] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1831.138485] Node 1 Normal: 772*4kB (UM) 1285*8kB (UME) 1120*16kB (UME) 989*32kB (UM) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63512kB [ 1831.153029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1831.161995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1831.170718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1831.179639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1831.188209] 54159 total pagecache pages [ 1831.192262] 0 pages in swap cache [ 1831.195716] Swap cache stats: add 0, delete 0, find 0/0 [ 1831.201153] Free swap = 0kB [ 1831.204177] Total swap = 0kB [ 1831.207213] 2097051 pages RAM [ 1831.210396] 0 pages HighMem/MovableOnly [ 1831.214369] 363848 pages reserved [ 1831.217820] 0 pages cma reserved [ 1832.279318] Bluetooth: hci0 command 0x0419 tx timeout [ 1832.359504] Bluetooth: hci5 command 0x0419 tx timeout [ 1832.411742] oom_reaper: reaped process 7921 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1832.476398] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1832.489545] systemd-journal cpuset=/ mems_allowed=0-1 [ 1832.494760] CPU: 0 PID: 7421 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1832.502633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.511977] Call Trace: [ 1832.514568] dump_stack+0x1b2/0x281 [ 1832.518201] dump_header+0x178/0x82f [ 1832.521908] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1832.527000] ? ___ratelimit+0x2cd/0x530 [ 1832.530965] oom_kill_process.cold+0x10/0xa40 [ 1832.535471] out_of_memory+0xe3e/0x1190 [ 1832.539439] ? oom_killer_disable+0x1c0/0x1c0 [ 1832.543933] ? mutex_trylock+0x152/0x1a0 [ 1832.547986] __alloc_pages_nodemask+0x23e1/0x2720 [ 1832.552830] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.557685] alloc_pages_current+0x155/0x260 [ 1832.562094] filemap_fault+0x11a1/0x1ad0 [ 1832.566171] ext4_filemap_fault+0x84/0xb0 [ 1832.570321] __do_fault+0xfa/0x380 [ 1832.573857] __handle_mm_fault+0x2497/0x4620 [ 1832.578259] ? vm_insert_page+0x7c0/0x7c0 [ 1832.582686] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1832.587694] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1832.592448] ? mark_held_locks+0xa6/0xf0 [ 1832.596501] handle_mm_fault+0x455/0x9c0 [ 1832.600649] __do_page_fault+0x549/0xad0 [ 1832.604699] ? spurious_fault+0x640/0x640 [ 1832.608835] ? do_page_fault+0x60/0x500 [ 1832.612796] ? page_fault+0x2f/0x50 [ 1832.616407] page_fault+0x45/0x50 [ 1832.619848] RIP: 0001:0x1 [ 1832.622587] RSP: 89fa7310:00007ffcce4f1360 EFLAGS: 7ffcce4f1170 [ 1832.624049] Mem-Info: [ 1832.629285] syz-executor.0: [ 1832.630173] active_anon:15920 inactive_anon:49373 isolated_anon:0 [ 1832.630173] active_file:29 inactive_file:11 isolated_file:0 [ 1832.630173] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1832.630173] slab_reclaimable:12306 slab_unreclaimable:118925 [ 1832.630173] mapped:52845 shmem:49932 pagetables:715 bounce:0 [ 1832.630173] free:13840 free_pcp:60 free_cma:0 [ 1832.632509] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1832.632525] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1832.635567] Node 0 active_anon:61508kB inactive_anon:156088kB active_file:112kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189548kB dirty:20kB writeback:0kB shmem:158040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.675961] CPU: 1 PID: 7921 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1832.682637] Node 1 active_anon:2172kB inactive_anon:41404kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21832kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.684336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.714773] Node 0 [ 1832.720217] Call Trace: [ 1832.720241] dump_stack+0x1b2/0x281 [ 1832.720256] warn_alloc.cold+0x96/0x1cc [ 1832.720269] ? zone_watermark_ok_safe+0x220/0x220 [ 1832.753613] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.756590] ? usleep_range+0x130/0x130 [ 1832.758832] lowmem_reserve[]: [ 1832.761406] ? try_to_free_pages+0x23f/0x6e0 [ 1832.761417] ? _find_next_bit+0xdb/0x100 [ 1832.761428] ? run_timer_softirq+0x5a0/0x5a0 [ 1832.761445] __alloc_pages_nodemask+0x2127/0x2720 [ 1832.761460] ? lock_acquire+0x170/0x3f0 [ 1832.761474] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.761485] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1832.761501] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1832.761515] ? retint_kernel+0x2d/0x2d [ 1832.761529] alloc_pages_current+0x155/0x260 [ 1832.761541] ion_page_pool_alloc+0x118/0x1b0 [ 1832.761550] ion_system_heap_allocate+0x133/0x8c0 [ 1832.761561] ? ion_alloc+0x187/0x810 [ 1832.761572] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1832.761580] ? ion_system_contig_heap_create+0x130/0x130 [ 1832.761589] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1832.761599] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1832.761609] ion_alloc+0x204/0x810 [ 1832.761622] ? ion_dma_buf_release+0x40/0x40 [ 1832.761633] ? __might_fault+0x177/0x1b0 [ 1832.761644] ion_ioctl+0xea/0x1f0 [ 1832.761653] ? ion_query_heaps+0x360/0x360 [ 1832.761666] ? ion_query_heaps+0x360/0x360 [ 1832.761677] do_vfs_ioctl+0x75a/0xff0 [ 1832.761687] ? ioctl_preallocate+0x1a0/0x1a0 [ 1832.761695] ? lock_downgrade+0x740/0x740 [ 1832.761706] ? __fget+0x225/0x360 [ 1832.761721] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.761732] ? security_file_ioctl+0x83/0xb0 [ 1832.761740] SyS_ioctl+0x7f/0xb0 [ 1832.761747] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.761759] do_syscall_64+0x1d5/0x640 [ 1832.761773] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1832.761782] RIP: 0033:0x466459 [ 1832.761790] RSP: 002b:00007f88ffdb5188 EFLAGS: 00000246 [ 1832.765411] 0 [ 1832.769365] ORIG_RAX: 0000000000000010 [ 1832.769371] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1832.769376] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1832.769382] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1832.769387] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1832.769393] R13: 00007fff73d9b2bf R14: 00007f88ffdb5300 R15: 0000000000022000 [ 1832.788999] Mem-Info: [ 1832.804180] 2717 [ 1832.813671] active_anon:15920 inactive_anon:49373 isolated_anon:0 [ 1832.813671] active_file:29 inactive_file:11 isolated_file:0 [ 1832.813671] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1832.813671] slab_reclaimable:12306 slab_unreclaimable:118925 [ 1832.813671] mapped:52845 shmem:49932 pagetables:715 bounce:0 [ 1832.813671] free:13840 free_pcp:60 free_cma:0 [ 1832.815618] 2718 [ 1832.825543] Node 0 active_anon:61508kB inactive_anon:156088kB active_file:112kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189548kB dirty:20kB writeback:0kB shmem:158040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.834327] 2718 [ 1832.837209] Node 1 active_anon:2172kB inactive_anon:41404kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21832kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.839706] 2718 [ 1832.839714] Node 0 DMA32 free:17664kB min:36200kB low:45248kB high:54296kB active_anon:61504kB inactive_anon:156088kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:20kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2704kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1832.839731] lowmem_reserve[]: 0 0 0 0 0 [ 1832.839749] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.839763] lowmem_reserve[]: 0 0 0 0 0 [ 1832.839781] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:2172kB inactive_anon:41404kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1832.839797] lowmem_reserve[]: 0 0 0 0 0 [ 1832.839817] Node 0 DMA: 5*4kB (UME) 23*8kB (UME) 30*16kB (UME) 27*32kB (UM) 21*64kB (UME) 9*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 10956kB [ 1832.839892] Node 0 DMA32: 1701*4kB (ME) 432*8kB (ME) 95*16kB (UME) 46*32kB (UME) 24*64kB (UM) 7*128kB (M) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 17732kB [ 1832.839957] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1832.840007] Node 1 Normal: 216*4kB (M) 85*8kB (ME) 29*16kB (ME) 755*32kB (UM) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26744kB [ 1832.840069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1832.840074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1832.840078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1832.840084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1832.840088] 49969 total pagecache pages [ 1832.840105] 0 pages in swap cache [ 1832.840111] Swap cache stats: add 0, delete 0, find 0/0 [ 1832.840114] Free swap = 0kB [ 1832.840118] Total swap = 0kB [ 1832.840124] 2097051 pages RAM [ 1832.840128] 0 pages HighMem/MovableOnly [ 1832.840132] 363848 pages reserved [ 1832.840135] 0 pages cma reserved [ 1832.840142] Out of memory (oom_kill_allocating_task): Kill process 7421 (systemd-journal) score 0 or sacrifice child [ 1832.840173] Killed process 7421 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2368kB [ 1832.846219] systemd-journal: [ 1832.851731] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1832.858140] page allocation failure: order:0 [ 1832.858516] (null) [ 1832.867289] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1832.875200] Node 0 [ 1832.885114] (null) [ 1832.887987] , order=0, oom_score_adj=0 [ 1832.893165] systemd-journal cpuset= [ 1832.898058] syz-executor.0 cpuset= [ 1832.905905] / [ 1832.907913] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.914180] mems_allowed=0-1 [ 1832.917971] / [ 1832.926375] CPU: 0 PID: 7421 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1832.928503] lowmem_reserve[]: [ 1832.931867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.931871] Call Trace: [ 1832.931887] dump_stack+0x1b2/0x281 [ 1832.931903] warn_alloc.cold+0x96/0x1cc [ 1832.936291] 0 [ 1832.939642] ? zone_watermark_ok_safe+0x220/0x220 [ 1832.939659] ? wait_for_completion_io+0x10/0x10 [ 1832.939671] __alloc_pages_nodemask+0x2127/0x2720 [ 1832.943635] mems_allowed=0-1 [ 1832.947505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.952705] 2717 [ 1832.955864] alloc_pages_current+0x155/0x260 [ 1832.968979] 2718 [ 1832.974189] filemap_fault+0x11a1/0x1ad0 [ 1832.998983] 2718 [ 1833.003215] ext4_filemap_fault+0x84/0xb0 [ 1833.005607] 2718 [ 1833.007677] __do_fault+0xfa/0x380 [ 1833.100162] __handle_mm_fault+0x2497/0x4620 [ 1833.100174] ? vm_insert_page+0x7c0/0x7c0 [ 1833.100184] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1833.100196] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1833.129000] Node 0 [ 1833.131040] ? mark_held_locks+0xa6/0xf0 [ 1833.135021] DMA32 free:17664kB min:36200kB low:45248kB high:54296kB active_anon:61504kB inactive_anon:156088kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:20kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2704kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1833.160514] handle_mm_fault+0x455/0x9c0 [ 1833.160529] __do_page_fault+0x549/0xad0 [ 1833.160540] ? spurious_fault+0x640/0x640 [ 1833.160551] ? do_page_fault+0x60/0x500 [ 1833.198991] lowmem_reserve[]: [ 1833.212488] ? page_fault+0x2f/0x50 [ 1833.212496] page_fault+0x45/0x50 [ 1833.212504] RIP: 0001:0x1 [ 1833.212513] RSP: 89fa7310:00007ffcce4f1360 EFLAGS: 7ffcce4f1170 [ 1833.258998] 0 [ 1833.287284] CPU: 0 PID: 7419 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1833.289721] 0 [ 1833.292614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1833.296060] 0 [ 1833.301400] Call Trace: [ 1833.301418] dump_stack+0x1b2/0x281 [ 1833.301430] dump_header+0x178/0x82f [ 1833.301443] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1833.304454] 0 [ 1833.307459] ? ___ratelimit+0x2cd/0x530 [ 1833.310562] 0 [ 1833.314492] oom_kill_process.cold+0x10/0xa40 [ 1833.321729] out_of_memory+0xe3e/0x1190 [ 1833.321743] ? oom_killer_disable+0x1c0/0x1c0 [ 1833.332403] Node 0 [ 1833.342848] ? mutex_trylock+0x152/0x1a0 [ 1833.342860] __alloc_pages_nodemask+0x23e1/0x2720 [ 1833.342881] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1833.345973] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.356031] alloc_pages_current+0x155/0x260 [ 1833.356047] filemap_fault+0x11a1/0x1ad0 [ 1833.360464] lowmem_reserve[]: [ 1833.362610] ext4_filemap_fault+0x84/0xb0 [ 1833.369459] 0 [ 1833.371648] __do_fault+0xfa/0x380 [ 1833.373774] 0 [ 1833.377730] __handle_mm_fault+0x2497/0x4620 [ 1833.381352] 0 [ 1833.384881] ? vm_insert_page+0x7c0/0x7c0 [ 1833.386572] 0 [ 1833.412158] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1833.412168] ? nanosleep_copyout+0x100/0x100 [ 1833.412182] ? mark_held_locks+0xa6/0xf0 [ 1833.412194] handle_mm_fault+0x455/0x9c0 [ 1833.415290] 0 [ 1833.416990] __do_page_fault+0x549/0xad0 [ 1833.427954] ? spurious_fault+0x640/0x640 [ 1833.437316] Node 1 [ 1833.439859] ? do_page_fault+0x60/0x500 [ 1833.439868] ? page_fault+0x2f/0x50 [ 1833.439877] page_fault+0x45/0x50 [ 1833.443502] Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:2172kB inactive_anon:41404kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1833.447443] RIP: 1becb7:0x8 [ 1833.449266] lowmem_reserve[]: [ 1833.454056] RSP: 0003:00007fff73d9b57c EFLAGS: 0000001d [ 1833.465504] Mem-Info: [ 1833.468759] 0 [ 1833.472359] active_anon:15912 inactive_anon:49373 isolated_anon:0 [ 1833.472359] active_file:15 inactive_file:16 isolated_file:0 [ 1833.472359] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1833.472359] slab_reclaimable:12306 slab_unreclaimable:118925 [ 1833.472359] mapped:52816 shmem:49932 pagetables:714 bounce:0 [ 1833.472359] free:13858 free_pcp:60 free_cma:0 [ 1833.478157] 0 [ 1833.478606] Node 0 active_anon:61476kB inactive_anon:156088kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189436kB dirty:0kB writeback:0kB shmem:158040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1833.481180] 0 [ 1833.491471] Node 1 active_anon:2172kB inactive_anon:41404kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1833.497263] 0 [ 1833.503503] Node 0 [ 1833.506608] 0 [ 1833.515698] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.524904] lowmem_reserve[]: [ 1833.555135] Node 0 [ 1833.561912] 0 [ 1833.564143] DMA: [ 1833.567953] 2717 [ 1833.571132] 5*4kB [ 1833.584647] 2718 [ 1833.587032] (UME) [ 1833.588791] 2718 [ 1833.597266] 23*8kB [ 1833.608333] 2718 [ 1833.609716] (UME) [ 1833.615872] 30*16kB [ 1833.625716] Node 0 [ 1833.628984] (UME) [ 1833.630501] DMA32 free:17732kB min:36200kB low:45248kB high:54296kB active_anon:61472kB inactive_anon:156088kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2700kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1833.632211] 27*32kB [ 1833.636686] lowmem_reserve[]: [ 1833.645737] (UM) [ 1833.653157] 0 [ 1833.656594] 21*64kB [ 1833.666053] 0 [ 1833.690566] (UME) [ 1833.697166] 0 [ 1833.698118] 9*128kB [ 1833.702317] 0 0 [ 1833.702328] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.702346] lowmem_reserve[]: 0 0 0 [ 1833.707861] (UME) [ 1833.715763] 0 [ 1833.715815] 5*256kB [ 1833.720754] 0 [ 1833.726758] (UME) [ 1833.742979] 5*512kB [ 1833.745010] Node 1 [ 1833.749205] (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 10956kB [ 1833.749228] Node 0 DMA32: 1701*4kB (ME) [ 1833.757769] Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:2172kB inactive_anon:41404kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1833.762956] 432*8kB [ 1833.796855] lowmem_reserve[]: [ 1833.806302] (ME) [ 1833.845817] 0 [ 1833.873557] 95*16kB [ 1833.904328] 0 [ 1833.934212] (UME) [ 1833.941684] 0 [ 1833.942182] 46*32kB [ 1833.944334] 0 [ 1833.946377] (UME) [ 1833.948505] 0 [ 1833.954487] 24*64kB [ 1833.957129] (UM) [ 1833.963526] Node 0 [ 1833.964618] 7*128kB [ 1833.998758] DMA: [ 1834.004741] (M) [ 1834.006134] 5*4kB [ 1834.008266] 0*256kB [ 1834.016176] (UME) [ 1834.045210] 0*512kB [ 1834.052684] 23*8kB [ 1834.054218] 0*1024kB [ 1834.056527] (UME) [ 1834.058745] 1*2048kB [ 1834.066650] 30*16kB [ 1834.072508] (M) [ 1834.102987] (UME) [ 1834.107921] 0*4096kB [ 1834.108280] 27*32kB [ 1834.110390] = 17732kB [ 1834.114621] (UM) [ 1834.116510] Node 0 [ 1834.118317] 21*64kB [ 1834.125018] Normal: [ 1834.132627] (UME) [ 1834.134206] 0*4kB [ 1834.135614] 9*128kB [ 1834.137743] 0*8kB [ 1834.140972] (UME) [ 1834.146351] 0*16kB [ 1834.146844] 5*256kB [ 1834.149348] 0*32kB 0*64kB 0*128kB 0*256kB [ 1834.155745] (UME) [ 1834.156202] 0*512kB 0*1024kB [ 1834.158171] 5*512kB [ 1834.164141] 0*2048kB [ 1834.166563] (UME) [ 1834.167457] 0*4096kB [ 1834.174256] 3*1024kB [ 1834.176375] = 0kB [ 1834.178513] (UME) [ 1834.184442] Node 1 [ 1834.185175] 0*2048kB [ 1834.187325] Normal: [ 1834.195703] 0*4096kB [ 1834.197426] 216*4kB [ 1834.199583] = 10956kB [ 1834.199587] Node 0 DMA32: 1701*4kB (ME) 456*8kB (UME) 98*16kB (UME) 48*32kB (UME) 25*64kB (UM) 9*128kB (UM) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 18356kB [ 1834.199653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1834.199706] Node 1 Normal: 216*4kB (M) 85*8kB (ME) 29*16kB (ME) 755*32kB (UM) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26744kB [ 1834.199771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.199777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.199783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.199792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.206759] (M) [ 1834.207593] 49963 total pagecache pages [ 1834.209754] 85*8kB (ME) 29*16kB (ME) 755*32kB (UM) 9*64kB (UM) 0*128kB 0*256kB [ 1834.218406] 0 pages in swap cache [ 1834.218768] 0*512kB [ 1834.221034] Swap cache stats: add 0, delete 0, find 0/0 [ 1834.221038] Free swap = 0kB [ 1834.221042] Total swap = 0kB [ 1834.221049] 2097051 pages RAM [ 1834.221052] 0 pages HighMem/MovableOnly [ 1834.221059] 363848 pages reserved [ 1834.227178] 0*1024kB [ 1834.228158] 0 pages cma reserved [ 1834.230499] 0*2048kB 0*4096kB = 26744kB [ 1834.230517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.230523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.230531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1834.230539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1834.239311] Out of memory (oom_kill_allocating_task): Kill process 7419 (syz-executor.0) score 0 or sacrifice child [ 1834.251565] 49963 total pagecache pages [ 1834.264740] Killed process 7419 (syz-executor.0) total-vm:93120kB, anon-rss:76kB, file-rss:33680kB, shmem-rss:0kB [ 1834.276436] 0 pages in swap cache [ 1834.295956] oom_reaper: reaped process 7421 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2368kB [ 1834.310130] Swap cache stats: add 0, delete 0, find 0/0 [ 1834.340005] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1834.344225] Free swap = 0kB [ 1834.348403] (null) [ 1834.348666] Total swap = 0kB [ 1834.368529] , order=0, oom_score_adj=0 [ 1834.378291] 2097051 pages RAM [ 1834.396716] systemd cpuset= [ 1834.407070] 0 pages HighMem/MovableOnly [ 1834.418547] / [ 1834.418819] 363848 pages reserved [ 1834.422280] mems_allowed=0-1 [ 1834.434661] 0 pages cma reserved [ 1834.446909] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.229-syzkaller #0 [ 1834.488019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.501721] Call Trace: [ 1834.504337] dump_stack+0x1b2/0x281 [ 1834.507978] dump_header+0x178/0x82f [ 1834.511692] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1834.516793] ? ___ratelimit+0x2cd/0x530 [ 1834.520764] oom_kill_process.cold+0x10/0xa40 [ 1834.525258] ? lock_downgrade+0x740/0x740 [ 1834.529415] out_of_memory+0x2dc/0x1190 [ 1834.533393] ? oom_killer_disable+0x1c0/0x1c0 [ 1834.537886] ? mutex_trylock+0x152/0x1a0 [ 1834.541950] __alloc_pages_nodemask+0x23e1/0x2720 [ 1834.546813] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1834.551672] alloc_pages_current+0x155/0x260 [ 1834.556087] filemap_fault+0x11a1/0x1ad0 [ 1834.560166] ext4_filemap_fault+0x84/0xb0 [ 1834.564317] __do_fault+0xfa/0x380 [ 1834.567856] __handle_mm_fault+0x2497/0x4620 [ 1834.572269] ? vm_insert_page+0x7c0/0x7c0 [ 1834.576436] ? mark_held_locks+0xa6/0xf0 [ 1834.580496] handle_mm_fault+0x455/0x9c0 [ 1834.584552] __do_page_fault+0x549/0xad0 [ 1834.588612] ? spurious_fault+0x640/0x640 [ 1834.592754] ? do_page_fault+0x60/0x500 [ 1834.596746] ? page_fault+0x2f/0x50 [ 1834.600364] page_fault+0x45/0x50 [ 1834.603808] RIP: 0001:0xffffffffffffffff [ 1834.607857] RSP: f61c5f50:00007ffc2bd8c580 EFLAGS: 7ffc2bd8c2c0 [ 1834.609509] Mem-Info: [ 1834.629067] active_anon:15787 inactive_anon:49373 isolated_anon:0 [ 1834.629067] active_file:15 inactive_file:16 isolated_file:0 [ 1834.629067] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1834.629067] slab_reclaimable:12281 slab_unreclaimable:118767 [ 1834.629067] mapped:52241 shmem:49932 pagetables:714 bounce:0 [ 1834.629067] free:21234 free_pcp:333 free_cma:0 [ 1834.689053] Node 0 active_anon:60976kB inactive_anon:156088kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187136kB dirty:0kB writeback:0kB shmem:158040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.719125] Node 1 active_anon:2172kB inactive_anon:41404kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.759634] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.819034] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1834.824107] Node 0 DMA32 free:311096kB min:36200kB low:45248kB high:54296kB active_anon:60972kB inactive_anon:156088kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2700kB bounce:0kB free_pcp:1400kB local_pcp:668kB free_cma:0kB [ 1834.899002] lowmem_reserve[]: 0 0 0 0 0 [ 1834.903035] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.019574] lowmem_reserve[]: 0 0 0 0 0 [ 1835.023612] Node 1 Normal free:26876kB min:53696kB low:67120kB high:80544kB active_anon:2172kB inactive_anon:41404kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.145852] lowmem_reserve[]: 0 0 0 0 0 [ 1835.160109] Node 0 DMA: 16*4kB (UME) 35*8kB (UME) 30*16kB (UME) 27*32kB (UM) 21*64kB (UME) 9*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11096kB [ 1835.176909] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1835.184236] Node 0 DMA32: 19254*4kB (UME) 21736*8kB (UME) 16584*16kB (UME) 8261*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1835.189396] syz-executor.0 cpuset= [ 1835.202990] = 780600kB [ 1835.213548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1835.213962] / [ 1835.224637] Node 1 [ 1835.225043] mems_allowed=0-1 [ 1835.226404] Normal: 779*4kB (UM) 1291*8kB (UME) 1123*16kB (UME) 998*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63348kB [ 1835.226467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.226478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.230260] CPU: 1 PID: 7921 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1835.235625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.244959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.244964] Call Trace: [ 1835.244986] dump_stack+0x1b2/0x281 [ 1835.244999] warn_alloc.cold+0x96/0x1cc [ 1835.245011] ? zone_watermark_ok_safe+0x220/0x220 [ 1835.245034] __alloc_pages_nodemask+0x2127/0x2720 [ 1835.245051] ? lock_acquire+0x170/0x3f0 [ 1835.257852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.262552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1835.262571] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1835.262583] ? __mutex_unlock_slowpath+0x75/0x770 [ 1835.262599] alloc_pages_current+0x155/0x260 [ 1835.262614] ion_page_pool_alloc+0x118/0x1b0 [ 1835.274567] 50370 total pagecache pages [ 1835.279231] ion_system_heap_allocate+0x133/0x8c0 [ 1835.279244] ? _raw_spin_unlock+0x29/0x40 [ 1835.279253] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1835.279262] ? ion_system_contig_heap_create+0x130/0x130 [ 1835.279275] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1835.288615] 0 pages in swap cache [ 1835.291188] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1835.291200] ion_alloc+0x27a/0x810 [ 1835.291214] ? ion_dma_buf_release+0x40/0x40 [ 1835.291225] ? __might_fault+0x177/0x1b0 [ 1835.291236] ion_ioctl+0xea/0x1f0 [ 1835.291244] ? ion_query_heaps+0x360/0x360 [ 1835.291257] ? ion_query_heaps+0x360/0x360 [ 1835.291268] do_vfs_ioctl+0x75a/0xff0 [ 1835.291279] ? ioctl_preallocate+0x1a0/0x1a0 [ 1835.291290] ? lock_downgrade+0x740/0x740 [ 1835.291303] ? __fget+0x225/0x360 [ 1835.298643] Swap cache stats: add 0, delete 0, find 0/0 [ 1835.298867] ? do_vfs_ioctl+0xff0/0xff0 [ 1835.303746] Free swap = 0kB [ 1835.308517] ? security_file_ioctl+0x83/0xb0 [ 1835.316314] Total swap = 0kB [ 1835.321055] SyS_ioctl+0x7f/0xb0 [ 1835.321064] ? do_vfs_ioctl+0xff0/0xff0 [ 1835.321076] do_syscall_64+0x1d5/0x640 [ 1835.321091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1835.321099] RIP: 0033:0x466459 [ 1835.321104] RSP: 002b:00007f88ffdb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1835.321114] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1835.321119] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1835.321125] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1835.321133] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1835.326032] 2097051 pages RAM [ 1835.331390] R13: 00007fff73d9b2bf R14: 00007f88ffdb5300 R15: 0000000000022000 [ 1835.333586] warn_alloc_show_mem: 1 callbacks suppressed [ 1835.333589] Mem-Info: [ 1835.339721] 0 pages HighMem/MovableOnly [ 1835.340875] active_anon:15775 inactive_anon:49372 isolated_anon:0 [ 1835.340875] active_file:40 inactive_file:391 isolated_file:0 [ 1835.340875] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1835.340875] slab_reclaimable:12275 slab_unreclaimable:118742 [ 1835.340875] mapped:52450 shmem:49932 pagetables:665 bounce:0 [ 1835.340875] free:213149 free_pcp:99 free_cma:0 [ 1835.347694] 363848 pages reserved [ 1835.350549] Node 0 active_anon:60940kB inactive_anon:156084kB active_file:260kB inactive_file:1860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188172kB dirty:0kB writeback:0kB shmem:158040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1835.354010] 0 pages cma reserved [ 1835.354018] Out of memory: Kill process 7971 (syz-fuzzer) score 7 or sacrifice child [ 1835.354085] Killed process 7417 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1835.386237] oom_reaper: reaped process 7417 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1835.386525] Node 1 active_anon:2160kB inactive_anon:41404kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1835.616476] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1835.627657] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.688253] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1835.688440] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1835.693415] Node 0 DMA32 free:772588kB min:36200kB low:45248kB high:54296kB active_anon:60936kB inactive_anon:156084kB active_file:560kB inactive_file:8460kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:2504kB bounce:0kB free_pcp:328kB local_pcp:200kB free_cma:0kB [ 1835.732673] lowmem_reserve[]: 0 0 0 0 0 [ 1835.733281] systemd[1]: Stopped Journal Service. [ 1835.736730] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.767724] lowmem_reserve[]: 0 0 0 0 0 [ 1835.771948] Node 1 Normal free:63196kB min:53696kB low:67120kB high:80544kB active_anon:2160kB inactive_anon:41404kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.783985] systemd[1]: Starting Journal Service... [ 1835.808656] lowmem_reserve[]: 0 0 0 0 0 [ 1835.813413] Node 0 DMA: 16*4kB (UME) 35*8kB (UME) 30*16kB (UME) 27*32kB (UM) 20*64kB (UME) 9*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11032kB [ 1835.829860] Node 0 DMA32: 17652*4kB (UME) 21250*8kB (UME) 16629*16kB (UME) 8253*32kB (UME) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 771984kB [ 1835.845535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1835.857162] Node 1 Normal: 779*4kB (UM) 1291*8kB (UME) 1123*16kB (UME) 998*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63348kB [ 1835.871678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.880650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.889968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.899081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.907793] 52479 total pagecache pages [ 1835.911858] 0 pages in swap cache [ 1835.915862] Swap cache stats: add 0, delete 0, find 0/0 [ 1835.921725] Free swap = 0kB [ 1835.925218] Total swap = 0kB [ 1835.928241] 2097051 pages RAM [ 1835.931415] 0 pages HighMem/MovableOnly [ 1835.935392] 363848 pages reserved [ 1835.943512] 0 pages cma reserved [ 1836.139598] systemd-journald[7945]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1836.656861] systemd[1]: Started Journal Service. 