kB all_unreclaimable? yes [ 1713.780615] Node 1 active_anon:340kB inactive_anon:8144kB active_file:200kB inactive_file:5400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39116kB dirty:0kB writeback:0kB shmem:8216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1713.831203] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1713.880665] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1713.886412] Node 0 DMA32 free:154732kB min:36200kB low:45248kB high:54296kB active_anon:62868kB inactive_anon:48188kB active_file:4kB inactive_file:1312kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2564kB bounce:0kB free_pcp:692kB local_pcp:16kB free_cma:0kB [ 1713.950616] lowmem_reserve[]: 0 0 0 0 0 [ 1713.954649] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1714.010614] lowmem_reserve[]: 0 0 0 0 0 [ 1714.014662] Node 1 Normal free:170144kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:8144kB active_file:200kB inactive_file:5400kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:228kB bounce:0kB free_pcp:788kB local_pcp:64kB free_cma:0kB [ 1714.050606] lowmem_reserve[]: 0 0 0 0 0 [ 1714.054637] Node 0 DMA: 1*4kB (E) 1*8kB (E) 26*16kB (UE) 27*32kB (UE) 15*64kB (UE) 10*128kB (UE) 5*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10956kB [ 1714.090605] Node 0 DMA32: 8776*4kB (UME) 6869*8kB (UME) 1013*16kB (UME) 1754*32kB (UME) 339*64kB (UM) 26*128kB (UM) 22*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 197144kB [ 1714.130639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1714.150613] Node 1 Normal: 1621*4kB (UM) 1216*8kB (UM) 338*16kB (UME) 305*32kB (U) 813*64kB (UME) 26*128kB (UM) 73*256kB (U) 17*512kB (UM) 15*1024kB (U) 21*2048kB (U) 11*4096kB (U) = 217556kB [ 1714.175973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1714.195633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.205627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1714.215698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.228821] 17184 total pagecache pages [ 1714.233698] 0 pages in swap cache [ 1714.237815] Swap cache stats: add 0, delete 0, find 0/0 [ 1714.245033] Free swap = 0kB [ 1714.248938] Total swap = 0kB [ 1714.253174] 2097051 pages RAM [ 1714.263108] 0 pages HighMem/MovableOnly [ 1714.267812] 363849 pages reserved [ 1714.279910] 0 pages cma reserved [ 1714.283546] Out of memory (oom_kill_allocating_task): Kill process 16881 (systemd-journal) score 0 or sacrifice child [ 1714.300682] Killed process 16881 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2816kB [ 1714.334943] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1714.365009] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. 07:56:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x4000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000002300)={&(0x7f0000000640), 0xc, &(0x7f00000022c0)={&(0x7f0000002380)=ANY=[@ANYBLOB="000000a395fefec61733a9f83eccb964673b4e3316204e57698e4b15df7014266c26bdecb1d265ceb48e8cff7b603fbc8e1c65519eee017976a131bc056d6f59e7758cf4d7357877630a547b93af6184bc2158ff00d5451160169eb07428f70319af8870efe47c1bd58ee96e4d9ac9356d457548c81182ab8d22a21fb92bbf8c491f2c5664086a0d519214d0b37cd35673deb0c3355c38478c6ea0ed4783b59e1a850489edaf399b341f2e90774e8ec66b258390da47eb9b2211e3e1b6", @ANYRES16=0x0, @ANYBLOB="000825bd7000fbdbdf250e0000009c0002800800020005000000040001008400038018000180040003000500020000000000050002000000000018000180050002000000000004000300080002007767310044000180060002007d00000008000100010000000c00020073797a746e6c310008000100ffffffff0800010030420a2405000200000000000c00020073797a746e6c31000c0001800800010005000000080002007706000018000180140002006261746164763000000000000000000088020280ed000500cf6a2a1f64fbcecbbd256b009ae6f68879c1a8fa96a7995144463c0fdab14c14fa2810f4107c9231294d0b0b342a29a3dc4ed29b8e82948aa9c0e8193112a2a681cece6bb492ff0c27de9706e5feb465bd69bce65c57926b9ffc079014896a75c43e7e379b97346824bf60f4e59adcec760d649d7e147d3b4672324a8ae0f47d3fc2cd8b8df16fc2ec9cbcfe0a2f6dafbe184332cf90fc21f24dd8fd2c2443d7b3e1e74b81b16fb9522e7ae3a26bd7422065570a374babae8917b8a8b6ce22f29f7a8ee5d9dfa717b3688096bbb439b84d8461c6f1685a79870a8d86eb272c0882cc70318e4b02718d0000003c00038008000180040003003000018008000100f8ffffff08000100507a00000400030008000100ff0300000400030008000100ff0f000004000300880003805800018008000200252d7b000d0002006970365f767469300000000008000100ff07000004000300040003000800010001040000040003000800010007000000110002005b280729282521292a24255d00000000040003000c00018008000100070000002000018004000300080001000100000004000300080001000010000004000300d000050009859ec049da1555c581c4d788a2a3c89b10825b59629bea0c9dce7158454ae5b3e4f798f0d8b838da9414be1d6db5a0c6412ab024e0842d9135511714c8747ff17645b8932b5368e118ace2d51a0c49ee85c004502e535f61540d847747206d887d93bc4062d23bd0148ac03f015e4daa340578b0a164fd7e387b21619d1d452ab3b075255866629275c26a408942819e02ff47a6ad1138b25f48e6d4e80b25563b78fe37469a0407bb1da8e9f43d837e116103fd10e1818ac433da5353678b1ede80b7627483831f28826d5000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1b18}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x80000000, 0x42, @empty, @private0, 0x8000, 0x10, 0x8000, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r5, @ANYBLOB="000326bd7000fbdbdf250e0000009000018008000100", @ANYRES32=r6, @ANYBLOB="140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f62617461647600140002006d6163767461703000000000000000000800030001000000140002006970365f7674693000000000000000001400020000000000000000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000280040003800c80f7ae000180080003000200dd07000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x8054}, 0x20000000) accept(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg1\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) r8 = socket$kcm(0x29, 0x2, 0x0) accept(r8, 0x0, 0x0) getsockname(r8, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80) 07:56:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:56:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0800000000000200000000000000"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x8400, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @val={0x0, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x684, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_NAN_FUNC={0x4f0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4d0, 0xd, 0x0, 0x1, [{0x67, 0x0, "dcebd766e0a03af8dbed26495695980b6a151818db2891ac47ab2a46a90dd5a8265c1ed9894decbe29a58a258ecfd5c8b477efbd3d87c8df6d27ce4598d5c00f83682939e7120bc59e3d1527faf64d62a2426ede9e0831c9279e22dbfeae26e13bb68d"}, {0xd2, 0x0, "956ccb916540a71794c7811de1d194f8311d4d1567abd8a17a234a86b5859f8dc04c07aba1708fec8a587cde707ae5d70990f94dcb22f53111786387fe8c59b45be6833a421b938ebd0e94c74f5cc4d49b2117d7f16ea6aa45a5850932bf52830b663f8138a66d7ec498441de0d144c6262ff2064d2279f873ddc077008a42488a60b11fd4731b08ee91171ef79151da261cd1c177bc8abd11b57a5d861356dff30bf37d8353ab1e293c32ec4ccc4fd777ec89884e3873911432164fdc18acbac7a9f56f7c52d8b6ebe15878a4ad"}, {0x27, 0x0, "5fb86ad53f564b56d84a8e6dae0af37fed256e1d96b0e1dea1b2ce06156cb911695093"}, {0xd8, 0x0, "cfffde9021c483163cf850452553c73874876ca6159d611d2919cbe89199ede9a7eda5ecb9a1f4ba3b40e6dc5962c97cdd1a0becf605041b2e5fde4097531bbe2115d49e1e6d0a6d7e66827a6f061c29f9b778c211c7a540be1c4b882396caacbffd2bc5399c2ff62b65586d25f62bd98d044d22c6f0317d0b56816bcd2c99544d219cba2e0618cf73f9e2c8ffe9eca7bd16c51c7d7c5fe0accf36ffedf8ae595b834d4a284d0c48eda27c683e766d9c252005312b97aa6915400e67f008dcf7e3fc32dd52c3650c11541a026f8b67843e653c46"}, {0xac, 0x0, "256b8c2d75552dd6425a623633ba39d97d69ca541f8d01cf12ed6c78f09a408cf5aad1f9828748be41ecc6e103920368ffe99e9301b130aff7908bd7ccefcabf4acef86b8271a1c1c2732ad0ba2787abf9ef949c0888ab262fb58459e06f3a531001f560c18c0264f025d08a331b2c1624ad41e2dac1fa5c29469dc6bc90e56b2d8d63b62593fd76456047587e9336a6fec4631ceb18e88d919223f657e9445dd73df9e74940b28e"}, {0x17, 0x0, "f7dd1f7be66df526a977c4c80673c4bf00659a"}, {0x7b, 0x0, "4d73a5496f797764ff9923c862c5bcfc8d75a8b74822e54965e3395b4826aee4fc77cee572893d92d72ca2bcad8d2c884df9d8b540f90481b56b5934ce12754c4bdf84c9a884d1d250fbb41b41747bbf8d74256794358953047bb1960727db0999ea88e268cd6083e317c4e0a0c8fb36b474948b91c43e"}, {0xa4, 0x0, "727ab2c618010dc8a44b5381c15e46122385e34ddbe9466f1ea61b43de873f15cf2eebe85e61f5b49d638f4c5f5c5fc22d98a6419f2eb532f73b3c4445847ca94d9ad9fbae91f93bba67614ad3cddebb72b3b67d5d0884e3eb75e4ba9bbd5071e755fc0ad4bfd5327e4cc4ea12248543b4965cb0c51ecd9afe99e0e72f253dfebb7dc111e4ca8c996724e0ce2c7ecc1d105d1af7a0462b1e0c81411ca5beb66f"}, {0xac, 0x0, "4c73d47c81be153f904991c86e1ddabd897b1c0739796e10e28323277abac5dc9a1b746f6e001c5029643cfdcdfc62f308f54ae5250130b3fccbeb1a2e6c2919e8f772b1bc83969bf11e2dff459d49a6bf0b8d1493640becf957d24790d0d82d9770c768e387a3da9e706ca3e1051a4a5766490e16ea30616a84b29e50fa397ab12ba1d154d9d57db705a8df244d78ea2e73e2211553298dec510994271a2e895e70a2f9d93ecf47"}]}]}, @NL80211_ATTR_NAN_FUNC={0x154, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x40, 0xe, 0x0, 0x1, [{0x39, 0x0, "281f1ecaf70ebb300c4147b63f06835e85b5fbef8ab7d72c3424663487391458e9b3290ff26a89cdfb13454aeb3f9e57830b41f4d3"}]}, @NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xec}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xb1c}]}]}, 0x684}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x2000c090) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="3bdff1dabaa9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000081) 07:56:50 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) [ 1714.415635] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1714.436663] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1714.445315] systemd[1]: Stopped Journal Service. 07:56:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x141, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) [ 1714.494537] systemd[1]: Starting Journal Service... 07:56:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000040)='5\x00', 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) 07:56:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:56:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1714.679697] systemd[1]: Started System Logging Service. [ 1714.705279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:56:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1714.798248] systemd-journald[18145]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1714.818199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:56:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x48acc2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000100)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x3}) 07:56:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:56:51 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r2) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 07:56:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:56:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x8d, &(0x7f0000000100)=""/141, 0x41100, 0x3, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xd, 0x7, 0xffff7fff}, 0x10}, 0x78) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, r2, 0x0, r3}, 0x10) 07:56:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1715.597804] systemd[1]: Started Journal Service. [ 1716.051664] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1716.065111] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1716.080495] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1716.085918] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1716.091106] CPU: 0 PID: 18164 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1716.099094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.109405] Call Trace: [ 1716.111998] dump_stack+0x1b2/0x281 [ 1716.115672] warn_alloc.cold+0x96/0x1cc [ 1716.119648] ? zone_watermark_ok_safe+0x220/0x220 [ 1716.124529] __alloc_pages_nodemask+0x2127/0x2720 [ 1716.129376] ? __schedule+0x893/0x1de0 [ 1716.133361] ? lock_acquire+0x170/0x3f0 [ 1716.137348] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1716.142309] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1716.147888] ? __mutex_unlock_slowpath+0x75/0x770 [ 1716.152740] alloc_pages_current+0x155/0x260 [ 1716.157153] ion_page_pool_alloc+0x118/0x1b0 [ 1716.161845] ion_system_heap_allocate+0x133/0x8c0 [ 1716.167060] ? ion_alloc+0x187/0x810 [ 1716.170786] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1716.176239] ? ion_system_contig_heap_create+0x130/0x130 [ 1716.181740] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1716.186938] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1716.191788] ion_alloc+0x204/0x810 [ 1716.195351] ? ion_dma_buf_release+0x40/0x40 [ 1716.199763] ? __might_fault+0x177/0x1b0 [ 1716.203930] ion_ioctl+0xea/0x1f0 [ 1716.207381] ? ion_query_heaps+0x360/0x360 [ 1716.211615] ? __fget+0x1fe/0x360 [ 1716.215069] ? ion_query_heaps+0x360/0x360 [ 1716.219328] do_vfs_ioctl+0x75a/0xff0 [ 1716.223133] ? ioctl_preallocate+0x1a0/0x1a0 [ 1716.227557] ? lock_downgrade+0x740/0x740 [ 1716.231729] ? __fget+0x225/0x360 [ 1716.235188] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.239166] ? security_file_ioctl+0x83/0xb0 [ 1716.243580] SyS_ioctl+0x7f/0xb0 [ 1716.246945] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.250927] do_syscall_64+0x1d5/0x640 [ 1716.254819] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1716.260007] RIP: 0033:0x466459 [ 1716.263190] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.270902] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1716.278177] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1716.285448] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1716.292719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1716.300009] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1716.323170] CPU: 1 PID: 18153 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1716.331184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.340563] Call Trace: [ 1716.342174] Mem-Info: [ 1716.343160] dump_stack+0x1b2/0x281 [ 1716.345584] active_anon:14745 inactive_anon:16114 isolated_anon:0 [ 1716.345584] active_file:2168 inactive_file:6482 isolated_file:14 [ 1716.345584] unevictable:0 dirty:88 writeback:0 unstable:0 [ 1716.345584] slab_reclaimable:12938 slab_unreclaimable:114389 [ 1716.345584] mapped:57534 shmem:17169 pagetables:765 bounce:0 [ 1716.345584] free:117161 free_pcp:195 free_cma:0 [ 1716.349224] warn_alloc.cold+0x96/0x1cc [ 1716.383215] Node 0 active_anon:58648kB inactive_anon:56320kB active_file:6504kB inactive_file:22464kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:190244kB dirty:348kB writeback:0kB shmem:60464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1716.387026] ? zone_watermark_ok_safe+0x220/0x220 [ 1716.415436] Node 1 active_anon:332kB inactive_anon:8136kB active_file:2168kB inactive_file:3464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39892kB dirty:4kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1716.420137] __alloc_pages_nodemask+0x2127/0x2720 [ 1716.450627] Node 0 [ 1716.452314] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1716.452332] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.452338] lowmem_reserve[]: [ 1716.454573] ? finish_task_switch+0x178/0x610 [ 1716.459057] 0 [ 1716.484733] ? finish_task_switch+0x14d/0x610 [ 1716.484749] ? lock_acquire+0x170/0x3f0 [ 1716.484764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1716.484780] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1716.484792] ? __mutex_unlock_slowpath+0x75/0x770 [ 1716.484801] ? alloc_pages_current+0x84/0x260 [ 1716.484811] alloc_pages_current+0x155/0x260 [ 1716.484825] ion_page_pool_alloc+0x118/0x1b0 [ 1716.484837] ion_system_heap_allocate+0x133/0x8c0 [ 1716.535872] ? ion_alloc+0x187/0x810 [ 1716.539592] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1716.545155] ? ion_system_contig_heap_create+0x130/0x130 [ 1716.550609] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1716.555652] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1716.560514] ion_alloc+0x204/0x810 [ 1716.560673] 2717 2718 2718 [ 1716.564067] ? ion_dma_buf_release+0x40/0x40 [ 1716.564080] ? __might_fault+0x177/0x1b0 [ 1716.567010] 2718 [ 1716.571414] ion_ioctl+0xea/0x1f0 [ 1716.571424] ? ion_query_heaps+0x360/0x360 [ 1716.571434] ? ion_query_heaps+0x360/0x360 [ 1716.571443] do_vfs_ioctl+0x75a/0xff0 [ 1716.571453] ? ioctl_preallocate+0x1a0/0x1a0 [ 1716.571463] ? lock_downgrade+0x740/0x740 [ 1716.571475] ? __fget+0x225/0x360 [ 1716.571483] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.571493] ? security_file_ioctl+0x83/0xb0 [ 1716.571503] SyS_ioctl+0x7f/0xb0 [ 1716.571514] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.593429] do_syscall_64+0x1d5/0x640 [ 1716.597839] Node 0 [ 1716.602007] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1716.602016] RIP: 0033:0x466459 [ 1716.602020] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.602028] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1716.602033] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1716.602038] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1716.602042] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1716.602047] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1716.696283] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1716.723447] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1716.728937] CPU: 0 PID: 18203 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1716.737010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.746379] Call Trace: [ 1716.748975] dump_stack+0x1b2/0x281 [ 1716.752605] warn_alloc.cold+0x96/0x1cc [ 1716.756582] ? zone_watermark_ok_safe+0x220/0x220 [ 1716.761437] __alloc_pages_nodemask+0x2127/0x2720 [ 1716.766274] ? ___preempt_schedule+0x16/0x18 [ 1716.770701] ? lock_acquire+0x170/0x3f0 [ 1716.774683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1716.779536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1716.784986] ? __mutex_unlock_slowpath+0x75/0x770 [ 1716.789845] ? alloc_pages_current+0x123/0x260 [ 1716.794427] alloc_pages_current+0x155/0x260 [ 1716.798872] ion_page_pool_alloc+0x118/0x1b0 [ 1716.803280] ion_system_heap_allocate+0x133/0x8c0 [ 1716.808123] ? ion_alloc+0x187/0x810 [ 1716.811858] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1716.817307] ? ion_system_contig_heap_create+0x130/0x130 [ 1716.822758] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1716.827773] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1716.832633] ion_alloc+0x204/0x810 [ 1716.836174] ? ion_dma_buf_release+0x40/0x40 [ 1716.840601] ? __might_fault+0x177/0x1b0 [ 1716.844676] ion_ioctl+0xea/0x1f0 [ 1716.848124] ? ion_query_heaps+0x360/0x360 [ 1716.852448] ? _raw_spin_unlock+0x29/0x40 [ 1716.856593] ? ion_query_heaps+0x360/0x360 [ 1716.860827] do_vfs_ioctl+0x75a/0xff0 [ 1716.864638] ? ioctl_preallocate+0x1a0/0x1a0 [ 1716.869041] ? lock_downgrade+0x740/0x740 [ 1716.873189] ? __fget+0x225/0x360 [ 1716.876636] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.880612] ? security_file_ioctl+0x83/0xb0 [ 1716.885039] SyS_ioctl+0x7f/0xb0 [ 1716.888402] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.892398] do_syscall_64+0x1d5/0x640 [ 1716.896306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1716.901495] RIP: 0033:0x466459 [ 1716.904681] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.912391] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1716.919660] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1716.926927] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1716.934198] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1716.941470] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1716.967565] DMA32 free:394128kB min:36200kB low:45248kB high:54296kB active_anon:58548kB inactive_anon:56320kB active_file:6872kB inactive_file:21748kB unevictable:0kB writepending:348kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2884kB bounce:0kB free_pcp:1464kB local_pcp:156kB free_cma:0kB [ 1716.998197] lowmem_reserve[]: 0 0 0 0 0 [ 1717.003241] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1717.030473] lowmem_reserve[]: 0 0 0 0 0 [ 1717.035073] Node 1 Normal free:83692kB min:53696kB low:67120kB high:80544kB active_anon:100kB inactive_anon:8136kB active_file:2176kB inactive_file:3416kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:660kB local_pcp:620kB free_cma:0kB [ 1717.065125] lowmem_reserve[]: 0 0 0 0 0 [ 1717.069139] Node 0 DMA: 12*4kB (UE) 1*8kB (E) 25*16kB (UE) 27*32kB (UE) 15*64kB (UE) 11*128kB (UE) 5*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11112kB [ 1717.086379] Node 0 DMA32: 224*4kB (UME) 1578*8kB (UME) 9240*16kB (UME) 5753*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 345456kB [ 1717.101151] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1717.113640] Node 1 Normal: 5881*4kB (UM) 4562*8kB (UM) 733*16kB (UM) 423*32kB (U) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85412kB [ 1717.140579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.149464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.169813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.200587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.209202] 24505 total pagecache pages [ 1717.231042] 0 pages in swap cache [ 1717.239056] Swap cache stats: add 0, delete 0, find 0/0 [ 1717.253740] Free swap = 0kB [ 1717.260188] Total swap = 0kB [ 1717.270310] 2097051 pages RAM [ 1717.277005] 0 pages HighMem/MovableOnly 07:56:53 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) [ 1717.289094] 363849 pages reserved [ 1717.296169] 0 pages cma reserved [ 1718.792130] IPVS: ftp: loaded support on port[0] = 21 [ 1719.160150] chnl_net:caif_netlink_parms(): no params data found [ 1719.415504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.422602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.430063] device bridge_slave_0 entered promiscuous mode [ 1719.444252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.453251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.464414] device bridge_slave_1 entered promiscuous mode [ 1719.502762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1719.515704] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1719.567725] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1719.596130] team0: Port device team_slave_0 added [ 1719.687393] oom_reaper: reaped process 18164 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1719.717490] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1719.736563] in:imklog cpuset=/ mems_allowed=0-1 [ 1719.745922] CPU: 1 PID: 18152 Comm: in:imklog Not tainted 4.14.231-syzkaller #0 [ 1719.753380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.762751] Call Trace: [ 1719.765349] dump_stack+0x1b2/0x281 [ 1719.768981] dump_header+0x178/0x82f [ 1719.772696] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1719.777796] ? ___ratelimit+0x2cd/0x530 [ 1719.781945] oom_kill_process.cold+0x10/0xa40 [ 1719.786468] out_of_memory+0xe3e/0x1190 [ 1719.790467] ? oom_killer_disable+0x1c0/0x1c0 [ 1719.794971] ? mutex_trylock+0x152/0x1a0 [ 1719.799032] __alloc_pages_nodemask+0x23e1/0x2720 [ 1719.804025] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1719.808895] alloc_pages_current+0x155/0x260 [ 1719.813305] filemap_fault+0x11a1/0x1ad0 [ 1719.817376] ext4_filemap_fault+0x84/0xb0 [ 1719.821525] __do_fault+0xfa/0x380 [ 1719.825064] __handle_mm_fault+0x2497/0x4620 [ 1719.829472] ? vm_insert_page+0x7c0/0x7c0 [ 1719.833623] ? lock_downgrade+0x740/0x740 [ 1719.837776] ? mark_held_locks+0xa6/0xf0 [ 1719.841847] handle_mm_fault+0x455/0x9c0 [ 1719.845916] __do_page_fault+0x549/0xad0 [ 1719.849984] ? spurious_fault+0x640/0x640 [ 1719.854137] ? do_page_fault+0x60/0x500 [ 1719.858227] ? page_fault+0x2f/0x50 [ 1719.860642] syz-executor.3: page allocation failure: order:0 [ 1719.862126] page_fault+0x45/0x50 [ 1719.862137] RIP: 1fa0:0x1f9f [ 1719.867955] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1719.871391] RSP: 0000:000055db2cb209d0 EFLAGS: 7f52f43f6da0 [ 1719.876568] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1719.890656] (null) [ 1719.904070] Mem-Info: [ 1719.905490] syz-executor.3 cpuset= [ 1719.907807] active_anon:14805 inactive_anon:16118 isolated_anon:0 [ 1719.907807] active_file:55 inactive_file:0 isolated_file:0 [ 1719.907807] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1719.907807] slab_reclaimable:12938 slab_unreclaimable:115024 [ 1719.907807] mapped:52600 shmem:17173 pagetables:740 bounce:0 [ 1719.907807] free:13832 free_pcp:30 free_cma:0 [ 1719.907810] / mems_allowed=0-1 [ 1719.911421] Node 0 active_anon:59096kB inactive_anon:56336kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175488kB dirty:80kB writeback:0kB shmem:60484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1719.953122] CPU: 0 PID: 18203 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1719.976011] syz-executor.3 cpuset= [ 1719.983814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.983819] Call Trace: [ 1719.983841] dump_stack+0x1b2/0x281 [ 1719.983855] warn_alloc.cold+0x96/0x1cc [ 1719.983866] ? zone_watermark_ok_safe+0x220/0x220 [ 1719.983881] ? usleep_range+0x130/0x130 [ 1719.987431] / [ 1719.996886] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1719.999518] mems_allowed=0-1 [ 1720.003100] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1720.003111] ? run_timer_softirq+0x5a0/0x5a0 [ 1720.003129] __alloc_pages_nodemask+0x2127/0x2720 [ 1720.040343] ? lock_acquire+0x170/0x3f0 [ 1720.040601] Node 1 active_anon:124kB inactive_anon:8136kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34912kB dirty:8kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1720.044347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1720.079039] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1720.083548] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1720.089020] alloc_pages_current+0x155/0x260 [ 1720.094220] ion_page_pool_alloc+0x118/0x1b0 [ 1720.098723] ion_system_heap_allocate+0x133/0x8c0 [ 1720.103572] ? ion_alloc+0x187/0x810 [ 1720.107290] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1720.110594] Node 0 [ 1720.112741] ? ion_system_contig_heap_create+0x130/0x130 [ 1720.112757] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1720.112762] lowmem_reserve[]: [ 1720.114992] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1720.120424] 0 [ 1720.146113] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1720.146125] ion_alloc+0x204/0x810 [ 1720.146139] ? ion_dma_buf_release+0x40/0x40 [ 1720.146152] ? __might_fault+0x177/0x1b0 [ 1720.177974] ion_ioctl+0xea/0x1f0 [ 1720.181443] ? ion_query_heaps+0x360/0x360 [ 1720.185693] ? _raw_spin_unlock+0x29/0x40 [ 1720.189843] ? ion_query_heaps+0x360/0x360 [ 1720.190583] 2717 2718 [ 1720.194091] do_vfs_ioctl+0x75a/0xff0 [ 1720.194104] ? ioctl_preallocate+0x1a0/0x1a0 [ 1720.196582] 2718 [ 1720.200381] ? lock_downgrade+0x740/0x740 [ 1720.210949] ? __fget+0x225/0x360 [ 1720.214420] ? do_vfs_ioctl+0xff0/0xff0 [ 1720.218406] ? security_file_ioctl+0x83/0xb0 [ 1720.220584] 2718 [ 1720.222823] SyS_ioctl+0x7f/0xb0 [ 1720.222832] ? do_vfs_ioctl+0xff0/0xff0 [ 1720.224891] Node 0 [ 1720.228248] do_syscall_64+0x1d5/0x640 [ 1720.238310] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1720.240593] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:59196kB inactive_anon:56336kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:80kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1720.243494] RIP: 0033:0x466459 [ 1720.275605] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1720.284113] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1720.291468] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1720.298767] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1720.300584] lowmem_reserve[]: [ 1720.306126] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1720.306135] 0 [ 1720.309244] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1720.325614] CPU: 1 PID: 18164 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1720.335847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.339200] warn_alloc_show_mem: 2 callbacks suppressed [ 1720.339203] Mem-Info: [ 1720.345208] Call Trace: [ 1720.345235] dump_stack+0x1b2/0x281 [ 1720.345248] warn_alloc.cold+0x96/0x1cc [ 1720.345259] ? zone_watermark_ok_safe+0x220/0x220 [ 1720.345269] ? usleep_range+0x130/0x130 [ 1720.345277] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1720.345288] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1720.345297] ? run_timer_softirq+0x5a0/0x5a0 [ 1720.345313] __alloc_pages_nodemask+0x2127/0x2720 [ 1720.345329] ? lock_acquire+0x170/0x3f0 [ 1720.361493] 0 [ 1720.363807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1720.368854] 0 [ 1720.373006] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1720.373026] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1720.373037] ? retint_kernel+0x2d/0x2d [ 1720.373051] alloc_pages_current+0x155/0x260 [ 1720.373063] ion_page_pool_alloc+0x118/0x1b0 [ 1720.373072] ion_system_heap_allocate+0x133/0x8c0 [ 1720.373081] ? ion_alloc+0x187/0x810 [ 1720.373091] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1720.373100] ? ion_system_contig_heap_create+0x130/0x130 [ 1720.373109] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1720.373120] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1720.373130] ion_alloc+0x204/0x810 [ 1720.373143] ? ion_dma_buf_release+0x40/0x40 [ 1720.373154] ? __might_fault+0x177/0x1b0 [ 1720.373165] ion_ioctl+0xea/0x1f0 [ 1720.386389] active_anon:14803 inactive_anon:16118 isolated_anon:0 [ 1720.386389] active_file:24 inactive_file:10 isolated_file:0 [ 1720.386389] unevictable:0 dirty:21 writeback:1 unstable:0 [ 1720.386389] slab_reclaimable:12938 slab_unreclaimable:115030 [ 1720.386389] mapped:52585 shmem:17173 pagetables:740 bounce:0 [ 1720.386389] free:13837 free_pcp:38 free_cma:0 [ 1720.389124] ? ion_query_heaps+0x360/0x360 [ 1720.398474] 0 [ 1720.400242] ? __fget+0x1fe/0x360 [ 1720.415607] Node 0 active_anon:59088kB inactive_anon:56336kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175488kB dirty:80kB writeback:0kB shmem:60484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1720.416821] ? ion_query_heaps+0x360/0x360 [ 1720.425442] 0 [ 1720.429515] do_vfs_ioctl+0x75a/0xff0 [ 1720.445304] Node 1 active_anon:124kB inactive_anon:8136kB active_file:84kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34852kB dirty:4kB writeback:4kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1720.449286] ? ioctl_preallocate+0x1a0/0x1a0 [ 1720.462787] ? lock_downgrade+0x740/0x740 [ 1720.462802] ? __fget+0x225/0x360 [ 1720.462811] ? do_vfs_ioctl+0xff0/0xff0 [ 1720.462823] ? security_file_ioctl+0x83/0xb0 [ 1720.462832] SyS_ioctl+0x7f/0xb0 [ 1720.462840] ? do_vfs_ioctl+0xff0/0xff0 [ 1720.462851] do_syscall_64+0x1d5/0x640 [ 1720.462872] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1720.462881] RIP: 0033:0x466459 [ 1720.462885] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1720.462895] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1720.462900] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1720.462905] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1720.462914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1720.477833] Node 0 [ 1720.508344] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1720.511386] Bluetooth: hci0 command 0x0409 tx timeout [ 1720.514940] Node 0 [ 1720.570847] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1720.585131] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1720.642029] team0: Port device team_slave_1 added [ 1720.647923] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1720.744219] lowmem_reserve[]: 0 0 0 0 0 [ 1720.748846] Node 1 Normal free:241592kB min:53696kB low:67120kB high:80544kB active_anon:124kB inactive_anon:8136kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1720.781274] lowmem_reserve[]: 0 0 0 0 0 [ 1720.785668] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 3*16kB (UE) 27*32kB (UE) 19*64kB (UE) 11*128kB (UE) 5*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10976kB [ 1720.801515] Node 0 DMA32: 709*4kB (UME) 652*8kB (ME) 196*16kB (ME) 57*32kB (UME) 821*64kB (UM) 64*128kB (UM) 220*256kB (UM) 53*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 157204kB [ 1720.882260] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1720.895568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.921113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.930676] Node 1 Normal: 28*4kB (UM) 19*8kB (M) 15*16kB (UM) 14*32kB (UM) 4765*64kB (UM) 372*128kB (UM) 218*256kB (UM) 122*512kB (UM) 40*1024kB (UM) 20*2048kB (UM) 10*4096kB (U) = 594680kB [ 1720.994939] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1721.000055] Node 0 DMA32 free:288396kB min:36200kB low:45248kB high:54296kB active_anon:59092kB inactive_anon:56332kB active_file:8kB inactive_file:3308kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2796kB bounce:0kB free_pcp:1308kB local_pcp:620kB free_cma:0kB [ 1721.030621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.039571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1721.054650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.055129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.065961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1721.114596] lowmem_reserve[]: 0 0 0 0 0 [ 1721.118644] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.130612] 18057 total pagecache pages [ 1721.150093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.170611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.190614] lowmem_reserve[]: 0 0 0 0 0 [ 1721.196282] 0 pages in swap cache [ 1721.203971] Swap cache stats: add 0, delete 0, find 0/0 [ 1721.209422] Free swap = 0kB [ 1721.212544] Total swap = 0kB [ 1721.215568] 2097051 pages RAM [ 1721.217194] Node 1 [ 1721.218667] 0 pages HighMem/MovableOnly [ 1721.218690] Normal free:639924kB min:53696kB low:67120kB high:80544kB active_anon:124kB inactive_anon:8136kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:1336kB local_pcp:668kB free_cma:0kB [ 1721.221048] 363849 pages reserved [ 1721.221054] 0 pages cma reserved [ 1721.230602] lowmem_reserve[]: [ 1721.260600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.265330] 0 [ 1721.282759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1721.301337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1721.310612] Out of memory (oom_kill_allocating_task): Kill process 18152 (in:imklog) score 0 or sacrifice child [ 1721.311194] 0 [ 1721.340670] Killed process 18143 (rsyslogd) total-vm:254332kB, anon-rss:752kB, file-rss:0kB, shmem-rss:0kB [ 1721.361720] 0 0 0 [ 1721.364000] Node 0 DMA: 28*4kB (UE) 2*8kB (UE) 6*16kB (UE) 27*32kB (UE) 19*64kB (UE) 11*128kB (UE) 5*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11136kB [ 1721.365491] oom_reaper: reaped process 18143 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1721.415999] device hsr_slave_0 entered promiscuous mode [ 1721.421264] Node 0 DMA32: 1127*4kB (UME) 866*8kB (UME) 798*16kB (UME) 1325*32kB (UME) 2784*64kB (UM) 509*128kB (UM) 328*256kB (UM) 67*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 428204kB [ 1721.438244] device hsr_slave_1 entered promiscuous mode [ 1721.454711] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1721.474995] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1721.480603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1721.520881] Node 1 Normal: 2668*4kB (UM) 1941*8kB (UM) 463*16kB (UM) 415*32kB (UM) 4393*64kB (UM) 604*128kB (UM) 268*256kB (UM) 156*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 553832kB [ 1721.594797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.652976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1721.670657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.699533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1721.741007] 19204 total pagecache pages [ 1721.745112] 0 pages in swap cache [ 1721.748594] Swap cache stats: add 0, delete 0, find 0/0 [ 1721.780763] Free swap = 0kB [ 1721.783921] Total swap = 0kB [ 1721.787118] 2097051 pages RAM [ 1721.790218] 0 pages HighMem/MovableOnly [ 1721.820889] 363849 pages reserved [ 1721.824378] 0 pages cma reserved [ 1721.848219] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1721.976058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1722.037356] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1722.064253] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1722.071020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1722.078148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1722.108230] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1722.124474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.148772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1722.171052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1722.179500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1722.204140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.211280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.234878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1722.255672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1722.274925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1722.295989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1722.315547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.321993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.334006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1722.347621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1722.360405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1722.394329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1722.405748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1722.435349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1722.443989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1722.464244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1722.482008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1722.495058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1722.516158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1722.530793] Bluetooth: hci0 command 0x041b tx timeout [ 1722.544100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1722.554628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1722.581586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1722.611418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1722.619962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1722.665897] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1722.704741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1722.726279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1722.734731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1722.758295] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1722.794621] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1722.811614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1722.818570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1722.855556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1723.069411] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1723.085125] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1723.105592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1723.122197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1723.253639] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1723.276836] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1723.306193] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1723.328445] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1723.345035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1723.353150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1723.373023] device