04:34:14 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) read$snddsp(r0, &(0x7f0000000040)=""/190, 0xbe) 04:34:14 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x3e21, 0x101002) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000f, 0x2010, r1, 0x82000000) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000080)={0x8, [[0x1ff, 0x0, 0x400, 0xbf, 0xcd3d, 0x9, 0x7, 0x1], [0x2, 0x6, 0x4, 0x1c7, 0x4, 0x1, 0x3, 0x3f], [0x0, 0x1, 0x401, 0x40, 0x7ff, 0x3556, 0x1, 0x9]], [], [{0x401, 0x8, 0x1, 0x0, 0x1}, {0xc2f, 0x80000000, 0x0, 0x1, 0x1}, {0xbc2d, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x800, 0x1f}, {0x3, 0x9, 0x1, 0x1, 0x1}, {0x7, 0x20, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x200, 0x5, 0x1, 0x1, 0x1}, {0xfff, 0x4ad, 0x1, 0x1}, {0x7f, 0x101, 0x1, 0x0, 0x0, 0x1}], [], 0x24048138}) 04:34:14 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) 04:34:14 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x10, r0, 0xb000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x38bf6f33, 0x400000) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x402c0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r2, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000080)) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2, 0x1}) 04:34:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00', r1) 04:34:14 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 04:34:14 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000003, 0x4000010, r0, 0x82000000) 04:34:14 executing program 4: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0xc8, 0xff}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000000c0)={'ip_vti0\x00', 0x9, 0x570}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2443) write$snddsp(r1, &(0x7f0000000000)="95", 0x1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r2, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x101, 0x2}) [ 1837.778463] FAULT_INJECTION: forcing a failure. [ 1837.778463] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.824894] CPU: 1 PID: 7968 Comm: syz-executor.5 Not tainted 4.14.229-syzkaller #0 [ 1837.833004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1837.842380] Call Trace: [ 1837.844996] dump_stack+0x1b2/0x281 [ 1837.848652] should_fail.cold+0x10a/0x149 [ 1837.852815] should_failslab+0xd6/0x130 [ 1837.856800] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1837.862013] alloc_vmap_area+0xf0/0x7c0 [ 1837.866018] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1837.871498] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1837.876011] ? __get_vm_area_node+0xed/0x340 [ 1837.880458] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1837.885756] __get_vm_area_node+0x126/0x340 [ 1837.890111] vmap+0xd5/0x290 [ 1837.893149] ? ion_heap_clear_pages+0x23/0x70 [ 1837.897665] ? is_bpf_text_address+0xb8/0x150 [ 1837.902180] ? vunmap+0x50/0x50 [ 1837.905486] ? unwind_get_return_address+0x51/0x90 [ 1837.910435] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1837.915830] ion_heap_clear_pages+0x23/0x70 [ 1837.920213] ion_heap_sglist_zero+0x165/0x220 [ 1837.924737] ? ion_heap_clear_pages+0x70/0x70 [ 1837.929258] ? kasan_kmalloc+0xeb/0x160 [ 1837.933257] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 1837.938166] ? pagerange_is_ram_callback+0x100/0x100 [ 1837.943290] ? _ion_heap_freelist_drain+0x28b/0x410 [ 1837.948342] ion_system_heap_free+0x1d0/0x240 [ 1837.952855] ion_buffer_destroy+0x132/0x190 [ 1837.957196] _ion_heap_freelist_drain+0x293/0x410 [ 1837.962061] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1837.966930] ion_alloc+0x244/0x810 [ 1837.970490] ? ion_dma_buf_release+0x40/0x40 [ 1837.974923] ? __might_fault+0x177/0x1b0 [ 1837.978995] ion_ioctl+0xea/0x1f0 [ 1837.982470] ? ion_query_heaps+0x360/0x360 [ 1837.986723] ? SyS_write+0x1b7/0x210 [ 1837.990444] ? ion_query_heaps+0x360/0x360 [ 1837.994698] do_vfs_ioctl+0x75a/0xff0 [ 1837.998566] ? ioctl_preallocate+0x1a0/0x1a0 [ 1838.002992] ? lock_downgrade+0x740/0x740 [ 1838.007169] ? __fget+0x225/0x360 [ 1838.010645] ? do_vfs_ioctl+0xff0/0xff0 [ 1838.014641] ? security_file_ioctl+0x83/0xb0 [ 1838.019059] SyS_ioctl+0x7f/0xb0 [ 1838.022459] ? do_vfs_ioctl+0xff0/0xff0 [ 1838.026460] do_syscall_64+0x1d5/0x640 [ 1838.030380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1838.035669] RIP: 0033:0x466459 [ 1838.038875] RSP: 002b:00007f29507b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1838.046947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1838.054238] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1838.061637] RBP: 00007f29507b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.069185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1838.076479] R13: 00007ffc4dcc6a5f R14: 00007f29507b5300 R15: 0000000000022000 04:34:15 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 04:34:15 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x1010, r0, 0x82000000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x400000) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) 04:34:15 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x81, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) [ 1838.141913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1838.148664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1838.178642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 04:34:15 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) [ 1838.224429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1838.271357] device bridge_slave_1 left promiscuous mode [ 1838.283857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.304135] device bridge_slave_0 left promiscuous mode [ 1838.321142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.344941] device veth1_macvtap left promiscuous mode [ 1838.361147] device veth0_macvtap left promiscuous mode [ 1838.376501] device veth1_vlan left promiscuous mode [ 1838.387415] device veth0_vlan left promiscuous mode 04:34:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:15 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x48}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000100)) 04:34:15 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x3ff800000000000, 0x10}) 04:34:15 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4054}, 0x801) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) fstat(r2, &(0x7f0000000280)) write$snddsp(r2, &(0x7f0000000000)="91", 0x1) [ 1838.691014] device hsr_slave_1 left promiscuous mode [ 1838.710308] device hsr_slave_0 left promiscuous mode [ 1838.762066] team0 (unregistering): Port device team_slave_1 removed [ 1838.787840] team0 (unregistering): Port device team_slave_0 removed [ 1838.811055] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1838.837538] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1838.916234] bond0 (unregistering): Released all slaves [ 1841.441066] IPVS: ftp: loaded support on port[0] = 21 [ 1841.618646] chnl_net:caif_netlink_parms(): no params data found [ 1841.780943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.787406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.795080] device bridge_slave_0 entered promiscuous mode [ 1841.802511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.808935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.816564] device bridge_slave_1 entered promiscuous mode [ 1841.843765] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1841.853325] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1841.881511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1841.888868] team0: Port device team_slave_0 added [ 1841.894804] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1841.902238] team0: Port device team_slave_1 added [ 1841.924989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.931488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1841.956773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1841.968467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.974809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1842.000240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.011262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1842.018830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1842.050234] device hsr_slave_0 entered promiscuous mode [ 1842.056100] device hsr_slave_1 entered promiscuous mode [ 1842.062404] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1842.069623] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1842.190997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.197390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.204118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.210524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.255274] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1842.261827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.274040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1842.284418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1842.293856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.301571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.313101] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1842.319922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.330276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1842.337951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.344381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.370179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1842.377870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.384300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.393120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1842.401849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1842.416510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1842.427079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1842.437952] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1842.445028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1842.452738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1842.461007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1842.475428] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1842.482777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1842.499573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.506023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1842.514369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1842.583478] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1842.596303] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1842.607062] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1842.615412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1842.624632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1842.701179] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1842.708488] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1842.718039] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1842.733381] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1842.740065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1842.748156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1842.760043] device veth0_vlan entered promiscuous mode [ 1842.770722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1842.777821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1842.786916] device veth1_vlan entered promiscuous mode [ 1842.793806] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1842.804790] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1842.819511] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1842.831278] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1842.838139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1842.847327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1842.855566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1842.865234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1842.876172] device veth0_macvtap entered promiscuous mode [ 1842.883679] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1842.893618] device veth1_macvtap entered promiscuous mode [ 1842.900546] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1842.910154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1842.921232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1842.930848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1842.941553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.950764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1842.960588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.969813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1842.979607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.988752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1842.998537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.008220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1843.017983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.028060] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1843.035443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.042804] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1843.050352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1843.057411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1843.065313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1843.075197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1843.086196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.095374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1843.105159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.114357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1843.124253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.133845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1843.143607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.152784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1843.162627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1843.172964] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1843.180054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.187867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1843.196136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1843.489372] Bluetooth: hci5 command 0x0409 tx timeout 04:34:21 executing program 0: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x3, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x14) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x7, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x800, 0x800, &(0x7f0000000080)) 04:34:21 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) read$snddsp(r0, 0x0, 0x0) 04:34:21 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/1, 0x1}], 0x3, &(0x7f0000000280)=""/106, 0x6a}, 0x20) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000080)=0x850) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:21 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x6) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) 04:34:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x2a02, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x1000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0xcc2340, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r3, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) bind$isdn(r3, &(0x7f0000000240)={0x22, 0x7, 0x2, 0x80, 0x5}, 0x6) statx(r2, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x24000850) 04:34:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x10) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r2, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000000500)={&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000380)=""/162, 0xa2}], 0x4, &(0x7f0000000440)=""/142, 0x8e}, 0x60010023) 04:34:21 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) read$snddsp(r0, 0x0, 0x0) 04:34:21 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x503402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:21 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x0, {0x400, 0x0, 0x1, 0x6, 0x2, 0x7}}) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:21 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2080, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xfffffffc, 0x10bea7818cacfb5f}) 04:34:21 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x4a002) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4}, 0xc) [ 1845.255091] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1845.267027] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1845.273160] CPU: 1 PID: 8274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1845.281340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.290781] Call Trace: [ 1845.293377] dump_stack+0x1b2/0x281 [ 1845.297138] warn_alloc.cold+0x96/0x1cc [ 1845.301117] ? zone_watermark_ok_safe+0x220/0x220 [ 1845.305982] __alloc_pages_nodemask+0x2127/0x2720 [ 1845.310828] ? lock_acquire+0x170/0x3f0 [ 1845.314801] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1845.319646] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1845.325097] ? __mutex_unlock_slowpath+0x75/0x770 [ 1845.329955] alloc_pages_current+0x155/0x260 [ 1845.334367] ion_page_pool_alloc+0x118/0x1b0 [ 1845.338767] ion_system_heap_allocate+0x133/0x8c0 [ 1845.343616] ? ion_alloc+0x187/0x810 [ 1845.347331] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1845.352776] ? ion_system_contig_heap_create+0x130/0x130 [ 1845.358234] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1845.363253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1845.368089] ion_alloc+0x204/0x810 [ 1845.371624] ? ion_dma_buf_release+0x40/0x40 [ 1845.376028] ? __might_fault+0x177/0x1b0 [ 1845.380083] ion_ioctl+0xea/0x1f0 [ 1845.383536] ? ion_query_heaps+0x360/0x360 [ 1845.387763] ? ion_query_heaps+0x360/0x360 [ 1845.392079] do_vfs_ioctl+0x75a/0xff0 [ 1845.395891] ? ioctl_preallocate+0x1a0/0x1a0 [ 1845.400289] ? lock_downgrade+0x740/0x740 [ 1845.404430] ? __fget+0x225/0x360 [ 1845.407874] ? do_vfs_ioctl+0xff0/0xff0 [ 1845.411841] ? security_file_ioctl+0x83/0xb0 [ 1845.416239] SyS_ioctl+0x7f/0xb0 [ 1845.419594] ? do_vfs_ioctl+0xff0/0xff0 [ 1845.423561] do_syscall_64+0x1d5/0x640 [ 1845.427446] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1845.432652] RIP: 0033:0x466459 [ 1845.435830] RSP: 002b:00007fcc72ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1845.443540] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1845.450801] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1845.458070] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1845.465328] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1845.472587] R13: 00007ffe0535e3ff R14: 00007fcc72ffa300 R15: 0000000000022000 [ 1845.489843] Mem-Info: [ 1845.492279] active_anon:16092 inactive_anon:51407 isolated_anon:0 [ 1845.492279] active_file:2345 inactive_file:5095 isolated_file:0 [ 1845.492279] unevictable:0 dirty:126 writeback:0 unstable:0 [ 1845.492279] slab_reclaimable:12097 slab_unreclaimable:116097 [ 1845.492279] mapped:57547 shmem:51981 pagetables:737 bounce:0 [ 1845.492279] free:195197 free_pcp:93 free_cma:0 [ 1845.526181] Node 0 active_anon:62396kB inactive_anon:164232kB active_file:9148kB inactive_file:20296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208360kB dirty:496kB writeback:0kB shmem:166252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1845.554851] Node 1 active_anon:1972kB inactive_anon:41396kB active_file:232kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:8kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1845.582216] Node 0 DMA free:13140kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.589180] Bluetooth: hci5 command 0x041b tx timeout [ 1845.613329] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1845.618704] Node 0 DMA32 free:711776kB min:36200kB low:45248kB high:54296kB active_anon:62392kB inactive_anon:164232kB active_file:8656kB inactive_file:20296kB unevictable:0kB writepending:496kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7488kB pagetables:2792kB bounce:0kB free_pcp:408kB local_pcp:260kB free_cma:0kB [ 1845.652945] lowmem_reserve[]: 0 0 0 0 0 [ 1845.656972] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.686268] lowmem_reserve[]: 0 0 0 0 0 [ 1845.690499] Node 1 Normal free:55928kB min:53696kB low:67120kB high:80544kB active_anon:1972kB inactive_anon:41396kB active_file:232kB inactive_file:84kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.722999] lowmem_reserve[]: 0 0 0 0 0 [ 1845.727010] Node 0 DMA: 15*4kB (UMEH) 25*8kB (UMEH) 23*16kB (UMEH) 21*32kB (UMH) 15*64kB (UMEH) 7*128kB (UMEH) 7*256kB (UMEH) 6*512kB (UMEH) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 13140kB [ 1845.744166] Node 0 DMA32: 10092*4kB (UME) 19508*8kB (UME) 16896*16kB (UM) 7600*32kB (UME) 31*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 711952kB [ 1845.759119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1845.770016] Node 1 Normal: 662*4kB (UM) 1102*8kB (UME) 951*16kB (UME) 864*32kB (UM) 28*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56504kB [ 1845.785273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1845.794208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1845.802913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1845.811848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1845.820496] 59348 total pagecache pages [ 1845.824474] 0 pages in swap cache [ 1845.827922] Swap cache stats: add 0, delete 0, find 0/0 [ 1845.833365] Free swap = 0kB [ 1845.836387] Total swap = 0kB [ 1845.839482] 2097051 pages RAM [ 1845.842583] 0 pages HighMem/MovableOnly [ 1845.846545] 363848 pages reserved [ 1845.850065] 0 pages cma reserved [ 1846.975424] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1846.988525] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1846.998039] CPU: 0 PID: 8012 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1847.005872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.015206] Call Trace: [ 1847.017816] dump_stack+0x1b2/0x281 [ 1847.021438] dump_header+0x178/0x82f [ 1847.025194] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1847.030305] ? ___ratelimit+0x2cd/0x530 [ 1847.034270] oom_kill_process.cold+0x10/0xa40 [ 1847.038774] out_of_memory+0xe3e/0x1190 [ 1847.042748] ? oom_killer_disable+0x1c0/0x1c0 [ 1847.047234] ? mutex_trylock+0x152/0x1a0 [ 1847.051302] __alloc_pages_nodemask+0x23e1/0x2720 [ 1847.056148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1847.060995] alloc_pages_current+0x155/0x260 [ 1847.065393] filemap_fault+0x11a1/0x1ad0 [ 1847.069452] ext4_filemap_fault+0x84/0xb0 [ 1847.073604] __do_fault+0xfa/0x380 [ 1847.077124] __handle_mm_fault+0x2497/0x4620 [ 1847.081524] ? vm_insert_page+0x7c0/0x7c0 [ 1847.085661] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1847.090054] ? nanosleep_copyout+0x100/0x100 [ 1847.094455] ? mark_held_locks+0xa6/0xf0 [ 1847.098515] handle_mm_fault+0x455/0x9c0 [ 1847.102570] __do_page_fault+0x549/0xad0 [ 1847.106631] ? spurious_fault+0x640/0x640 [ 1847.110768] ? do_page_fault+0x60/0x500 [ 1847.114742] ? page_fault+0x2f/0x50 [ 1847.118346] page_fault+0x45/0x50 [ 1847.121801] RIP: 1c2716:0x8 [ 1847.124714] RSP: 0005:00007ffe0535e6bc EFLAGS: 00000032 [ 1847.127333] Mem-Info: [ 1847.135104] active_anon:16042 inactive_anon:51406 isolated_anon:0 [ 1847.135104] active_file:17 inactive_file:16 isolated_file:0 [ 1847.135104] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1847.135104] slab_reclaimable:12040 slab_unreclaimable:116175 [ 1847.135104] mapped:52625 shmem:51980 pagetables:714 bounce:0 [ 1847.135104] free:25158 free_pcp:60 free_cma:0 [ 1847.168568] Node 0 active_anon:62192kB inactive_anon:164228kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188672kB dirty:0kB writeback:0kB shmem:166248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1847.196643] Node 1 active_anon:1976kB inactive_anon:41396kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1847.223680] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1847.249933] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1847.254980] Node 0 DMA32 free:36032kB min:36200kB low:45248kB high:54296kB active_anon:62188kB inactive_anon:164228kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2700kB bounce:0kB free_pcp:240kB local_pcp:148kB free_cma:0kB [ 1847.284245] lowmem_reserve[]: 0 0 0 0 0 [ 1847.288239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1847.313836] lowmem_reserve[]: 0 0 0 0 0 [ 1847.317833] Node 1 Normal free:53528kB min:53696kB low:67120kB high:80544kB active_anon:1976kB inactive_anon:41396kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1847.346072] lowmem_reserve[]: 0 0 0 0 0 [ 1847.350100] Node 0 DMA: 6*4kB (UMEH) 9*8kB (MEH) 8*16kB (MEH) 5*32kB (MH) 5*64kB (MEH) 5*128kB (MEH) 6*256kB (UMEH) 6*512kB (UMEH) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11072kB [ 1847.366240] Node 0 DMA32: 1548*4kB (UME) 416*8kB (UME) 57*16kB (UM) 572*32kB (UME) 84*64kB (UM) 15*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36032kB [ 1847.381013] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1847.391777] Node 1 Normal: 166*4kB (M) 976*8kB (UME) 950*16kB (UME) 865*32kB (UM) 28*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53528kB [ 1847.406238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.415128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.423769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.432659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.441315] 52013 total pagecache pages [ 1847.445282] 0 pages in swap cache [ 1847.448718] Swap cache stats: add 0, delete 0, find 0/0 [ 1847.454107] Free swap = 0kB [ 1847.457114] Total swap = 0kB [ 1847.460173] 2097051 pages RAM [ 1847.463268] 0 pages HighMem/MovableOnly [ 1847.467224] 363848 pages reserved [ 1847.470709] 0 pages cma reserved [ 1847.474074] Out of memory (oom_kill_allocating_task): Kill process 8012 (syz-executor.0) score 0 or sacrifice child [ 1847.484728] Killed process 8274 (syz-executor.0) total-vm:93648kB, anon-rss:168kB, file-rss:34820kB, shmem-rss:0kB [ 1847.507193] oom_reaper: reaped process 8274 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1847.521763] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1847.534880] systemd-journal cpuset=/ mems_allowed=0-1 [ 1847.542326] CPU: 0 PID: 7945 Comm: systemd-journal Not tainted 4.14.229-syzkaller #0 [ 1847.550210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.559559] Call Trace: [ 1847.562147] dump_stack+0x1b2/0x281 [ 1847.565775] dump_header+0x178/0x82f [ 1847.569490] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1847.574589] ? ___ratelimit+0x2cd/0x530 [ 1847.578569] oom_kill_process.cold+0x10/0xa40 [ 1847.583072] out_of_memory+0xe3e/0x1190 [ 1847.587051] ? oom_killer_disable+0x1c0/0x1c0 [ 1847.591570] ? mutex_trylock+0x152/0x1a0 [ 1847.595658] __alloc_pages_nodemask+0x23e1/0x2720 [ 1847.600529] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1847.605401] alloc_pages_current+0x155/0x260 [ 1847.609809] filemap_fault+0x11a1/0x1ad0 [ 1847.613877] ext4_filemap_fault+0x84/0xb0 [ 1847.618019] __do_fault+0xfa/0x380 [ 1847.621558] __handle_mm_fault+0x2497/0x4620 [ 1847.625986] ? vm_insert_page+0x7c0/0x7c0 [ 1847.630148] ? mark_held_locks+0xa6/0xf0 [ 1847.634209] handle_mm_fault+0x455/0x9c0 [ 1847.638262] __do_page_fault+0x549/0xad0 [ 1847.642317] ? spurious_fault+0x640/0x640 [ 1847.646506] ? do_page_fault+0x60/0x500 [ 1847.649053] syz-executor.0: [ 1847.650465] ? page_fault+0x2f/0x50 [ 1847.650469] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1847.653481] page_fault+0x45/0x50 [ 1847.657105] (null) [ 1847.666967] RIP: 0001:0xffffffffffffffff [ 1847.666971] RSP: a6f111e0:00007fff7e0a2a30 EFLAGS: 7fff7e0a2840 [ 1847.667225] Bluetooth: hci5 command 0x040f tx timeout [ 1847.676956] syz-executor.0 cpuset= [ 1847.686918] Mem-Info: [ 1847.688088] / [ 1847.691690] active_anon:16017 inactive_anon:51406 isolated_anon:0 [ 1847.691690] active_file:17 inactive_file:16 isolated_file:0 [ 1847.691690] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1847.691690] slab_reclaimable:12040 slab_unreclaimable:116175 [ 1847.691690] mapped:52625 shmem:51980 pagetables:714 bounce:0 [ 1847.691690] free:13942 free_pcp:147 free_cma:0 [ 1847.700051] mems_allowed=0-1 [ 1847.731435] Node 0 active_anon:62092kB inactive_anon:164228kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188672kB dirty:0kB writeback:0kB shmem:166248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1847.738679] CPU: 1 PID: 8274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1847.768094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.768740] Node 1 active_anon:1976kB inactive_anon:41396kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1847.777464] Call Trace: [ 1847.777487] dump_stack+0x1b2/0x281 [ 1847.777500] warn_alloc.cold+0x96/0x1cc [ 1847.777512] ? zone_watermark_ok_safe+0x220/0x220 [ 1847.777526] ? usleep_range+0x130/0x130 [ 1847.804560] Node 0 [ 1847.807098] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1847.810744] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1847.814654] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1847.819516] lowmem_reserve[]: [ 1847.823444] ? run_timer_softirq+0x5a0/0x5a0 [ 1847.825651] 0 [ 1847.830746] __alloc_pages_nodemask+0x2127/0x2720 [ 1847.830763] ? lock_acquire+0x170/0x3f0 [ 1847.830779] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1847.856309] 2717 [ 1847.861291] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1847.861309] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1847.861330] alloc_pages_current+0x155/0x260 [ 1847.861343] ion_page_pool_alloc+0x118/0x1b0 [ 1847.864436] 2718 [ 1847.868829] ion_system_heap_allocate+0x133/0x8c0 [ 1847.870645] 2718 [ 1847.875432] ? ion_alloc+0x187/0x810 [ 1847.879412] 2718 [ 1847.884226] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1847.890755] ? ion_system_contig_heap_create+0x130/0x130 [ 1847.890766] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1847.890778] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1847.890793] ion_alloc+0x204/0x810 [ 1847.896236] Node 0 [ 1847.900643] ? ion_dma_buf_release+0x40/0x40 [ 1847.900656] ? __might_fault+0x177/0x1b0 [ 1847.900671] ion_ioctl+0xea/0x1f0 [ 1847.905075] DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:62088kB inactive_anon:164228kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2700kB bounce:0kB free_pcp:468kB local_pcp:256kB free_cma:0kB [ 1847.907112] ? ion_query_heaps+0x360/0x360 [ 1847.911961] lowmem_reserve[]: [ 1847.913977] ? ion_query_heaps+0x360/0x360 [ 1847.917679] 0 [ 1847.919731] do_vfs_ioctl+0x75a/0xff0 [ 1847.919744] ? ioctl_preallocate+0x1a0/0x1a0 [ 1847.919754] ? lock_downgrade+0x740/0x740 [ 1847.919767] ? __fget+0x225/0x360 [ 1847.925196] 0 [ 1847.930628] ? do_vfs_ioctl+0xff0/0xff0 [ 1847.930640] ? security_file_ioctl+0x83/0xb0 [ 1847.930651] SyS_ioctl+0x7f/0xb0 [ 1847.930660] ? do_vfs_ioctl+0xff0/0xff0 [ 1847.935658] 0 [ 1847.940495] do_syscall_64+0x1d5/0x640 [ 1847.940512] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1847.940520] RIP: 0033:0x466459 [ 1847.940529] RSP: 002b:00007fcc72ffa188 EFLAGS: 00000246 [ 1847.944068] 0 [ 1847.946290] ORIG_RAX: 0000000000000010 [ 1847.950727] 0 [ 1847.954735] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1847.986521] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1847.986527] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1847.986532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1847.986536] R13: 00007ffe0535e3ff R14: 00007fcc72ffa300 R15: 0000000000022000 [ 1848.005109] Mem-Info: [ 1848.019219] Node 0 [ 1848.024333] active_anon:16017 inactive_anon:51406 isolated_anon:0 [ 1848.024333] active_file:17 inactive_file:16 isolated_file:0 [ 1848.024333] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1848.024333] slab_reclaimable:12040 slab_unreclaimable:116175 [ 1848.024333] mapped:52625 shmem:51980 pagetables:714 bounce:0 [ 1848.024333] free:13942 free_pcp:145 free_cma:0 [ 1848.026560] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.033891] Node 0 active_anon:62092kB inactive_anon:164228kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188672kB dirty:0kB writeback:0kB shmem:166248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1848.040362] lowmem_reserve[]: [ 1848.048574] Node 1 active_anon:1976kB inactive_anon:41396kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1848.048581] Node 0 [ 1848.058561] 0 [ 1848.065640] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.069003] 0 [ 1848.077597] lowmem_reserve[]: [ 1848.091258] 0 [ 1848.098280] 0 [ 1848.105648] 0 [ 1848.144402] 2717 [ 1848.172794] 0 [ 1848.196560] 2718 [ 1848.257084] 2718 [ 1848.261076] Node 1 [ 1848.263643] 2718 [ 1848.265254] Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:1976kB inactive_anon:41396kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1848.270689] lowmem_reserve[]: [ 1848.278216] Node 0 [ 1848.306321] 0 0 0 0 0 [ 1848.311096] Node 0 DMA: 5*4kB (UME) 9*8kB (UME) 8*16kB (UME) 6*32kB (UM) 5*64kB (UME) 6*128kB (UME) 5*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10972kB [ 1848.313372] DMA32 free:18268kB min:36200kB low:45248kB high:54296kB active_anon:62080kB inactive_anon:164228kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2700kB bounce:0kB free_pcp:620kB local_pcp:308kB free_cma:0kB [ 1848.331219] Node 0 DMA32: 1545*4kB (ME) 436*8kB (UME) 56*16kB (UM) 41*32kB (UME) 71*64kB (UM) 15*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18340kB [ 1848.364510] lowmem_reserve[]: 0 0 0 0 0 [ 1848.377682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 1848.378886] Node 0 [ 1848.378889] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1848.393995] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.397942] Node 1 Normal: 166*4kB (M) 79*8kB (UME) 16*16kB (UME) 722*32kB (UM) 28*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26832kB [ 1848.427552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1848.427558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1848.427567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1848.450552] lowmem_reserve[]: [ 1848.455209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1848.466145] 0 [ 1848.468349] 52013 total pagecache pages [ 1848.468359] 0 pages in swap cache [ 1848.473497] 0 [ 1848.484373] Swap cache stats: add 0, delete 0, find 0/0 [ 1848.489691] 0 [ 1848.495097] Free swap = 0kB [ 1848.496701] 0 [ 1848.498488] Total swap = 0kB [ 1848.501543] 0 [ 1848.501552] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:1976kB inactive_anon:41396kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1848.508609] 2097051 pages RAM [ 1848.539069] lowmem_reserve[]: 0 0 0 0 0 [ 1848.544291] Node 0 DMA: 5*4kB (UME) 9*8kB (UME) 8*16kB (UME) 6*32kB (UM) 5*64kB (UME) 6*128kB (UME) 5*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10972kB [ 1848.551979] 0 pages HighMem/MovableOnly [ 1848.562414] Node 0 DMA32: 1545*4kB (ME) 436*8kB (UME) 56*16kB (UM) 41*32kB (UME) 71*64kB (UM) 15*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18340kB [ 1848.574445] 363848 pages reserved [ 1848.581139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1848.592402] 0 pages cma reserved [ 1848.594032] Node 1 [ 1848.596768] Out of memory (oom_kill_allocating_task): Kill process 7945 (systemd-journal) score 0 or sacrifice child [ 1848.596775] Normal: [ 1848.609055] Killed process 7945 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1548kB [ 1848.612650] 166*4kB (M) 79*8kB (UME) 16*16kB (UME) 722*32kB (UM) 28*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26832kB [ 1848.633756] oom_reaper: reaped process 7945 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1548kB [ 1848.638071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1848.657279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1848.661494] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1848.668314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1848.689637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1848.698319] 52013 total pagecache pages [ 1848.702421] 0 pages in swap cache [ 1848.705871] Swap cache stats: add 0, delete 0, find 0/0 [ 1848.713524] Free swap = 0kB [ 1848.714637] ion_system_heap cpuset= [ 1848.716555] Total swap = 0kB [ 1848.716562] / [ 1848.720793] 2097051 pages RAM [ 1848.728002] 0 pages HighMem/MovableOnly [ 1848.734226] 363848 pages reserved [ 1848.737695] 0 pages cma reserved [ 1848.738235] mems_allowed=0-1 [ 1848.792999] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.229-syzkaller #0 [ 1848.800907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1848.810271] Call Trace: [ 1848.812859] dump_stack+0x1b2/0x281 [ 1848.816482] dump_header+0x178/0x82f [ 1848.820194] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1848.825287] ? ___ratelimit+0x2cd/0x530 [ 1848.829260] oom_kill_process.cold+0x10/0xa40 [ 1848.833755] ? lock_downgrade+0x740/0x740 [ 1848.837904] out_of_memory+0x2dc/0x1190 [ 1848.841889] ? oom_killer_disable+0x1c0/0x1c0 [ 1848.846376] ? mutex_trylock+0x152/0x1a0 [ 1848.850431] __alloc_pages_nodemask+0x23e1/0x2720 [ 1848.855285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1848.860139] ? kasan_kmalloc+0xeb/0x160 [ 1848.864127] ? ion_heap_deferred_free+0x22a/0x470 [ 1848.868981] ? cache_grow_begin+0x3f/0x700 [ 1848.873213] cache_grow_begin+0x91/0x700 [ 1848.877274] fallback_alloc+0x207/0x2c0 [ 1848.881247] kmem_cache_alloc_node_trace+0xed/0x400 [ 1848.886259] alloc_vmap_area+0xf0/0x7c0 [ 1848.890235] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1848.895679] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1848.900175] ? __get_vm_area_node+0xed/0x340 [ 1848.904576] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1848.909847] __get_vm_area_node+0x126/0x340 [ 1848.914169] vmap+0xd5/0x290 [ 1848.917181] ? ion_heap_clear_pages+0x23/0x70 [ 1848.921668] ? vunmap+0x50/0x50 [ 1848.924938] ? __vunmap+0x21c/0x300 [ 1848.928560] ion_heap_clear_pages+0x23/0x70 [ 1848.932875] ion_heap_sglist_zero+0x165/0x220 [ 1848.937365] ? ion_heap_clear_pages+0x70/0x70 [ 1848.941968] ? finish_task_switch+0x178/0x610 [ 1848.946475] ? pagerange_is_ram_callback+0x100/0x100 [ 1848.951590] ? ion_heap_deferred_free+0x222/0x470 [ 1848.956432] ion_system_heap_free+0x1d0/0x240 [ 1848.960930] ion_buffer_destroy+0x132/0x190 [ 1848.965255] ion_heap_deferred_free+0x22a/0x470 [ 1848.969917] ? __schedule+0x7b7/0x1de0 [ 1848.973804] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1848.978473] ? wait_woken+0x230/0x230 [ 1848.982270] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1848.987385] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1848.992050] kthread+0x30d/0x420 [ 1848.995409] ? kthread_create_on_node+0xd0/0xd0 [ 1849.000245] ret_from_fork+0x24/0x30 [ 1849.072331] Mem-Info: [ 1849.081058] active_anon:15915 inactive_anon:51406 isolated_anon:0 [ 1849.081058] active_file:24 inactive_file:830 isolated_file:0 [ 1849.081058] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1849.081058] slab_reclaimable:12025 slab_unreclaimable:116074 [ 1849.081058] mapped:52704 shmem:51980 pagetables:714 bounce:0 [ 1849.081058] free:203640 free_pcp:374 free_cma:0 [ 1849.148061] Node 0 active_anon:61616kB inactive_anon:164224kB active_file:64kB inactive_file:3276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189296kB dirty:0kB writeback:0kB shmem:166248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1849.180702] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1849.199264] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1849.221026] systemd[1]: Stopped Journal Service. [ 1849.256018] systemd[1]: Starting Journal Service... [ 1849.302774] Node 1 active_anon:1976kB inactive_anon:41396kB active_file:72kB inactive_file:940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22548kB dirty:0kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1849.542460] Node 0 DMA free:11144kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1849.628804] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1849.641705] Node 0 DMA32 free:718772kB min:36200kB low:45248kB high:54296kB active_anon:61712kB inactive_anon:164224kB active_file:2072kB inactive_file:3440kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2604kB bounce:0kB free_pcp:1132kB local_pcp:500kB free_cma:0kB [ 1849.680404] lowmem_reserve[]: 0 0 0 0 0 [ 1849.685841] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1849.689444] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1849.707756] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1849.728889] lowmem_reserve[]: 0 [ 1849.729421] CPU: 1 PID: 8274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1849.732706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1849.741032] 0 [ 1849.749848] Call Trace: [ 1849.749869] dump_stack+0x1b2/0x281 [ 1849.749888] warn_alloc.cold+0x96/0x1cc [ 1849.751684] 0 [ 1849.754273] ? zone_watermark_ok_safe+0x220/0x220 [ 1849.757884] 0 0 [ 1849.761871] __alloc_pages_nodemask+0x2127/0x2720 [ 1849.761888] ? lock_acquire+0x170/0x3f0 [ 1849.761902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1849.761923] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1849.768681] ? __mutex_unlock_slowpath+0x75/0x770 [ 1849.770723] Node 1 [ 1849.775513] alloc_pages_current+0x155/0x260 [ 1849.779500] Normal free:53812kB min:53696kB low:67120kB high:80544kB active_anon:1976kB inactive_anon:41396kB active_file:172kB inactive_file:316kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1849.784290] ion_page_pool_alloc+0x118/0x1b0 [ 1849.789740] lowmem_reserve[]: [ 1849.794548] ion_system_heap_allocate+0x133/0x8c0 [ 1849.796752] 0 [ 1849.801179] ? _raw_spin_unlock+0x29/0x40 [ 1849.801190] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1849.801199] ? ion_system_contig_heap_create+0x130/0x130 [ 1849.801210] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1849.801226] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1849.829407] 0 [ 1849.833548] ion_alloc+0x27a/0x810 [ 1849.836622] 0 [ 1849.841455] ? ion_dma_buf_release+0x40/0x40 [ 1849.841469] ? __might_fault+0x177/0x1b0 [ 1849.841481] ion_ioctl+0xea/0x1f0 [ 1849.843258] 0 [ 1849.847410] ? ion_query_heaps+0x360/0x360 [ 1849.852571] 0 [ 1849.857758] ? ion_query_heaps+0x360/0x360 [ 1849.867593] do_vfs_ioctl+0x75a/0xff0 [ 1849.869388] Node 0 [ 1849.872899] ? ioctl_preallocate+0x1a0/0x1a0 [ 1849.874677] DMA: [ 1849.879063] ? lock_downgrade+0x740/0x740 [ 1849.879078] ? __fget+0x225/0x360 [ 1849.879088] ? do_vfs_ioctl+0xff0/0xff0 [ 1849.883126] 16*4kB [ 1849.886568] ? security_file_ioctl+0x83/0xb0 [ 1849.888342] (UME) [ 1849.892559] SyS_ioctl+0x7f/0xb0 [ 1849.892568] ? do_vfs_ioctl+0xff0/0xff0 [ 1849.892579] do_syscall_64+0x1d5/0x640 [ 1849.892594] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1849.892602] RIP: 0033:0x466459 [ 1849.894697] 24*8kB [ 1849.898612] RSP: 002b:00007fcc72ffa188 EFLAGS: 00000246 [ 1849.902418] (UME) [ 1849.904608] ORIG_RAX: 0000000000000010 [ 1849.909010] 23*16kB [ 1849.911039] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1849.915197] (UME) [ 1849.918632] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1849.922857] 20*32kB [ 1849.924806] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1849.929214] (UM) [ 1849.931331] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1849.934712] 2*64kB [ 1849.938667] R13: 00007ffe0535e3ff R14: 00007fcc72ffa300 R15: 0000000000022000 [ 1849.942573] (ME) [ 1849.949930] Mem-Info: [ 1849.959256] Bluetooth: hci5 command 0x0419 tx timeout [ 1849.961290] active_anon:15948 inactive_anon:51405 isolated_anon:0 [ 1849.961290] active_file:681 inactive_file:752 isolated_file:0 [ 1849.961290] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1849.961290] slab_reclaimable:12025 slab_unreclaimable:116058 [ 1849.961290] mapped:53286 shmem:51980 pagetables:690 bounce:0 [ 1849.961290] free:195895 free_pcp:105 free_cma:0 [ 1849.970708] 3*128kB [ 1849.974807] Node 0 active_anon:62216kB inactive_anon:164224kB active_file:2744kB inactive_file:3192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191396kB dirty:0kB writeback:0kB shmem:166248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1849.985986] (UME) [ 1849.986448] Node 1 active_anon:1576kB inactive_anon:41396kB active_file:0kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21848kB dirty:0kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1849.998513] 4*256kB [ 1850.003013] Node 0 [ 1850.005232] (UME) 6*512kB [ 1850.012731] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1850.012734] lowmem_reserve[]: 0 2717 2718 2718 [ 1850.019060] (UME) [ 1850.022405] 2718 [ 1850.067140] 3*1024kB [ 1850.093613] (UME) [ 1850.116028] Node 0 [ 1850.124044] 1*2048kB [ 1850.149212] DMA32 free:717408kB min:36200kB low:45248kB high:54296kB active_anon:62420kB inactive_anon:164224kB active_file:2744kB inactive_file:3576kB unevictable:0kB writepending:136kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2732kB bounce:0kB free_pcp:424kB local_pcp:232kB free_cma:0kB [ 1850.165995] (U) [ 1850.167479] lowmem_reserve[]: 0 0 0 0 0 [ 1850.202683] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1850.203069] 0*4096kB [ 1850.229768] lowmem_reserve[]: 0 0 0 0 0 [ 1850.234879] = 10992kB [ 1850.236308] Node 1 Normal free:54024kB min:53696kB low:67120kB high:80544kB active_anon:1484kB inactive_anon:41396kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:164kB local_pcp:0kB free_cma:0kB [ 1850.239445] Node 0 [ 1850.267177] lowmem_reserve[]: 0 0 0 0 0 [ 1850.273223] DMA32: 10359*4kB (UME) 19721*8kB (UME) 17015*16kB (UM) 7655*32kB (UME) 1*64kB [ 1850.273573] Node 0 DMA: 16*4kB (UME) 24*8kB (UME) 23*16kB (UME) 20*32kB (UM) 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10992kB [ 1850.285312] (U) [ 1850.298386] Node 0 DMA32: 10359*4kB (UME) 19659*8kB (UME) 17015*16kB (UM) 7655*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 715972kB [ 1850.301376] 0*128kB [ 1850.315309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1850.322134] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 716468kB [ 1850.328496] Node 1 Normal: 710*4kB (UM) 1088*8kB (UME) 939*16kB (UME) 858*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54024kB [ 1850.339825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1850.348565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.364425] Node 1 Normal: 710*4kB (UM) 1088*8kB (UME) 939*16kB (UME) 858*32kB (UM) 0*64kB [ 1850.368792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.377807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.390376] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54024kB [ 1850.395043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.406038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.410757] 53906 total pagecache pages [ 1850.410768] 0 pages in swap cache [ 1850.423695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.427122] Swap cache stats: add 0, delete 0, find 0/0 [ 1850.436427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.441157] Free swap = 0kB [ 1850.453053] Total swap = 0kB [ 1850.454812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.456189] 2097051 pages RAM [ 1850.465897] 53943 total pagecache pages [ 1850.467932] 0 pages HighMem/MovableOnly [ 1850.475938] 363848 pages reserved [ 1850.479453] 0 pages cma reserved [ 1850.480620] 0 pages in swap cache [ 1850.492952] Swap cache stats: add 0, delete 0, find 0/0 [ 1850.499397] Free swap = 0kB [ 1850.502889] Total swap = 0kB [ 1850.506222] 2097051 pages RAM [ 1850.513754] 0 pages HighMem/MovableOnly [ 1850.517731] 363848 pages reserved [ 1850.521477] 0 pages cma reserved [ 1850.524854] Out of memory: Kill process 7971 (syz-fuzzer) score 7 or sacrifice child [ 1850.538346] Killed process 8011 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1850.583295] systemd-journald[8293]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1850.610899] oom_reaper: reaped process 8011 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1851.073522] systemd[1]: Started Journal Service. [ 1851.248653] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1851.307450] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1851.312843] CPU: 1 PID: 4245 Comm: ion_system_heap Not tainted 4.14.229-syzkaller #0 [ 1851.320724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1851.330073] Call Trace: [ 1851.332664] dump_stack+0x1b2/0x281 [ 1851.336312] dump_header+0x178/0x82f [ 1851.340018] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1851.345121] ? ___ratelimit+0x2cd/0x530 [ 1851.349076] oom_kill_process.cold+0x10/0xa40 [ 1851.353562] ? lock_downgrade+0x740/0x740 [ 1851.357727] out_of_memory+0x2dc/0x1190 [ 1851.361695] ? oom_killer_disable+0x1c0/0x1c0 [ 1851.366172] ? mutex_trylock+0x152/0x1a0 [ 1851.370212] __alloc_pages_nodemask+0x23e1/0x2720 [ 1851.375043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1851.379868] ? kasan_kmalloc+0xeb/0x160 [ 1851.383835] ? ion_heap_deferred_free+0x22a/0x470 [ 1851.388654] ? cache_grow_begin+0x3f/0x700 [ 1851.392888] cache_grow_begin+0x91/0x700 [ 1851.396929] fallback_alloc+0x207/0x2c0 [ 1851.400898] kmem_cache_alloc_node_trace+0xed/0x400 [ 1851.406847] alloc_vmap_area+0xf0/0x7c0 [ 1851.410827] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1851.416256] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1851.420763] ? __get_vm_area_node+0xed/0x340 [ 1851.425154] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1851.430412] __get_vm_area_node+0x126/0x340 [ 1851.434710] vmap+0xd5/0x290 [ 1851.437705] ? ion_heap_clear_pages+0x23/0x70 [ 1851.442176] ? vunmap+0x50/0x50 [ 1851.445428] ? __vunmap+0x21c/0x300 [ 1851.449036] ion_heap_clear_pages+0x23/0x70 [ 1851.453349] ion_heap_sglist_zero+0x165/0x220 [ 1851.457819] ? ion_heap_clear_pages+0x70/0x70 [ 1851.462320] ? finish_task_switch+0x178/0x610 [ 1851.466801] ? pagerange_is_ram_callback+0x100/0x100 [ 1851.471896] ? ion_heap_deferred_free+0x222/0x470 [ 1851.476715] ion_system_heap_free+0x1d0/0x240 [ 1851.481189] ion_buffer_destroy+0x132/0x190 [ 1851.485487] ion_heap_deferred_free+0x22a/0x470 [ 1851.490139] ? __schedule+0x7b7/0x1de0 [ 1851.494004] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1851.498661] ? wait_woken+0x230/0x230 [ 1851.502443] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1851.507532] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1851.512177] kthread+0x30d/0x420 [ 1851.515522] ? kthread_create_on_node+0xd0/0xd0 [ 1851.520179] ret_from_fork+0x24/0x30 [ 1851.532948] Mem-Info: [ 1851.535378] active_anon:15999 inactive_anon:53438 isolated_anon:0 [ 1851.535378] active_file:21 inactive_file:3 isolated_file:0 [ 1851.535378] unevictable:0 dirty:35 writeback:5 unstable:0 [ 1851.535378] slab_reclaimable:12025 slab_unreclaimable:116655 [ 1851.535378] mapped:43889 shmem:54028 pagetables:669 bounce:0 [ 1851.535378] free:13896 free_pcp:30 free_cma:0 [ 1851.578197] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1851.582843] Node 0 active_anon:62512kB inactive_anon:172356kB active_file:84kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153724kB dirty:140kB writeback:20kB shmem:174440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1851.601902] syz-executor.0 cpuset= [ 1851.622370] Node 1 active_anon:1484kB inactive_anon:41396kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1851.625398] / [ 1851.625926] Node 0 [ 1851.655340] mems_allowed=0-1 [ 1851.660731] CPU: 0 PID: 8274 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1851.663848] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.668525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1851.702790] lowmem_reserve[]: [ 1851.703397] Call Trace: [ 1851.703400] 0 2717 [ 1851.706508] dump_stack+0x1b2/0x281 [ 1851.712922] 2718 2718 [ 1851.714901] warn_alloc.cold+0x96/0x1cc [ 1851.714908] 2718 [ 1851.717392] ? zone_watermark_ok_safe+0x220/0x220 [ 1851.728228] ? usleep_range+0x130/0x130 [ 1851.728230] Node 0 DMA32 free:17688kB min:36200kB low:45248kB high:54296kB active_anon:62508kB inactive_anon:172356kB active_file:92kB inactive_file:108kB unevictable:0kB writepending:160kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:2520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.732194] ? try_to_free_pages+0x23f/0x6e0 [ 1851.732204] ? _find_next_bit+0xdb/0x100 [ 1851.732214] ? run_timer_softirq+0x5a0/0x5a0 [ 1851.732231] __alloc_pages_nodemask+0x2127/0x2720 [ 1851.732248] ? lock_acquire+0x170/0x3f0 [ 1851.732263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1851.732274] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1851.732290] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1851.732309] alloc_pages_current+0x155/0x260 [ 1851.732321] ion_page_pool_alloc+0x118/0x1b0 [ 1851.732332] ion_system_heap_allocate+0x133/0x8c0 [ 1851.783093] lowmem_reserve[]: [ 1851.787711] ? _raw_spin_unlock+0x29/0x40 [ 1851.805835] 0 [ 1851.806405] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1851.815837] 0 [ 1851.818453] ? ion_system_contig_heap_create+0x130/0x130 [ 1851.828595] 0 [ 1851.832379] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1851.832393] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1851.832404] ion_alloc+0x27a/0x810 [ 1851.832419] ? ion_dma_buf_release+0x40/0x40 [ 1851.832431] ? __might_fault+0x177/0x1b0 [ 1851.832443] ion_ioctl+0xea/0x1f0 [ 1851.845994] 0 [ 1851.847680] ? ion_query_heaps+0x360/0x360 [ 1851.854472] 0 [ 1851.856148] ? ion_query_heaps+0x360/0x360 [ 1851.867499] do_vfs_ioctl+0x75a/0xff0 [ 1851.874047] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.875542] ? ioctl_preallocate+0x1a0/0x1a0 [ 1851.875556] ? lock_downgrade+0x740/0x740 [ 1851.909585] ? __fget+0x225/0x360 [ 1851.909662] lowmem_reserve[]: 0 [ 1851.913036] ? do_vfs_ioctl+0xff0/0xff0 [ 1851.913050] ? security_file_ioctl+0x83/0xb0 [ 1851.916322] 0 [ 1851.920284] SyS_ioctl+0x7f/0xb0 [ 1851.920292] ? do_vfs_ioctl+0xff0/0xff0 [ 1851.920304] do_syscall_64+0x1d5/0x640 [ 1851.920320] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1851.920329] RIP: 0033:0x466459 [ 1851.920334] RSP: 002b:00007fcc72ffa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1851.920345] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1851.920351] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1851.920357] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1851.920362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1851.920368] R13: 00007ffe0535e3ff R14: 00007fcc72ffa300 R15: 0000000000022000 [ 1851.929203] Mem-Info: [ 1851.935101] 0 [ 1851.937796] active_anon:15999 inactive_anon:53438 isolated_anon:0 [ 1851.937796] active_file:40 inactive_file:5 isolated_file:0 [ 1851.937796] unevictable:0 dirty:35 writeback:5 unstable:0 [ 1851.937796] slab_reclaimable:12025 slab_unreclaimable:116656 [ 1851.937796] mapped:43888 shmem:54028 pagetables:669 bounce:0 [ 1851.937796] free:13864 free_pcp:31 free_cma:0 [ 1851.946751] 0 [ 1851.956292] Node 0 active_anon:62512kB inactive_anon:172356kB active_file:156kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153724kB dirty:140kB writeback:20kB shmem:174440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1851.974687] 0 [ 1851.978172] Node 1 active_anon:1484kB inactive_anon:41396kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1851.996684] Node 0 [ 1852.037038] Node 1 [ 1852.061262] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1852.101012] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:41396kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1852.119514] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1852.157691] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:62532kB inactive_anon:172356kB active_file:84kB inactive_file:172kB