veth0_vlan entered promiscuous mode [ 1723.390999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1723.398590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1723.428132] device veth1_vlan entered promiscuous mode [ 1723.434683] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1723.469447] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1723.507561] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1723.529536] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1723.550794] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1723.558654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1723.585265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1723.605642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1723.623786] device veth0_macvtap entered promiscuous mode [ 1723.630224] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1723.651113] device veth1_macvtap entered promiscuous mode [ 1723.659011] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1723.677385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1723.693025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1723.706463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1723.717775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.732907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1723.762685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.782942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1723.811813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.832219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1723.862697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.882987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1723.900494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1723.922121] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1723.934228] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1723.939583] CPU: 1 PID: 18203 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1723.942688] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1723.949367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.949376] Call Trace: [ 1723.959044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1723.966585] dump_stack+0x1b2/0x281 [ 1723.966599] warn_alloc.cold+0x96/0x1cc [ 1723.966610] ? zone_watermark_ok_safe+0x220/0x220 [ 1723.966631] __alloc_pages_nodemask+0x2127/0x2720 [ 1723.966647] ? lock_acquire+0x170/0x3f0 [ 1723.966660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1723.966676] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1723.966688] ? __mutex_unlock_slowpath+0x75/0x770 [ 1723.966703] alloc_pages_current+0x155/0x260 [ 1723.966715] ion_page_pool_alloc+0x118/0x1b0 [ 1723.966724] ion_system_heap_allocate+0x133/0x8c0 [ 1723.966735] ? _raw_spin_unlock+0x29/0x40 [ 1723.966744] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1723.966752] ? ion_system_contig_heap_create+0x130/0x130 [ 1723.966766] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1723.973960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1723.975974] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1723.980250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1723.983581] ion_alloc+0x27a/0x810 [ 1723.983595] ? ion_dma_buf_release+0x40/0x40 [ 1723.983607] ? __might_fault+0x177/0x1b0 [ 1723.983617] ion_ioctl+0xea/0x1f0 [ 1723.983625] ? ion_query_heaps+0x360/0x360 [ 1723.983638] ? _raw_spin_unlock+0x29/0x40 [ 1723.983645] ? ion_query_heaps+0x360/0x360 [ 1723.983654] do_vfs_ioctl+0x75a/0xff0 [ 1723.983666] ? ioctl_preallocate+0x1a0/0x1a0 [ 1723.983679] ? lock_downgrade+0x740/0x740 [ 1723.995135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1723.997794] ? __fget+0x225/0x360 [ 1724.004325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1724.008139] ? do_vfs_ioctl+0xff0/0xff0 [ 1724.018767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1724.021862] ? security_file_ioctl+0x83/0xb0 [ 1724.021874] SyS_ioctl+0x7f/0xb0 [ 1724.021882] ? do_vfs_ioctl+0xff0/0xff0 [ 1724.021893] do_syscall_64+0x1d5/0x640 [ 1724.021908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1724.021915] RIP: 0033:0x466459 [ 1724.021920] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.021929] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1724.021934] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1724.021939] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1724.021944] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1724.021953] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1724.027765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.059219] warn_alloc_show_mem: 1 callbacks suppressed [ 1724.059224] Mem-Info: [ 1724.066784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1724.068019] active_anon:14693 inactive_anon:16116 isolated_anon:0 [ 1724.068019] active_file:1260 inactive_file:1239 isolated_file:0 [ 1724.068019] unevictable:0 dirty:33 writeback:0 unstable:0 [ 1724.068019] slab_reclaimable:12936 slab_unreclaimable:118126 [ 1724.068019] mapped:54077 shmem:17172 pagetables:717 bounce:0 [ 1724.068019] free:152224 free_pcp:55 free_cma:0 [ 1724.071999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.078288] Node 0 active_anon:58676kB inactive_anon:56328kB active_file:5032kB inactive_file:5048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181492kB dirty:132kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1724.080424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1724.084504] Node 1 active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1724.092672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.097620] Node 0 [ 1724.100386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1724.106380] DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.113248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.117568] lowmem_reserve[]: [ 1724.120112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1724.129415] 0 [ 1724.136541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1724.143387] 2717 [ 1724.148948] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1724.150366] 2718 [ 1724.159028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.167283] 2718 [ 1724.452785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1724.462211] 2718 [ 1724.464291] Node 0 DMA32 free:547420kB min:36200kB low:45248kB high:54296kB active_anon:58676kB inactive_anon:56328kB active_file:5332kB inactive_file:7948kB unevictable:0kB writepending:132kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2704kB bounce:0kB free_pcp:668kB local_pcp:128kB free_cma:0kB [ 1724.475187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1724.494174] lowmem_reserve[]: 0 0 0 0 0 [ 1724.505581] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.534014] lowmem_reserve[]: 0 0 0 0 0 [ 1724.538054] Node 1 Normal free:43008kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1724.571563] lowmem_reserve[]: 0 0 0 0 0 [ 1724.575604] Node 0 DMA: 14*4kB (UE) 19*8kB (UE) 26*16kB (UE) 27*32kB (UE) 11*64kB (UE) 11*128kB (UE) 5*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 11024kB [ 1724.592269] Node 0 DMA32: 9246*4kB (UME) 11889*8kB (UME) 11901*16kB (UME) 7042*32kB (UE) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 548688kB [ 1724.608060] Bluetooth: hci0 command 0x040f tx timeout [ 1724.613541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1724.624367] Node 1 Normal: 316*4kB (UM) 950*8kB (U) 858*16kB (UE) 638*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43008kB [ 1724.638058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1724.647068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1724.655794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1724.665034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1724.673830] 20529 total pagecache pages [ 1724.678001] 0 pages in swap cache [ 1724.682335] Swap cache stats: add 0, delete 0, find 0/0 [ 1724.687815] Free swap = 0kB [ 1724.690898] Total swap = 0kB [ 1724.695018] 2097051 pages RAM [ 1724.698173] 0 pages HighMem/MovableOnly [ 1724.702242] 363849 pages reserved [ 1724.705711] 0 pages cma reserved 07:57:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x5b, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="145a3200", @ANYRES16=r1, @ANYBLOB="0001000000000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x1f, 0x3, 0x0, @local, @empty, 0x8000, 0x7, 0x0, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x400c1) 07:57:01 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) 07:57:01 executing program 3: socketpair(0x6, 0x5, 0xe4d3, &(0x7f00000004c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) accept(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00'}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x2230, 0x12, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x5, 0x4, {0x4e23, 0x4e20, [0xfffffcf2, 0xd48, 0x9, 0x2000005], [0x3f, 0x5, 0x800], r1, [0x600, 0x1]}, 0x3, 0x80e8}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "6c002c21f12a0edc5bfaaa72c9a91719b426fa05df813a8740848ad4dd3aaab665377912c45beebe409e773fc2ad83eefb5fc63c4ec91c9219c8c440de21b3343215f7044dd8603c072596a53f9e01919c2afbee6c21625a7966324cc31bbfa026d8e8ce029409e75301382d5b4faf22dc82ff25adb824f37733b7f802f32d2fecc5383a7b645a7f95c713a2e2c0989ef232082b57564ee93b7fd192ebe0e807d70f739d5568"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "ea30cb7091c31db340c313157ddb137e6bb5565ef074a54695dc276727201ac68000ca1e753b0916ae96814aba44e88e333509d9f721bb6873ad141f28be85800c61"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "9701cb0ecbf44177aeb31625d15398f125307f1cfb290954b564efc1eafb653c9c9e102b2356383029371ae3c6d8bcd644bc596929159832acebcf2a49b697f13b1dae65d87d556c501f84de61251d40197563dfeb9208017f238d15b8"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "ce495b82a646b4752a"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "583ce6215b3f36644de21d534421a7ee82992c04e2f24a39b153623c158b8dd52b764a88806d7735b5aff123b54a0fafe3f695519124db07bec6137e05a3cbe68dc0c1ca8f5ceb0fe3c2f8cc4bc8e2c0b2f4d4cd7ba72f6e351d44e47f9d8a6df290d69b586f7b3cf7ad18bb6b"}]}, 0x2230}, 0x1, 0x0, 0x0, 0x90}, 0x80) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) 07:57:01 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x200000fffe, 0x13, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x412b00) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x17}) 07:57:01 executing program 1: sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000063b5f818c63247bd7441dcdfd998c1d18bcb89ce0712269757024ba4873d1a0e936df09fb924b2e7ebfd3b8d00884fab4259f5f9015192e130b4ef2d7f751b6c9726e452b3fe3f5f7d226970fef4257ef572f3f74d22d1362394f939453b7d00800000000000006a6526005e24d57995f35f5897307154d63f7f94643f6243d888623e64a50b2d"], 0x14}}, 0x0) 07:57:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:57:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffffa, 0x39}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) 07:57:02 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x8000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x401, 0x3b}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x39}) read$eventfd(r1, &(0x7f0000000140), 0x8) 07:57:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4da}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x60000050}, 0x408cc) 07:57:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000cc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ddd4d79}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44041}, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', r6) 07:57:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10101, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x3ff, 0x0, 0x10000}) 07:57:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:57:02 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) 07:57:02 executing program 5: setrlimit(0x7, &(0x7f0000000000)={0x0, 0x400}) [ 1726.680987] Bluetooth: hci0 command 0x0419 tx timeout [ 1726.809035] syz-executor.0: [ 1726.809039] syz-executor.3: page allocation failure: order:4 [ 1726.812541] syz-executor.3: [ 1726.817026] page allocation failure: order:4 [ 1726.818385] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1726.818406] syz-executor.3 cpuset=/ [ 1726.833168] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1726.837605] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1726.847875] (null) [ 1726.858782] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1726.867445] mems_allowed=0-1 [ 1726.873573] CPU: 1 PID: 18500 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1726.875515] syz-executor.0 cpuset= [ 1726.881485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.881490] Call Trace: [ 1726.881512] dump_stack+0x1b2/0x281 [ 1726.881526] warn_alloc.cold+0x96/0x1cc [ 1726.881537] ? zone_watermark_ok_safe+0x220/0x220 [ 1726.881558] __alloc_pages_nodemask+0x2127/0x2720 [ 1726.881573] ? lock_acquire+0x170/0x3f0 [ 1726.881588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1726.881606] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1726.881619] ? __mutex_unlock_slowpath+0x75/0x770 [ 1726.881632] alloc_pages_current+0x155/0x260 [ 1726.881646] ion_page_pool_alloc+0x118/0x1b0 [ 1726.892009] / [ 1726.894689] ion_system_heap_allocate+0x133/0x8c0 [ 1726.902829] mems_allowed=0-1 [ 1726.905030] ? ion_alloc+0x187/0x810 [ 1726.905044] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1726.963181] ? ion_system_contig_heap_create+0x130/0x130 [ 1726.968644] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1726.973676] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1726.978539] ion_alloc+0x204/0x810 [ 1726.982095] ? ion_dma_buf_release+0x40/0x40 [ 1726.986521] ? __might_fault+0x177/0x1b0 [ 1726.990619] ion_ioctl+0xea/0x1f0 [ 1726.994262] ? ion_query_heaps+0x360/0x360 [ 1726.999759] ? _raw_spin_unlock+0x29/0x40 [ 1727.004010] ? ion_query_heaps+0x360/0x360 [ 1727.008344] do_vfs_ioctl+0x75a/0xff0 [ 1727.012161] ? ioctl_preallocate+0x1a0/0x1a0 [ 1727.016578] ? lock_downgrade+0x740/0x740 [ 1727.020738] ? __fget+0x225/0x360 [ 1727.024201] ? do_vfs_ioctl+0xff0/0xff0 [ 1727.028187] ? security_file_ioctl+0x83/0xb0 [ 1727.033059] SyS_ioctl+0x7f/0xb0 [ 1727.036533] ? do_vfs_ioctl+0xff0/0xff0 [ 1727.040532] do_syscall_64+0x1d5/0x640 [ 1727.044438] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1727.049638] RIP: 0033:0x466459 [ 1727.052852] RSP: 002b:00007f8faa358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.060564] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1727.067943] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1727.075215] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1727.083461] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1727.090734] R13: 00007ffdd07e8f7f R14: 00007f8faa358300 R15: 0000000000022000 [ 1727.105201] CPU: 0 PID: 18496 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1727.113105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.122479] Call Trace: [ 1727.125074] dump_stack+0x1b2/0x281 [ 1727.128714] warn_alloc.cold+0x96/0x1cc [ 1727.132793] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1727.137824] ? zone_watermark_ok_safe+0x220/0x220 [ 1727.142683] __alloc_pages_nodemask+0x2127/0x2720 [ 1727.147530] ? _raw_spin_unlock_irq+0x24/0x80 [ 1727.152036] ? lock_acquire+0x170/0x3f0 [ 1727.156042] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1727.160896] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1727.166353] ? __mutex_unlock_slowpath+0x75/0x770 [ 1727.171201] alloc_pages_current+0x155/0x260 [ 1727.175877] ion_page_pool_alloc+0x118/0x1b0 [ 1727.180291] ion_system_heap_allocate+0x133/0x8c0 [ 1727.185158] ? ion_alloc+0x187/0x810 [ 1727.189232] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1727.195412] ? ion_system_contig_heap_create+0x130/0x130 [ 1727.200873] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1727.210091] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1727.214946] ion_alloc+0x204/0x810 [ 1727.218575] ? ion_dma_buf_release+0x40/0x40 [ 1727.222999] ? __might_fault+0x177/0x1b0 [ 1727.227058] ion_ioctl+0xea/0x1f0 [ 1727.230502] ? ion_query_heaps+0x360/0x360 [ 1727.234741] ? ion_query_heaps+0x360/0x360 [ 1727.238982] do_vfs_ioctl+0x75a/0xff0 [ 1727.242776] ? ioctl_preallocate+0x1a0/0x1a0 [ 1727.247175] ? lock_downgrade+0x740/0x740 [ 1727.251327] ? __fget+0x225/0x360 [ 1727.254784] ? do_vfs_ioctl+0xff0/0xff0 [ 1727.258766] ? security_file_ioctl+0x83/0xb0 [ 1727.263175] SyS_ioctl+0x7f/0xb0 [ 1727.266541] ? do_vfs_ioctl+0xff0/0xff0 [ 1727.270509] do_syscall_64+0x1d5/0x640 [ 1727.274396] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1727.279575] RIP: 0033:0x466459 [ 1727.282752] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.290451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1727.297740] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1727.305091] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1727.312355] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1727.319794] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1727.327248] CPU: 1 PID: 18469 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1727.335142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.344613] Call Trace: [ 1727.347218] dump_stack+0x1b2/0x281 [ 1727.350855] warn_alloc.cold+0x96/0x1cc [ 1727.354838] ? zone_watermark_ok_safe+0x220/0x220 [ 1727.359755] __alloc_pages_nodemask+0x2127/0x2720 [ 1727.364619] ? __schedule+0x893/0x1de0 [ 1727.368521] ? lock_acquire+0x170/0x3f0 [ 1727.372505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1727.377357] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1727.382823] ? __mutex_unlock_slowpath+0x75/0x770 [ 1727.387690] alloc_pages_current+0x155/0x260 [ 1727.392106] ion_page_pool_alloc+0x118/0x1b0 [ 1727.396520] ion_system_heap_allocate+0x133/0x8c0 [ 1727.401369] ? ion_alloc+0x187/0x810 [ 1727.405121] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1727.410593] ? ion_system_contig_heap_create+0x130/0x130 [ 1727.416063] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1727.421089] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1727.425947] ion_alloc+0x204/0x810 [ 1727.429499] ? ion_dma_buf_release+0x40/0x40 [ 1727.433919] ? __might_fault+0x177/0x1b0 [ 1727.437986] ion_ioctl+0xea/0x1f0 [ 1727.441445] ? ion_query_heaps+0x360/0x360 [ 1727.445686] ? ion_query_heaps+0x360/0x360 [ 1727.450289] do_vfs_ioctl+0x75a/0xff0 [ 1727.454105] ? ioctl_preallocate+0x1a0/0x1a0 [ 1727.458516] ? lock_downgrade+0x740/0x740 [ 1727.462694] ? __fget+0x225/0x360 [ 1727.466147] ? do_vfs_ioctl+0xff0/0xff0 [ 1727.470127] ? security_file_ioctl+0x83/0xb0 [ 1727.474627] SyS_ioctl+0x7f/0xb0 [ 1727.477992] ? do_vfs_ioctl+0xff0/0xff0 [ 1727.481968] do_syscall_64+0x1d5/0x640 [ 1727.485861] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1727.491046] RIP: 0033:0x466459 [ 1727.494228] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.501936] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1727.509215] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1727.516491] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1727.523791] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1727.532372] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1727.545518] Mem-Info: [ 1727.548561] active_anon:15347 inactive_anon:16116 isolated_anon:0 [ 1727.548561] active_file:1919 inactive_file:2427 isolated_file:0 [ 1727.548561] unevictable:0 dirty:99 writeback:0 unstable:0 [ 1727.548561] slab_reclaimable:12980 slab_unreclaimable:118305 [ 1727.548561] mapped:55600 shmem:17172 pagetables:744 bounce:0 [ 1727.548561] free:263396 free_pcp:404 free_cma:0 [ 1727.584264] Node 0 active_anon:61292kB inactive_anon:56328kB active_file:7664kB inactive_file:9704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187584kB dirty:392kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1727.613817] Node 1 active_anon:96kB inactive_anon:8136kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1727.641779] Node 0 DMA free:15056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1727.668503] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1727.675259] Node 0 DMA32 free:678016kB min:36200kB low:45248kB high:54296kB active_anon:61292kB inactive_anon:56328kB active_file:7664kB inactive_file:9704kB unevictable:0kB writepending:392kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2812kB bounce:0kB free_pcp:248kB local_pcp:216kB free_cma:0kB [ 1727.706545] lowmem_reserve[]: 0 0 0 0 0 [ 1727.711331] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1727.738251] lowmem_reserve[]: 0 0 0 0 0 [ 1727.743042] Node 1 Normal free:377552kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 1727.777193] lowmem_reserve[]: 0 0 0 0 0 [ 1727.781883] Node 0 DMA: 14*4kB (UE) 19*8kB (UE) 26*16kB (UE) 27*32kB (UE) 12*64kB (UE) 12*128kB (UE) 4*256kB (UE) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 15056kB [ 1727.807358] Node 0 DMA32: 12*4kB (E) 775*8kB (UME) 11867*16kB (UME) 7014*32kB (UME) 30*64kB (U) 9*128kB (U) 5*256kB (U) 6*512kB (U) 140*1024kB (U) 2*2048kB (U) 0*4096kB = 575448kB [ 1727.825040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1727.840882] Node 1 Normal: 316*4kB (UM) 951*8kB (UM) 860*16kB (UME) 640*32kB (UM) 1*64kB (U) 1*128kB (M) 2*256kB (U) 104*512kB (U) 72*1024kB (U) 101*2048kB (U) 0*4096kB = 377640kB [ 1727.862083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1727.876496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1727.888947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1727.903223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1727.937275] 21519 total pagecache pages [ 1727.941411] 0 pages in swap cache [ 1727.944874] Swap cache stats: add 0, delete 0, find 0/0 [ 1727.972228] Free swap = 0kB [ 1727.986579] Total swap = 0kB [ 1727.994515] 2097051 pages RAM [ 1727.997650] 0 pages HighMem/MovableOnly [ 1728.002040] 363849 pages reserved [ 1728.005632] 0 pages cma reserved [ 1728.854972] oom_reaper: reaped process 18500 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1728.905365] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1728.942720] systemd-journal cpuset=/ mems_allowed=0-1 [ 1728.948016] CPU: 1 PID: 18145 Comm: systemd-journal Not tainted 4.14.231-syzkaller #0 [ 1728.956880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.966913] Call Trace: [ 1728.969622] dump_stack+0x1b2/0x281 [ 1728.977646] dump_header+0x178/0x82f [ 1728.981732] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1728.986864] ? ___ratelimit+0x2cd/0x530 [ 1728.990704] syz-executor.3: page allocation failure: order:0 [ 1728.990948] oom_kill_process.cold+0x10/0xa40 [ 1728.990968] out_of_memory+0xe3e/0x1190 [ 1728.996781] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1729.001294] ? oom_killer_disable+0x1c0/0x1c0 [ 1729.001304] ? mutex_trylock+0x152/0x1a0 [ 1729.001314] __alloc_pages_nodemask+0x23e1/0x2720 [ 1729.001332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.001355] alloc_pages_current+0x155/0x260 [ 1729.012252] (null) [ 1729.012766] filemap_fault+0x11a1/0x1ad0 [ 1729.017271] syz-executor.3 cpuset= [ 1729.021434] ext4_filemap_fault+0x84/0xb0 [ 1729.021445] __do_fault+0xfa/0x380 [ 1729.021453] __handle_mm_fault+0x2497/0x4620 [ 1729.021463] ? vm_insert_page+0x7c0/0x7c0 [ 1729.021479] ? mark_held_locks+0xa6/0xf0 [ 1729.021488] handle_mm_fault+0x455/0x9c0 [ 1729.021501] __do_page_fault+0x549/0xad0 [ 1729.021512] ? spurious_fault+0x640/0x640 [ 1729.021519] ? do_page_fault+0x60/0x500 [ 1729.021528] ? page_fault+0x2f/0x50 [ 1729.021535] page_fault+0x45/0x50 [ 1729.021546] RIP: 0001:0xffffffffffffffff [ 1729.032741] / [ 1729.035729] RSP: 67ae41e0:00007ffc241ff570 EFLAGS: 7ffc241ff380 [ 1729.037967] mems_allowed=0-1 [ 1729.052730] Mem-Info: [ 1729.062045] CPU: 0 PID: 18500 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1729.062459] syz-executor.3: [ 1729.066359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.077212] active_anon:14819 inactive_anon:16116 isolated_anon:0 [ 1729.077212] active_file:27 inactive_file:1 isolated_file:0 [ 1729.077212] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1729.077212] slab_reclaimable:12982 slab_unreclaimable:118353 [ 1729.077212] mapped:52654 shmem:17172 pagetables:744 bounce:0 [ 1729.077212] free:13888 free_pcp:86 free_cma:0 [ 1729.079470] Call Trace: [ 1729.083495] page allocation failure: order:0 [ 1729.087067] dump_stack+0x1b2/0x281 [ 1729.090497] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1729.094553] warn_alloc.cold+0x96/0x1cc [ 1729.094566] ? zone_watermark_ok_safe+0x220/0x220 [ 1729.094574] ? usleep_range+0x130/0x130 [ 1729.094582] ? try_to_free_pages+0x23f/0x6e0 [ 1729.094592] ? _find_next_bit+0xdb/0x100 [ 1729.094603] ? run_timer_softirq+0x5a0/0x5a0 [ 1729.096350] Node 0 active_anon:59180kB inactive_anon:56328kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175800kB dirty:0kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.102376] __alloc_pages_nodemask+0x2127/0x2720 [ 1729.102394] ? lock_acquire+0x170/0x3f0 [ 1729.102409] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.105514] (null) [ 1729.107905] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1729.115860] Node 1 active_anon:96kB inactive_anon:8136kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.118811] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1729.128311] syz-executor.3 cpuset= [ 1729.161779] alloc_pages_current+0x155/0x260 [ 1729.161794] ion_page_pool_alloc+0x118/0x1b0 [ 1729.161802] ion_system_heap_allocate+0x133/0x8c0 [ 1729.161815] ? ion_alloc+0x187/0x810 [ 1729.164416] Node 0 [ 1729.169682] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1729.173350] DMA free:10932kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.180392] ? ion_system_contig_heap_create+0x130/0x130 [ 1729.184384] lowmem_reserve[]: [ 1729.189215] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1729.193208] 0 [ 1729.197923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1729.202039] / [ 1729.206400] ion_alloc+0x204/0x810 [ 1729.234338] 2717 [ 1729.240025] ? ion_dma_buf_release+0x40/0x40 [ 1729.244217] 2718 [ 1729.249019] ? __might_fault+0x177/0x1b0 [ 1729.251214] 2718 [ 1729.255765] ion_ioctl+0xea/0x1f0 [ 1729.284589] mems_allowed=0-1 [ 1729.290211] ? ion_query_heaps+0x360/0x360 [ 1729.310592] 2718 [ 1729.311695] ? _raw_spin_unlock+0x29/0x40 [ 1729.319979] ? ion_query_heaps+0x360/0x360 [ 1729.380608] Node 0 [ 1729.388794] do_vfs_ioctl+0x75a/0xff0 [ 1729.388808] ? ioctl_preallocate+0x1a0/0x1a0 [ 1729.388817] ? lock_downgrade+0x740/0x740 [ 1729.388836] ? __fget+0x225/0x360 [ 1729.388845] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.388856] ? security_file_ioctl+0x83/0xb0 [ 1729.388867] SyS_ioctl+0x7f/0xb0 [ 1729.410601] DMA32 free:17812kB min:36200kB low:45248kB high:54296kB active_anon:59180kB inactive_anon:56328kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2812kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1729.414407] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.418618] lowmem_reserve[]: [ 1729.420862] do_syscall_64+0x1d5/0x640 [ 1729.420900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.420911] RIP: 0033:0x466459 [ 1729.440594] 0 [ 1729.443504] RSP: 002b:00007f8faa358188 EFLAGS: 00000246 [ 1729.448108] 0 [ 1729.452083] ORIG_RAX: 0000000000000010 [ 1729.452089] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1729.452094] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1729.452098] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1729.452103] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1729.452107] R13: 00007ffdd07e8f7f R14: 00007f8faa358300 R15: 0000000000022000 [ 1729.472800] CPU: 0 PID: 18469 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1729.489598] 0 [ 1729.492221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.492226] Call Trace: [ 1729.492245] dump_stack+0x1b2/0x281 [ 1729.492259] warn_alloc.cold+0x96/0x1cc [ 1729.492271] ? zone_watermark_ok_safe+0x220/0x220 [ 1729.492284] ? usleep_range+0x130/0x130 [ 1729.497914] 0 [ 1729.501106] ? try_to_free_pages+0x23f/0x6e0 [ 1729.501117] ? _find_next_bit+0xdb/0x100 [ 1729.501126] ? run_timer_softirq+0x5a0/0x5a0 [ 1729.501143] __alloc_pages_nodemask+0x2127/0x2720 [ 1729.501160] ? lock_acquire+0x170/0x3f0 [ 1729.503116] 0 [ 1729.508499] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.514259] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1729.514275] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1729.514293] alloc_pages_current+0x155/0x260 [ 1729.514306] ion_page_pool_alloc+0x118/0x1b0 [ 1729.521603] Node 0 [ 1729.529029] ion_system_heap_allocate+0x133/0x8c0 [ 1729.536693] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.544309] ? ion_alloc+0x187/0x810 [ 1729.544321] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1729.544331] ? ion_system_contig_heap_create+0x130/0x130 [ 1729.544344] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1729.553068] lowmem_reserve[]: [ 1729.562073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1729.562085] ion_alloc+0x204/0x810 [ 1729.562099] ? ion_dma_buf_release+0x40/0x40 [ 1729.562110] ? __might_fault+0x177/0x1b0 [ 1729.562122] ion_ioctl+0xea/0x1f0 [ 1729.563925] 0 [ 1729.573284] ? ion_query_heaps+0x360/0x360 [ 1729.573296] ? ion_query_heaps+0x360/0x360 [ 1729.573306] do_vfs_ioctl+0x75a/0xff0 [ 1729.573316] ? ioctl_preallocate+0x1a0/0x1a0 [ 1729.573327] ? lock_downgrade+0x740/0x740 [ 1729.573339] ? __fget+0x225/0x360 [ 1729.575941] 0 [ 1729.579824] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.583856] 0 [ 1729.590651] ? security_file_ioctl+0x83/0xb0 [ 1729.590663] SyS_ioctl+0x7f/0xb0 [ 1729.590672] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.590685] do_syscall_64+0x1d5/0x640 [ 1729.594650] 0 [ 1729.596453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.600914] 0 [ 1729.604927] RIP: 0033:0x466459 [ 1729.614245] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.614256] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1729.614261] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1729.614265] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1729.614269] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1729.614274] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1729.626090] warn_alloc_show_mem: 2 callbacks suppressed [ 1729.626094] Mem-Info: [ 1729.641060] Node 1 [ 1729.656535] active_anon:14811 inactive_anon:16116 isolated_anon:0 [ 1729.656535] active_file:15 inactive_file:16 isolated_file:0 [ 1729.656535] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1729.656535] slab_reclaimable:12982 slab_unreclaimable:118353 [ 1729.656535] mapped:52651 shmem:17172 pagetables:743 bounce:0 [ 1729.656535] free:13897 free_pcp:88 free_cma:0 [ 1729.688564] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:220kB local_pcp:100kB free_cma:0kB [ 1729.698578] Node 0 active_anon:59148kB inactive_anon:56328kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175788kB dirty:0kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.706902] lowmem_reserve[]: [ 1729.707779] Node 1 active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.720139] 0 [ 1729.725133] Node 0 [ 1729.730825] 0 [ 1729.735180] DMA free:10932kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.739659] 0 [ 1729.748859] lowmem_reserve[]: [ 1729.756530] 0 [ 1729.765695] 0 [ 1729.782157] 0 [ 1729.792752] 2717 [ 1729.840896] 2718 [ 1729.880600] Node 0 [ 1729.897606] 2718 2718 [ 1730.040153] Node 0 DMA32 free:60208kB min:36200kB low:45248kB high:54296kB active_anon:59148kB inactive_anon:56328kB active_file:52kB inactive_file:256kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2808kB bounce:0kB free_pcp:800kB local_pcp:120kB free_cma:0kB [ 1730.060652] DMA: 1*4kB (E) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10996kB [ 1730.069565] lowmem_reserve[]: 0 0 0 0 0 [ 1730.088087] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.114057] lowmem_reserve[]: 0 0 0 0 0 [ 1730.118133] Node 1 Normal free:138736kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:1124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:848kB local_pcp:228kB free_cma:0kB [ 1730.147111] lowmem_reserve[]: 0 0 0 0 0 [ 1730.158894] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10996kB [ 1730.174147] Node 0 DMA32: 1061*4kB (UME) 980*8kB (UME) 513*16kB (UME) 926*32kB (UME) 129*64kB (UM) 14*128kB (U) 4*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 63044kB [ 1730.199752] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.211841] Node 1 Normal: 92*4kB (UM) 226*8kB (U) 220*16kB (UE) 216*32kB (U) 260*64kB (U) 182*128kB (U) 162*256kB (U) 46*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 117568kB [ 1730.229314] Node 0 DMA32: 677*4kB (UME) 665*8kB (UME) 468*16kB (UME) 926*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45148kB [ 1730.243955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.255434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.265114] Node 1 Normal: 29*4kB (UM) 11*8kB (UM) 9*16kB (UME) 50*32kB (U) 1*64kB (U) 1*128kB (M) 150*256kB (U) 46*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 64092kB [ 1730.280925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.301847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.320782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.329811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.341243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.349976] 17265 total pagecache pages [ 1730.354298] 0 pages in swap cache [ 1730.357886] Swap cache stats: add 0, delete 0, find 0/0 [ 1730.366604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.375648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.384689] Free swap = 0kB [ 1730.387799] Total swap = 0kB [ 1730.390952] 2097051 pages RAM [ 1730.394055] 0 pages HighMem/MovableOnly [ 1730.398019] 363849 pages reserved [ 1730.401557] 17226 total pagecache pages [ 1730.405656] 0 pages in swap cache [ 1730.409215] Swap cache stats: add 0, delete 0, find 0/0 [ 1730.414751] 0 pages cma reserved [ 1730.418292] Out of memory (oom_kill_allocating_task): Kill process 18145 (systemd-journal) score 0 or sacrifice child [ 1730.451447] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1730.452686] Killed process 18145 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1512kB [ 1730.467232] Free swap = 0kB [ 1730.494781] Total swap = 0kB [ 1730.497829] 2097051 pages RAM [ 1730.502667] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1730.507815] CPU: 0 PID: 18500 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1730.515728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.525110] Call Trace: [ 1730.527712] dump_stack+0x1b2/0x281 [ 1730.531345] warn_alloc.cold+0x96/0x1cc [ 1730.535341] ? zone_watermark_ok_safe+0x220/0x220 [ 1730.540205] __alloc_pages_nodemask+0x2127/0x2720 [ 1730.545090] ? lock_acquire+0x170/0x3f0 [ 1730.549085] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1730.553958] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1730.559450] ? __mutex_unlock_slowpath+0x75/0x770 [ 1730.564320] alloc_pages_current+0x155/0x260 [ 1730.568742] ion_page_pool_alloc+0x118/0x1b0 [ 1730.573163] ion_system_heap_allocate+0x133/0x8c0 [ 1730.578224] ? _raw_spin_unlock+0x29/0x40 [ 1730.582380] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1730.587315] ? ion_system_contig_heap_create+0x130/0x130 [ 1730.593466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1730.598502] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1730.603352] ion_alloc+0x27a/0x810 [ 1730.606924] ? ion_dma_buf_release+0x40/0x40 [ 1730.611340] ? __might_fault+0x177/0x1b0 [ 1730.615432] ion_ioctl+0xea/0x1f0 [ 1730.618883] ? ion_query_heaps+0x360/0x360 [ 1730.623208] ? _raw_spin_unlock+0x29/0x40 [ 1730.625682] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1730.627353] ? ion_query_heaps+0x360/0x360 [ 1730.627354] (null), order=0, oom_score_adj=0 [ 1730.637071] do_vfs_ioctl+0x75a/0xff0 [ 1730.637084] ? ioctl_preallocate+0x1a0/0x1a0 [ 1730.637094] ? lock_downgrade+0x740/0x740 [ 1730.637106] ? __fget+0x225/0x360 [ 1730.637114] ? do_vfs_ioctl+0xff0/0xff0 [ 1730.637130] ? security_file_ioctl+0x83/0xb0 [ 1730.663100] syz-fuzzer cpuset= [ 1730.666687] SyS_ioctl+0x7f/0xb0 [ 1730.671142] / [ 1730.674369] ? do_vfs_ioctl+0xff0/0xff0 [ 1730.677816] mems_allowed=0-1 [ 1730.679526] do_syscall_64+0x1d5/0x640 [ 1730.691013] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1730.696203] RIP: 0033:0x466459 [ 1730.699394] RSP: 002b:00007f8faa358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1730.707116] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1730.715603] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1730.722870] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1730.730160] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1730.737427] R13: 00007ffdd07e8f7f R14: 00007f8faa358300 R15: 0000000000022000 [ 1730.744729] CPU: 1 PID: 7949 Comm: syz-fuzzer Not tainted 4.14.231-syzkaller #0 [ 1730.752182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.761536] Call Trace: [ 1730.764128] dump_stack+0x1b2/0x281 [ 1730.767755] dump_header+0x178/0x82f [ 1730.771467] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1730.776579] ? ___ratelimit+0x2cd/0x530 [ 1730.780555] oom_kill_process.cold+0x10/0xa40 [ 1730.780676] 0 pages HighMem/MovableOnly [ 1730.785066] out_of_memory+0xe3e/0x1190 [ 1730.789022] 363849 pages reserved [ 1730.793000] ? oom_killer_disable+0x1c0/0x1c0 [ 1730.793009] ? mutex_trylock+0x152/0x1a0 [ 1730.793019] __alloc_pages_nodemask+0x23e1/0x2720 [ 1730.793037] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1730.793064] alloc_pages_current+0x155/0x260 [ 1730.793075] filemap_fault+0x11a1/0x1ad0 [ 1730.823167] ext4_filemap_fault+0x84/0xb0 [ 1730.827322] __do_fault+0xfa/0x380 [ 1730.829892] 0 pages cma reserved [ 1730.830858] __handle_mm_fault+0x2497/0x4620 [ 1730.830868] ? vm_insert_page+0x7c0/0x7c0 [ 1730.830877] ? lock_downgrade+0x740/0x740 [ 1730.830890] ? mark_held_locks+0xa6/0xf0 [ 1730.830900] handle_mm_fault+0x455/0x9c0 [ 1730.830912] __do_page_fault+0x549/0xad0 [ 1730.830927] ? spurious_fault+0x640/0x640 [ 1730.863508] ? do_page_fault+0x60/0x500 [ 1730.868089] ? page_fault+0x2f/0x50 [ 1730.871710] page_fault+0x45/0x50 [ 1730.875171] RIP: 0000:0x9414d4 [ 1730.878355] RSP: 2e000:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1731.110614] Mem-Info: [ 1731.118512] active_anon:14700 inactive_anon:16115 isolated_anon:0 [ 