unevictable:0kB writepending:140kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:2520kB bounce:0kB free_pcp:204kB local_pcp:172kB free_cma:0kB [ 1852.161703] lowmem_reserve[]: [ 1852.195190] lowmem_reserve[]: [ 1852.196516] 0 [ 1852.198301] 0 0 0 0 0 [ 1852.205182] 0 [ 1852.205830] Node 0 [ 1852.205832] 0 0 [ 1852.207635] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1852.217746] 0 [ 1852.244423] lowmem_reserve[]: [ 1852.246261] 0 0 0 0 0 [ 1852.251297] Node 0 [ 1852.251935] Node 1 [ 1852.251937] DMA: 9*4kB [ 1852.254178] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1460kB inactive_anon:41396kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1852.256381] (UME) [ 1852.265737] lowmem_reserve[]: 0 0 0 0 0 [ 1852.297880] 24*8kB (UME) [ 1852.300468] Node 0 DMA: [ 1852.303216] 23*16kB [ 1852.303224] 9*4kB [ 1852.305874] (UME) [ 1852.308178] (UME) [ 1852.319068] 20*32kB [ 1852.319840] 24*8kB [ 1852.321223] (UM) [ 1852.323533] (UME) [ 1852.325749] 2*64kB [ 1852.327812] 23*16kB [ 1852.336516] (ME) [ 1852.336985] (UME) [ 1852.338839] 3*128kB [ 1852.343214] 20*32kB [ 1852.345340] (UME) [ 1852.345537] (UM) [ 1852.347863] 4*256kB [ 1852.354725] 2*64kB (ME) 3*128kB (UME) 4*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10964kB [ 1852.358415] (UME) [ 1852.369941] Node 0 DMA32: 1360*4kB (UME) 318*8kB (UM) 17*16kB (UM) 296*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18240kB [ 1852.376776] 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10964kB [ 1852.390776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1852.401432] Node 0 DMA32: 1360*4kB (UME) 318*8kB (UM) 17*16kB (UM) 296*32kB (UME) 8*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18240kB [ 1852.410595] Node 1 Normal: 166*4kB (M) 68*8kB (ME) 15*16kB (ME) 785*32kB (UM) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1852.426308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1852.438295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1852.451576] Node 1 Normal: 166*4kB (M) 68*8kB (ME) 15*16kB (ME) 785*32kB (UM) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1852.458827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1852.477788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1852.483543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1852.487892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1852.500049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1852.515578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1852.517510] 54097 total pagecache pages [ 1852.528423] 0 pages in swap cache [ 1852.535572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1852.536652] Swap cache stats: add 0, delete 0, find 0/0 [ 1852.546683] 54097 total pagecache pages [ 1852.551847] Free swap = 0kB [ 1852.556658] Total swap = 0kB [ 1852.559701] 2097051 pages RAM [ 1852.562805] 0 pages HighMem/MovableOnly [ 1852.566662] 0 pages in swap cache [ 1852.566771] 363848 pages reserved [ 1852.574173] Swap cache stats: add 0, delete 0, find 0/0 [ 1852.576094] 0 pages cma reserved [ 1852.623361] Free swap = 0kB [ 1852.859218] Total swap = 0kB [ 1852.862281] 2097051 pages RAM [ 1852.898991] 0 pages HighMem/MovableOnly [ 1852.902988] 363848 pages reserved [ 1852.906429] 0 pages cma reserved [ 1852.919182] Out of memory: Kill process 7971 (syz-fuzzer) score 7 or sacrifice child [ 1852.949071] Killed process 7418 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1853.046337] oom_reaper: reaped process 7418 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:34:30 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x76, 0x40) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:30 executing program 5: ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000140)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000040)={0x67, "b56cb82a9d7e713fb9280b9df7e339bfd3249ed3a9aafa2a57a118e338f1b169db2a3b72242b5ff68166c379f50459e3d8d3bc72329dbba74ef239ad47ecad3b49db8d921a34a44d5ec353da3c19903e5bd3a24ace9733db55de011eb9563b153d50819b4ae11ec74633c9fb623fd9d45c8d565677efa034ad3f2811a6206d7c"}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) 04:34:30 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x0) read$snddsp(r0, 0x0, 0x0) 04:34:30 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x101200, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000000c0)=0x257eb610) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x408000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r2, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x3, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x48800}, 0x20048000) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) 04:34:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:30 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x4e583) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:30 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x1, {0x0, 0x20, 0x65, 0x2, 0x1, 0x7}}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000080)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000200)=0xadf) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r2, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x20008004) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x402101) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x100010, r3, 0x82000000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) getresuid(&(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)) read$snddsp(r3, &(0x7f0000000300)=""/40, 0x28) 04:34:30 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r1, &(0x7f0000000000)="95", 0x1) 04:34:30 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:30 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_mount_image$ocfs2(&(0x7f0000000300)='ocfs2\x00', &(0x7f0000000340)='./file1\x00', 0x6, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000380)="16710592868b92fc18b0b7a96893b8945d5a0ca05150d4262c12189108554b7a61db4dc2e5fd75c50355947cda85386cb01f540fd9dca9c9061bd38add47f142b41414977c45cd23feb7d9c9c694e3d206dd25ed64d663eb2f8d1350d7632dc690", 0x61, 0x5}, {&(0x7f0000000400)="948c144d4a46d1c2cd9485859c721a5f73beec211fa3a598cd2156e8f40f7ee9fb9bf2a80e90d3f9b85aea892b323724", 0x30, 0x5}, {&(0x7f0000000440)="a8bc2773eb94a4e094b4689bc05eff3d550dd6f844bc6dd4ec8eaa6565998255cb7096a979e0d0d88a96e310d9360066af334f8848233c84e731282d56b233529dfc6ef002fceb2e7ec17829f43b9a6befdf7ead9f0961e106a265f7a6bcc26eea7891a576981971991c004a13b1a5588ad27edfee3a84ca1b7e49c4ef162a3de9cca4d318f58e44b139741ea639593136", 0x91, 0x401}, {&(0x7f0000000500)="48e2ad33b69164d1cc3c5261d0fe884172f1a7928bc56a0b8c12c1f0c080b3541be1909b371d0bea6a678bda0b3526e6bff53221ac3ee0581f57633d4591dfc91d91455944d6bdadb449689a025fb1531af7279b4c923f07dcc5a477878917076033c1ba6d8b9a781a12d3daa62f4eaf1de1213466d7d0fcee56de2d1dff5feed37fff1ff0f940dbbdf5941a792de80a6a93473b7216f7349615abcf1188c4e7bc0eba72bf2d61b980577338f20a74c6925f6f1591191ec172a7b20ad1b4ac883515516fdaf8725c20e05f68cd0c319836ce7bb701feff8d75c94fa31a078b4aadb5be24f85ca27ead0f1c61de6fb2daee88", 0xf2, 0x100000001}, {&(0x7f0000000600)="fad623ae329e029ce6b5db0463cf4084c30c30a3d73f227d74b4e1ab43bd61f37fd237e22ec1e212f34feddcdb111e984d83bd99630cc44a2354cc7b65f70ab8dbaf326138ff51fe876c26a0bca6e13c60b20a94355d996cca91b087dd01c4224543cc65cd27a5d56f8c8e46531b7341ea44aa87cfe129fa559d4091779d0877aa3d915fdbc36db985622c67689d7ca3a23d4e94eb0220ca46f1b2c6d56042920634d8a0a7f78bb3eae00be4188a7f09bb4dfb835fda651c", 0xb8, 0x1}], 0x390000, &(0x7f0000000740)={[{'{-){'}, {',$'}, {'/dev/snd/pcmC#D#c\x00'}, {'/dev/snd/pcmC#D#p\x00'}, {'/dev/snd/pcmC#D#p\x00'}, {'/dev/nvme-fabrics\x00'}, {'/dev/snd/pcmC#D#c\x00'}, {'/dev/snd/pcmC#D#p\x00'}], [{@appraise='appraise'}, {@subj_type={'subj_type'}}]}) statx(r1, &(0x7f0000000800)='./file0\x00', 0x2000, 0x100, &(0x7f0000000840)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) write$snddsp(r2, &(0x7f0000000080)="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", 0x242) 04:34:30 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000080)={0x3, [0x1, 0x9, 0x2], [{0x0, 0x3ff, 0x0, 0x1, 0x0, 0x1}, {0x59, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x3, 0xe04, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0x2, 0x81, 0x0, 0x1, 0x0, 0x1}, {0x8000, 0x146, 0x0, 0x0, 0x1}, {0xfffffff8, 0x80000000, 0x0, 0x0, 0x1}, {0x4, 0x20, 0x1, 0x0, 0x1}, {0x100, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xffff, 0x3, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x0, 0x1}, {0x7, 0x8, 0x1, 0x1, 0x0, 0x1}], 0x4}) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) [ 1853.772902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1853.800706] batman_adv: batadv0: Removing interface: batadv_slave_0 04:34:30 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x446503) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) write$snddsp(r0, &(0x7f0000000080)="1420", 0xffffffffffffff4b) [ 1853.859715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1853.883312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1853.897432] device bridge_slave_1 left promiscuous mode [ 1853.912275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.933876] device bridge_slave_0 left promiscuous mode [ 1853.952684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.980546] device veth1_macvtap left promiscuous mode [ 1853.992296] device veth0_macvtap left promiscuous mode [ 1854.004558] device veth1_vlan left promiscuous mode [ 1854.015651] device veth0_vlan left promiscuous mode [ 1854.143769] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1854.168996] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1854.174225] CPU: 1 PID: 8319 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1854.182033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1854.191388] Call Trace: [ 1854.193987] dump_stack+0x1b2/0x281 [ 1854.197621] warn_alloc.cold+0x96/0x1cc [ 1854.201596] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1854.206613] ? zone_watermark_ok_safe+0x220/0x220 [ 1854.211469] __alloc_pages_nodemask+0x2127/0x2720 [ 1854.216338] ? lock_acquire+0x170/0x3f0 [ 1854.220332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1854.225181] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1854.230633] ? __mutex_unlock_slowpath+0x75/0x770 [ 1854.235480] alloc_pages_current+0x155/0x260 [ 1854.239904] ion_page_pool_alloc+0x118/0x1b0 [ 1854.244329] ion_system_heap_allocate+0x133/0x8c0 [ 1854.249181] ? ion_alloc+0x187/0x810 [ 1854.252904] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1854.258355] ? ion_system_contig_heap_create+0x130/0x130 [ 1854.263803] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1854.268829] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1854.273666] ion_alloc+0x204/0x810 [ 1854.277196] ? ion_dma_buf_release+0x40/0x40 [ 1854.281596] ? __might_fault+0x177/0x1b0 [ 1854.285646] ion_ioctl+0xea/0x1f0 [ 1854.289087] ? ion_query_heaps+0x360/0x360 [ 1854.293316] ? cp_compat_stat+0x890/0x890 [ 1854.297468] ? putname+0xcd/0x110 [ 1854.300908] ? ion_query_heaps+0x360/0x360 [ 1854.305130] do_vfs_ioctl+0x75a/0xff0 [ 1854.308920] ? ioctl_preallocate+0x1a0/0x1a0 [ 1854.313318] ? lock_downgrade+0x740/0x740 [ 1854.317456] ? __fget+0x225/0x360 [ 1854.320898] ? do_vfs_ioctl+0xff0/0xff0 [ 1854.324880] ? security_file_ioctl+0x83/0xb0 [ 1854.329302] SyS_ioctl+0x7f/0xb0 [ 1854.332668] ? do_vfs_ioctl+0xff0/0xff0 [ 1854.336682] do_syscall_64+0x1d5/0x640 [ 1854.340563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1854.345742] RIP: 0033:0x466459 [ 1854.348921] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1854.356624] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1854.363884] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1854.371142] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1854.378397] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1854.385655] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1854.393947] Mem-Info: [ 1854.396476] active_anon:16445 inactive_anon:53434 isolated_anon:0 [ 1854.396476] active_file:1808 inactive_file:5198 isolated_file:0 [ 1854.396476] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1854.396476] slab_reclaimable:12020 slab_unreclaimable:114266 [ 1854.396476] mapped:39805 shmem:54021 pagetables:671 bounce:0 [ 1854.396476] free:197013 free_pcp:334 free_cma:0 [ 1854.430528] Node 0 active_anon:64476kB inactive_anon:172348kB active_file:7072kB inactive_file:20816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137348kB dirty:252kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1854.470486] Node 1 active_anon:1304kB inactive_anon:41388kB active_file:160kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21972kB dirty:0kB writeback:0kB shmem:41656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1854.505150] device hsr_slave_1 left promiscuous mode [ 1854.518028] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1854.544630] device hsr_slave_0 left promiscuous mode [ 1854.551905] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1854.556948] Node 0 DMA32 free:723684kB min:36200kB low:45248kB high:54296kB active_anon:62424kB inactive_anon:172348kB active_file:6688kB inactive_file:21436kB unevictable:0kB writepending:252kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7360kB pagetables:2528kB bounce:0kB free_pcp:748kB local_pcp:192kB free_cma:0kB [ 1854.587407] team0 (unregistering): Port device team_slave_1 removed [ 1854.588141] lowmem_reserve[]: 0 0 0 0 0 [ 1854.597956] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1854.624098] team0 (unregistering): Port device team_slave_0 removed [ 1854.625639] lowmem_reserve[]: 0 0 0 0 0 [ 1854.634658] Node 1 Normal free:53732kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:41388kB active_file:572kB inactive_file:392kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 1854.664504] lowmem_reserve[]: 0 0 0 0 0 [ 1854.668568] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1854.669474] Node 0 DMA: 16*4kB (UME) 24*8kB (UME) 23*16kB (UME) 20*32kB (UM) 14*64kB (UME) 8*128kB (UME) 7*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11120kB [ 1854.692877] Node 0 DMA32: 16633*4kB (UM) 19464*8kB (UME) 16211*16kB (UM) 7500*32kB (UME) 51*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 724884kB [ 1854.707802] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1854.717121] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1854.728527] Node 1 Normal: 649*4kB (UM) 1052*8kB (UME) 919*16kB (UME) 843*32kB (UM) 2*64kB (M) 1*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 54228kB [ 1854.745424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.755447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1854.764900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.774405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1854.775212] bond0 (unregistering): Released all slaves [ 1854.783883] 60925 total pagecache pages [ 1854.793884] 0 pages in swap cache [ 1854.802443] Swap cache stats: add 0, delete 0, find 0/0 [ 1854.813244] Free swap = 0kB [ 1854.816308] Total swap = 0kB [ 1854.823670] 2097051 pages RAM [ 1854.826798] 0 pages HighMem/MovableOnly [ 1854.833297] 363848 pages reserved [ 1854.836835] 0 pages cma reserved [ 1856.487706] IPVS: ftp: loaded support on port[0] = 21 [ 1856.904696] chnl_net:caif_netlink_parms(): no params data found [ 1857.173040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.203800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.211976] device bridge_slave_0 entered promiscuous mode [ 1857.233858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.244251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.252034] device bridge_slave_1 entered promiscuous mode [ 1857.283245] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1857.293584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1857.321699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1857.328426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1857.337310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1857.344522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1857.353053] device bridge_slave_1 left promiscuous mode [ 1857.358577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.366721] device bridge_slave_0 left promiscuous mode [ 1857.372514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.386461] device veth1_macvtap left promiscuous mode [ 1857.391905] device veth0_macvtap left promiscuous mode [ 1857.397316] device veth1_vlan left promiscuous mode [ 1857.406535] device veth0_vlan left promiscuous mode [ 1857.547985] device hsr_slave_1 left promiscuous mode [ 1857.557748] device hsr_slave_0 left promiscuous mode [ 1857.584608] team0 (unregistering): Port device team_slave_1 removed 04:34:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:34 executing program 2: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c040) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000180)={0x29}) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) [ 1857.597271] team0 (unregistering): Port device team_slave_0 removed [ 1857.618442] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1857.634055] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1857.671036] bond0 (unregistering): Released all slaves [ 1857.687640] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1857.695303] team0: Port device team_slave_0 added [ 1857.704199] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1857.711978] team0: Port device team_slave_1 added [ 1857.747568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1857.754313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1857.780874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1857.800464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1857.806756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1857.869949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1857.896508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1857.917395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1857.995861] device hsr_slave_0 entered promiscuous mode [ 1858.011158] device hsr_slave_1 entered promiscuous mode [ 1858.030947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1858.047682] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1858.119077] Bluetooth: hci0 command 0x0409 tx timeout [ 1858.209692] Bluetooth: hci5 command 0x0409 tx timeout [ 1858.295060] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1858.347989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.357258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1858.372812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1858.382884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1858.391334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1858.401022] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1858.407106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.421219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1858.428225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1858.437482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1858.446247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.452651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.463662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1858.471985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1858.480014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1858.487867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1858.496664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.503093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.514702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1858.522537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1858.533852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1858.542040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1858.554467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1858.562378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1858.571363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1858.583171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1858.590495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1858.597540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1858.607907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1858.625899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1858.635762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1858.650514] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1858.657293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1858.670214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1858.684863] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1858.692567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1858.702483] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1858.710084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1858.716822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1858.732616] IPVS: ftp: loaded support on port[0] = 21 [ 1858.742464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1858.915606] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1858.961087] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1858.968799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1858.980689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1858.997346] chnl_net:caif_netlink_parms(): no params data found [ 1859.055521] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1859.064552] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1859.076881] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1859.088854] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1859.100640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1859.108337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1859.124178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1859.131440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1859.140300] device veth0_vlan entered promiscuous mode [ 1859.159469] device veth1_vlan entered promiscuous mode [ 1859.168369] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1859.183732] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1859.217449] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1859.244540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.259637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.267114] device bridge_slave_0 entered promiscuous mode [ 1859.289082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.295478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.304052] device bridge_slave_1 entered promiscuous mode [ 1859.338611] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1859.353654] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1859.371596] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1859.391525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1859.412232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1859.422195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1859.452258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1859.492983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1859.513228] team0: Port device team_slave_0 added [ 1859.521639] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1859.532455] team0: Port device team_slave_1 added [ 1859.553061] device veth0_macvtap entered promiscuous mode [ 1859.567893] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1859.588374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1859.601113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1859.631276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1859.649654] device veth1_macvtap entered promiscuous mode [ 1859.655993] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1859.667761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1859.674629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1859.704418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.717626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1859.730870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1859.738747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1859.752649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1859.778356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.789577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.798696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.809425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.818541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.828568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.837981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1859.848029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.858696] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1859.866324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1859.880543] device hsr_slave_0 entered promiscuous mode [ 1859.887368] device hsr_slave_1 entered promiscuous mode [ 1859.894232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1859.902272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1859.912220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1859.931130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1859.944254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.957027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.966937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1859.977067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.987831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1860.001739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.012175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1860.024839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.036912] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1860.055302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1860.062344] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1860.073994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1860.082579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1860.099267] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1860.199517] Bluetooth: hci0 command 0x041b tx timeout [ 1860.253121] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1860.279336] Bluetooth: hci5 command 0x041b tx timeout [ 1860.323337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1860.334458] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1860.344351] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1860.355477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1860.363352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1860.374251] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1860.380635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1860.391438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1860.398505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1860.406946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1860.415723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.422125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1860.441191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1860.449897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1860.457141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1860.465989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1860.474063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.480483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1860.490839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1860.499712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1860.510044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1860.520042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1860.527077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1860.537196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1860.545196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1860.558023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1860.566047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1860.573916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1860.582044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1860.593006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1860.603035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1860.611060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1860.618630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1860.626566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1860.634241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1860.644105] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1860.650442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1860.668487] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1860.676768] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1860.685371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1860.693694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1860.706911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1860.797172] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1860.808329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1860.857372] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1860.864878] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1860.875461] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1860.887513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1860.895915] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1860.903429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1860.913382] device veth0_vlan entered promiscuous mode [ 1860.924094] device veth1_vlan entered promiscuous mode [ 1860.930911] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1860.942547] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1860.957568] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1860.970308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1860.977573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1860.986637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1860.997734] device veth0_macvtap entered promiscuous mode [ 1861.005573] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1861.016787] device veth1_macvtap entered promiscuous mode [ 1861.028028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1861.046297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1861.056414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1861.066495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.076908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1861.087761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.097502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1861.107966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.117776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1861.128157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.138937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1861.149542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.150907] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1861.151017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1861.151093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1861.151920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1861.152375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1861.155303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1861.155308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.155316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1861.155319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.155326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1861.155329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.155335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1861.155339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.155344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1861.155348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1861.156335] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1861.156362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1861.346149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1861.354134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:34:38 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x20004000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00', r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0)='mptcp_pm\x00', 0xffffffffffffffff) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x60, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x40c0) statx(r5, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x48c2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000426bd7000fcdbdf25010000001400018008000700", @ANYRES32=r3, @ANYBLOB="06000100020000000800030001000000080003000600000008000300070000000c00018005000200030000000800030000000000040001800800020000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) 04:34:38 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f00000002c0)) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x65}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x140}, 0x1, 0x0, 0x0, 0x24040}, 0x4010) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r2, &(0x7f0000000000)="95", 0x1) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x2, 0x44000) 04:34:38 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r1, &(0x7f0000000000)="95", 0x1) 04:34:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x7ff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10}, 0x18) 04:34:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:38 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x54b402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0xc200, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x0, 0x20010, r1, 0x82000000) 04:34:38 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000140)=0x4) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x11, r0, 0x10000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3, 0x1, 0x4, 0x100, 0x80000000, {r2, r3/1000+10000}, {0xa, 0x0, 0x2, 0x0, 0x2, 0x1f, "3b933df3"}, 0x6, 0x3, @offset=0x200, 0x10000}) 04:34:38 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:38 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x401, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:38 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 04:34:38 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) 04:34:38 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9d, 0x0) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:38 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x50, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x81) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000080)={'wg1\x00', 0x1, 0x3}) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x400000f1, 0x4200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000001bc0)={'caif0\x00', 0xf9, 0x800}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000400)=""/63, 0x3f}], 0x6, &(0x7f00000004c0)=""/4096, 0x1000}, 0x100) 04:34:38 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x2a482) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) [ 1862.279444] Bluetooth: hci0 command 0x040f tx timeout [ 1862.360329] Bluetooth: hci5 command 0x040f tx timeout [ 1862.524663] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1862.571863] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1862.577017] CPU: 1 PID: 8850 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1862.584806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1862.594155] Call Trace: [ 1862.596758] dump_stack+0x1b2/0x281 [ 1862.600389] warn_alloc.cold+0x96/0x1cc [ 1862.604366] ? zone_watermark_ok_safe+0x220/0x220 [ 1862.609224] __alloc_pages_nodemask+0x2127/0x2720 [ 1862.614072] ? lock_acquire+0x170/0x3f0 [ 1862.618052] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1862.622904] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1862.628359] ? __mutex_unlock_slowpath+0x75/0x770 [ 1862.633204] alloc_pages_current+0x155/0x260 [ 1862.637617] ion_page_pool_alloc+0x118/0x1b0 [ 1862.642025] ion_system_heap_allocate+0x133/0x8c0 [ 1862.646879] ? ion_alloc+0x187/0x810 [ 1862.650592] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1862.656057] ? ion_system_contig_heap_create+0x130/0x130 [ 1862.661505] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1862.666522] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1862.671371] ion_alloc+0x204/0x810 [ 1862.674917] ? ion_dma_buf_release+0x40/0x40 [ 1862.679351] ? __might_fault+0x177/0x1b0 [ 1862.683422] ion_ioctl+0xea/0x1f0 [ 1862.686892] ? ion_query_heaps+0x360/0x360 [ 1862.691133] ? ion_query_heaps+0x360/0x360 [ 1862.695396] do_vfs_ioctl+0x75a/0xff0 [ 1862.699201] ? ioctl_preallocate+0x1a0/0x1a0 [ 1862.703615] ? lock_downgrade+0x740/0x740 [ 1862.707765] ? __fget+0x225/0x360 [ 1862.708150] syz-executor.1: [ 1862.711214] ? do_vfs_ioctl+0xff0/0xff0 [ 1862.711226] ? security_file_ioctl+0x83/0xb0 [ 1862.711237] SyS_ioctl+0x7f/0xb0 [ 1862.711246] ? do_vfs_ioctl+0xff0/0xff0 [ 1862.711257] do_syscall_64+0x1d5/0x640 [ 1862.711272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1862.714354] page allocation failure: order:4 [ 1862.718238] RIP: 0033:0x466459 [ 1862.718243] RSP: 002b:00007f6991fb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1862.718254] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1862.718260] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1862.718265] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1862.718274] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1862.724835] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1862.726018] R13: 00007ffd1f1be22f R14: 00007f6991fb1300 R15: 0000000000022000 [ 1862.809040] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1862.833094] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1862.859006] CPU: 1 PID: 8842 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1862.866824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1862.876167] Call Trace: [ 1862.878766] dump_stack+0x1b2/0x281 [ 1862.882390] warn_alloc.cold+0x96/0x1cc [ 1862.886359] ? zone_watermark_ok_safe+0x220/0x220 [ 1862.891243] __alloc_pages_nodemask+0x2127/0x2720 [ 1862.896077] ? __schedule+0x893/0x1de0 [ 1862.899961] ? lock_acquire+0x170/0x3f0 [ 1862.903935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1862.908863] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1862.914306] ? __mutex_unlock_slowpath+0x75/0x770 [ 1862.919145] alloc_pages_current+0x155/0x260 [ 1862.923550] ion_page_pool_alloc+0x118/0x1b0 [ 1862.927949] ion_system_heap_allocate+0x133/0x8c0 [ 1862.932783] ? ion_alloc+0x187/0x810 [ 1862.936488] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1862.941937] ? ion_system_contig_heap_create+0x130/0x130 [ 1862.947376] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1862.952389] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1862.957223] ion_alloc+0x204/0x810 [ 1862.960758] ? ion_dma_buf_release+0x40/0x40 [ 1862.965173] ? __might_fault+0x177/0x1b0 [ 1862.969232] ion_ioctl+0xea/0x1f0 [ 1862.972677] ? ion_query_heaps+0x360/0x360 [ 1862.976902] ? cp_compat_stat+0x890/0x890 [ 1862.981661] ? ion_query_heaps+0x360/0x360 [ 1862.985890] do_vfs_ioctl+0x75a/0xff0 [ 1862.989697] ? ioctl_preallocate+0x1a0/0x1a0 [ 1862.994094] ? lock_downgrade+0x740/0x740 [ 1862.998250] ? __fget+0x225/0x360 [ 1863.001710] ? do_vfs_ioctl+0xff0/0xff0 [ 1863.005696] ? security_file_ioctl+0x83/0xb0 [ 1863.010094] SyS_ioctl+0x7f/0xb0 [ 1863.013450] ? do_vfs_ioctl+0xff0/0xff0 [ 1863.017414] do_syscall_64+0x1d5/0x640 [ 1863.021309] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1863.026486] RIP: 0033:0x466459 [ 1863.029666] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.037377] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1863.044635] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1863.051907] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1863.059163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1863.066420] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1863.074655] (null) [ 1863.076928] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1863.090198] CPU: 0 PID: 8845 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1863.098004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.107353] Call Trace: [ 1863.109946] dump_stack+0x1b2/0x281 [ 1863.113507] Mem-Info: [ 1863.113598] warn_alloc.cold+0x96/0x1cc [ 1863.116003] active_anon:17622 inactive_anon:53439 isolated_anon:0 [ 1863.116003] active_file:555 inactive_file:566 isolated_file:32 [ 1863.116003] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1863.116003] slab_reclaimable:12231 slab_unreclaimable:112235 [ 1863.116003] mapped:53739 shmem:54028 pagetables:766 bounce:0 [ 1863.116003] free:25816 free_pcp:165 free_cma:0 [ 1863.119953] ? zone_watermark_ok_safe+0x220/0x220 [ 1863.119976] __alloc_pages_nodemask+0x2127/0x2720 [ 1863.119994] ? lock_acquire+0x170/0x3f0 [ 1863.120009] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1863.120039] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1863.156071] Node 0 active_anon:69144kB inactive_anon:172344kB active_file:2200kB inactive_file:2260kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:193124kB dirty:40kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1863.158436] ? __mutex_unlock_slowpath+0x75/0x770 [ 1863.163727] Node 1 active_anon:1344kB inactive_anon:41412kB active_file:20kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21832kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1863.167221] alloc_pages_current+0x155/0x260 [ 1863.172169] Node 0 [ 1863.177493] ion_page_pool_alloc+0x118/0x1b0 [ 1863.177505] ion_system_heap_allocate+0x133/0x8c0 [ 1863.177515] ? ion_alloc+0x187/0x810 [ 1863.177526] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1863.177536] ? ion_system_contig_heap_create+0x130/0x130 [ 1863.177547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1863.177562] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1863.214172] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.237825] ion_alloc+0x204/0x810 [ 1863.237840] ? ion_dma_buf_release+0x40/0x40 [ 1863.237853] ? __might_fault+0x177/0x1b0 [ 1863.237864] ion_ioctl+0xea/0x1f0 [ 1863.237873] ? ion_query_heaps+0x360/0x360 [ 1863.237885] ? cp_compat_stat+0x890/0x890 [ 1863.251642] lowmem_reserve[]: [ 1863.253744] ? ion_query_heaps+0x360/0x360 [ 1863.257457] 0 [ 1863.262900] do_vfs_ioctl+0x75a/0xff0 [ 1863.262913] ? ioctl_preallocate+0x1a0/0x1a0 [ 1863.262921] ? lock_downgrade+0x740/0x740 [ 1863.262934] ? __fget+0x225/0x360 [ 1863.262943] ? do_vfs_ioctl+0xff0/0xff0 [ 1863.262958] ? security_file_ioctl+0x83/0xb0 [ 1863.288995] 2717 [ 1863.305454] SyS_ioctl+0x7f/0xb0 [ 1863.305464] ? do_vfs_ioctl+0xff0/0xff0 [ 1863.305475] do_syscall_64+0x1d5/0x640 [ 1863.305490] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1863.305502] RIP: 0033:0x466459 [ 1863.383943] RSP: 002b:00007f95dfc10188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.391645] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1863.398904] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1863.406175] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1863.413442] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1863.420704] R13: 00007fffd879821f R14: 00007f95dfc10300 R15: 0000000000022000 [ 1863.430681] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1863.443113] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1863.448367] 2718 2718 2718 [ 1863.451465] CPU: 1 PID: 8840 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1863.459622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.468964] Call Trace: [ 1863.471547] dump_stack+0x1b2/0x281 [ 1863.475186] warn_alloc.cold+0x96/0x1cc [ 1863.479151] ? zone_watermark_ok_safe+0x220/0x220 [ 1863.484001] __alloc_pages_nodemask+0x2127/0x2720 [ 1863.488845] ? __schedule+0x893/0x1de0 [ 1863.492754] ? lock_acquire+0x170/0x3f0 [ 1863.496724] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1863.501579] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1863.507021] ? __mutex_unlock_slowpath+0x75/0x770 [ 1863.511860] alloc_pages_current+0x155/0x260 [ 1863.516263] ion_page_pool_alloc+0x118/0x1b0 [ 1863.520680] ion_system_heap_allocate+0x133/0x8c0 [ 1863.525513] ? ion_alloc+0x187/0x810 [ 1863.529233] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1863.534683] ? ion_system_contig_heap_create+0x130/0x130 [ 1863.540124] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1863.545136] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1863.549986] ion_alloc+0x204/0x810 [ 1863.553532] ? ion_dma_buf_release+0x40/0x40 [ 1863.557931] ? __might_fault+0x177/0x1b0 [ 1863.561985] ion_ioctl+0xea/0x1f0 [ 1863.565428] ? ion_query_heaps+0x360/0x360 [ 1863.569655] ? ion_query_heaps+0x360/0x360 [ 1863.573884] do_vfs_ioctl+0x75a/0xff0 [ 1863.577679] ? ioctl_preallocate+0x1a0/0x1a0 [ 1863.582089] ? lock_downgrade+0x740/0x740 [ 1863.586228] ? __fget+0x225/0x360 [ 1863.589675] ? do_vfs_ioctl+0xff0/0xff0 [ 1863.593639] ? security_file_ioctl+0x83/0xb0 [ 1863.598042] SyS_ioctl+0x7f/0xb0 [ 1863.601395] ? do_vfs_ioctl+0xff0/0xff0 [ 1863.605367] do_syscall_64+0x1d5/0x640 [ 1863.609251] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1863.614427] RIP: 0033:0x466459 [ 1863.617604] RSP: 002b:00007f6991fd2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.625304] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1863.632562] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1863.639821] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1863.647078] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1863.654338] R13: 00007ffd1f1be22f R14: 00007f6991fd2300 R15: 0000000000022000 [ 1863.664627] Node 0 DMA32 free:36548kB min:36200kB low:45248kB high:54296kB active_anon:69140kB inactive_anon:172344kB active_file:1924kB inactive_file:1920kB unevictable:0kB writepending:40kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2908kB bounce:0kB free_pcp:1268kB local_pcp:680kB free_cma:0kB [ 1863.694297] lowmem_reserve[]: 0 0 0 0 0 [ 1863.698475] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.725428] lowmem_reserve[]: 0 0 0 0 0 [ 1863.729651] Node 1 Normal free:53632kB min:53696kB low:67120kB high:80544kB active_anon:1344kB inactive_anon:41412kB active_file:20kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.759226] lowmem_reserve[]: 0 0 0 0 0 [ 1863.763693] Node 0 DMA: 5*4kB (UME) 2*8kB (ME) 4*16kB (UME) 1*32kB (M) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11076kB [ 1863.767485] oom_reaper: reaped process 8842 (syz-executor.3), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1863.780277] Node 0 DMA32: 1529*4kB (UME) 411*8kB (UM) 135*16kB (UMH) 174*32kB (UMH) 55*64kB (UMH) 21*128kB (UME) 26*256kB (UMEH) 6*512kB (UE) 1*1024kB (H) 1*2048kB (M) 0*4096kB = 36140kB [ 1863.807730] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1863.832885] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1863.838121] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.229-syzkaller #0 [ 1863.846013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.855365] Call Trace: [ 1863.857971] dump_stack+0x1b2/0x281 [ 1863.861601] dump_header+0x178/0x82f [ 1863.865341] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1863.870444] ? ___ratelimit+0x2cd/0x530 [ 1863.874419] oom_kill_process.cold+0x10/0xa40 [ 1863.878398] Node 0 Normal: [ 1863.878910] ? lock_downgrade+0x740/0x740 [ 1863.878926] out_of_memory+0x2dc/0x1190 [ 1863.890058] ? oom_killer_disable+0x1c0/0x1c0 [ 1863.892794] 0*4kB [ 1863.894554] ? mutex_trylock+0x152/0x1a0 [ 1863.894556] 0*8kB 0*16kB [ 1863.896701] __alloc_pages_nodemask+0x23e1/0x2720 [ 1863.908367] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1863.913260] ? kasan_kmalloc+0xeb/0x160 [ 1863.913961] 0*32kB 0*64kB [ 1863.917232] ? ion_heap_deferred_free+0x22a/0x470 [ 1863.917245] ? cache_grow_begin+0x3f/0x700 [ 1863.929214] cache_grow_begin+0x91/0x700 [ 1863.932800] 0*128kB 0*256kB 0*512kB [ 1863.933270] fallback_alloc+0x207/0x2c0 [ 1863.933283] kmem_cache_alloc_node_trace+0xed/0x400 [ 1863.936976] 0*1024kB [ 1863.940936] alloc_vmap_area+0xf0/0x7c0 [ 1863.940950] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1863.940957] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1863.940963] ? __get_vm_area_node+0xed/0x340 [ 1863.940970] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1863.940983] __get_vm_area_node+0x126/0x340 [ 1863.973421] 0*2048kB [ 1863.976192] vmap+0xd5/0x290 [ 1863.976202] ? ion_heap_clear_pages+0x23/0x70 [ 1863.976209] ? vunmap+0x50/0x50 [ 1863.976214] ? __vunmap+0x21c/0x300 [ 1863.976224] ion_heap_clear_pages+0x23/0x70 [ 1863.976231] ion_heap_sglist_zero+0x165/0x220 [ 1863.976240] ? ion_heap_clear_pages+0x70/0x70 [ 1863.976268] ? pagerange_is_ram_callback+0x100/0x100 [ 1863.976276] ? ion_heap_deferred_free+0x222/0x470 [ 1863.976287] ion_system_heap_free+0x1d0/0x240 [ 1863.976299] ion_buffer_destroy+0x132/0x190 [ 1863.976308] ion_heap_deferred_free+0x22a/0x470 [ 1863.976318] ? __schedule+0x7b7/0x1de0 [ 1863.976328] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1863.976339] ? wait_woken+0x230/0x230 [ 1863.976351] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1863.978751] 0*4096kB [ 1863.981759] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1863.981769] kthread+0x30d/0x420 [ 1863.981776] ? kthread_create_on_node+0xd0/0xd0 [ 1863.981785] ret_from_fork+0x24/0x30 [ 1864.027374] Mem-Info: [ 1864.096284] = 0kB [ 1864.098364] Node 1 Normal: 178*4kB (M) 77*8kB (UME) 16*16kB (UME) 12*32kB (M) 2*64kB (M) 81*128kB (U) 39*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26544kB [ 1864.102197] active_anon:17088 inactive_anon:53439 isolated_anon:0 [ 1864.102197] active_file:15 inactive_file:13 isolated_file:0 [ 1864.102197] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1864.102197] slab_reclaimable:12231 slab_unreclaimable:112333 [ 1864.102197] mapped:52668 shmem:54028 pagetables:765 bounce:0 [ 1864.102197] free:13807 free_pcp:33 free_cma:0 [ 1864.119908] syz-executor.3: [ 1864.152403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.166467] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1864.174417] Node 0 active_anon:67008kB inactive_anon:172344kB active_file:56kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188844kB dirty:0kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.189583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1864.216343] Node 1 active_anon:1344kB inactive_anon:41412kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.225849] syz-executor.3 cpuset= [ 1864.255043] Node 0 [ 1864.256377] / [ 1864.258623] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.264631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.302019] mems_allowed=0-1 [ 1864.305150] CPU: 1 PID: 8842 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1864.312940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1864.315423] lowmem_reserve[]: [ 1864.322284] Call Trace: [ 1864.322305] dump_stack+0x1b2/0x281 [ 1864.322321] warn_alloc.cold+0x96/0x1cc [ 1864.325411] 0 [ 1864.327984] ? zone_watermark_ok_safe+0x220/0x220 [ 1864.331606] 2717 [ 1864.335543] ? usleep_range+0x130/0x130 [ 1864.337316] 2718 [ 1864.342141] ? try_to_free_pages+0x23f/0x6e0 [ 1864.342152] ? _find_next_bit+0xdb/0x100 [ 1864.342163] ? run_timer_softirq+0x5a0/0x5a0 [ 1864.342180] __alloc_pages_nodemask+0x2127/0x2720 [ 1864.344223] 2718 [ 1864.348192] ? lock_acquire+0x170/0x3f0 [ 1864.350261] 2718 [ 1864.354644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1864.363079] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1864.363096] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1864.363109] ? retint_kernel+0x2d/0x2d [ 1864.367930] Node 0 [ 1864.369997] alloc_pages_current+0x155/0x260 [ 1864.370010] ion_page_pool_alloc+0x118/0x1b0 [ 1864.370021] ion_system_heap_allocate+0x133/0x8c0 [ 1864.373998] DMA32 free:17768kB min:36200kB low:45248kB high:54296kB active_anon:67004kB inactive_anon:172344kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7456kB pagetables:2904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.376033] ? ion_alloc+0x187/0x810 [ 1864.380868] lowmem_reserve[]: [ 1864.385333] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1864.390771] 0 [ 1864.394628] ? ion_system_contig_heap_create+0x130/0x130 [ 1864.396847] 0 [ 1864.401266] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1864.401279] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1864.401292] ion_alloc+0x204/0x810 [ 1864.405679] 0 [ 1864.410524] ? ion_dma_buf_release+0x40/0x40 [ 1864.410537] ? __might_fault+0x177/0x1b0 [ 1864.410549] ion_ioctl+0xea/0x1f0 [ 1864.439815] 0 [ 1864.443490] ? ion_query_heaps+0x360/0x360 [ 1864.446563] 0 [ 1864.452003] ? cp_compat_stat+0x890/0x890 [ 1864.452011] ? ion_query_heaps+0x360/0x360 [ 1864.452020] do_vfs_ioctl+0x75a/0xff0 [ 1864.452032] ? ioctl_preallocate+0x1a0/0x1a0 [ 1864.452044] ? lock_downgrade+0x740/0x740 [ 1864.459262] ? __fget+0x225/0x360 [ 1864.459270] ? do_vfs_ioctl+0xff0/0xff0 [ 1864.459283] ? security_file_ioctl+0x83/0xb0 [ 1864.459293] SyS_ioctl+0x7f/0xb0 [ 1864.461071] Node 0 [ 1864.466084] ? do_vfs_ioctl+0xff0/0xff0 [ 1864.470946] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.474432] do_syscall_64+0x1d5/0x640 [ 1864.476212] lowmem_reserve[]: [ 1864.480610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1864.480619] RIP: 0033:0x466459 [ 1864.480624] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1864.484669] 0 [ 1864.488117] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1864.489919] 0 [ 1864.494108] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1864.495890] 0 [ 1864.500016] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1864.500022] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1864.500026] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1864.505519] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1864.508077] 0 [ 1864.512526] 54056 total pagecache pages [ 1864.512537] 0 pages in swap cache [ 1864.512543] Swap cache stats: add 0, delete 0, find 0/0 [ 1864.512546] Free swap = 0kB [ 1864.512550] Total swap = 0kB [ 1864.512556] 2097051 pages RAM [ 1864.512559] 0 pages HighMem/MovableOnly [ 1864.512563] 363848 pages reserved [ 1864.512566] 0 pages cma reserved [ 1864.514960] warn_alloc_show_mem: 3 callbacks suppressed [ 1864.514963] Mem-Info: [ 1864.535227] Bluetooth: hci0 command 0x0419 tx timeout [ 1864.542060] active_anon:17088 inactive_anon:53439 isolated_anon:0 [ 1864.542060] active_file:40 inactive_file:0 isolated_file:0 [ 1864.542060] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1864.542060] slab_reclaimable:12231 slab_unreclaimable:112333 [ 1864.542060] mapped:52668 shmem:54028 pagetables:765 bounce:0 [ 1864.542060] free:13807 free_pcp:0 free_cma:0 [ 1864.578916] Bluetooth: hci5 command 0x0419 tx timeout [ 1864.584608] Node 0 active_anon:67008kB inactive_anon:172344kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188844kB dirty:0kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.608447] 0 [ 1864.613890] Node 1 active_anon:1344kB inactive_anon:41412kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1864.636889] Node 0 [ 1864.653033] Node 1 [ 1864.664055] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.678236] Normal free:26496kB min:53696kB low:67120kB high:80544kB active_anon:1344kB inactive_anon:41412kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.690351] lowmem_reserve[]: [ 1864.707896] lowmem_reserve[]: [ 1864.732958] 0 [ 1864.774897] 0 [ 1864.796533] 2717 [ 1864.834310] 0 [ 1864.854006] 2718 2718 2718 [ 1864.864431] Node 0 DMA32 free:17768kB min:36200kB low:45248kB high:54296kB active_anon:67004kB inactive_anon:172344kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.872581] 0 [ 1864.902325] lowmem_reserve[]: 0 0 0 0 0 [ 1864.908135] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.910761] 0 [ 1864.943667] lowmem_reserve[]: 0 0 0 0 0 [ 1864.954173] Node 1 Normal free:26496kB min:53696kB low:67120kB high:80544kB active_anon:1344kB inactive_anon:41412kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.955835] 0 [ 1864.991678] lowmem_reserve[]: 0 0 0 0 0 [ 1864.997477] Node 0 DMA: 5*4kB (UME) 2*8kB (ME) 3*16kB (ME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1865.022752] Node 