1731.118512] active_file:29 inactive_file:851 isolated_file:0 [ 1731.118512] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1731.118512] slab_reclaimable:12981 slab_unreclaimable:118349 [ 1731.118512] mapped:52781 shmem:17172 pagetables:720 bounce:0 [ 1731.118512] free:316197 free_pcp:236 free_cma:0 [ 1731.170687] Node 0 active_anon:58704kB inactive_anon:56324kB active_file:108kB inactive_file:3396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176308kB dirty:104kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1731.230638] Node 1 active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1731.300630] Node 0 DMA free:12096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.394857] warn_alloc_show_mem: 1 callbacks suppressed [ 1731.394861] Mem-Info: [ 1731.411368] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1731.414598] active_anon:14700 inactive_anon:16115 isolated_anon:0 [ 1731.414598] active_file:29 inactive_file:851 isolated_file:0 [ 1731.414598] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1731.414598] slab_reclaimable:12981 slab_unreclaimable:118349 [ 1731.414598] mapped:52781 shmem:17172 pagetables:720 bounce:0 [ 1731.414598] free:267191 free_pcp:676 free_cma:0 [ 1731.416643] Node 0 DMA32 free:374944kB min:36200kB low:45248kB high:54296kB active_anon:58704kB inactive_anon:56324kB active_file:108kB inactive_file:3396kB unevictable:0kB writepending:104kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2716kB bounce:0kB free_pcp:1360kB local_pcp:656kB free_cma:0kB [ 1731.550614] Node 0 active_anon:58704kB inactive_anon:56324kB active_file:908kB inactive_file:2360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176308kB dirty:104kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1731.584025] lowmem_reserve[]: 0 0 0 0 0 [ 1731.588063] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.610661] Node 1 active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1731.655664] lowmem_reserve[]: 0 0 0 0 0 [ 1731.660326] Node 1 Normal free:467812kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:1324kB local_pcp:624kB free_cma:0kB [ 1731.680629] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.730830] lowmem_reserve[]: 0 0 0 0 0 [ 1731.735400] Node 0 DMA: 290*4kB (UE) 4*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11144kB [ 1731.750625] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1731.758788] Node 0 DMA32 free:147472kB min:36200kB low:45248kB high:54296kB active_anon:58704kB inactive_anon:56324kB active_file:1308kB inactive_file:3476kB unevictable:0kB writepending:104kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2716kB bounce:0kB free_pcp:572kB local_pcp:428kB free_cma:0kB [ 1731.780611] Node 0 DMA32: 77*4kB (ME) 286*8kB (UME) 2948*16kB (UME) 2398*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 126500kB [ 1731.823604] lowmem_reserve[]: 0 0 0 0 0 [ 1731.831520] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.840720] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1731.883665] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1731.890643] lowmem_reserve[]: 0 0 0 0 0 [ 1731.903313] Node 1 Normal: 1121*4kB (UM) 994*8kB (UM) 1099*16kB (UME) 1104*32kB (UM) 1*64kB (U) 2*128kB (UM) 10*256kB (U) 54*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 95876kB [ 1731.910668] Node 1 Normal free:71524kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:1324kB local_pcp:700kB free_cma:0kB [ 1731.922627] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1731.959722] lowmem_reserve[]: 0 0 0 0 0 [ 1731.967686] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1731.983552] Node 0 DMA: 290*4kB (UE) 4*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11016kB [ 1731.985213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.999061] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1731.999091] CPU: 0 PID: 18469 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1731.999097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.999101] Call Trace: [ 1731.999118] dump_stack+0x1b2/0x281 [ 1731.999133] warn_alloc.cold+0x96/0x1cc [ 1731.999145] ? zone_watermark_ok_safe+0x220/0x220 [ 1731.999165] __alloc_pages_nodemask+0x2127/0x2720 [ 1732.030841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.032990] ? _raw_spin_unlock_irq+0x24/0x80 [ 1732.033006] ? lock_acquire+0x170/0x3f0 [ 1732.033022] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1732.033037] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1732.033049] ? __mutex_unlock_slowpath+0x75/0x770 [ 1732.033065] alloc_pages_current+0x155/0x260 [ 1732.037162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.041232] ion_page_pool_alloc+0x118/0x1b0 [ 1732.041242] ion_system_heap_allocate+0x133/0x8c0 [ 1732.041255] ? _raw_spin_unlock+0x29/0x40 [ 1732.041263] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1732.041270] ? ion_system_contig_heap_create+0x130/0x130 [ 1732.041280] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1732.041291] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1732.041301] ion_alloc+0x27a/0x810 [ 1732.041312] ? ion_dma_buf_release+0x40/0x40 [ 1732.041323] ? __might_fault+0x177/0x1b0 [ 1732.041333] ion_ioctl+0xea/0x1f0 [ 1732.041341] ? ion_query_heaps+0x360/0x360 [ 1732.041351] ? ion_query_heaps+0x360/0x360 [ 1732.041361] do_vfs_ioctl+0x75a/0xff0 [ 1732.041371] ? ioctl_preallocate+0x1a0/0x1a0 [ 1732.060604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.064526] ? lock_downgrade+0x740/0x740 [ 1732.068498] 18647 total pagecache pages [ 1732.073366] ? __fget+0x225/0x360 [ 1732.073377] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.073389] ? security_file_ioctl+0x83/0xb0 [ 1732.073398] SyS_ioctl+0x7f/0xb0 [ 1732.073406] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.073416] do_syscall_64+0x1d5/0x640 [ 1732.073429] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1732.073437] RIP: 0033:0x466459 [ 1732.073442] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.073451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1732.073456] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1732.073460] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1732.073471] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1732.073476] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1732.075337] Node 0 [ 1732.093179] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1732.121614] DMA32: [ 1732.151064] 0 pages in swap cache [ 1732.190632] 504*4kB [ 1732.242015] Swap cache stats: add 0, delete 0, find 0/0 [ 1732.331039] (UME) 387*8kB (UME) 120*16kB (UME) 1075*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41432kB [ 1732.333971] Free swap = 0kB [ 1732.358271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1732.375635] Node 1 Normal: 18*4kB (UM) 4*8kB (M) 6*16kB (UME) 823*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26536kB [ 1732.376917] Total swap = 0kB [ 1732.388830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.388837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.388843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.388849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.388853] 17230 total pagecache pages [ 1732.388862] 0 pages in swap cache [ 1732.388867] Swap cache stats: add 0, delete 0, find 0/0 [ 1732.388870] Free swap = 0kB [ 1732.388874] Total swap = 0kB [ 1732.388882] 2097051 pages RAM [ 1732.404374] 2097051 pages RAM [ 1732.409474] 0 pages HighMem/MovableOnly [ 1732.422989] 0 pages HighMem/MovableOnly [ 1732.427124] 363849 pages reserved [ 1732.434895] 363849 pages reserved [ 1732.441201] 0 pages cma reserved [ 1732.446564] 0 pages cma reserved [ 1732.484007] Out of memory (oom_kill_allocating_task): Kill process 7949 (syz-fuzzer) score 0 or sacrifice child [ 1732.511863] Killed process 18207 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1732.538303] oom_reaper: reaped process 18207 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1732.620893] systemd-cgroups invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1732.639377] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1732.644799] CPU: 0 PID: 18503 Comm: systemd-cgroups Not tainted 4.14.231-syzkaller #0 [ 1732.652774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.662134] Call Trace: [ 1732.664825] dump_stack+0x1b2/0x281 [ 1732.668998] dump_header+0x178/0x82f [ 1732.672726] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1732.677851] ? ___ratelimit+0x2cd/0x530 [ 1732.682193] oom_kill_process.cold+0x10/0xa40 [ 1732.686710] out_of_memory+0xe3e/0x1190 [ 1732.690720] ? oom_killer_disable+0x1c0/0x1c0 [ 1732.695355] ? mutex_trylock+0x152/0x1a0 [ 1732.699814] __alloc_pages_nodemask+0x23e1/0x2720 [ 1732.704692] ? __atime_needs_update+0x48f/0x930 [ 1732.709374] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1732.714217] ? __might_fault+0x104/0x1b0 [ 1732.719685] ? __lock_acquire+0x5fc/0x3f20 [ 1732.723926] alloc_pages_vma+0xd2/0x6d0 [ 1732.727905] __handle_mm_fault+0x25fa/0x4620 [ 1732.732318] ? vm_insert_page+0x7c0/0x7c0 [ 1732.736466] ? vfs_statx_fd+0x6d/0xd0 [ 1732.740272] ? mark_held_locks+0xa6/0xf0 [ 1732.744336] handle_mm_fault+0x455/0x9c0 [ 1732.748488] __do_page_fault+0x549/0xad0 [ 1732.752554] ? spurious_fault+0x640/0x640 [ 1732.756711] ? do_page_fault+0x60/0x500 [ 1732.760685] ? page_fault+0x2f/0x50 [ 1732.764309] page_fault+0x45/0x50 [ 1732.767757] RIP: 927a6000:0x7fef927a1ed0 [ 1732.771807] RSP: 000b:0000000000000000 EFLAGS: 7fef92377703 [ 1732.779875] Mem-Info: [ 1732.788114] active_anon:14702 inactive_anon:16115 isolated_anon:0 [ 1732.788114] active_file:32 inactive_file:27 isolated_file:16 [ 1732.788114] unevictable:0 dirty:31 writeback:4 unstable:0 [ 1732.788114] slab_reclaimable:13009 slab_unreclaimable:118081 [ 1732.788114] mapped:43522 shmem:17172 pagetables:733 bounce:0 [ 1732.788114] free:13858 free_pcp:0 free_cma:0 [ 1732.821635] Node 0 active_anon:58712kB inactive_anon:56324kB active_file:120kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:139272kB dirty:124kB writeback:16kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.849983] Node 1 active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.876730] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.907893] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1732.913019] Node 0 DMA32 free:17712kB min:36200kB low:45248kB high:54296kB active_anon:58812kB inactive_anon:56324kB active_file:204kB inactive_file:104kB unevictable:0kB writepending:140kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2768kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.943772] lowmem_reserve[]: 0 0 0 0 0 [ 1732.947786] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.973385] lowmem_reserve[]: 0 0 0 0 0 [ 1732.977435] Node 1 Normal free:26524kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.006054] lowmem_reserve[]: 0 0 0 0 0 [ 1733.010333] Node 0 DMA: 276*4kB (UE) 4*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1733.029402] Node 0 DMA32: 803*4kB (UME) 566*8kB (UME) 166*16kB (ME) 236*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17948kB [ 1733.045863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1733.056686] Node 1 Normal: 18*4kB (UM) 5*8kB (UM) 5*16kB (ME) 827*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26656kB [ 1733.072475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.081572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.090246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.101679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.110271] 17222 total pagecache pages [ 1733.114305] 0 pages in swap cache [ 1733.117763] Swap cache stats: add 0, delete 0, find 0/0 [ 1733.125617] Free swap = 0kB [ 1733.128641] Total swap = 0kB [ 1733.134041] 2097051 pages RAM [ 1733.137152] 0 pages HighMem/MovableOnly [ 1733.143414] 363849 pages reserved [ 1733.146874] 0 pages cma reserved [ 1733.150258] Out of memory (oom_kill_allocating_task): Kill process 18503 (systemd-cgroups) score 0 or sacrifice child [ 1733.163290] Killed process 18503 (systemd-cgroups) total-vm:22204kB, anon-rss:108kB, file-rss:0kB, shmem-rss:0kB [ 1733.185277] oom_reaper: reaped process 18503 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1733.233103] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1733.250302] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1733.255748] CPU: 0 PID: 96 Comm: kworker/u4:2 Not tainted 4.14.231-syzkaller #0 [ 1733.263214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.273127] Workqueue: events_unbound call_usermodehelper_exec_work [ 1733.279578] Call Trace: [ 1733.282187] dump_stack+0x1b2/0x281 [ 1733.285821] dump_header+0x178/0x82f [ 1733.289571] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1733.294699] ? ___ratelimit+0x2cd/0x530 [ 1733.298674] oom_kill_process.cold+0x10/0xa40 [ 1733.303174] ? lock_downgrade+0x740/0x740 [ 1733.307341] out_of_memory+0x2dc/0x1190 [ 1733.311319] ? oom_killer_disable+0x1c0/0x1c0 [ 1733.315901] ? mutex_trylock+0x152/0x1a0 [ 1733.319979] __alloc_pages_nodemask+0x23e1/0x2720 [ 1733.324845] ? batadv_bla_send_claim+0x287/0xba0 [ 1733.329607] ? batadv_bla_periodic_work+0x56d/0xa80 [ 1733.334721] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1733.339584] ? fs_reclaim_release+0xd0/0x110 [ 1733.344009] ? kmem_cache_alloc_node+0x38b/0x410 [ 1733.348790] copy_process.part.0+0x265/0x71c0 [ 1733.353291] ? __lock_acquire+0x5fc/0x3f20 [ 1733.357537] ? debug_object_activate+0x292/0x490 [ 1733.362312] ? trace_hardirqs_on+0x10/0x10 [ 1733.366549] ? static_obj+0x50/0x50 [ 1733.370187] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1733.375641] ? __cleanup_sighand+0x40/0x40 [ 1733.379885] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1733.385339] _do_fork+0x184/0xc80 [ 1733.388794] ? fork_idle+0x270/0x270 [ 1733.392528] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1733.397636] ? process_one_work+0x6c4/0x14a0 [ 1733.402043] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1733.407513] kernel_thread+0x2f/0x40 [ 1733.411262] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1733.416544] ? call_usermodehelper+0x80/0x80 [ 1733.421055] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1733.426519] process_one_work+0x793/0x14a0 [ 1733.430758] ? work_busy+0x320/0x320 [ 1733.434726] ? worker_thread+0x158/0xff0 [ 1733.438835] ? _raw_spin_unlock_irq+0x24/0x80 [ 1733.443345] worker_thread+0x5cc/0xff0 [ 1733.447326] ? rescuer_thread+0xc80/0xc80 [ 1733.451472] kthread+0x30d/0x420 [ 1733.454860] ? kthread_create_on_node+0xd0/0xd0 [ 1733.459551] ret_from_fork+0x24/0x30 [ 1733.470505] Mem-Info: [ 1733.476009] active_anon:14670 inactive_anon:16115 isolated_anon:0 [ 1733.476009] active_file:34 inactive_file:16 isolated_file:0 [ 1733.476009] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1733.476009] slab_reclaimable:13014 slab_unreclaimable:117841 [ 1733.476009] mapped:43521 shmem:17172 pagetables:688 bounce:0 [ 1733.476009] free:13917 free_pcp:0 free_cma:0 [ 1733.514076] Node 0 active_anon:58584kB inactive_anon:56324kB active_file:132kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:124kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1733.547725] Node 1 active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1733.585094] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.616105] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1733.621510] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:58584kB inactive_anon:56324kB active_file:140kB inactive_file:24kB unevictable:0kB writepending:124kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2588kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1733.655288] lowmem_reserve[]: 0 0 0 0 0 [ 1733.659323] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.696014] lowmem_reserve[]: 0 0 0 0 0 [ 1733.700345] Node 1 Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.733494] lowmem_reserve[]: 0 0 0 0 0 [ 1733.737527] Node 0 DMA: 276*4kB (UE) 4*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1733.757209] Node 0 DMA32: 797*4kB (UME) 576*8kB (UME) 170*16kB (ME) 236*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18068kB [ 1733.775942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1733.786782] Node 1 Normal: 18*4kB (UM) 5*8kB (UM) 5*16kB (ME) 827*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26656kB [ 1733.809019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.817969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.831176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.840043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.852646] 17222 total pagecache pages [ 1733.856645] 0 pages in swap cache [ 1733.860088] Swap cache stats: add 0, delete 0, find 0/0 [ 1733.865554] Free swap = 0kB [ 1733.868580] Total swap = 0kB [ 1733.873915] 2097051 pages RAM [ 1733.877040] 0 pages HighMem/MovableOnly [ 1733.884154] 363849 pages reserved [ 1733.887614] 0 pages cma reserved [ 1733.893244] Out of memory: Kill process 18488 (syz-executor.0) score 1004 or sacrifice child [ 1733.904099] Killed process 18496 (syz-executor.0) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1733.974337] oom_reaper: reaped process 18496 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1734.014517] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1734.032031] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1734.037017] CPU: 0 PID: 96 Comm: kworker/u4:2 Not tainted 4.14.231-syzkaller #0 [ 1734.044475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.053843] Workqueue: events_unbound call_usermodehelper_exec_work [ 1734.060265] Call Trace: [ 1734.062855] dump_stack+0x1b2/0x281 [ 1734.066484] dump_header+0x178/0x82f [ 1734.070194] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1734.075397] ? ___ratelimit+0x2cd/0x530 [ 1734.079373] oom_kill_process.cold+0x10/0xa40 [ 1734.083886] ? lock_downgrade+0x740/0x740 [ 1734.088059] out_of_memory+0x2dc/0x1190 [ 1734.092040] ? oom_killer_disable+0x1c0/0x1c0 [ 1734.096555] ? mutex_trylock+0x152/0x1a0 [ 1734.100618] __alloc_pages_nodemask+0x23e1/0x2720 [ 1734.105566] ? batadv_bla_send_claim+0x287/0xba0 [ 1734.111027] ? batadv_bla_periodic_work+0x56d/0xa80 [ 1734.117027] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.121896] ? fs_reclaim_release+0xd0/0x110 [ 1734.126861] ? kmem_cache_alloc_node+0x38b/0x410 [ 1734.131639] copy_process.part.0+0x265/0x71c0 [ 1734.136317] ? __lock_acquire+0x5fc/0x3f20 [ 1734.140557] ? debug_object_activate+0x292/0x490 [ 1734.145339] ? trace_hardirqs_on+0x10/0x10 [ 1734.149680] ? static_obj+0x50/0x50 [ 1734.153340] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1734.158918] ? __cleanup_sighand+0x40/0x40 [ 1734.163261] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1734.168912] _do_fork+0x184/0xc80 [ 1734.172392] ? fork_idle+0x270/0x270 [ 1734.176113] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1734.181219] ? process_one_work+0x6c4/0x14a0 [ 1734.185651] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1734.191196] kernel_thread+0x2f/0x40 [ 1734.194916] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1734.200209] ? call_usermodehelper+0x80/0x80 [ 1734.204633] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1734.210095] process_one_work+0x793/0x14a0 [ 1734.214345] ? work_busy+0x320/0x320 [ 1734.218066] ? worker_thread+0x158/0xff0 [ 1734.222136] ? _raw_spin_unlock_irq+0x24/0x80 [ 1734.226643] worker_thread+0x5cc/0xff0 [ 1734.230561] ? rescuer_thread+0xc80/0xc80 [ 1734.234718] kthread+0x30d/0x420 [ 1734.239236] ? kthread_create_on_node+0xd0/0xd0 [ 1734.244436] ret_from_fork+0x24/0x30 [ 1734.252488] Mem-Info: [ 1734.254959] active_anon:14645 inactive_anon:16115 isolated_anon:0 [ 1734.254959] active_file:16 inactive_file:26 isolated_file:0 [ 1734.254959] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1734.254959] slab_reclaimable:13014 slab_unreclaimable:117473 [ 1734.254959] mapped:43521 shmem:17172 pagetables:675 bounce:0 [ 1734.254959] free:14017 free_pcp:44 free_cma:0 [ 1734.291261] Node 0 active_anon:58484kB inactive_anon:56324kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:124kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1734.319741] Node 1 active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1734.346668] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.376268] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1734.381395] Node 0 DMA32 free:18280kB min:36200kB low:45248kB high:54296kB active_anon:58484kB inactive_anon:56324kB active_file:164kB inactive_file:52kB unevictable:0kB writepending:124kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.412980] lowmem_reserve[]: 0 0 0 0 0 [ 1734.416994] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.424985] syz-executor.3: [ 1734.443008] syz-executor.0: [ 1734.445217] lowmem_reserve[]: [ 1734.446044] page allocation failure: order:0 [ 1734.449322] 0 0 [ 1734.452542] syz-executor.3: [ 1734.457647] 0 [ 1734.459617] page allocation failure: order:0 [ 1734.465001] 0 0 [ 1734.471425] Node 1 Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.483505] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1734.504064] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1734.511881] page allocation failure: order:0 [ 1734.512309] lowmem_reserve[]: [ 1734.519086] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1734.531129] (null) [ 1734.536191] 0 [ 1734.539824] syz-executor.3 cpuset= [ 1734.545976] (null) [ 1734.548195] 0 [ 1734.549547] syz-executor.0 cpuset= [ 1734.556108] (null) [ 1734.557993] 0 [ 1734.559672] syz-executor.3 cpuset= [ 1734.563724] / mems_allowed=0-1 [ 1734.568060] 0 0 [ 1734.570479] CPU: 1 PID: 18500 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1734.570487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.578730] / [ 1734.580425] Call Trace: [ 1734.594102] dump_stack+0x1b2/0x281 [ 1734.597763] warn_alloc.cold+0x96/0x1cc [ 1734.601752] ? zone_watermark_ok_safe+0x220/0x220 [ 1734.606612] ? usleep_range+0x130/0x130 [ 1734.606620] Node 0 [ 1734.610593] ? try_to_free_pages+0x23f/0x6e0 [ 1734.610604] ? _find_next_bit+0xdb/0x100 [ 1734.610613] ? run_timer_softirq+0x5a0/0x5a0 [ 1734.610629] __alloc_pages_nodemask+0x2127/0x2720 [ 1734.610645] ? lock_acquire+0x170/0x3f0 [ 1734.610658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.610667] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1734.610684] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1734.610704] alloc_pages_current+0x155/0x260 [ 1734.610715] ion_page_pool_alloc+0x118/0x1b0 [ 1734.610724] ion_system_heap_allocate+0x133/0x8c0 [ 1734.610739] ? _raw_spin_unlock+0x29/0x40 [ 1734.636742] DMA: [ 1734.639976] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1734.656959] mems_allowed=0-1 [ 1734.659298] ? ion_system_contig_heap_create+0x130/0x130 [ 1734.668541] 276*4kB [ 1734.670592] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.670606] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1734.670616] ion_alloc+0x27a/0x810 [ 1734.670630] ? ion_dma_buf_release+0x40/0x40 [ 1734.670641] ? __might_fault+0x177/0x1b0 [ 1734.670651] ion_ioctl+0xea/0x1f0 [ 1734.670660] ? ion_query_heaps+0x360/0x360 [ 1734.670674] ? _raw_spin_unlock+0x29/0x40 [ 1734.670682] ? ion_query_heaps+0x360/0x360 [ 1734.670692] do_vfs_ioctl+0x75a/0xff0 [ 1734.670704] ? ioctl_preallocate+0x1a0/0x1a0 [ 1734.670713] ? lock_downgrade+0x740/0x740 [ 1734.670728] ? __fget+0x225/0x360 [ 1734.688003] (UE) [ 1734.691847] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.691861] ? security_file_ioctl+0x83/0xb0 [ 1734.691870] SyS_ioctl+0x7f/0xb0 [ 1734.691879] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.691890] do_syscall_64+0x1d5/0x640 [ 1734.691904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1734.691913] RIP: 0033:0x466459 [ 1734.691917] RSP: 002b:00007f8faa358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.691928] RAX: ffffffffffffffda RBX: 000000000056c158 RCX: 0000000000466459 [ 1734.691933] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1734.691938] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1734.691943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c158 [ 1734.691948] R13: 00007ffdd07e8f7f R14: 00007f8faa358300 R15: 0000000000022000 [ 1734.703930] / [ 1734.713742] CPU: 0 PID: 18496 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1734.730980] mems_allowed=0-1 [ 1734.733873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.839069] Call Trace: [ 1734.840594] warn_alloc_show_mem: 1 callbacks suppressed [ 1734.840598] Mem-Info: [ 1734.841668] dump_stack+0x1b2/0x281 [ 1734.847025] active_anon:14645 inactive_anon:16115 isolated_anon:0 [ 1734.847025] active_file:39 inactive_file:6 isolated_file:0 [ 1734.847025] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1734.847025] slab_reclaimable:13014 slab_unreclaimable:117473 [ 1734.847025] mapped:43521 shmem:17172 pagetables:675 bounce:0 [ 1734.847025] free:13818 free_pcp:30 free_cma:0 [ 1734.849415] warn_alloc.cold+0x96/0x1cc [ 1734.870612] Node 0 active_anon:58484kB inactive_anon:56324kB active_file:156kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139268kB dirty:124kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1734.886701] ? zone_watermark_ok_safe+0x220/0x220 [ 1734.886712] ? usleep_range+0x130/0x130 [ 1734.886720] ? try_to_free_pages+0x23f/0x6e0 [ 1734.886736] ? _find_next_bit+0xdb/0x100 [ 1734.910609] Node 1 active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1734.918646] ? run_timer_softirq+0x5a0/0x5a0 [ 1734.940591] Node 0 [ 1734.962614] __alloc_pages_nodemask+0x2127/0x2720 [ 1734.962632] ? lock_acquire+0x170/0x3f0 [ 1734.962646] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.982917] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1734.987417] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1734.990604] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.992877] ? alloc_pages_current+0x21c/0x260 [ 1735.022973] alloc_pages_current+0x155/0x260 [ 1735.027388] ion_page_pool_alloc+0x118/0x1b0 [ 1735.031812] ion_system_heap_allocate+0x133/0x8c0 [ 1735.036662] ? ion_alloc+0x187/0x810 [ 1735.040379] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1735.040586] lowmem_reserve[]: [ 1735.046630] ? ion_system_contig_heap_create+0x130/0x130 [ 1735.046638] 0 [ 1735.049728] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1735.049741] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1735.066852] ion_alloc+0x204/0x810 [ 1735.070428] ? ion_dma_buf_release+0x40/0x40 [ 1735.070589] 2717 2718 [ 1735.074942] ? __might_fault+0x177/0x1b0 [ 1735.074955] ion_ioctl+0xea/0x1f0 [ 1735.077453] 2718 [ 1735.081599] ? ion_query_heaps+0x360/0x360 [ 1735.081610] ? ion_query_heaps+0x360/0x360 [ 1735.081620] do_vfs_ioctl+0x75a/0xff0 [ 1735.081631] ? ioctl_preallocate+0x1a0/0x1a0 [ 1735.081644] ? lock_downgrade+0x740/0x740 [ 1735.100601] 2718 [ 1735.104006] ? __fget+0x225/0x360 [ 1735.110721] ? do_vfs_ioctl+0xff0/0xff0 [ 1735.110732] ? security_file_ioctl+0x83/0xb0 [ 1735.110741] SyS_ioctl+0x7f/0xb0 [ 1735.110750] ? do_vfs_ioctl+0xff0/0xff0 [ 1735.110762] do_syscall_64+0x1d5/0x640 [ 1735.110778] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1735.130591] Node 0 [ 1735.133938] RIP: 0033:0x466459 [ 1735.139561] DMA32 free:17656kB min:36200kB low:45248kB high:54296kB active_anon:58484kB inactive_anon:56324kB active_file:156kB inactive_file:20kB unevictable:0kB writepending:124kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2536kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1735.143723] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.143734] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1735.143738] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1735.143743] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1735.143747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1735.143752] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1735.154633] 4*8kB [ 1735.209978] CPU: 1 PID: 18469 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1735.214396] (UE) [ 1735.221580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.221585] Call Trace: [ 1735.221606] dump_stack+0x1b2/0x281 [ 1735.221620] warn_alloc.cold+0x96/0x1cc [ 1735.221631] ? zone_watermark_ok_safe+0x220/0x220 [ 1735.221640] ? usleep_range+0x130/0x130 [ 1735.221652] ? try_to_free_pages+0x23f/0x6e0 [ 1735.223838] 2*16kB [ 1735.232066] ? _find_next_bit+0xdb/0x100 [ 1735.232077] ? run_timer_softirq+0x5a0/0x5a0 [ 1735.232094] __alloc_pages_nodemask+0x2127/0x2720 [ 1735.232110] ? lock_acquire+0x170/0x3f0 [ 1735.232128] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1735.234288] (UE) [ 1735.244204] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1735.244220] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1735.244232] ? retint_kernel+0x2d/0x2d [ 1735.244245] alloc_pages_current+0x155/0x260 [ 1735.244259] ion_page_pool_alloc+0x118/0x1b0 [ 1735.247017] 2*32kB [ 1735.251081] ion_system_heap_allocate+0x133/0x8c0 [ 1735.251094] ? _raw_spin_unlock+0x29/0x40 [ 1735.251101] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1735.251109] ? ion_system_contig_heap_create+0x130/0x130 [ 1735.251119] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1735.251133] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1735.255182] (UE) [ 1735.260807] ion_alloc+0x27a/0x810 [ 1735.260821] ? ion_dma_buf_release+0x40/0x40 [ 1735.260833] ? __might_fault+0x177/0x1b0 [ 1735.260843] ion_ioctl+0xea/0x1f0 [ 1735.260851] ? ion_query_heaps+0x360/0x360 [ 1735.260862] ? ion_query_heaps+0x360/0x360 [ 1735.260873] do_vfs_ioctl+0x75a/0xff0 [ 1735.265386] 2*64kB [ 1735.269848] ? ioctl_preallocate+0x1a0/0x1a0 [ 1735.272171] (UE) [ 1735.276222] ? lock_downgrade+0x740/0x740 [ 1735.280752] 1*128kB [ 1735.285742] ? __fget+0x225/0x360 [ 1735.289698] (E) [ 1735.294737] ? do_vfs_ioctl+0xff0/0xff0 [ 1735.294749] ? security_file_ioctl+0x83/0xb0 [ 1735.294758] SyS_ioctl+0x7f/0xb0 [ 1735.294766] ? do_vfs_ioctl+0xff0/0xff0 [ 1735.294777] do_syscall_64+0x1d5/0x640 [ 1735.294791] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1735.294800] RIP: 0033:0x466459 [ 1735.294808] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 [ 1735.297055] 1*256kB [ 1735.301638] ORIG_RAX: 0000000000000010 [ 1735.301644] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1735.301649] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1735.301653] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1735.301658] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1735.301662] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1735.320488] lowmem_reserve[]: [ 1735.336481] (E) [ 1735.343941] 0 [ 1735.366867] 2*512kB [ 1735.376157] 0 [ 1735.396738] (UE) [ 1735.420609] 0 [ 1735.490643] 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1735.526901] Node 0 DMA32: 75*4kB (ME) 307*8kB (ME) 170*16kB (ME) 210*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 2*1024kB (U) 15*2048kB (U) 1*4096kB (U) = 49444kB [ 1735.536632] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1735.570640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1735.585144] systemd[1]: Stopped Journal Service. [ 1735.590650] Node 1 Normal: 18*4kB (UM) 5*8kB (UM) 5*16kB (ME) 827*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 440*1024kB (U) 12*2048kB (U) 10*4096kB (U) = 542752kB [ 1735.620657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.629967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.635876] systemd[1]: Starting Journal Service... [ 1735.660641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.670282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.686376] 19405 total pagecache pages [ 1735.697847] 0 pages in swap cache [ 1735.703709] Swap cache stats: add 0, delete 0, find 0/0 [ 1735.704869] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1735.709345] Free swap = 0kB [ 1735.709349] Total swap = 0kB [ 1735.709356] 2097051 pages RAM [ 1735.709359] 0 pages HighMem/MovableOnly [ 1735.709361] 363849 pages reserved [ 1735.709364] 0 pages cma reserved [ 1735.709370] Out of memory: Kill process 7948 (syz-fuzzer) score 6 or sacrifice child [ 1735.716877] Killed process 14207 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1735.739647] 0 0 [ 1735.829077] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.877700] warn_alloc_show_mem: 1 callbacks suppressed [ 1735.877705] Mem-Info: [ 1735.900807] active_anon:14695 inactive_anon:16115 isolated_anon:0 [ 1735.900807] active_file:883 inactive_file:1836 isolated_file:0 [ 1735.900807] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1735.900807] slab_reclaimable:13039 slab_unreclaimable:117227 [ 1735.900807] mapped:36671 shmem:17172 pagetables:638 bounce:0 [ 1735.900807] free:375715 free_pcp:254 free_cma:0 [ 1735.920631] lowmem_reserve[]: 0 0 0 0 0 [ 1735.970741] Node 0 active_anon:58684kB inactive_anon:56324kB active_file:3520kB inactive_file:7652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111968kB dirty:124kB writeback:0kB shmem:60480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1735.980610] Node 1 [ 1736.005625] Node 1 active_anon:96kB inactive_anon:8136kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1736.045543] Normal free:1477024kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:1288kB local_pcp:716kB free_cma:0kB [ 1736.050740] Node 0 DMA free:12168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1736.084919] lowmem_reserve[]: 0 0 0 0 0 [ 1736.124246] Node 0 DMA: 290*4kB (UE) 4*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 12168kB [ 1736.152653] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1736.156094] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1736.160375] systemd-journald[18507]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1736.183107] Node 0 DMA32 free:244480kB min:36200kB low:45248kB high:54296kB active_anon:59568kB inactive_anon:56316kB active_file:4252kB inactive_file:7592kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2832kB bounce:0kB free_pcp:796kB local_pcp:580kB free_cma:0kB [ 1736.220758] Node 0 DMA32: 2058*4kB (UME) 615*8kB (UME) 449*16kB (UME) 1002*32kB (UME) 1628*64kB (UM) 192*128kB (UM) 63*256kB (U) 14*512kB (UM) 11*1024kB (U) 14*2048kB (U) 0*4096kB = 244400kB [ 1736.249452] syz-executor.2 (18208) used greatest stack depth: 24400 bytes left [ 1736.270682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1736.281586] lowmem_reserve[]: 0 0 0 0 0 [ 1736.285610] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1736.311767] Node 1 Normal: 110*4kB (UM) 49*8kB (UM) 1112*16kB (UME) 1057*32kB (UM) 4053*64kB (U) 641*128kB (U) 143*256kB (U) 54*512kB (U) 551*1024kB (U) 188*2048kB (U) 17*4096kB (U) = 1477024kB [ 1736.329387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.338527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.347339] lowmem_reserve[]: 0 0 0 0 0 [ 1736.351432] Node 1 Normal free:1477024kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:1372kB local_pcp:716kB free_cma:0kB [ 1736.355717] systemd-journald[18507]: /dev/kmsg buffer overrun, some messages lost. [ 1736.380245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.380254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.380259] 22251 total pagecache pages [ 1736.380268] 0 pages in swap cache [ 1736.380272] Swap cache stats: add 0, delete 0, find 0/0 [ 1736.380275] Free swap = 0kB [ 1736.380278] Total swap = 0kB [ 1736.380285] 2097051 pages RAM [ 1736.380288] 0 pages HighMem/MovableOnly [ 1736.380291] 363849 pages reserved [ 1736.380295] 0 pages cma reserved [ 1736.384262] lowmem_reserve[]: 0 0 0 0 0 [ 1736.444670] Node 0 DMA: 290*4kB (UE) 4*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 12168kB [ 1736.460803] Node 0 DMA32: 7021*4kB (UME) 1858*8kB (UME) 1318*16kB (UE) 1065*32kB (UE) 1632*64kB (UM) 191*128kB (U) 63*256kB (U) 13*512kB (U) 11*1024kB (U) 10*2048kB (U) 0*4096kB = 281540kB [ 1736.478486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1736.489990] Node 1 Normal: 110*4kB (UM) 49*8kB (UM) 1112*16kB (UME) 1057*32kB (UM) 4053*64kB (U) 641*128kB (U) 143*256kB (U) 54*512kB (U) 551*1024kB (U) 188*2048kB (U) 17*4096kB (U) = 1477024kB [ 1736.508614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.518299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:57:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80580, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) 07:57:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 07:57:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xe02, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) [ 1736.527659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.537530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.547391] 22843 total pagecache pages [ 1736.552656] 0 pages in swap cache [ 1736.556737] Swap cache stats: add 0, delete 0, find 0/0 [ 1736.562202] Free swap = 0kB [ 1736.565577] Total swap = 0kB [ 1736.571227] 2097051 pages RAM [ 1736.574335] 0 pages HighMem/MovableOnly [ 1736.578300] 363849 pages reserved [ 1736.582326] 0 pages cma reserved 07:57:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) 07:57:12 executing program 3: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000011) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) 07:57:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x123dc0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x20}) 07:57:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x4d, 0x0, 0x8b, 0x11, @local, @mcast2, 0x708, 0x80, 0x10001, 0x200}}) 07:57:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) 07:57:13 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) [ 1736.843450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.867968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.921536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.935064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.956979] device bridge_slave_1 left promiscuous mode [ 1736.968345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.983811] device bridge_slave_0 left promiscuous mode [ 1736.996033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.015565] device veth1_macvtap left promiscuous mode [ 1737.027705] device veth0_macvtap left promiscuous mode [ 1737.038680] device veth1_vlan left promiscuous mode [ 1737.049502] device veth0_vlan left promiscuous mode [ 1737.274297] device hsr_slave_1 left promiscuous mode [ 1737.290915] device hsr_slave_0 left promiscuous mode [ 1737.325094] team0 (unregistering): Port device team_slave_1 removed [ 1737.349069] team0 (unregistering): Port device team_slave_0 removed [ 1737.372944] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1737.397512] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1737.473109] bond0 (unregistering): Released all slaves [ 1737.709337] systemd[1]: Started Journal Service. [ 1738.378618] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1738.383443] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1738.430839] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1738.436167] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1738.439941] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1738.456319] CPU: 1 PID: 18541 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1738.464215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.473571] Call Trace: [ 1738.476168] dump_stack+0x1b2/0x281 [ 1738.479796] warn_alloc.cold+0x96/0x1cc [ 1738.484043] ? zone_watermark_ok_safe+0x220/0x220 [ 1738.488903] __alloc_pages_nodemask+0x2127/0x2720 [ 1738.493756] ? lock_acquire+0x170/0x3f0 [ 1738.497734] ? lock_acquire+0x170/0x3f0 [ 1738.501712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1738.506650] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1738.512121] ? __mutex_unlock_slowpath+0x75/0x770 [ 1738.516973] alloc_pages_current+0x155/0x260 [ 1738.521387] ion_page_pool_alloc+0x118/0x1b0 [ 1738.525798] ion_system_heap_allocate+0x133/0x8c0 [ 1738.530640] ? ion_alloc+0x187/0x810 [ 1738.534350] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1738.539799] ? ion_system_contig_heap_create+0x130/0x130 [ 1738.545789] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1738.550814] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1738.555680] ion_alloc+0x204/0x810 [ 1738.559246] ? ion_dma_buf_release+0x40/0x40 [ 1738.563661] ? __might_fault+0x177/0x1b0 [ 1738.567729] ion_ioctl+0xea/0x1f0 [ 1738.571197] ? ion_query_heaps+0x360/0x360 [ 1738.575630] ? _raw_spin_unlock+0x29/0x40 [ 1738.579779] ? ion_query_heaps+0x360/0x360 [ 1738.584039] do_vfs_ioctl+0x75a/0xff0 [ 1738.587837] ? ioctl_preallocate+0x1a0/0x1a0 [ 1738.592256] ? lock_downgrade+0x740/0x740 [ 1738.596412] ? __fget+0x225/0x360 [ 1738.599861] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.603833] ? security_file_ioctl+0x83/0xb0 [ 1738.608235] SyS_ioctl+0x7f/0xb0 [ 1738.611597] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.615588] do_syscall_64+0x1d5/0x640 [ 1738.619477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1738.624665] RIP: 0033:0x466459 [ 1738.627843] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.635546] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1738.642826] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1738.650530] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1738.658021] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1738.665314] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1738.676484] CPU: 0 PID: 18530 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1738.684574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.690586] syz-executor.0 cpuset= [ 1738.693945] Call Trace: [ 1738.693959] / [ 1738.697498] dump_stack+0x1b2/0x281 [ 1738.700068] mems_allowed=0-1 [ 1738.701773] warn_alloc.cold+0x96/0x1cc [ 1738.701785] ? zone_watermark_ok_safe+0x220/0x220 [ 1738.701805] __alloc_pages_nodemask+0x2127/0x2720 [ 1738.701822] ? lock_acquire+0x170/0x3f0 [ 1738.726244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1738.731090] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1738.736564] ? __mutex_unlock_slowpath+0x75/0x770 [ 1738.741427] alloc_pages_current+0x155/0x260 [ 1738.745851] ion_page_pool_alloc+0x118/0x1b0 [ 1738.750535] ion_system_heap_allocate+0x133/0x8c0 [ 1738.755472] ? ion_alloc+0x187/0x810 [ 1738.759182] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1738.764642] ? ion_system_contig_heap_create+0x130/0x130 [ 1738.770109] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1738.775941] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1738.780782] ion_alloc+0x204/0x810 [ 1738.784413] ? ion_dma_buf_release+0x40/0x40 [ 1738.788829] ? __might_fault+0x177/0x1b0 [ 1738.792883] ion_ioctl+0xea/0x1f0 [ 1738.796327] ? ion_query_heaps+0x360/0x360 [ 1738.800554] ? ion_query_heaps+0x360/0x360 [ 1738.804785] do_vfs_ioctl+0x75a/0xff0 [ 1738.808580] ? ioctl_preallocate+0x1a0/0x1a0 [ 1738.812984] ? lock_downgrade+0x740/0x740 [ 1738.817305] ? __fget+0x225/0x360 [ 1738.820778] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.824748] ? security_file_ioctl+0x83/0xb0 [ 1738.829152] SyS_ioctl+0x7f/0xb0 [ 1738.832537] ? do_vfs_ioctl+0xff0/0xff0 [ 1738.836513] do_syscall_64+0x1d5/0x640 [ 1738.840409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1738.845614] RIP: 0033:0x466459 [ 1738.848796] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.856508] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1738.863795] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1738.871081] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1738.878909] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1738.886187] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1738.893482] CPU: 1 PID: 18496 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1738.901411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.910765] Call Trace: [ 1738.913361] dump_stack+0x1b2/0x281 [ 1738.917027] warn_alloc.cold+0x96/0x1cc [ 1738.921014] ? zone_watermark_ok_safe+0x220/0x220 [ 1738.925876] __alloc_pages_nodemask+0x2127/0x2720 [ 1738.930736] ? lock_acquire+0x170/0x3f0 [ 1738.934731] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1738.939609] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1738.945077] ? __mutex_unlock_slowpath+0x75/0x770 [ 1738.949948] ? retint_kernel+0x2d/0x2d [ 1738.953847] alloc_pages_current+0x155/0x260 [ 1738.958267] ion_page_pool_alloc+0x118/0x1b0 [ 1738.962687] ion_system_heap_allocate+0x133/0x8c0 [ 1738.967542] ? _raw_spin_unlock+0x29/0x40 [ 1738.971697] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1738.976634] ? ion_system_contig_heap_create+0x130/0x130 [ 1738.982097] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1738.987035] ion_alloc+0x27a/0x810 [ 1738.990595] ? ion_dma_buf_release+0x40/0x40 [ 1738.995009] ? __might_fault+0x177/0x1b0 [ 1738.999863] ion_ioctl+0xea/0x1f0 [ 1739.003333] ? ion_query_heaps+0x360/0x360 [ 1739.007573] ? ion_query_heaps+0x360/0x360 [ 1739.011810] do_vfs_ioctl+0x75a/0xff0 [ 1739.015617] ? ioctl_preallocate+0x1a0/0x1a0 [ 1739.020101] ? lock_downgrade+0x740/0x740 [ 1739.024263] ? __fget+0x225/0x360 [ 1739.027726] ? do_vfs_ioctl+0xff0/0xff0 [ 1739.031709] ? security_file_ioctl+0x83/0xb0 [ 1739.036124] SyS_ioctl+0x7f/0xb0 [ 1739.039928] ? do_vfs_ioctl+0xff0/0xff0 [ 1739.043912] do_syscall_64+0x1d5/0x640 [ 1739.047900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1739.053152] RIP: 0033:0x466459 [ 1739.056487] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1739.064312] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1739.071681] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1739.078969] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1739.086430] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1739.093794] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1739.104546] Mem-Info: [ 1739.107016] active_anon:15194 inactive_anon:18148 isolated_anon:0 [ 1739.107016] active_file:2512 inactive_file:4343 isolated_file:0 [ 1739.107016] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1739.107016] slab_reclaimable:13084 slab_unreclaimable:118414 [ 1739.107016] mapped:57419 shmem:19213 pagetables:766 bounce:0 [ 1739.107016] free:152066 free_pcp:27 free_cma:0 [ 1739.141096] Node 0 active_anon:60680kB inactive_anon:64456kB active_file:10048kB inactive_file:17368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194860kB dirty:8kB writeback:0kB shmem:68644kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1739.170933] Node 1 active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.197683] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.224712] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1739.229765] Node 0 DMA32 free:532948kB min:36200kB low:45248kB high:54296kB active_anon:60680kB inactive_anon:64456kB active_file:10048kB inactive_file:17368kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2900kB bounce:0kB free_pcp:180kB local_pcp:88kB free_cma:0kB [ 1739.260605] lowmem_reserve[]: 0 0 0 0 0 [ 1739.264625] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.291686] lowmem_reserve[]: 0 0 0 0 0 [ 1739.299923] Node 1 Normal free:42916kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.329923] lowmem_reserve[]: 0 0 0 0 0 [ 1739.350608] Node 0 DMA: 14*4kB (UE) 19*8kB (UE) 26*16kB (UE) 27*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11024kB [ 1739.375610] Node 0 DMA32: 57*4kB (ME) 1286*8kB (UME) 12464*16kB (UME) 7200*32kB (UME) 17*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 441940kB [ 1739.412841] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1739.477399] Node 1 Normal: 313*4kB (UM) 956*8kB (UM) 853*16kB (UME) 637*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42932kB [ 1739.512079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1739.550712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1739.559411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1739.590693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1739.599311] 25841 total pagecache pages [ 1739.630599] 0 pages in swap cache [ 1739.634094] Swap cache stats: add 0, delete 0, find 0/0 [ 1739.639499] Free swap = 0kB [ 1739.650626] Total swap = 0kB [ 1739.653693] 2097051 pages RAM [ 1739.656882] 0 pages HighMem/MovableOnly [ 1739.674037] 363849 pages reserved [ 1739.682578] 0 pages cma reserved [ 1739.772716] IPVS: ftp: loaded support on port[0] = 21 [ 1739.889766] IPVS: ftp: loaded support on port[0] = 21 [ 1740.040939] oom_reaper: reaped process 18541 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1740.087117] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1740.104158] systemd-journal cpuset=/ mems_allowed=0-1 [ 1740.115821] CPU: 1 PID: 18507 Comm: systemd-journal Not tainted 4.14.231-syzkaller #0 [ 1740.123819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.133198] Call Trace: [ 1740.135791] dump_stack+0x1b2/0x281 [ 1740.139517] dump_header+0x178/0x82f [ 1740.143269] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1740.148379] ? ___ratelimit+0x2cd/0x530 [ 1740.152361] oom_kill_process.cold+0x10/0xa40 [ 1740.156863] out_of_memory+0xe3e/0x1190 [ 1740.160839] ? oom_killer_disable+0x1c0/0x1c0 [ 1740.165341] ? mutex_trylock+0x152/0x1a0 [ 1740.169403] __alloc_pages_nodemask+0x23e1/0x2720 [ 1740.174271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1740.179127] alloc_pages_current+0x155/0x260 [ 1740.183544] filemap_fault+0x11a1/0x1ad0 [ 1740.187788] ext4_filemap_fault+0x84/0xb0 [ 1740.191950] __do_fault+0xfa/0x380 [ 1740.195505] __handle_mm_fault+0x2497/0x4620 [ 1740.199922] ? vm_insert_page+0x7c0/0x7c0 [ 1740.204094] ? mark_held_locks+0xa6/0xf0 [ 1740.208153] handle_mm_fault+0x455/0x9c0 [ 1740.212215] __do_page_fault+0x549/0xad0 [ 1740.216276] ? spurious_fault+0x640/0x640 [ 1740.220422] ? do_page_fault+0x60/0x500 [ 1740.224394] ? page_fault+0x2f/0x50 [ 1740.228022] page_fault+0x45/0x50 [ 1740.231472] RIP: 0001:0xffffffffffffffff [ 1740.235524] RSP: 485901e0:00007ffd7c38c530 EFLAGS: 7ffd7c38c340 [ 1740.263916] Mem-Info: [ 1740.275915] active_anon:14749 inactive_anon:18154 isolated_anon:0 [ 1740.275915] active_file:38 inactive_file:0 isolated_file:0 [ 1740.275915] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1740.275915] slab_reclaimable:13078 slab_unreclaimable:118903 [ 1740.275915] mapped:52676 shmem:19221 pagetables:765 bounce:0 [ 1740.275915] free:13893 free_pcp:73 free_cma:0 [ 1740.309834] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1740.321792] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1740.336800] Node 0 active_anon:58900kB inactive_anon:64480kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175888kB dirty:52kB writeback:0kB shmem:68676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1740.360721] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1740.367835] syz-executor.3 cpuset= [ 1740.369729] CPU: 0 PID: 18496 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1740.369731] / mems_allowed=0-1 [ 1740.373265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.373270] Call Trace: [ 1740.373292] dump_stack+0x1b2/0x281 [ 1740.373305] warn_alloc.cold+0x96/0x1cc [ 1740.373316] ? zone_watermark_ok_safe+0x220/0x220 [ 1740.373325] ? usleep_range+0x130/0x130 [ 1740.373333] ? try_to_free_pages+0x23f/0x6e0 [ 1740.373343] ? _find_next_bit+0xdb/0x100 [ 1740.373352] ? run_timer_softirq+0x5a0/0x5a0 [ 1740.373367] __alloc_pages_nodemask+0x2127/0x2720 [ 1740.390651] Node 1 active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1740.394204] ? lock_acquire+0x170/0x3f0 [ 1740.396773] Node 0 [ 1740.400399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1740.420612] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.422287] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1740.426678] lowmem_reserve[]: [ 1740.431966] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1740.431981] ? alloc_pages_current+0x16/0x260 [ 1740.431992] alloc_pages_current+0x155/0x260 [ 1740.432006] ion_page_pool_alloc+0x118/0x1b0 [ 1740.500599] 0 [ 1740.503451] ion_system_heap_allocate+0x133/0x8c0 [ 1740.509067] 2717 [ 1740.513676] ? _raw_spin_unlock+0x29/0x40 [ 1740.513687] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1740.513697] ? ion_system_contig_heap_create+0x130/0x130 [ 1740.513710] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1740.513720] ion_alloc+0x27a/0x810 [ 1740.530600] 2718 [ 1740.531247] ? ion_dma_buf_release+0x40/0x40 [ 1740.536514] 2718 [ 1740.541534] ? __might_fault+0x177/0x1b0 [ 1740.541548] ion_ioctl+0xea/0x1f0 [ 1740.541559] ? ion_query_heaps+0x360/0x360 [ 1740.541573] ? ion_query_heaps+0x360/0x360 [ 1740.570605] 2718 [ 1740.573780] do_vfs_ioctl+0x75a/0xff0 [ 1740.582244] ? ioctl_preallocate+0x1a0/0x1a0 [ 1740.582255] ? lock_downgrade+0x740/0x740 [ 1740.582267] ? __fget+0x225/0x360 [ 1740.582275] ? do_vfs_ioctl+0xff0/0xff0 [ 1740.582291] ? security_file_ioctl+0x83/0xb0 [ 1740.600601] Node 0 [ 1740.604098] SyS_ioctl+0x7f/0xb0 [ 1740.608500] DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:58900kB inactive_anon:64480kB active_file:832kB inactive_file:300kB unevictable:0kB writepending:52kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2896kB bounce:0kB free_pcp:172kB local_pcp:128kB free_cma:0kB [ 1740.610717] ? do_vfs_ioctl+0xff0/0xff0 [ 1740.610730] do_syscall_64+0x1d5/0x640 [ 1740.610744] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1740.610752] RIP: 0033:0x466459 [ 1740.610759] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 [ 1740.620599] lowmem_reserve[]: [ 1740.642642] ORIG_RAX: 0000000000000010 [ 1740.642649] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1740.642653] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1740.642658] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1740.642662] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1740.642667] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1740.668967] warn_alloc_show_mem: 2 callbacks suppressed [ 1740.668971] Mem-Info: [ 1740.681212] CPU: 1 PID: 18541 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1740.703019] active_anon:14749 inactive_anon:18154 isolated_anon:0 [ 1740.703019] active_file:38 inactive_file:0 isolated_file:0 [ 1740.703019] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1740.703019] slab_reclaimable:13078 slab_unreclaimable:118903 [ 1740.703019] mapped:52676 shmem:19221 pagetables:765 bounce:0 [ 1740.703019] free:13893 free_pcp:73 free_cma:0 [ 1740.708709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.724917] Node 0 active_anon:58900kB inactive_anon:64480kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175888kB dirty:52kB writeback:0kB shmem:68676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1740.757606] Call Trace: [ 1740.757632] dump_stack+0x1b2/0x281 [ 1740.757646] warn_alloc.cold+0x96/0x1cc [ 1740.757657] ? zone_watermark_ok_safe+0x220/0x220 [ 1740.757667] ? usleep_range+0x130/0x130 [ 1740.757675] ? try_to_free_pages+0x23f/0x6e0 [ 1740.757685] ? _find_next_bit+0xdb/0x100 [ 1740.757694] ? run_timer_softirq+0x5a0/0x5a0 [ 1740.757711] __alloc_pages_nodemask+0x2127/0x2720 [ 1740.757728] ? lock_acquire+0x170/0x3f0 [ 1740.757743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1740.757752] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1740.757773] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1740.778105] Node 1 active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1740.796211] alloc_pages_current+0x155/0x260 [ 1740.796226] ion_page_pool_alloc+0x118/0x1b0 [ 1740.796236] ion_system_heap_allocate+0x133/0x8c0 [ 1740.796245] ? ion_alloc+0x187/0x810 [ 1740.796255] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1740.796263] ? ion_system_contig_heap_create+0x130/0x130 [ 1740.796273] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1740.796283] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1740.796294] ion_alloc+0x204/0x810 [ 1740.796308] ? ion_dma_buf_release+0x40/0x40 [ 1740.796320] ? __might_fault+0x177/0x1b0 [ 1740.796331] ion_ioctl+0xea/0x1f0 [ 1740.809835] Node 0 [ 1740.811490] ? ion_query_heaps+0x360/0x360 [ 1740.811503] ? _raw_spin_unlock+0x29/0x40 [ 1740.811511] ? ion_query_heaps+0x360/0x360 [ 1740.811521] do_vfs_ioctl+0x75a/0xff0 [ 1740.811533] ? ioctl_preallocate+0x1a0/0x1a0 [ 1740.811546] ? lock_downgrade+0x740/0x740 [ 1740.815521] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.819922] ? __fget+0x225/0x360 [ 1740.834980] lowmem_reserve[]: [ 1740.837161] ? do_vfs_ioctl+0xff0/0xff0 [ 1740.846418] 0 [ 1740.846505] ? security_file_ioctl+0x83/0xb0 [ 1740.858428] 2717 [ 1740.878669] SyS_ioctl+0x7f/0xb0 [ 1740.878679] ? do_vfs_ioctl+0xff0/0xff0 [ 1740.878690] do_syscall_64+0x1d5/0x640 [ 1740.878705] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1740.878713] RIP: 0033:0x466459 [ 1740.878717] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.878726] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1740.878736] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1740.878741] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1740.878745] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1740.878750] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1740.883444] 0 [ 1740.898490] 2718 [ 1740.901822] 0 0 [ 1740.921360] 2718 [ 1740.925317] 0 [ 1740.929327] 2718 [ 1740.932835] 0 [ 1740.932843] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.932867] lowmem_reserve[]: [ 1740.951655] 0 0 [ 1740.960008] Node 0 [ 1740.960468] 0 [ 1740.999672] DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:58900kB inactive_anon:64480kB active_file:468kB inactive_file:52kB unevictable:0kB writepending:52kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2896kB bounce:0kB free_pcp:172kB local_pcp:44kB free_cma:0kB [ 1741.004658] 0 [ 1741.021312] lowmem_reserve[]: [ 1741.022716] 0 [ 1741.025843] 0 [ 1741.033960] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1741.033981] lowmem_reserve[]: 0 0 0 [ 1741.055664] 0 [ 1741.080616] 0 [ 1741.151322] 0 [ 1741.152835] 0 [ 1741.153985] 0 [ 1741.165828] 0 [ 1741.232274] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1741.251819] Node 0 DMA: 9*4kB (UE) 18*8kB (UE) 26*16kB (UE) 27*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10996kB [ 1741.275116] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1741.281132] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1741.281682] CPU: 1 PID: 18541 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1741.315004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.324414] Call Trace: [ 1741.327033] dump_stack+0x1b2/0x281 [ 1741.329479] lowmem_reserve[]: [ 1741.330937] warn_alloc.cold+0x96/0x1cc [ 1741.330950] ? zone_watermark_ok_safe+0x220/0x220 [ 1741.330971] __alloc_pages_nodemask+0x2127/0x2720 [ 1741.330987] ? lock_acquire+0x170/0x3f0 [ 1741.334083] 0 [ 1741.338145] ? lock_acquire+0x170/0x3f0 [ 1741.343213] 