0 DMA32: 1539*4kB (UME) 373*8kB (UM) 86*16kB (UMH) 45*32kB (UMH) 42*64kB (UMH) 16*128kB (UM) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17972kB [ 1865.034849] Node 0 DMA: 5*4kB (UME) 2*8kB (ME) 3*16kB (ME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1865.046825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1865.074487] Node 1 Normal: 178*4kB (M) 77*8kB (UME) 16*16kB (UME) 13*32kB (UM) 2*64kB (M) 81*128kB (U) 39*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26576kB [ 1865.081902] Node 0 DMA32: 1539*4kB (UME) 373*8kB (UM) 86*16kB (UMH) 45*32kB (UMH) 42*64kB (UMH) 16*128kB (UM) 1*256kB (H) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 17972kB [ 1865.097945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.122925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1865.136076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.136091] Node 0 [ 1865.154185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1865.162378] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1865.167209] 54056 total pagecache pages [ 1865.190411] 0 pages in swap cache [ 1865.193870] Swap cache stats: add 0, delete 0, find 0/0 [ 1865.194283] Node 1 [ 1865.208915] Free swap = 0kB [ 1865.209079] Normal: [ 1865.213356] Total swap = 0kB [ 1865.214211] 178*4kB [ 1865.216496] 2097051 pages RAM [ 1865.234880] (M) 77*8kB (UME) 16*16kB (UME) 13*32kB (UM) 2*64kB (M) 81*128kB (U) 39*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26576kB [ 1865.236189] 0 pages HighMem/MovableOnly [ 1865.257461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.262847] 363848 pages reserved [ 1865.275754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1865.276427] 0 pages cma reserved [ 1865.371615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.415942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1865.439001] 54059 total pagecache pages [ 1865.442995] 0 pages in swap cache [ 1865.446437] Swap cache stats: add 0, delete 0, find 0/0 [ 1865.454160] Free swap = 0kB [ 1865.457177] Total swap = 0kB [ 1865.463990] 2097051 pages RAM [ 1865.467099] 0 pages HighMem/MovableOnly [ 1865.473462] 363848 pages reserved [ 1865.476919] 0 pages cma reserved [ 1865.482948] Out of memory: Kill process 8839 (syz-executor.1) score 1005 or sacrifice child [ 1865.493261] Killed process 8845 (syz-executor.1) total-vm:93384kB, anon-rss:2200kB, file-rss:34820kB, shmem-rss:0kB [ 1865.534031] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1865.539182] oom_reaper: reaped process 8845 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1865.554752] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1865.561125] CPU: 1 PID: 8842 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1865.568917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.578280] Call Trace: [ 1865.580873] dump_stack+0x1b2/0x281 [ 1865.582634] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1865.584501] warn_alloc.cold+0x96/0x1cc [ 1865.584510] , order=0, oom_score_adj=0 [ 1865.594291] ? zone_watermark_ok_safe+0x220/0x220 [ 1865.594316] __alloc_pages_nodemask+0x2127/0x2720 [ 1865.594334] ? lock_acquire+0x170/0x3f0 [ 1865.598289] ion_system_heap cpuset= [ 1865.602278] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1865.602297] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1865.607113] / [ 1865.611962] ? __mutex_unlock_slowpath+0x75/0x770 [ 1865.615974] mems_allowed=0-1 [ 1865.619569] alloc_pages_current+0x155/0x260 [ 1865.619583] ion_page_pool_alloc+0x118/0x1b0 [ 1865.648223] ion_system_heap_allocate+0x133/0x8c0 [ 1865.653062] ? _raw_spin_unlock+0x29/0x40 [ 1865.657237] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1865.662158] ? ion_system_contig_heap_create+0x130/0x130 [ 1865.667597] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1865.672606] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1865.677443] ion_alloc+0x27a/0x810 [ 1865.680982] ? ion_dma_buf_release+0x40/0x40 [ 1865.685385] ? __might_fault+0x177/0x1b0 [ 1865.689452] ion_ioctl+0xea/0x1f0 [ 1865.692911] ? ion_query_heaps+0x360/0x360 [ 1865.697152] ? cp_compat_stat+0x890/0x890 [ 1865.701292] ? ion_query_heaps+0x360/0x360 [ 1865.705519] do_vfs_ioctl+0x75a/0xff0 [ 1865.709331] ? ioctl_preallocate+0x1a0/0x1a0 [ 1865.713730] ? lock_downgrade+0x740/0x740 [ 1865.717870] ? __fget+0x225/0x360 [ 1865.721314] ? do_vfs_ioctl+0xff0/0xff0 [ 1865.725294] ? security_file_ioctl+0x83/0xb0 [ 1865.729716] SyS_ioctl+0x7f/0xb0 [ 1865.733077] ? do_vfs_ioctl+0xff0/0xff0 [ 1865.737044] do_syscall_64+0x1d5/0x640 [ 1865.740933] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1865.746120] RIP: 0033:0x466459 [ 1865.749302] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1865.757021] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1865.764294] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1865.771554] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1865.778813] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1865.786085] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1865.793363] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.229-syzkaller #0 [ 1865.801258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.802098] syz-executor.1: [ 1865.810620] Call Trace: [ 1865.810646] dump_stack+0x1b2/0x281 [ 1865.810661] dump_header+0x178/0x82f [ 1865.823564] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1865.827747] page allocation failure: order:0 [ 1865.828670] ? ___ratelimit+0x2cd/0x530 [ 1865.828676] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1865.833089] oom_kill_process.cold+0x10/0xa40 [ 1865.833101] ? lock_downgrade+0x740/0x740 [ 1865.833115] out_of_memory+0x2dc/0x1190 [ 1865.833128] ? oom_killer_disable+0x1c0/0x1c0 [ 1865.833136] ? mutex_trylock+0x152/0x1a0 [ 1865.833146] __alloc_pages_nodemask+0x23e1/0x2720 [ 1865.833167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1865.833181] ? kasan_kmalloc+0xeb/0x160 [ 1865.850148] syz-executor.1 cpuset= [ 1865.853379] ? ion_heap_deferred_free+0x22a/0x470 [ 1865.857433] / [ 1865.861929] ? cache_grow_begin+0x3f/0x700 [ 1865.881382] mems_allowed=0-1 [ 1865.883089] cache_grow_begin+0x91/0x700 [ 1865.901042] fallback_alloc+0x207/0x2c0 [ 1865.905027] kmem_cache_alloc_node_trace+0xed/0x400 [ 1865.910036] alloc_vmap_area+0xf0/0x7c0 [ 1865.914013] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1865.919480] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1865.923983] ? __get_vm_area_node+0xed/0x340 [ 1865.928379] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1865.933656] __get_vm_area_node+0x126/0x340 [ 1865.937978] vmap+0xd5/0x290 [ 1865.940992] ? ion_heap_clear_pages+0x23/0x70 [ 1865.945481] ? vunmap+0x50/0x50 [ 1865.948746] ? __vunmap+0x21c/0x300 [ 1865.952373] ion_heap_clear_pages+0x23/0x70 [ 1865.956691] ion_heap_sglist_zero+0x165/0x220 [ 1865.961185] ? ion_heap_clear_pages+0x70/0x70 [ 1865.965696] ? pagerange_is_ram_callback+0x100/0x100 [ 1865.970792] ? ion_heap_deferred_free+0x222/0x470 [ 1865.975643] ion_system_heap_free+0x1d0/0x240 [ 1865.980147] ion_buffer_destroy+0x132/0x190 [ 1865.984464] ion_heap_deferred_free+0x22a/0x470 [ 1865.989127] ? __schedule+0x7b7/0x1de0 [ 1865.993008] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1865.997680] ? wait_woken+0x230/0x230 [ 1866.001472] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1866.006659] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1866.011321] kthread+0x30d/0x420 [ 1866.014685] ? kthread_create_on_node+0xd0/0xd0 [ 1866.019352] ret_from_fork+0x24/0x30 [ 1866.023146] CPU: 1 PID: 8845 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1866.030956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1866.040307] Call Trace: [ 1866.040598] Mem-Info: [ 1866.042972] dump_stack+0x1b2/0x281 [ 1866.045393] active_anon:16557 inactive_anon:53439 isolated_anon:0 [ 1866.045393] active_file:15 inactive_file:13 isolated_file:0 [ 1866.045393] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1866.045393] slab_reclaimable:12231 slab_unreclaimable:112298 [ 1866.045393] mapped:52668 shmem:54028 pagetables:765 bounce:0 [ 1866.045393] free:13850 free_pcp:2 free_cma:0 [ 1866.048993] warn_alloc.cold+0x96/0x1cc [ 1866.049006] ? zone_watermark_ok_safe+0x220/0x220 [ 1866.049016] ? usleep_range+0x130/0x130 [ 1866.049044] ? try_to_free_pages+0x23f/0x6e0 [ 1866.082156] Node 0 active_anon:64884kB inactive_anon:172344kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188844kB dirty:0kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1866.086072] ? _find_next_bit+0xdb/0x100 [ 1866.090924] Node 1 active_anon:1344kB inactive_anon:41412kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1866.094855] ? run_timer_softirq+0x5a0/0x5a0 [ 1866.099261] Node 0 [ 1866.127784] __alloc_pages_nodemask+0x2127/0x2720 [ 1866.127803] ? lock_acquire+0x170/0x3f0 [ 1866.127817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1866.131897] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.159110] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1866.159126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1866.159146] alloc_pages_current+0x155/0x260 [ 1866.159163] ion_page_pool_alloc+0x118/0x1b0 [ 1866.163555] lowmem_reserve[]: [ 1866.165780] ion_system_heap_allocate+0x133/0x8c0 [ 1866.170624] 0 [ 1866.174574] ? ion_alloc+0x187/0x810 [ 1866.179411] 2717 [ 1866.204888] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1866.204899] ? ion_system_contig_heap_create+0x130/0x130 [ 1866.204910] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1866.204925] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1866.209414] 2718 [ 1866.214829] ion_alloc+0x204/0x810 [ 1866.219231] 2718 [ 1866.223606] ? ion_dma_buf_release+0x40/0x40 [ 1866.226683] 2718 [ 1866.231524] ? __might_fault+0x177/0x1b0 [ 1866.231536] ion_ioctl+0xea/0x1f0 [ 1866.231546] ? ion_query_heaps+0x360/0x360 [ 1866.231557] ? cp_compat_stat+0x890/0x890 [ 1866.237041] ? ion_query_heaps+0x360/0x360 [ 1866.239101] Node 0 [ 1866.244514] do_vfs_ioctl+0x75a/0xff0 [ 1866.250000] DMA32 free:17612kB min:36200kB low:45248kB high:54296kB active_anon:64880kB inactive_anon:172344kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2904kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1866.254965] ? ioctl_preallocate+0x1a0/0x1a0 [ 1866.259815] lowmem_reserve[]: [ 1866.261831] ? lock_downgrade+0x740/0x740 [ 1866.265341] 0 [ 1866.267391] ? __fget+0x225/0x360 [ 1866.271817] 0 [ 1866.273849] ? do_vfs_ioctl+0xff0/0xff0 [ 1866.277882] 0 [ 1866.281324] ? security_file_ioctl+0x83/0xb0 [ 1866.281335] SyS_ioctl+0x7f/0xb0 [ 1866.281344] ? do_vfs_ioctl+0xff0/0xff0 [ 1866.281357] do_syscall_64+0x1d5/0x640 [ 1866.285571] 0 [ 1866.289722] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1866.289732] RIP: 0033:0x466459 [ 1866.289739] RSP: 002b:00007f95dfc10188 EFLAGS: 00000246 [ 1866.293956] 0 [ 1866.296174] ORIG_RAX: 0000000000000010 [ 1866.296182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1866.327968] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1866.327974] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1866.327978] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1866.327983] R13: 00007fffd879821f R14: 00007f95dfc10300 R15: 0000000000022000 [ 1866.527183] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.535748] syz-executor.1: [ 1866.555544] lowmem_reserve[]: [ 1866.567948] page allocation failure: order:4 [ 1866.568995] 0 [ 1866.573655] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1866.575456] 0 [ 1866.577262] (null) [ 1866.592828] 0 0 0 [ 1866.594998] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:1344kB inactive_anon:41412kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.602370] syz-executor.1 cpuset= [ 1866.627278] lowmem_reserve[]: [ 1866.636076] / [ 1866.638973] 0 0 0 0 0 [ 1866.641865] mems_allowed=0-1 [ 1866.643400] Node 0 DMA: [ 1866.646495] CPU: 1 PID: 8845 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1866.646503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1866.663377] 5*4kB [ 1866.666290] Call Trace: [ 1866.666299] (UME) [ 1866.668443] dump_stack+0x1b2/0x281 [ 1866.671037] 2*8kB [ 1866.673140] warn_alloc.cold+0x96/0x1cc [ 1866.676737] (ME) [ 1866.678875] ? zone_watermark_ok_safe+0x220/0x220 [ 1866.682957] 3*16kB [ 1866.684982] __alloc_pages_nodemask+0x2127/0x2720 [ 1866.689810] (ME) [ 1866.692013] ? _raw_spin_unlock_irq+0x24/0x80 [ 1866.696838] 2*32kB [ 1866.698894] ? lock_acquire+0x170/0x3f0 [ 1866.703419] (UM) [ 1866.705606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1866.709573] 3*64kB [ 1866.711605] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1866.716415] (UME) [ 1866.718640] ? __mutex_unlock_slowpath+0x75/0x770 [ 1866.724147] 3*128kB [ 1866.726252] alloc_pages_current+0x155/0x260 [ 1866.731095] (UME) [ 1866.733389] ion_page_pool_alloc+0x118/0x1b0 [ 1866.737766] 2*256kB [ 1866.739904] ion_system_heap_allocate+0x133/0x8c0 [ 1866.739917] ? _raw_spin_unlock+0x29/0x40 [ 1866.739930] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1866.744323] (ME) [ 1866.746643] ? ion_system_contig_heap_create+0x130/0x130 [ 1866.751509] 5*512kB [ 1866.755622] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1866.760556] (UME) [ 1866.762586] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1866.768011] 3*1024kB [ 1866.770327] ion_alloc+0x27a/0x810 [ 1866.770342] ? ion_dma_buf_release+0x40/0x40 [ 1866.770355] ? __might_fault+0x177/0x1b0 [ 1866.770367] ion_ioctl+0xea/0x1f0 [ 1866.775368] (UME) [ 1866.777502] ? ion_query_heaps+0x360/0x360 [ 1866.782355] 2*2048kB [ 1866.784719] ? cp_compat_stat+0x890/0x890 [ 1866.788247] (UM) [ 1866.792664] ? ion_query_heaps+0x360/0x360 [ 1866.792674] do_vfs_ioctl+0x75a/0xff0 [ 1866.792687] ? ioctl_preallocate+0x1a0/0x1a0 [ 1866.792700] ? lock_downgrade+0x740/0x740 [ 1866.796744] 0*4096kB [ 1866.800187] ? __fget+0x225/0x360 [ 1866.800197] ? do_vfs_ioctl+0xff0/0xff0 [ 1866.800210] ? security_file_ioctl+0x83/0xb0 [ 1866.800220] SyS_ioctl+0x7f/0xb0 [ 1866.802356] = 10964kB [ 1866.806591] ? do_vfs_ioctl+0xff0/0xff0 [ 1866.809043] Node 0 [ 1866.813143] do_syscall_64+0x1d5/0x640 [ 1866.815185] DMA32: [ 1866.819411] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1866.819419] RIP: 0033:0x466459 [ 1866.819424] RSP: 002b:00007f95dfc10188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1866.819433] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1866.819443] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1866.823233] 1534*4kB [ 1866.827623] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1866.831792] (UME) [ 1866.834163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1866.837595] 470*8kB [ 1866.841653] R13: 00007fffd879821f R14: 00007f95dfc10300 R15: 0000000000022000 [ 1866.933723] (UM) 80*16kB (UMH) 35*32kB (UMH) 38*64kB (UMH) 12*128kB (UM) 4*256kB (UH) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 18312kB [ 1866.948493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1866.966211] Node 1 Normal: 178*4kB (M) 72*8kB (UME) 16*16kB (UME) 14*32kB (UM) 2*64kB (M) 67*128kB (U) 39*256kB (U) 8*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 26824kB [ 1866.993689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.014231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.027552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.047847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.066410] 54074 total pagecache pages [ 1867.070451] 0 pages in swap cache [ 1867.073902] Swap cache stats: add 0, delete 0, find 0/0 [ 1867.088337] Free swap = 0kB [ 1867.091436] Total swap = 0kB [ 1867.094473] 2097051 pages RAM [ 1867.097573] 0 pages HighMem/MovableOnly [ 1867.110779] 363848 pages reserved [ 1867.114241] 0 pages cma reserved [ 1867.144497] Mem-Info: [ 1867.146950] active_anon:16553 inactive_anon:53439 isolated_anon:0 [ 1867.146950] active_file:44 inactive_file:4 isolated_file:0 [ 1867.146950] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1867.146950] slab_reclaimable:12231 slab_unreclaimable:111905 [ 1867.146950] mapped:52693 shmem:54028 pagetables:764 bounce:0 [ 1867.146950] free:13902 free_pcp:30 free_cma:0 [ 1867.186957] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1867.188635] Node 0 active_anon:64868kB inactive_anon:172344kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188900kB dirty:0kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1867.213715] syz-executor.1 cpuset= [ 1867.237348] syz-executor.3: [ 1867.241590] / mems_allowed=0-1 [ 1867.247898] CPU: 1 PID: 8845 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1867.255685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1867.257456] page allocation failure: order:0 [ 1867.265048] Call Trace: [ 1867.265071] dump_stack+0x1b2/0x281 [ 1867.265085] warn_alloc.cold+0x96/0x1cc [ 1867.265098] ? zone_watermark_ok_safe+0x220/0x220 [ 1867.269517] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1867.272070] ? usleep_range+0x130/0x130 [ 1867.275665] (null) [ 1867.279624] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1867.279636] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1867.279647] ? run_timer_softirq+0x5a0/0x5a0 [ 1867.279665] __alloc_pages_nodemask+0x2127/0x2720 [ 1867.284496] syz-executor.3 cpuset= [ 1867.291588] ? lock_acquire+0x170/0x3f0 [ 1867.291606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1867.295564] / [ 1867.297712] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1867.302819] mems_allowed=0-1 [ 1867.307798] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1867.343989] alloc_pages_current+0x155/0x260 [ 1867.348401] ion_page_pool_alloc+0x118/0x1b0 [ 1867.352826] ion_system_heap_allocate+0x133/0x8c0 [ 1867.357670] ? _raw_spin_unlock+0x29/0x40 [ 1867.361814] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1867.366737] ? ion_system_contig_heap_create+0x130/0x130 [ 1867.372182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1867.377202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1867.382056] ion_alloc+0x27a/0x810 [ 1867.385594] ? ion_dma_buf_release+0x40/0x40 [ 1867.389998] ? __might_fault+0x177/0x1b0 [ 1867.394064] ion_ioctl+0xea/0x1f0 [ 1867.397522] ? ion_query_heaps+0x360/0x360 [ 1867.401752] ? cp_compat_stat+0x890/0x890 [ 1867.405891] ? ion_query_heaps+0x360/0x360 [ 1867.410208] do_vfs_ioctl+0x75a/0xff0 [ 1867.414016] ? ioctl_preallocate+0x1a0/0x1a0 [ 1867.418414] ? lock_downgrade+0x740/0x740 [ 1867.422555] ? __fget+0x225/0x360 [ 1867.425994] ? do_vfs_ioctl+0xff0/0xff0 [ 1867.429961] ? security_file_ioctl+0x83/0xb0 [ 1867.434380] SyS_ioctl+0x7f/0xb0 [ 1867.437736] ? do_vfs_ioctl+0xff0/0xff0 [ 1867.441706] do_syscall_64+0x1d5/0x640 [ 1867.445604] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1867.450789] RIP: 0033:0x466459 [ 1867.453969] RSP: 002b:00007f95dfc10188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1867.461688] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1867.468967] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1867.476235] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1867.483501] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1867.490766] R13: 00007fffd879821f R14: 00007f95dfc10300 R15: 0000000000022000 [ 1867.498059] CPU: 0 PID: 8842 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1867.505878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1867.505929] warn_alloc_show_mem: 2 callbacks suppressed [ 1867.505932] Mem-Info: [ 1867.515265] Call Trace: [ 1867.515287] dump_stack+0x1b2/0x281 [ 1867.515300] warn_alloc.cold+0x96/0x1cc [ 1867.515312] ? zone_watermark_ok_safe+0x220/0x220 [ 1867.515321] ? usleep_range+0x130/0x130 [ 1867.515330] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1867.515343] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1867.515355] ? run_timer_softirq+0x5a0/0x5a0 [ 1867.527385] active_anon:16553 inactive_anon:53439 isolated_anon:0 [ 1867.527385] active_file:42 inactive_file:3 isolated_file:0 [ 1867.527385] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1867.527385] slab_reclaimable:12231 slab_unreclaimable:111896 [ 1867.527385] mapped:52682 shmem:54028 pagetables:764 bounce:0 [ 1867.527385] free:13979 free_pcp:30 free_cma:0 [ 1867.529337] __alloc_pages_nodemask+0x2127/0x2720 [ 1867.529355] ? lock_acquire+0x170/0x3f0 [ 1867.529375] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1867.533345] Node 0 active_anon:64868kB inactive_anon:172344kB active_file:140kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188900kB dirty:0kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1867.538784] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1867.549645] Node 1 active_anon:1344kB inactive_anon:41412kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1867.552977] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1867.557372] Node 0 [ 1867.590435] alloc_pages_current+0x155/0x260 [ 1867.590450] ion_page_pool_alloc+0x118/0x1b0 [ 1867.590463] ion_system_heap_allocate+0x133/0x8c0 [ 1867.590475] ? _raw_spin_unlock+0x29/0x40 [ 1867.590484] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1867.590492] ? ion_system_contig_heap_create+0x130/0x130 [ 1867.590502] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1867.590512] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1867.590522] ion_alloc+0x27a/0x810 [ 1867.590535] ? ion_dma_buf_release+0x40/0x40 [ 1867.590548] ? __might_fault+0x177/0x1b0 [ 1867.590559] ion_ioctl+0xea/0x1f0 [ 1867.590568] ? ion_query_heaps+0x360/0x360 [ 1867.590579] ? cp_compat_stat+0x890/0x890 [ 1867.590588] ? ion_query_heaps+0x360/0x360 [ 1867.590598] do_vfs_ioctl+0x75a/0xff0 [ 1867.590610] ? ioctl_preallocate+0x1a0/0x1a0 [ 1867.590623] ? lock_downgrade+0x740/0x740 [ 1867.601307] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1867.604254] ? __fget+0x225/0x360 [ 1867.638369] lowmem_reserve[]: [ 1867.663709] ? do_vfs_ioctl+0xff0/0xff0 [ 1867.663722] ? security_file_ioctl+0x83/0xb0 [ 1867.663731] SyS_ioctl+0x7f/0xb0 [ 1867.663740] ? do_vfs_ioctl+0xff0/0xff0 [ 1867.663751] do_syscall_64+0x1d5/0x640 [ 1867.663766] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1867.663774] RIP: 0033:0x466459 [ 1867.663778] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1867.663789] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1867.663794] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1867.663800] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1867.663806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1867.663811] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1867.697538] Node 1 active_anon:1344kB inactive_anon:41412kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1867.858993] 0 2717 2718 2718 2718 [ 1867.952566] Node 0 DMA32 free:20208kB min:36200kB low:45248kB high:54296kB active_anon:64864kB inactive_anon:172344kB active_file:80kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2900kB bounce:0kB free_pcp:196kB local_pcp:0kB free_cma:0kB [ 1868.023415] lowmem_reserve[]: 0 0 0 0 0 [ 1868.027450] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1868.142831] lowmem_reserve[]: 0 0 0 0 0 [ 1868.146878] Node 1 Normal free:343864kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:41412kB active_file:0kB inactive_file:6720kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:252kB local_pcp:80kB free_cma:0kB [ 1868.220281] lowmem_reserve[]: 0 0 0 0 0 [ 1868.224311] Node 0 DMA: 5*4kB (UME) 2*8kB (ME) 3*16kB (ME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1868.269003] Node 0 DMA32: 1596*4kB (UME) 1953*8kB (UM) 113*16kB (UM) 47*32kB (UM) 39*64kB (UM) 12*128kB (UM) 4*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 31400kB [ 1868.309037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1868.343135] Node 1 Normal: 1*4kB (U) 1*8kB (E) 3*16kB (UME) 2*32kB (UM) 0*64kB 2*128kB (UM) 0*256kB 0*512kB 501*1024kB (U) 31*2048kB (U) 0*4096kB = 576892kB [ 1868.369011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1868.377874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1868.410905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1868.440934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1868.460945] 55744 total pagecache pages [ 1868.464940] 0 pages in swap cache [ 1868.468386] Swap cache stats: add 0, delete 0, find 0/0 [ 1868.501007] Free swap = 0kB [ 1868.504054] Total swap = 0kB [ 1868.507082] 2097051 pages RAM [ 1868.520976] 0 pages HighMem/MovableOnly [ 1868.524966] 363848 pages reserved [ 1868.528407] 0 pages cma reserved [ 1868.570938] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1868.999018] Bluetooth: hci4 command 0x0406 tx timeout [ 1869.150855] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1869.155925] Node 0 DMA32 free:46924kB min:36200kB low:45248kB high:54296kB active_anon:64864kB inactive_anon:172344kB active_file:52kB inactive_file:656kB unevictable:0kB writepending:148kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7424kB pagetables:2900kB bounce:0kB free_pcp:284kB local_pcp:172kB free_cma:0kB [ 1869.199010] lowmem_reserve[]: 0 0 0 0 0 [ 1869.199031] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1869.199050] lowmem_reserve[]: 0 0 0 0 0 [ 1869.199067] Node 1 Normal free:1126288kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:41412kB active_file:500kB inactive_file:6100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:612kB local_pcp:220kB free_cma:0kB [ 1869.199085] lowmem_reserve[]: 0 0 0 0 0 [ 1869.199103] Node 0 DMA: 5*4kB (UME) 2*8kB (ME) 3*16kB (ME) 2*32kB (UM) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11028kB [ 1869.429049] Node 0 DMA32: 1309*4kB (UME) 374*8kB (M) 72*16kB (UM) 32*32kB (M) 36*64kB (M) 11*128kB (M) 0*256kB 0*512kB 0*1024kB 15*2048kB (U) 0*4096kB = 44836kB [ 1869.509068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1869.740478] Node 1 Normal: 1*4kB (U) 2*8kB (UE) 3*16kB (UME) 1*32kB (M) 1*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 90*2048kB (U) 36*4096kB (U) = 332068kB [ 1869.779087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1869.789767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1869.798359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1869.829019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1869.837617] 55870 total pagecache pages [ 1869.912800] 0 pages in swap cache [ 1869.916311] Swap cache stats: add 0, delete 0, find 0/0 [ 1869.922679] Free swap = 0kB [ 1869.925697] Total swap = 0kB [ 1869.928705] 2097051 pages RAM [ 1869.937076] 0 pages HighMem/MovableOnly [ 1869.941659] 363848 pages reserved [ 1869.945110] 0 pages cma reserved [ 1869.948466] Out of memory: Kill process 8836 (syz-executor.0) score 1005 or sacrifice child [ 1869.962324] Killed process 8850 (syz-executor.0) total-vm:93516kB, anon-rss:2204kB, file-rss:34820kB, shmem-rss:0kB [ 1870.009047] oom_reaper: reaped process 8850 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1870.128425] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1870.148197] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1870.153465] CPU: 0 PID: 28173 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 1870.160996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1870.170359] Call Trace: [ 1870.172947] dump_stack+0x1b2/0x281 [ 1870.176658] dump_header+0x178/0x82f [ 1870.180376] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1870.185480] ? ___ratelimit+0x2cd/0x530 [ 1870.189471] oom_kill_process.cold+0x10/0xa40 [ 1870.193973] out_of_memory+0xe3e/0x1190 [ 1870.197950] ? oom_killer_disable+0x1c0/0x1c0 [ 1870.202433] ? mutex_trylock+0x152/0x1a0 [ 1870.206484] __alloc_pages_nodemask+0x23e1/0x2720 [ 1870.211326] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1870.216173] alloc_pages_current+0x155/0x260 [ 1870.220572] filemap_fault+0x11a1/0x1ad0 [ 1870.224644] ext4_filemap_fault+0x84/0xb0 [ 1870.228796] __do_fault+0xfa/0x380 [ 1870.232328] __handle_mm_fault+0x2497/0x4620 [ 1870.236746] ? vm_insert_page+0x7c0/0x7c0 [ 1870.240887] ? setup_sigcontext+0x820/0x820 [ 1870.245201] ? mark_held_locks+0xa6/0xf0 [ 1870.249253] handle_mm_fault+0x455/0x9c0 [ 1870.253304] __do_page_fault+0x549/0xad0 [ 1870.257355] ? spurious_fault+0x640/0x640 [ 1870.261490] ? do_page_fault+0x60/0x500 [ 1870.265469] ? page_fault+0x2f/0x50 [ 1870.269084] page_fault+0x45/0x50 [ 1870.272521] RIP: 0008:0x94091a [ 1870.275697] RSP: 0001:000000c00079da58 EFLAGS: 00203000 [ 1870.275750] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1870.293932] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1870.299115] CPU: 1 PID: 8850 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1870.299122] Mem-Info: [ 1870.306900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1870.306907] Call Trace: [ 1870.319312] active_anon:16020 inactive_anon:53439 isolated_anon:0 [ 1870.319312] active_file:0 inactive_file:0 isolated_file:0 [ 1870.319312] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1870.319312] slab_reclaimable:12196 slab_unreclaimable:113711 [ 1870.319312] mapped:52767 shmem:54028 pagetables:712 bounce:0 [ 1870.319312] free:13695 free_pcp:0 free_cma:0 [ 1870.321331] dump_stack+0x1b2/0x281 [ 1870.355724] Node 0 active_anon:62740kB inactive_anon:172344kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189160kB dirty:28kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1870.359291] warn_alloc.cold+0x96/0x1cc [ 1870.359307] ? zone_watermark_ok_safe+0x220/0x220 [ 1870.387013] Node 1 active_anon:1340kB inactive_anon:41412kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21908kB dirty:28kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1870.390936] ? usleep_range+0x130/0x130 [ 1870.390947] ? queue_work_on+0x10d/0x1d0 [ 1870.390959] ? _find_next_bit+0xdb/0x100 [ 1870.395780] Node 0 [ 1870.422837] ? run_timer_softirq+0x5a0/0x5a0 [ 1870.422855] __alloc_pages_nodemask+0x2127/0x2720 [ 1870.422874] ? lock_acquire+0x170/0x3f0 [ 1870.426840] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.430877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1870.430888] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1870.430905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1870.434932] lowmem_reserve[]: [ 1870.437164] alloc_pages_current+0x155/0x260 [ 1870.441571] 0 [ 1870.446374] ion_page_pool_alloc+0x118/0x1b0 [ 1870.450341] 2717 [ 1870.475833] ion_system_heap_allocate+0x133/0x8c0 [ 1870.475844] ? ion_alloc+0x187/0x810 [ 1870.475855] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1870.475866] ? ion_system_contig_heap_create+0x130/0x130 [ 1870.480711] 2718 [ 1870.485174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1870.490630] 2718 [ 1870.493700] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1870.498079] 2718 [ 1870.499865] ion_alloc+0x204/0x810 [ 1870.499880] ? ion_dma_buf_release+0x40/0x40 [ 1870.499893] ? __might_fault+0x177/0x1b0 [ 1870.506324] ion_ioctl+0xea/0x1f0 [ 1870.511166] Node 0 [ 1870.514847] ? ion_query_heaps+0x360/0x360 [ 1870.520306] DMA32 free:17480kB min:36200kB low:45248kB high:54296kB active_anon:62736kB inactive_anon:172344kB active_file:480kB inactive_file:424kB unevictable:0kB writepending:228kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.525708] ? ion_query_heaps+0x360/0x360 [ 1870.527743] lowmem_reserve[]: [ 1870.532757] do_vfs_ioctl+0x75a/0xff0 [ 1870.532770] ? ioctl_preallocate+0x1a0/0x1a0 [ 1870.532783] ? lock_downgrade+0x740/0x740 [ 1870.534823] 0 [ 1870.540606] ? __fget+0x225/0x360 [ 1870.540617] ? do_vfs_ioctl+0xff0/0xff0 [ 1870.540635] ? security_file_ioctl+0x83/0xb0 [ 1870.542666] 0 [ 1870.546195] SyS_ioctl+0x7f/0xb0 [ 1870.550602] 0 [ 1870.554645] ? do_vfs_ioctl+0xff0/0xff0 [ 1870.558070] 0 [ 1870.560295] do_syscall_64+0x1d5/0x640 [ 1870.560311] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1870.560320] RIP: 0033:0x466459 [ 1870.564530] 0 [ 1870.592967] RSP: 002b:00007f6991fb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1870.592977] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1870.592982] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1870.592986] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1870.592992] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1870.592997] R13: 00007ffd1f1be22f R14: 00007f6991fb1300 R15: 0000000000022000 [ 1870.593855] warn_alloc_show_mem: 1 callbacks suppressed [ 1870.593858] Mem-Info: [ 1870.600465] active_anon:16020 inactive_anon:53439 isolated_anon:0 [ 1870.600465] active_file:0 inactive_file:0 isolated_file:0 [ 1870.600465] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1870.600465] slab_reclaimable:12196 slab_unreclaimable:113711 [ 1870.600465] mapped:52767 shmem:54028 pagetables:712 bounce:0 [ 1870.600465] free:13695 free_pcp:0 free_cma:0 [ 1870.600484] Node 0 active_anon:62740kB inactive_anon:172344kB active_file:0kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:189160kB dirty:28kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1870.600501] Node 1 active_anon:1340kB inactive_anon:41412kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21908kB dirty:28kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1870.600504] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.600523] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1870.600544] Node 0 DMA32 free:17480kB min:36200kB low:45248kB high:54296kB active_anon:62736kB inactive_anon:172344kB active_file:480kB inactive_file:424kB unevictable:0kB writepending:228kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2692kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.600567] lowmem_reserve[]: 0 0 0 0 0 [ 1870.600588] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.600606] lowmem_reserve[]: 0 0 0 0 0 [ 1870.600627] Node 1 Normal free:26328kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:41412kB active_file:268kB inactive_file:0kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.600657] lowmem_reserve[]: 0 0 0 0 0 [ 1870.600675] Node 0 DMA: 5*4kB (UME) 3*8kB (UME) 3*16kB (ME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 1870.600755] Node 0 DMA32: 1528*4kB (ME) 367*8kB (ME) 75*16kB (M) 33*32kB (M) 38*64kB (UM) 11*128kB (M) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 17960kB [ 1870.600823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1870.600871] Node 1 Normal: 182*4kB (M) 73*8kB (ME) 19*16kB (ME) 15*32kB (UM) 7*64kB (UM) 3*128kB (M) 1*256kB (M) 2*512kB (M) 4*1024kB (UM) 1*2048kB (U) 4*4096kB (U) = 26736kB [ 1870.600963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1870.600969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1870.600975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1870.600979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1870.600982] 54059 total pagecache pages [ 1870.600992] 0 pages in swap cache [ 1870.600997] Swap cache stats: add 0, delete 0, find 0/0 [ 1870.601001] Free swap = 0kB [ 1870.601004] Total swap = 0kB [ 1870.601010] 2097051 pages RAM [ 1870.601014] 0 pages HighMem/MovableOnly [ 1870.601018] 363848 pages reserved [ 1870.601021] 0 pages cma reserved [ 1871.049021] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1871.108993] lowmem_reserve[]: 0 0 0 0 0 [ 1871.113028] Node 1 Normal free:136696kB min:53696kB low:67120kB high:80544kB active_anon:1340kB inactive_anon:41412kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:1276kB local_pcp:656kB free_cma:0kB [ 1871.142047] lowmem_reserve[]: 0 0 0 0 0 [ 1871.146069] Node 0 DMA: 19*4kB (UME) 3*8kB (UME) 3*16kB (ME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11028kB [ 1871.163091] Node 0 DMA32: 4495*4kB (UME) 537*8kB (UME) 293*16kB (UM) 108*32kB (UM) 38*64kB (UM) 53*128kB (UM) 13*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45012kB [ 1871.178720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1871.189597] Node 1 Normal: 3391*4kB (UM) 515*8kB (UME) 462*16kB (UME) 455*32kB (UM) 7*64kB (UM) 4*128kB (UM) 1*256kB (M) 5*512kB (UM) 28*1024kB (U) 1*2048kB (U) 0*4096kB = 74132kB [ 1871.205918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.214962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1871.223599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.232529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1871.241292] 54054 total pagecache pages [ 1871.245266] 0 pages in swap cache [ 1871.248712] Swap cache stats: add 0, delete 0, find 0/0 [ 1871.268972] Free swap = 0kB [ 1871.271995] Total swap = 0kB [ 1871.275012] 2097051 pages RAM [ 1871.278120] 0 pages HighMem/MovableOnly [ 1871.298974] 363848 pages reserved [ 1871.302434] 0 pages cma reserved [ 1871.305791] Out of memory (oom_kill_allocating_task): Kill process 28173 (syz-fuzzer) score 0 or sacrifice child [ 1871.319189] Killed process 8343 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB 04:34:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x7ff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) [ 1872.358362] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1872.379106] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1872.385036] CPU: 1 PID: 8887 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1872.392832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1872.402188] Call Trace: [ 1872.404780] dump_stack+0x1b2/0x281 [ 1872.408427] warn_alloc.cold+0x96/0x1cc [ 1872.412413] ? zone_watermark_ok_safe+0x220/0x220 [ 1872.417275] __alloc_pages_nodemask+0x2127/0x2720 [ 1872.423434] ? ___preempt_schedule+0x16/0x18 [ 1872.427846] ? lock_acquire+0x170/0x3f0 [ 1872.431823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1872.436673] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1872.442122] ? __mutex_unlock_slowpath+0x75/0x770 [ 1872.446973] alloc_pages_current+0x155/0x260 [ 1872.451386] ion_page_pool_alloc+0x118/0x1b0 [ 1872.455800] ion_system_heap_allocate+0x133/0x8c0 [ 1872.460642] ? ion_alloc+0x187/0x810 [ 1872.464377] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1872.469827] ? ion_system_contig_heap_create+0x130/0x130 [ 1872.475277] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1872.480300] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1872.485163] ion_alloc+0x204/0x810 [ 1872.488712] ? ion_dma_buf_release+0x40/0x40 [ 1872.493130] ? __might_fault+0x177/0x1b0 [ 1872.497212] ion_ioctl+0xea/0x1f0 [ 1872.500668] ? ion_query_heaps+0x360/0x360 [ 1872.504920] ? cp_compat_stat+0x890/0x890 [ 1872.509067] ? ion_query_heaps+0x360/0x360 [ 1872.513300] do_vfs_ioctl+0x75a/0xff0 [ 1872.517102] ? ioctl_preallocate+0x1a0/0x1a0 [ 1872.521510] ? lock_downgrade+0x740/0x740 [ 1872.525662] ? __fget+0x225/0x360 [ 1872.529111] ? do_vfs_ioctl+0xff0/0xff0 [ 1872.533085] ? security_file_ioctl+0x83/0xb0 [ 1872.537491] SyS_ioctl+0x7f/0xb0 [ 1872.540855] ? do_vfs_ioctl+0xff0/0xff0 [ 1872.544827] do_syscall_64+0x1d5/0x640 [ 1872.548715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1872.553900] RIP: 0033:0x466459 [ 1872.557083] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1872.564784] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1872.572046] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1872.579308] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1872.586571] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1872.593834] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1872.604519] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1872.623603] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1872.623622] Mem-Info: [ 1872.623642] active_anon:16005 inactive_anon:53439 isolated_anon:0 [ 1872.623642] active_file:15 inactive_file:1661 isolated_file:0 [ 1872.623642] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1872.623642] slab_reclaimable:12190 slab_unreclaimable:113516 [ 1872.623642] mapped:45271 shmem:54028 pagetables:693 bounce:0 [ 1872.623642] free:208236 free_pcp:155 free_cma:0 [ 1872.628783] CPU: 0 PID: 8850 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1872.631243] Node 0 active_anon:62684kB inactive_anon:172344kB active_file:44kB inactive_file:6636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159256kB dirty:56kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1872.665860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1872.665866] Call Trace: [ 1872.665888] dump_stack+0x1b2/0x281 [ 1872.665901] warn_alloc.cold+0x96/0x1cc [ 1872.665912] ? zone_watermark_ok_safe+0x220/0x220 [ 1872.665933] __alloc_pages_nodemask+0x2127/0x2720 [ 1872.665943] ? ___preempt_schedule+0x16/0x18 [ 1872.665961] ? lock_acquire+0x170/0x3f0 [ 1872.673870] Node 1 active_anon:1336kB inactive_anon:41412kB active_file:16kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:4kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1872.701706] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1872.701723] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1872.701735] ? __mutex_unlock_slowpath+0x75/0x770 [ 1872.701749] alloc_pages_current+0x155/0x260 [ 1872.701762] ion_page_pool_alloc+0x118/0x1b0 [ 1872.701772] ion_system_heap_allocate+0x133/0x8c0 [ 1872.701784] ? _raw_spin_unlock+0x29/0x40 [ 1872.701792] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1872.701801] ? ion_system_contig_heap_create+0x130/0x130 [ 1872.701811] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1872.701822] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1872.701834] ion_alloc+0x27a/0x810 [ 1872.711349] Node 0 [ 1872.713770] ? ion_dma_buf_release+0x40/0x40 [ 1872.717384] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1872.721338] ? __might_fault+0x177/0x1b0 [ 1872.721351] ion_ioctl+0xea/0x1f0 [ 1872.721361] ? ion_query_heaps+0x360/0x360 [ 1872.721373] ? ion_query_heaps+0x360/0x360 [ 1872.721383] do_vfs_ioctl+0x75a/0xff0 [ 1872.721394] ? ioctl_preallocate+0x1a0/0x1a0 [ 1872.721404] ? lock_downgrade+0x740/0x740 [ 1872.721418] ? __fget+0x225/0x360 [ 1872.726235] lowmem_reserve[]: [ 1872.731066] ? do_vfs_ioctl+0xff0/0xff0 [ 1872.731079] ? security_file_ioctl+0x83/0xb0 [ 1872.731089] SyS_ioctl+0x7f/0xb0 [ 1872.731096] ? do_vfs_ioctl+0xff0/0xff0 [ 1872.731107] do_syscall_64+0x1d5/0x640 [ 1872.731121] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1872.731130] RIP: 0033:0x466459 [ 1872.731139] RSP: 002b:00007f6991fb1188 EFLAGS: 00000246 [ 1872.736126] 0 [ 1872.739481] ORIG_RAX: 0000000000000010 [ 1872.739487] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1872.739493] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1872.739498] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1872.739504] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1872.739509] R13: 00007ffd1f1be22f R14: 00007f6991fb1300 R15: 0000000000022000 [ 1872.985078] 2717 2718 2718 2718 [ 1872.994885] Node 0 DMA32 free:563076kB min:36200kB low:45248kB high:54296kB active_anon:62680kB inactive_anon:172344kB active_file:44kB inactive_file:6636kB unevictable:0kB writepending:56kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:2616kB bounce:0kB free_pcp:672kB local_pcp:672kB free_cma:0kB [ 1873.027524] lowmem_reserve[]: 0 0 0 0 0 [ 1873.032662] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1873.058348] lowmem_reserve[]: 0 0 0 0 0 [ 1873.063798] Node 1 Normal free:290600kB min:53696kB low:67120kB high:80544kB active_anon:1336kB inactive_anon:41412kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1873.111644] lowmem_reserve[]: 0 0 0 0 0 [ 1873.115726] Node 0 DMA: 37*4kB (UME) 27*8kB (UME) 23*16kB (UME) 20*32kB (UM) 13*64kB (UME) 4*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12956kB [ 1873.139131] Node 0 DMA32: 18485*4kB (UME) 17248*8kB (UME) 17080*16kB (UM) 3081*32kB (U) 54*64kB (U) 11*128kB (U) 10*256kB (U) 8*512kB (U) 10*1024kB (U) 3*2048kB (U) 0*4096kB = 611700kB [ 1873.172137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1873.193386] Node 1 Normal: 10240*4kB (UM) 4728*8kB (UME) 4670*16kB (UME) 5184*32kB (UM) 644*64kB (U) 13*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 362272kB [ 1873.217374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1873.226650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1873.236617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1873.246045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1873.255336] 55789 total pagecache pages [ 1873.259797] 0 pages in swap cache [ 1873.263677] Swap cache stats: add 0, delete 0, find 0/0 [ 1873.269612] Free swap = 0kB [ 1873.273088] Total swap = 0kB [ 1873.278270] 2097051 pages RAM [ 1873.281645] 0 pages HighMem/MovableOnly [ 1873.285777] 363848 pages reserved [ 1873.293408] 0 pages cma reserved [ 1874.269867] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1874.283396] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1874.288530] CPU: 1 PID: 8850 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1874.296348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1874.305707] Call Trace: [ 1874.308316] dump_stack+0x1b2/0x281 [ 1874.311951] dump_header+0x178/0x82f [ 1874.315666] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1874.320784] ? ___ratelimit+0x2cd/0x530 [ 1874.324772] oom_kill_process.cold+0x10/0xa40 [ 1874.329298] out_of_memory+0xe3e/0x1190 [ 1874.333291] ? oom_killer_disable+0x1c0/0x1c0 [ 1874.337780] ? mutex_trylock+0x152/0x1a0 [ 1874.341840] __alloc_pages_nodemask+0x23e1/0x2720 [ 1874.346682] ? lock_acquire+0x170/0x3f0 [ 1874.350653] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1874.355489] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1874.360020] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1874.365477] ? policy_node+0x98/0x110 [ 1874.369296] alloc_pages_current+0x155/0x260 [ 1874.373698] ion_page_pool_alloc+0x118/0x1b0 [ 1874.378095] ion_system_heap_allocate+0x133/0x8c0 [ 1874.382941] ? _raw_spin_unlock+0x29/0x40 [ 1874.387080] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1874.392259] ? ion_system_contig_heap_create+0x130/0x130 [ 1874.397701] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1874.402722] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1874.407580] ion_alloc+0x27a/0x810 [ 1874.411116] ? ion_dma_buf_release+0x40/0x40 [ 1874.415522] ? __might_fault+0x177/0x1b0 [ 1874.419577] ion_ioctl+0xea/0x1f0 [ 1874.423036] ? ion_query_heaps+0x360/0x360 [ 1874.427262] ? ion_query_heaps+0x360/0x360 [ 1874.431505] do_vfs_ioctl+0x75a/0xff0 [ 1874.435307] ? ioctl_preallocate+0x1a0/0x1a0 [ 1874.439705] ? lock_downgrade+0x740/0x740 [ 1874.443860] ? __fget+0x225/0x360 [ 1874.447302] ? do_vfs_ioctl+0xff0/0xff0 [ 1874.451273] ? security_file_ioctl+0x83/0xb0 [ 1874.455709] SyS_ioctl+0x7f/0xb0 [ 1874.459070] ? do_vfs_ioctl+0xff0/0xff0 [ 1874.463048] do_syscall_64+0x1d5/0x640 [ 1874.466937] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1874.472115] RIP: 0033:0x466459 [ 1874.475294] RSP: 002b:00007f6991fb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1874.483000] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1874.490258] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1874.497531] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1874.504790] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1874.512049] R13: 00007ffd1f1be22f R14: 00007f6991fb1300 R15: 0000000000022000 [ 1874.525914] Mem-Info: [ 1874.528348] active_anon:15985 inactive_anon:53439 isolated_anon:0 [ 1874.528348] active_file:38 inactive_file:31 isolated_file:0 [ 1874.528348] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1874.528348] slab_reclaimable:12157 slab_unreclaimable:114613 [ 1874.528348] mapped:44101 shmem:54028 pagetables:667 bounce:0 [ 1874.528348] free:13741 free_pcp:74 free_cma:0 [ 1874.564288] Node 0 active_anon:62604kB inactive_anon:172344kB active_file:128kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154520kB dirty:64kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1874.594541] Node 1 active_anon:1336kB inactive_anon:41412kB active_file:24kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21884kB dirty:8kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1874.624115] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.653131] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1874.658190] Node 0 DMA32 free:17608kB min:36200kB low:45248kB high:54296kB active_anon:62600kB inactive_anon:172344kB active_file:76kB inactive_file:32kB unevictable:0kB writepending:164kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2512kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1874.690079] lowmem_reserve[]: 0 0 0 0 0 [ 1874.694233] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1874.722154] lowmem_reserve[]: 0 0 0 0 0 [ 1874.726169] Node 1 Normal free:26380kB min:53696kB low:67120kB high:80544kB active_anon:1336kB inactive_anon:41412kB active_file:24kB inactive_file:72kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:176kB local_pcp:176kB free_cma:0kB [ 1874.755195] lowmem_reserve[]: 0 0 0 0 0 [ 1874.759357] Node 0 DMA: 4*4kB (ME) 2*8kB (ME) 4*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 1874.775059] Node 0 DMA32: 1434*4kB (ME) 162*8kB (UME) 4*16kB (M) 2*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (U) 2*2048kB (U) 0*4096kB = 17848kB [ 1874.791119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1874.802017] Node 1 Normal: 19*4kB (M) 44*8kB (ME) 12*16kB (ME) 11*32kB (M) 239*64kB (U) 45*128kB (U) 15*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26380kB [ 1874.816846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.825752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1874.834383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.843273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1874.851915] 54105 total pagecache pages [ 1874.855898] 0 pages in swap cache [ 1874.859387] Swap cache stats: add 0, delete 0, find 0/0 [ 1874.864755] Free swap = 0kB [ 1874.867763] Total swap = 0kB [ 1874.870830] 2097051 pages RAM [ 1874.873936] 0 pages HighMem/MovableOnly [ 1874.877906] 363848 pages reserved [ 1874.881383] 0 pages cma reserved [ 1874.884749] Out of memory (oom_kill_allocating_task): Kill process 8850 (syz-executor.0) score 0 or sacrifice child [ 1874.895387] Killed process 8850 (syz-executor.0) total-vm:93516kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1874.905515] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1874.911060] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1874.917366] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1874.935744] CPU: 1 PID: 8850 Comm: syz-executor.0 Not tainted 4.14.229-syzkaller #0 [ 1874.943529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1874.952402] syz-fuzzer cpuset= [ 1874.952873] Call Trace: [ 1874.952881] / [ 1874.956066] dump_stack+0x1b2/0x281 [ 1874.958629] mems_allowed=0-1 [ 1874.960335] warn_alloc.cold+0x96/0x1cc [ 1874.960348] ? zone_watermark_ok_safe+0x220/0x220 [ 1874.960367] ? wait_for_completion_io+0x10/0x10 [ 1874.960382] __alloc_pages_nodemask+0x2127/0x2720 [ 1874.960401] ? lock_acquire+0x170/0x3f0 [ 1874.960417] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1874.960426] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1874.960443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1875.004126] ? policy_node+0x98/0x110 [ 1875.007971] alloc_pages_current+0x155/0x260 [ 1875.012383] ion_page_pool_alloc+0x118/0x1b0 [ 1875.016791] ion_system_heap_allocate+0x133/0x8c0 [ 1875.021639] ? _raw_spin_unlock+0x29/0x40 [ 1875.025779] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1875.030703] ? ion_system_contig_heap_create+0x130/0x130 [ 1875.036154] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1875.041170] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1875.046008] ion_alloc+0x27a/0x810 [ 1875.049549] ? ion_dma_buf_release+0x40/0x40 [ 1875.053958] ? __might_fault+0x177/0x1b0 [ 1875.058018] ion_ioctl+0xea/0x1f0 [ 1875.061465] ? ion_query_heaps+0x360/0x360 [ 1875.065704] ? ion_query_heaps+0x360/0x360 [ 1875.071235] do_vfs_ioctl+0x75a/0xff0 [ 1875.075053] ? ioctl_preallocate+0x1a0/0x1a0 [ 1875.079457] ? lock_downgrade+0x740/0x740 [ 1875.083605] ? __fget+0x225/0x360 [ 1875.087048] ? do_vfs_ioctl+0xff0/0xff0 [ 1875.091020] ? security_file_ioctl+0x83/0xb0 [ 1875.095446] SyS_ioctl+0x7f/0xb0 [ 1875.098802] ? do_vfs_ioctl+0xff0/0xff0 [ 1875.102773] do_syscall_64+0x1d5/0x640 [ 1875.106897] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1875.112079] RIP: 0033:0x466459 [ 1875.115282] RSP: 002b:00007f6991fb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1875.122984] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1875.130247] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1875.137527] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1875.144787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1875.152049] R13: 00007ffd1f1be22f R14: 00007f6991fb1300 R15: 0000000000022000 [ 1875.161318] warn_alloc_show_mem: 1 callbacks suppressed [ 1875.161322] Mem-Info: [ 1875.163127] CPU: 0 PID: 28173 Comm: syz-fuzzer Not tainted 4.14.229-syzkaller #0 [ 1875.166700] active_anon:15985 inactive_anon:53439 isolated_anon:0 [ 1875.166700] active_file:12 inactive_file:11 isolated_file:0 [ 1875.166700] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1875.166700] slab_reclaimable:12142 slab_unreclaimable:114536 [ 1875.166700] mapped:44068 shmem:54028 pagetables:667 bounce:0 [ 1875.166700] free:13831 free_pcp:120 free_cma:0 [ 1875.169084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1875.169088] Call Trace: [ 1875.169106] dump_stack+0x1b2/0x281 [ 1875.169118] dump_header+0x178/0x82f [ 1875.169131] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1875.176685] Node 0 active_anon:62604kB inactive_anon:172344kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154444kB dirty:0kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.209895] ? ___ratelimit+0x2cd/0x530 [ 1875.209907] oom_kill_process.cold+0x10/0xa40 [ 1875.209925] out_of_memory+0xe3e/0x1190 [ 1875.209937] ? oom_killer_disable+0x1c0/0x1c0 [ 1875.209949] ? mutex_trylock+0x152/0x1a0 [ 1875.219340] Node 1 active_anon:1336kB inactive_anon:41412kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.221873] __alloc_pages_nodemask+0x23e1/0x2720 [ 1875.225470] Node 0 [ 1875.229196] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1875.229221] alloc_pages_current+0x155/0x260 [ 1875.234321] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.262066] filemap_fault+0x11a1/0x1ad0 [ 1875.262085] ext4_filemap_fault+0x84/0xb0 [ 1875.262095] __do_fault+0xfa/0x380 [ 1875.262106] __handle_mm_fault+0x2497/0x4620 [ 1875.266068] lowmem_reserve[]: [ 1875.270548] ? vm_insert_page+0x7c0/0x7c0 [ 1875.270566] ? mark_held_locks+0xa6/0xf0 [ 1875.270577] handle_mm_fault+0x455/0x9c0 [ 1875.274531] 0 [ 1875.279011] __do_page_fault+0x549/0xad0 [ 1875.279023] ? spurious_fault+0x640/0x640 [ 1875.279033] ? do_page_fault+0x60/0x500 [ 1875.283079] 2717 [ 1875.310225] ? page_fault+0x2f/0x50 [ 1875.310232] page_fault+0x45/0x50 [ 1875.310241] RIP: 0002:0xffffffffffffffff [ 1875.310245] RSP: 036f:000000c00184be40 EFLAGS: 00000020 [ 1875.323916] Mem-Info: [ 1875.331334] 2718 [ 1875.358545] active_anon:15985 inactive_anon:53439 isolated_anon:0 [ 1875.358545] active_file:12 inactive_file:11 isolated_file:0 [ 1875.358545] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1875.358545] slab_reclaimable:12142 slab_unreclaimable:114536 [ 1875.358545] mapped:44068 shmem:54028 pagetables:667 bounce:0 [ 1875.358545] free:13831 free_pcp:120 free_cma:0 [ 1875.364293] 2718 [ 1875.368448] Node 0 active_anon:62604kB inactive_anon:172344kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154444kB dirty:0kB writeback:0kB shmem:174428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 8192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.371615] 2718 [ 1875.381974] Node 1 active_anon:1336kB inactive_anon:41412kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:21828kB dirty:0kB writeback:0kB shmem:41684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1875.389805] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.389828] lowmem_reserve[]: [ 1875.393963] Node 0 [ 1875.397914] 0 [ 1875.403794] DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:62600kB inactive_anon:172344kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2512kB bounce:0kB free_pcp:312kB local_pcp:144kB free_cma:0kB [ 1875.412564] 2717 [ 1875.416554] lowmem_reserve[]: [ 1875.419814] 2718 [ 1875.424790] 0 [ 1875.460534] 2718 [ 1875.488585] 0 [ 1875.519705] 2718 [ 1875.543887] 0 [ 1875.581315] 0 [ 1875.587790] Node 0 [ 1875.588497] 0 [ 1875.590605] DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:62600kB inactive_anon:172344kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7296kB pagetables:2512kB bounce:0kB free_pcp:312kB local_pcp:168kB free_cma:0kB [ 1875.590609] lowmem_reserve[]: 0 0 0 0 0 [ 1875.590632] Node 0 [ 1875.596532] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.598309] Node 0 [ 1875.632942] lowmem_reserve[]: [ 1875.637338] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1875.664824] 0 [ 1875.693516] lowmem_reserve[]: 0 0 0 0 0 [ 1875.695393] 0 0 [ 1875.699376] Node 1 [ 1875.699404] 0 [ 1875.701360] Normal free:26380kB min:53696kB low:67120kB high:80544kB active_anon:1336kB inactive_anon:41412kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:176kB local_pcp:176kB free_cma:0kB [ 1875.703595] 0 [ 1875.705378] lowmem_reserve[]: 0 0 0 0 0 [ 1875.743753] Node 0 [ 1875.743760] Node 1 Normal free:26380kB min:53696kB low:67120kB high:80544kB active_anon:1336kB inactive_anon:41412kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 1875.745991] DMA: 4*4kB (ME) 2*8kB (ME) 4*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 1875.781136] lowmem_reserve[]: 0 0 0 0 0 [ 1875.798371] Node 0 DMA32: 1434*4kB (ME) 173*8kB (UME) 6*16kB (UM) 2*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (U) 2*2048kB (U) 0*4096kB = 17968kB [ 1875.805354] Node 0 DMA: 4*4kB (ME) 2*8kB (ME) 4*16kB (UME) 2*32kB (UM) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 1875.824064] Node 0 [ 1875.837915] Node 0 [ 1875.838777] Normal: [ 1875.844477] DMA32: 1434*4kB (ME) 173*8kB (UME) 6*16kB (UM) 2*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 3*512kB (UM) 4*1024kB (U) 2*2048kB (U) 0*4096kB = 17968kB [ 1875.847970] 0*4kB [ 1875.866225] Node 0 [ 1875.868319] 0*8kB [ 1875.868413] Normal: [ 1875.870665] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1875.872835] 0*4kB [ 1875.875142] Node 1 [ 1875.887695] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1875.891836] Normal: 19*4kB (M) 44*8kB (ME) 12*16kB (ME) 11*32kB (M) 239*64kB (U) 45*128kB (U) 15*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26380kB [ 1875.903266] Node 1 Normal: 19*4kB (M) 44*8kB (ME) 12*16kB (ME) 11*32kB (M) 239*64kB (U) 45*128kB (U) 15*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26380kB [ 1875.920081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.938663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.945201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.956377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.958898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.967927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1875.985781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.992010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1875.998402] 54051 total pagecache pages [ 1876.005050] 54051 total pagecache pages [ 1876.006962] 0 pages in swap cache [ 1876.015041] 0 pages in swap cache [ 1876.018332] Swap cache stats: add 0, delete 0, find 0/0 [ 1876.018509] Swap cache stats: add 0, delete 0, find 0/0 [ 1876.023882] Free swap = 0kB [ 1876.023886] Total swap = 0kB [ 1876.023893] 2097051 pages RAM [ 1876.023899] 0 pages HighMem/MovableOnly [ 1876.031335] Free swap = 0kB [ 1876.040274] 363848 pages reserved [ 1876.042586] Total swap = 0kB [ 1876.045414] 0 pages cma reserved [ 1876.048869] 2097051 pages RAM [ 1876.058970] 0 pages HighMem/MovableOnly [ 1876.062964] 363848 pages reserved [ 1876.066421] 0 pages cma reserved [ 1876.088993] Out of memory (oom_kill_allocating_task): Kill process 28173 (syz-fuzzer) score 0 or sacrifice child [ 1876.109050] Killed process 8344 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1876.137147] oom_reaper: reaped process 8344 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 04:34:53 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x103003, 0x0) 04:34:53 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r0, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x400401, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8000, 0x12) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r3 = syz_mount_image$ocfs2(&(0x7f00000000c0)='ocfs2\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x6, &(0x7f0000000540)=[{&(0x7f0000000140)="14e8d9b109a9b0e90b6851a9fb86b92b102fa436884cb5b477fe3e3e420bcefa4da4481d05c966dd6270ba4f78b35357fa38df08ab524b48cfc9abc418395f214f6a3f70f8b724331e3cc15e43ea2c85d1040c38e8fe592c7b3e36dd403f0610acfce606e2a0a5b9f10c430bb5e3278eb3961c4e0e630cffaef40dbbad45a95bd4c3dd97035c2157ad4056a54a1a8cf28f03092600503458f85a6ab19e1c9a2c61332d53ede1eb8161931630299bfbae8d8e5ed1e5232b66ece65b88", 0xbc, 0x800}, {&(0x7f0000000200)="5c70a0d16261a1d6d21ba3a12d1f752538374c3e8242e6e71a9f34c8cd34d7b749e8e95c6ef51c422b4fefcd109f02e1ee759e836c3a37fa336cee6ce6ed848eb83d", 0x42, 0x3c20}, {&(0x7f0000000280)="142609609842e23b23b3b141a6234cb0a4a18e4bd9e068d1307d", 0x1a, 0x4}, {&(0x7f00000002c0)="753fe14063647a9eeac4d0c8d8be09a87f6a0c400a257edf9909b36be540f14a60c5d707b83e420ab202070b6b9f2923344e98922cccaa31977a1cc6384fb7fb3c23c29d930d6d1d9081bfe791309e0d36f821c5ea0730dc158e64076a32a5d6a020332c06e8fd28851dcd202d064da28e5ad00d4131", 0x76, 0x3}, {&(0x7f00000003c0)="ca4efde322c1d5199acbd67d5a609d6cb73f70927a694ad8765f40169c9a4ff358b35e9ca6c323bc03954956f22364938d79d459f77707ab269e05b4a29dada010b75edd8d1a2bd7f86271caf944ea3f8542baeec1b0ac49c443af3f95b73aee71ad6d0a1cb614dd3a67bc5d5269202a05204f2aa86f3f037c25423b6de9f7bc2aa93881b9ed16ed5af5d359da13c787bce81d52c4becca039ffdd83adce2dae5a2dd030e7c96e1c305489e4", 0xac, 0x7}, {&(0x7f0000000480)="540975c0132090ec0638bc321c9b445fab80034d092b0be874a3481714dc98d401058aa00004c8bc9544d417e1ca0fa7b889446994b3b3f5f54eee8557d57116ce5845664a42a95b6b6f4a53f23212858b8db3fc898068315475f1298ba8b154e083c77ac625ddd68b6182ef5102d38e7ef58669f8cd841bed5c46f524b7354a61f8c81bd0fc5a3a94707f15f39697a0d5a92bcfff05904fa3d13cc90fd43e0a4bbf78", 0xa3, 0x3}], 0x0, &(0x7f0000000600)={[{'/dev/nvme-fabrics\x00'}, {'^(#'}, {'!'}, {'/dev/nvme-fabrics\x00'}, {'\xe5'}, {'n]\'{(&-/]'}, {'^)\\'}, {'/dev/ion\x00'}, {'('}, {'/dev/ion\x00'}], [{@obj_user={'obj_user', 0x3d, '+.^\x93,!!'}}, {@dont_measure='dont_measure'}, {@subj_user={'subj_user', 0x3d, '\xcc\xed-/\\.{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ion\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@audit='audit'}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ion\x00'}}, {@fsname={'fsname', 0x3d, '\xdb$%'}}]}) statx(r3, &(0x7f0000000740)='./file0\x00', 0x3000, 0x4, &(0x7f0000000780)) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) 04:34:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x7ff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x42005) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r1, &(0x7f0000000000)="95", 0x1) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc051) 04:34:53 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xef, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x1, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 04:34:53 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x4c, 0x2f25, 0xc, 0x4, 0xff, 0x81}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x80000002, 0x2}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x460, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x44c, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x41, @empty, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1f4996ee63ebf52495360ae0931bd0575629f64d9ecfee54e26e4a814785aede"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0d430ae8b48cfb78fdaa97a2b3ae7abf3f847561233d1ac39c1d93044f5e90d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x3d}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x9}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8b40}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x3e}, 0xfffffffb}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x9}}]}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 04:34:53 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x2a8440) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x2}) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000080)=0x2) 04:34:53 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x401, 0x361402) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/nvme-fabrics\x00', 0x0, 0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x0, 0x4, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000040)) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x8, 0x4) 04:34:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x100, 0x9, 0xd3c3822e2a42e4f1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x1, 0x1, 0x4, 0xe000, 0x8001, {r4, r5/1000+10000}, {0x4, 0x2, 0x7f, 0x7, 0x0, 0x46, "b6a358fe"}, 0x2, 0x1, @offset=0x28d, 0xfc50, 0x0, r0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x8, 0x1, 0x4, 0x400, 0x7, {r2, r3/1000+60000}, {0x2, 0x2, 0x3, 0x7, 0x1, 0x5, "ee7a2880"}, 0x34, 0x4, @userptr=0x8001, 0x1, 0x0, r6}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xffffffffffffffff, 0x10bea7818cacfb5f}) 04:34:54 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x20800) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f00000000c0)=0x3) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:54 executing program 4: waitid(0x2, 0x0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) 04:34:54 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xfffffffc, 0x10bea7818cacfb5f}) [ 1877.091868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1877.111130] batman_adv: batadv0: Removing interface: batadv_slave_0 04:34:54 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x2402) write$snddsp(r0, &(0x7f0000000000)="95", 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000080)={0x0, [[0x8, 0xa06f, 0x3e1, 0x800, 0x13f, 0x3fc, 0x1, 0x2], [0x800, 0x100, 0x10001, 0x0, 0x6, 0x10001, 0x0, 0x976], [0x99, 0x2, 0x8001, 0x10000, 0x3fe, 0x7d, 0x0, 0x1]], [], [{0x3, 0x9, 0x1, 0x0, 0x1}, {0x9f, 0x4, 0x1, 0x1, 0x1}, {0x8000, 0x3ff, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x0, 0x1, 0x1}, {0x9, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x80000000, 0x9, 0x1}, {0x100, 0x3, 0x1, 0x1, 0x1}, {0xfff, 0x80000000, 0x0, 0x0, 0x1, 0x1}, {0xfff, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7, 0xfd, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x1, 0x1}, {0x9, 0x23, 0x1, 0x0, 0x0, 0x1}], [], 0xf51}) [ 1877.149740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1877.156680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1877.183774] device bridge_slave_1 left promiscuous mode [ 1877.195530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.215648] device bridge_slave_0 left promiscuous mode [ 1877.221478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.236287] device veth1_macvtap left promiscuous mode [ 1877.241994] device veth0_macvtap left promiscuous mode [ 1877.247428] device veth1_vlan left promiscuous mode [ 1877.258497] device veth0_vlan left promiscuous mode [ 1877.553261] device hsr_slave_1 left promiscuous mode [ 1877.594593] device hsr_slave_0 left promiscuous mode [ 1877.646027] team0 (unregistering): Port device team_slave_1 removed [ 1877.675006] team0 (unregistering): Port device team_slave_0 removed [ 1877.708529] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1877.737549] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1877.786851] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1877.826654] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1877.838245] bond0 (unregistering): Released all slaves [ 1877.854130] CPU: 0 PID: 8907 Comm: syz-executor.3 Not tainted 4.14.229-syzkaller #0 [ 1877.862132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1877.871485] Call Trace: [ 1877.874078] dump_stack+0x1b2/0x281 [ 1877.877719] warn_alloc.cold+0x96/0x1cc [ 1877.881689] ? zone_watermark_ok_safe+0x220/0x220 [ 1877.886536] __alloc_pages_nodemask+0x2127/0x2720 [ 1877.891387] ? lock_acquire+0x170/0x3f0 [ 1877.895359] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1877.900201] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1877.905642] ? __mutex_unlock_slowpath+0x75/0x770 [ 1877.910481] alloc_pages_current+0x155/0x260 [ 1877.914899] ion_page_pool_alloc+0x118/0x1b0 [ 1877.919298] ion_system_heap_allocate+0x133/0x8c0 [ 1877.924142] ? ion_alloc+0x187/0x810 [ 1877.927862] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1877.933303] ? ion_system_contig_heap_create+0x130/0x130 [ 1877.938745] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1877.943753] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1877.948587] ion_alloc+0x204/0x810 [ 1877.952120] ? ion_dma_buf_release+0x40/0x40 [ 1877.956527] ? __might_fault+0x177/0x1b0 [ 1877.960590] ion_ioctl+0xea/0x1f0 [ 1877.964032] ? ion_query_heaps+0x360/0x360 [ 1877.968262] ? cp_compat_stat+0x890/0x890 [ 1877.972401] ? ion_query_heaps+0x360/0x360 [ 1877.976626] do_vfs_ioctl+0x75a/0xff0 [ 1877.980419] ? ioctl_preallocate+0x1a0/0x1a0 [ 1877.984815] ? lock_downgrade+0x740/0x740 [ 1877.988981] ? __fget+0x225/0x360 [ 1877.992425] ? do_vfs_ioctl+0xff0/0xff0 [ 1877.996406] ? security_file_ioctl+0x83/0xb0 [ 1878.000817] SyS_ioctl+0x7f/0xb0 [ 1878.004176] ? do_vfs_ioctl+0xff0/0xff0 [ 1878.008147] do_syscall_64+0x1d5/0x640 [ 1878.012033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1878.017212] RIP: 0033:0x466459 [ 1878.020391] RSP: 002b:00007ff5239b6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1878.028089] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1878.035356] RDX: 0000000020000380 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1878.042617] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1878.049882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1878.057141] R13: 00007ffcade4e0df R14: 00007ff5239b6300 R15: 0000000000022000 [ 1878.140412] Mem-Info: [ 1878.143037] active_anon:16436 inactive_anon:53434 isolated_anon:0 [ 1878.143037] active_file:1114 inactive_file:6135 isolated_file:0 [ 1878.143037] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1878.143037] slab_reclaimable:12154 slab_unreclaimable:112369 [ 1878.143037] mapped:39976 shmem:54022 pagetables:672 bounce:0 [ 1878.143037] free:205064 free_pcp:526 free_cma:0 [ 1878.179171] Node 0 active_anon:64488kB inactive_anon:172348kB active_file:3700kB inactive_file:23296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136288kB dirty:40kB writeback:0kB shmem:174432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1878.249301] Node 1 active_anon:1256kB inactive_anon:41388kB active_file:756kB inactive_file:1244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23616kB dirty:0kB writeback:0kB shmem:41656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1878.337895] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1878.396060] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1878.412190] Node 0 DMA32 free:498452kB min:36200kB low:45248kB high:54296kB active_anon:64484kB inactive_anon:172348kB active_file:3700kB inactive_file:23196kB unevictable:0kB writepending:40kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7328kB pagetables:2532kB bounce:0kB free_pcp:180kB local_pcp:136kB free_cma:0kB [ 1878.473731] lowmem_reserve[]: 0 0 0 0 0 [ 1878.482209] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1878.538999] lowmem_reserve[]: 0 0 0 0 0 [ 1878.547446] Node 1 Normal free:360732kB min:53696kB low:67120kB high:80544kB active_anon:1256kB inactive_anon:41388kB active_file:756kB inactive_file:1244kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:1244kB local_pcp:624kB free_cma:0kB [ 1878.615894] lowmem_reserve[]: 0 0 0 0 0 [ 1878.623338] Node 0 DMA: 370*4kB (UME) 8*8kB (UME) 8*16kB (UME) 4*32kB (UM) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11208kB [ 1878.656859] Node 0 DMA32: 3033*4kB (UE) 13011*8kB (UE) 9950*16kB (UM) 6753*32kB (UM) 255*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 507836kB [ 1878.688486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1878.710749] Node 1 Normal: 15167*4kB (UM) 3583*8kB (UME) 5631*16kB (UME) 5529*32kB (UM) 71*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 360900kB [ 1878.755459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1878.776957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1878.797990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1878.808063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1878.830854] 61092 total pagecache pages [ 1878.838206] 0 pages in swap cache [ 1878.847574] Swap cache stats: add 0, delete 0, find 0/0 [ 1878.861502] Free swap = 0kB [ 1878.867875] Total swap = 0kB [ 1878.874029] 2097051 pages RAM [ 1878.877198] 0 pages HighMem/MovableOnly [ 1878.883631] 363848 pages reserved [ 1878.887139] 0 pages cma reserved [ 1879.739854] IPVS: ftp: loaded support on port[0] = 21 [ 1879.851676] IPVS: ftp: loaded support on port[0] = 21 [ 1880.132237] chnl_net:caif_netlink_parms(): no params data found [ 1880.187265] syz-executor.1: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1880.198592] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1880.203710] CPU: 1 PID: 8944 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1880.211514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1880.220991] Call Trace: [ 1880.223601] dump_stack+0x1b2/0x281 [ 1880.227236] warn_alloc.cold+0x96/0x1cc [ 1880.231237] ? zone_watermark_ok_safe+0x220/0x220 [ 1880.236089] ? wake_all_kswapds+0x175/0x360 [ 1880.240431] __alloc_pages_nodemask+0x2127/0x2720 [ 1880.245299] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1880.250311] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1880.255336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1880.260178] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1880.265012] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1880.270375] ? cache_alloc_refill+0x2fa/0x350 [ 1880.274857] ? ____cache_alloc_node+0x156/0x1d0 [ 1880.279525] cache_grow_begin+0x91/0x700 [ 1880.283585] fallback_alloc+0x207/0x2c0 [ 1880.287560] __kmalloc+0x213/0x400 [ 1880.291091] ? batadv_hash_new+0xaa/0x270 [ 1880.295227] batadv_hash_new+0xaa/0x270 [ 1880.299192] ? queue_delayed_work_on+0xfc/0x1d0 [ 1880.303851] batadv_tt_init+0x260/0x390 [ 1880.307816] batadv_mesh_init+0x478/0x630 [ 1880.311954] batadv_softif_init_late+0xa26/0xc90 [ 1880.316698] ? batadv_get_strings+0x40/0x40 [ 1880.321027] ? dev_valid_name+0x1a0/0x1a0 [ 1880.325184] ? batadv_get_strings+0x40/0x40 [ 1880.329498] register_netdevice+0x291/0xe40 [ 1880.333812] ? netdev_change_features+0xa0/0xa0 [ 1880.338468] ? rtnl_create_link+0x129/0x890 [ 1880.342783] rtnl_newlink+0x14ff/0x1860 [ 1880.346754] ? rtnl_newlink+0x43d/0x1860 [ 1880.350817] ? mark_held_locks+0xa6/0xf0 [ 1880.354868] ? rtnl_dellink+0x6a0/0x6a0 [ 1880.358840] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1880.363852] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1880.368382] ? rtnl_dellink+0x6a0/0x6a0 [ 1880.372359] rtnetlink_rcv_msg+0x3be/0xb10 [ 1880.376586] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1880.381071] ? __netlink_lookup+0x345/0x5d0 [ 1880.385401] netlink_rcv_skb+0x125/0x390 [ 1880.389469] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1880.393955] ? netlink_ack+0x9a0/0x9a0 [ 1880.397839] netlink_unicast+0x437/0x610 [ 1880.401893] ? netlink_sendskb+0xd0/0xd0 [ 1880.405944] ? __check_object_size+0x179/0x230 [ 1880.410515] netlink_sendmsg+0x62e/0xb80 [ 1880.414581] ? nlmsg_notify+0x170/0x170 [ 1880.418548] ? security_socket_sendmsg+0x83/0xb0 [ 1880.423294] ? nlmsg_notify+0x170/0x170 [ 1880.427276] sock_sendmsg+0xb5/0x100 [ 1880.430989] SyS_sendto+0x1c7/0x2c0 [ 1880.434602] ? SyS_getpeername+0x220/0x220 [ 1880.439261] ? vm_insert_page+0x7c0/0x7c0 [ 1880.443417] ? up_read+0x17/0x30 [ 1880.446768] ? __do_page_fault+0x159/0xad0 [ 1880.450991] ? do_syscall_64+0x4c/0x640 [ 1880.454950] ? SyS_getpeername+0x220/0x220 [ 1880.459171] do_syscall_64+0x1d5/0x640 [ 1880.463051] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1880.468228] RIP: 0033:0x4193ec [ 1880.471403] RSP: 002b:00007ffcb1f2c520 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1880.479113] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1880.486370] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1880.493627] RBP: 0000000000000000 R08: 00007ffcb1f2c574 R09: 000000000000000c [ 1880.500899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1880.508163] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1880.515431] Mem-Info: [ 1880.517840] active_anon:16515 inactive_anon:53439 isolated_anon:12 [ 1880.517840] active_file:1172 inactive_file:6255 isolated_file:0 [ 1880.517840] unevictable:0 dirty:39 writeback:0 unstable:0 [ 1880.517840] slab_reclaimable:12154 slab_unreclaimable:113325 [ 1880.517840] mapped:57613 shmem:54030 pagetables:760 bounce:0 [ 1880.517840] free:54273 free_pcp:290 free_cma:0 [ 1880.551599] Node 0 active_anon:64804kB inactive_anon:172368kB active_file:3816kB inactive_file:24132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:206836kB dirty:152kB writeback:0kB shmem:174464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1880.579981] Node 1 active_anon:1256kB inactive_anon:41388kB active_file:872kB inactive_file:888kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:23616kB dirty:4kB writeback:0kB shmem:41656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1880.607319] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.633434] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1880.638457] Node 0 DMA32 free:44460kB min:36200kB low:45248kB high:54296kB active_anon:64800kB inactive_anon:172368kB active_file:3816kB inactive_file:24132kB unevictable:0kB writepending:152kB present:3129332kB managed:2788132kB mlocked:0kB kernel_stack:7392kB pagetables:2884kB bounce:0kB free_pcp:520kB local_pcp:352kB free_cma:0kB [ 1880.668041] lowmem_reserve[]: 0 0 0 0 0 [ 1880.672035] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.697807] lowmem_reserve[]: 0 0 0 0 0 [ 1880.701799] Node 1 Normal free:161660kB min:53696kB low:67120kB high:80544kB active_anon:1256kB inactive_anon:41388kB active_file:1268kB inactive_file:708kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:640kB local_pcp:624kB free_cma:0kB [ 1880.730884] lowmem_reserve[]: 0 0 0 0 0 [ 1880.734866] Node 0 DMA: 345*4kB (UMEH) 7*8kB (UME) 8*16kB (UME) 4*32kB (UM) 3*64kB (MEH) 3*128kB (MEH) 2*256kB (ME) 2*512kB (ME) 3*1024kB (MEH) 2*2048kB (UM) 0*4096kB = 10972kB [ 1880.750803] Node 0 DMA32: 51*4kB (ME) 87*8kB (UME) 0*16kB 864*32kB (U) 247*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44356kB [ 1880.764042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1880.774738] Node 1 Normal: 36*4kB (M) 4*8kB (UME) 5*16kB (ME) 4892*32kB (UM) 72*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 161536kB [ 1880.788772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.797608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1880.806170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.815001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1880.823566] 61236 total pagecache pages [ 1880.827530] 0 pages in swap cache [ 1880.830970] Swap cache stats: add 0, delete 0, find 0/0 [ 1880.836314] Free swap = 0kB [ 1880.839314] Total swap = 0kB [ 1880.842320] 2097051 pages RAM [ 1880.845409] 0 pages HighMem/MovableOnly [ 1880.849375] 363848 pages reserved [ 1880.852810] 0 pages cma reserved [ 1881.075781] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1881.086039] ------------[ cut here ]------------ [ 1881.090810] WARNING: CPU: 1 PID: 8944 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1881.099814] Kernel panic - not syncing: panic_on_warn set ... [ 1881.099814] [ 1881.107171] CPU: 1 PID: 8944 Comm: syz-executor.1 Not tainted 4.14.229-syzkaller #0 [ 1881.114950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1881.124292] Call Trace: [ 1881.126884] dump_stack+0x1b2/0x281 [ 1881.130503] panic+0x1f9/0x42d [ 1881.133681] ? add_taint.cold+0x16/0x16 [ 1881.137644] ? debug_print_object.cold+0xa7/0xdb [ 1881.142405] ? debug_print_object.cold+0xa7/0xdb [ 1881.147145] __warn.cold+0x20/0x44 [ 1881.150675] ? ist_end_non_atomic+0x10/0x10 [ 1881.154984] ? debug_print_object.cold+0xa7/0xdb [ 1881.159725] report_bug+0x208/0x250 [ 1881.163350] do_error_trap+0x195/0x2d0 [ 1881.167226] ? math_error+0x2d0/0x2d0 [ 1881.171036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1881.175867] invalid_op+0x1b/0x40 [ 1881.179309] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1881.184655] RSP: 0018:ffff888029717248 EFLAGS: 00010086 [ 1881.190020] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1881.197302] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed10052e2e3f [ 1881.204565] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1881.211819] R10: 0000000000000000 R11: ffff8880abe46380 R12: 0000000000000000 [ 1881.219073] R13: 0000000000000000 R14: ffff888048199930 R15: 1ffff110052e2e52 [ 1881.226352] ? debug_print_object.cold+0xa7/0xdb [ 1881.231108] debug_object_assert_init+0x1d3/0x2d0 [ 1881.235948] ? debug_object_active_state+0x330/0x330 [ 1881.241042] ? rtnl_newlink+0x14ff/0x1860 [ 1881.245186] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1881.249593] ? netlink_rcv_skb+0x125/0x390 [ 1881.253819] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1881.259232] del_timer+0x5d/0xe0 [ 1881.262584] ? process_timeout+0x20/0x20 [ 1881.266660] try_to_grab_pending+0x243/0x610 [ 1881.271060] __cancel_work_timer+0x90/0x460 [ 1881.275387] ? work_on_cpu_safe+0x70/0x70 [ 1881.279543] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1881.284464] batadv_nc_mesh_free+0x41/0x120 [ 1881.288775] batadv_mesh_free+0x70/0x150 [ 1881.292824] batadv_mesh_init+0x561/0x630 [ 1881.296974] batadv_softif_init_late+0xa26/0xc90 [ 1881.301718] ? batadv_get_strings+0x40/0x40 [ 1881.306023] ? dev_valid_name+0x1a0/0x1a0 [ 1881.310157] ? batadv_get_strings+0x40/0x40 [ 1881.314474] register_netdevice+0x291/0xe40 [ 1881.318785] ? netdev_change_features+0xa0/0xa0 [ 1881.323443] ? rtnl_create_link+0x129/0x890 [ 1881.327755] rtnl_newlink+0x14ff/0x1860 [ 1881.331715] ? rtnl_newlink+0x43d/0x1860 [ 1881.335775] ? mark_held_locks+0xa6/0xf0 [ 1881.339864] ? rtnl_dellink+0x6a0/0x6a0 [ 1881.343830] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1881.348833] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1881.353356] ? rtnl_dellink+0x6a0/0x6a0 [ 1881.357316] rtnetlink_rcv_msg+0x3be/0xb10 [ 1881.361545] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1881.366029] ? __netlink_lookup+0x345/0x5d0 [ 1881.370346] netlink_rcv_skb+0x125/0x390 [ 1881.374395] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1881.378878] ? netlink_ack+0x9a0/0x9a0 [ 1881.382760] netlink_unicast+0x437/0x610 [ 1881.386822] ? netlink_sendskb+0xd0/0xd0 [ 1881.390870] ? __check_object_size+0x179/0x230 [ 1881.395457] netlink_sendmsg+0x62e/0xb80 [ 1881.399509] ? nlmsg_notify+0x170/0x170 [ 1881.403478] ? security_socket_sendmsg+0x83/0xb0 [ 1881.408227] ? nlmsg_notify+0x170/0x170 [ 1881.412190] sock_sendmsg+0xb5/0x100 [ 1881.415895] SyS_sendto+0x1c7/0x2c0 [ 1881.419507] ? SyS_getpeername+0x220/0x220 [ 1881.423725] ? vm_insert_page+0x7c0/0x7c0 [ 1881.427873] ? up_read+0x17/0x30 [ 1881.431229] ? __do_page_fault+0x159/0xad0 [ 1881.435451] ? do_syscall_64+0x4c/0x640 [ 1881.439412] ? SyS_getpeername+0x220/0x220 [ 1881.443631] do_syscall_64+0x1d5/0x640 [ 1881.447508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1881.452704] RIP: 0033:0x4193ec [ 1881.455879] RSP: 002b:00007ffcb1f2c520 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1881.463586] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1881.470842] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1881.478105] RBP: 0000000000000000 R08: 00007ffcb1f2c574 R09: 000000000000000c [ 1881.485363] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1881.492621] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1881.500703] Kernel Offset: disabled [ 1881.504328] Rebooting in 86400 seconds..