0 [ 1741.348018] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1741.352112] 0 [ 1741.353859] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1741.357831] 0 [ 1741.359651] ? __mutex_unlock_slowpath+0x75/0x770 [ 1741.364598] 0 [ 1741.366274] alloc_pages_current+0x155/0x260 [ 1741.373499] ion_page_pool_alloc+0x118/0x1b0 [ 1741.378419] Node 1 [ 1741.380335] ion_system_heap_allocate+0x133/0x8c0 [ 1741.385644] Normal free:35072kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1741.389778] ? _raw_spin_unlock+0x29/0x40 [ 1741.392732] lowmem_reserve[]: [ 1741.397648] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1741.425673] 0 [ 1741.429645] ? ion_system_contig_heap_create+0x130/0x130 [ 1741.432771] 0 [ 1741.437738] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1741.439511] 0 [ 1741.445078] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1741.445090] ion_alloc+0x27a/0x810 [ 1741.445103] ? ion_dma_buf_release+0x40/0x40 [ 1741.445114] ? __might_fault+0x177/0x1b0 [ 1741.445123] ion_ioctl+0xea/0x1f0 [ 1741.445131] ? ion_query_heaps+0x360/0x360 [ 1741.445145] ? _raw_spin_unlock+0x29/0x40 [ 1741.445155] ? ion_query_heaps+0x360/0x360 [ 1741.446996] 0 [ 1741.451973] do_vfs_ioctl+0x75a/0xff0 [ 1741.451986] ? ioctl_preallocate+0x1a0/0x1a0 [ 1741.451995] ? lock_downgrade+0x740/0x740 [ 1741.452007] ? __fget+0x225/0x360 [ 1741.452016] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.452026] ? security_file_ioctl+0x83/0xb0 [ 1741.452035] SyS_ioctl+0x7f/0xb0 [ 1741.452042] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.452052] do_syscall_64+0x1d5/0x640 [ 1741.452067] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1741.453852] 0 [ 1741.458867] RIP: 0033:0x466459 [ 1741.467131] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 [ 1741.471617] Node 0 [ 1741.475418] ORIG_RAX: 0000000000000010 [ 1741.475427] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1741.479665] DMA: [ 1741.483974] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1741.483980] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1741.483984] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1741.483989] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1741.488640] Bluetooth: hci2 command 0x0409 tx timeout [ 1741.496125] 9*4kB [ 1741.502353] Bluetooth: hci0 command 0x0409 tx timeout [ 1741.503777] (UE) [ 1741.533823] Node 0 [ 1741.539417] 18*8kB [ 1741.560595] DMA32: [ 1741.576381] (UE) 26*16kB (UE) 27*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10996kB [ 1741.616039] 597*4kB [ 1741.628474] Node 0 [ 1741.630003] (UME) [ 1741.630913] DMA32: [ 1741.633571] 820*8kB [ 1741.635600] 597*4kB (UME) 819*8kB (UME) 1153*16kB (UME) 1975*32kB (UME) [ 1741.638053] (UME) [ 1741.640274] 1*64kB (U) 2*128kB (U) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 91932kB [ 1741.652510] 1153*16kB [ 1741.659474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1741.665560] (UME) [ 1741.675715] Node 1 [ 1741.677154] 1974*32kB [ 1741.691141] Normal: 229*4kB (UM) 556*8kB (UM) 596*16kB (UME) 641*32kB (UM) 44*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38228kB [ 1741.695665] (UME) 1*64kB [ 1741.720983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.732712] (U) 2*128kB (U) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 91908kB [ 1741.747943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.757918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1741.773219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.776885] chnl_net:caif_netlink_parms(): no params data found [ 1741.783509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.798474] 19998 total pagecache pages [ 1741.804007] 0 pages in swap cache [ 1741.808284] Swap cache stats: add 0, delete 0, find 0/0 [ 1741.808794] Node 1 [ 1741.818086] Free swap = 0kB [ 1741.820891] Normal: 229*4kB (UM) 554*8kB (UM) 595*16kB (UME) 638*32kB (UM) 97*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41492kB [ 1741.825449] Total swap = 0kB [ 1741.841704] 2097051 pages RAM [ 1741.844826] 0 pages HighMem/MovableOnly [ 1741.848806] 363849 pages reserved [ 1741.853642] 0 pages cma reserved [ 1741.855810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.870821] warn_alloc_show_mem: 1 callbacks suppressed [ 1741.870824] Mem-Info: [ 1741.874224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.876258] active_anon:14747 inactive_anon:18154 isolated_anon:12 [ 1741.876258] active_file:190 inactive_file:583 isolated_file:0 [ 1741.876258] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1741.876258] slab_reclaimable:13067 slab_unreclaimable:118522 [ 1741.876258] mapped:53233 shmem:19221 pagetables:765 bounce:0 [ 1741.876258] free:35408 free_pcp:102 free_cma:0 [ 1741.905216] chnl_net:caif_netlink_parms(): no params data found [ 1741.928915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.939133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.952038] 19998 total pagecache pages [ 1741.956037] 0 pages in swap cache [ 1741.959746] Swap cache stats: add 0, delete 0, find 0/0 [ 1741.970167] Node 0 active_anon:58892kB inactive_anon:64480kB active_file:760kB inactive_file:2328kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:178116kB dirty:100kB writeback:0kB shmem:68676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1741.980791] Free swap = 0kB [ 1741.999663] Node 1 active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1742.003240] Total swap = 0kB [ 1742.032841] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.033949] 2097051 pages RAM [ 1742.063913] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1742.069491] Node 0 DMA32 free:87188kB min:36200kB low:45248kB high:54296kB active_anon:58944kB inactive_anon:64480kB active_file:736kB inactive_file:2400kB unevictable:0kB writepending:104kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2896kB bounce:0kB free_pcp:276kB local_pcp:228kB free_cma:0kB [ 1742.076487] 0 pages HighMem/MovableOnly [ 1742.100787] lowmem_reserve[]: 0 0 0 0 0 [ 1742.108777] 363849 pages reserved [ 1742.110930] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.113823] 0 pages cma reserved [ 1742.144028] lowmem_reserve[]: 0 0 0 0 0 [ 1742.145029] Out of memory (oom_kill_allocating_task): Kill process 18507 (systemd-journal) score 0 or sacrifice child [ 1742.148086] Node 1 Normal free:43052kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:72kB local_pcp:32kB free_cma:0kB [ 1742.161094] Killed process 18507 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1560kB [ 1742.188731] lowmem_reserve[]: 0 0 0 0 0 [ 1742.203323] Node 0 DMA: 9*4kB (UE) 18*8kB (UE) 26*16kB (UE) 27*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10996kB [ 1742.219879] Node 0 DMA32: 472*4kB (UE) 365*8kB (UME) 1134*16kB (UME) 1973*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 86152kB [ 1742.234230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1742.245825] Node 1 Normal: 229*4kB (UM) 556*8kB (UM) 596*16kB (UME) 640*32kB (UM) 121*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43124kB [ 1742.260189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1742.269475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1742.278315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1742.287564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1742.296311] 21347 total pagecache pages [ 1742.300325] 0 pages in swap cache 07:57:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) 07:57:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1742.304146] Swap cache stats: add 0, delete 0, find 0/0 [ 1742.309596] Free swap = 0kB [ 1742.313314] Total swap = 0kB [ 1742.316809] 2097051 pages RAM [ 1742.320315] 0 pages HighMem/MovableOnly [ 1742.325142] 363849 pages reserved [ 1742.329256] 0 pages cma reserved 07:57:18 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) [ 1742.366624] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1742.403221] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1742.428539] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1742.458453] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1742.486649] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1742.499300] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1742.528866] systemd[1]: Stopped Journal Service. [ 1742.530793] CPU: 0 PID: 18790 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1742.541574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.551044] Call Trace: [ 1742.553648] dump_stack+0x1b2/0x281 [ 1742.557287] warn_alloc.cold+0x96/0x1cc [ 1742.561414] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1742.567588] ? zone_watermark_ok_safe+0x220/0x220 [ 1742.572300] systemd[1]: Starting Journal Service... [ 1742.572559] __alloc_pages_nodemask+0x2127/0x2720 [ 1742.582425] ? lock_acquire+0x170/0x3f0 [ 1742.586442] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1742.591445] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1742.596924] ? __mutex_unlock_slowpath+0x75/0x770 [ 1742.601781] ? retint_kernel+0x2d/0x2d [ 1742.605791] alloc_pages_current+0x155/0x260 [ 1742.610216] ion_page_pool_alloc+0x118/0x1b0 [ 1742.614760] ion_system_heap_allocate+0x133/0x8c0 [ 1742.620330] ? ion_alloc+0x187/0x810 [ 1742.624053] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1742.629531] ? ion_system_contig_heap_create+0x130/0x130 [ 1742.635271] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1742.640411] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1742.645283] ion_alloc+0x204/0x810 [ 1742.648855] ? ion_dma_buf_release+0x40/0x40 [ 1742.653364] ? __might_fault+0x177/0x1b0 [ 1742.657538] ion_ioctl+0xea/0x1f0 [ 1742.661098] ? ion_query_heaps+0x360/0x360 [ 1742.666302] ? ion_query_heaps+0x360/0x360 [ 1742.670724] do_vfs_ioctl+0x75a/0xff0 [ 1742.675114] ? ioctl_preallocate+0x1a0/0x1a0 [ 1742.679540] ? lock_downgrade+0x740/0x740 [ 1742.683731] ? __fget+0x225/0x360 [ 1742.687198] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.691585] ? security_file_ioctl+0x83/0xb0 [ 1742.696558] SyS_ioctl+0x7f/0xb0 [ 1742.700469] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.704640] do_syscall_64+0x1d5/0x640 [ 1742.708653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1742.713877] RIP: 0033:0x466459 [ 1742.717077] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:57:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x3, 0x10}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000700)='team\x00', r5) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x45c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x254, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x39, 0x3, "0268fb71074b6a4b317a80ed2e4469d0261e66e2843c91c94c8c654465142e0fa63b2bc3f336eebc357be3d830a8664aedca0ad19c"}, @TIPC_NLA_NODE_ID={0x95, 0x3, "04d32eb34ee66a49554c97e1822b47ec794cb9a1307cd2e72110e7f4393e1f7914da9ec3258253dabe3fc3681032e87a58544a884b27854e28f804d902132758cb68ddfaed2ee909671981bb759ad07bf0354e9b9257d6218795ffca64a836bdd54bc72f85b5a6392acd8b0176da1637745e24e83be5cce758e28cc32b1d08c4901006a0bad607c77c380d586c71a3c66d"}, @TIPC_NLA_NODE_ID={0x53, 0x3, "bf2ea0d00393efc0bef7a4e21aaa89e8cda470209f100dc8366615fb31b2e1031f71a8509839bc427a4a94e9b62635bce051eb05e912fcadfd33e81505f63d170a532377948db564eb4fd33b753bec"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a0aca9ad7e25df22f847dc838f025ed9a9b723ba01562119c4133b21c772cc9c9e9ef0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "df467ed70e6061eb4a9bfdbba167c83e59b328c310207eab96e3c85df4d9c60c18be"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5f00cd055372453697a19295f449eca4b63e673e19"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "17fef26c896b5b9e35ba2d5d28b6d1e47460b4bbb27466e62e"}}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a0d5e34361785da6e8c9a15b9e9b8f4e0690dc21e588af33f4b629090ba9ee0dac1caa08"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x32b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x859}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @broadcast}, 0x0, 0x3, 0x1, 0x1}}, 0x2e) [ 1742.724809] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1742.732547] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1742.740049] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1742.747402] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1742.754927] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1742.806773] (journald) invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1742.852409] (journald) cpuset=/ mems_allowed=0-1 [ 1742.871821] CPU: 0 PID: 18802 Comm: (journald) Not tainted 4.14.231-syzkaller #0 [ 1742.880035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.893040] Call Trace: [ 1742.895657] dump_stack+0x1b2/0x281 [ 1742.899310] dump_header+0x178/0x82f [ 1742.903054] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1742.908187] ? ___ratelimit+0x2cd/0x530 [ 1742.912173] oom_kill_process.cold+0x10/0xa40 [ 1742.916680] out_of_memory+0xe3e/0x1190 [ 1742.920663] ? oom_killer_disable+0x1c0/0x1c0 [ 1742.925159] ? mutex_trylock+0x152/0x1a0 [ 1742.929244] __alloc_pages_nodemask+0x23e1/0x2720 [ 1742.934543] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1742.939405] ? lock_acquire+0x170/0x3f0 [ 1742.943750] ? lock_downgrade+0x740/0x740 [ 1742.947926] alloc_pages_current+0x155/0x260 [ 1742.952374] ? do_raw_spin_unlock+0x164/0x220 [ 1742.956985] __change_page_attr_set_clr+0x322/0x2280 [ 1742.962216] ? slow_virt_to_phys+0x300/0x300 [ 1742.966647] ? mark_held_locks+0xa6/0xf0 [ 1742.970718] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1742.975837] ? __change_page_attr_set_clr+0x1952/0x2280 [ 1742.981583] ? lock_acquire+0x170/0x3f0 [ 1742.985621] ? lock_downgrade+0x740/0x740 [ 1742.989797] __change_page_attr_set_clr+0x1a45/0x2280 [ 1742.995011] ? slow_virt_to_phys+0x300/0x300 [ 1742.999427] ? __mutex_unlock_slowpath+0x75/0x770 [ 1743.004297] ? wait_for_completion_io+0x10/0x10 [ 1743.009087] ? vm_unmap_aliases+0x3a5/0x460 [ 1743.013415] change_page_attr_set_clr+0x2a2/0xa30 [ 1743.018353] ? __change_page_attr_set_clr+0x2280/0x2280 [ 1743.023740] ? bpf_convert_filter+0x16e3/0x1b50 [ 1743.028413] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1743.034265] set_memory_ro+0x68/0x80 [ 1743.038044] ? _set_memory_wb+0x80/0x80 [ 1743.042049] ? __bpf_prog_run64+0xb0/0xb0 [ 1743.046200] bpf_prog_select_runtime+0x143/0x4e0 [ 1743.050987] bpf_migrate_filter+0x242/0x2d0 [ 1743.055338] ? __sk_attach_prog+0x360/0x360 [ 1743.059688] ? seccomp_check_filter+0xba/0x170 [ 1743.064274] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1743.071914] bpf_prepare_filter+0x14c/0x320 [ 1743.076250] bpf_prog_create_from_user+0x1a7/0x290 [ 1743.082070] ? hardlockup_detector_perf_cleanup+0x180/0x180 [ 1743.087915] do_seccomp+0x31b/0x19c0 [ 1743.091634] ? syscall_trace_enter+0x486/0xc20 [ 1743.096241] ? __seccomp_filter+0xd60/0xd60 [ 1743.100619] ? do_syscall_64+0x4c/0x640 [ 1743.104631] ? prctl_get_seccomp+0x50/0x50 [ 1743.108880] do_syscall_64+0x1d5/0x640 [ 1743.112782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1743.117970] RIP: 0033:0x7f43d4d29469 [ 1743.121698] RSP: 002b:00007ffc2f696508 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1743.129421] RAX: ffffffffffffffda RBX: 0000563744850100 RCX: 00007f43d4d29469 [ 1743.136877] RDX: 0000563744850100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1743.144341] RBP: 00005637447dfed0 R08: 00000000bcb59e00 R09: 00005637447a4e90 [ 1743.151605] R10: 00005637448cc820 R11: 0000000000000246 R12: 00007ffc2f696558 [ 1743.158875] R13: 0000000000000000 R14: 0000000040000003 R15: 0000563744850100 [ 1743.169968] Mem-Info: [ 1743.172723] active_anon:14789 inactive_anon:18154 isolated_anon:0 [ 1743.172723] active_file:757 inactive_file:774 isolated_file:32 [ 1743.172723] unevictable:0 dirty:46 writeback:0 unstable:0 [ 1743.172723] slab_reclaimable:13061 slab_unreclaimable:118357 [ 1743.172723] mapped:53689 shmem:19221 pagetables:800 bounce:0 [ 1743.172723] free:14567 free_pcp:205 free_cma:0 [ 1743.213412] Node 0 active_anon:59016kB inactive_anon:64476kB active_file:2796kB inactive_file:2932kB unevictable:0kB isolated(anon):0kB isolated(file):152kB mapped:179732kB dirty:164kB writeback:0kB shmem:68676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1743.249270] Node 1 active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1743.286521] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.321845] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1743.333275] Node 0 DMA32 free:17728kB min:36200kB low:45248kB high:54296kB active_anon:59016kB inactive_anon:64476kB active_file:1352kB inactive_file:1552kB unevictable:0kB writepending:164kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2940kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 1743.365646] lowmem_reserve[]: 0 0 0 0 0 [ 1743.372031] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.400795] lowmem_reserve[]: 0 0 0 0 0 [ 1743.404929] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.436138] lowmem_reserve[]: 0 0 0 0 0 [ 1743.440239] Node 0 DMA: 2*4kB (UE) 18*8kB (UE) 26*16kB (UE) 27*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1743.457074] Node 0 DMA32: 564*4kB (UME) 510*8kB (UME) 153*16kB (UME) 328*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19344kB [ 1743.474687] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1743.494291] Node 1 Normal: 17*4kB (M) 7*8kB (UM) 6*16kB (UME) 478*32kB (UM) 178*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26908kB [ 1743.510088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.528766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.540147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.549170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.557888] 19318 total pagecache pages [ 1743.562469] 0 pages in swap cache [ 1743.566040] Swap cache stats: add 0, delete 0, find 0/0 [ 1743.570875] Bluetooth: hci0 command 0x041b tx timeout [ 1743.571986] Free swap = 0kB [ 1743.580075] Total swap = 0kB [ 1743.581818] Bluetooth: hci2 command 0x041b tx timeout [ 1743.583164] 2097051 pages RAM [ 1743.594230] 0 pages HighMem/MovableOnly [ 1743.598385] 363849 pages reserved [ 1743.604304] 0 pages cma reserved [ 1743.607734] Out of memory (oom_kill_allocating_task): Kill process 18802 ((journald)) score 0 or sacrifice child [ 1743.618135] Killed process 18802 ((journald)) total-vm:205032kB, anon-rss:2036kB, file-rss:0kB, shmem-rss:0kB [ 1743.630693] oom_reaper: reaped process 18802 ((journald)), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1743.721705] syz-fuzzer invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1743.743879] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1743.749302] CPU: 1 PID: 7950 Comm: syz-fuzzer Not tainted 4.14.231-syzkaller #0 [ 1743.756751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.766212] Call Trace: [ 1743.768871] dump_stack+0x1b2/0x281 [ 1743.772555] dump_header+0x178/0x82f [ 1743.776301] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1743.781415] ? ___ratelimit+0x2cd/0x530 [ 1743.789675] oom_kill_process.cold+0x10/0xa40 [ 1743.798548] out_of_memory+0xe3e/0x1190 [ 1743.802548] ? oom_killer_disable+0x1c0/0x1c0 [ 1743.807067] ? mutex_trylock+0x152/0x1a0 [ 1743.811138] __alloc_pages_nodemask+0x23e1/0x2720 [ 1743.816002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1743.820972] ? __lock_acquire+0x5fc/0x3f20 [ 1743.825207] ? __lock_acquire+0x5fc/0x3f20 [ 1743.829458] alloc_pages_vma+0xd2/0x6d0 [ 1743.833615] __handle_mm_fault+0x25fa/0x4620 [ 1743.838059] ? vm_insert_page+0x7c0/0x7c0 [ 1743.842283] ? _raw_spin_unlock_irq+0x24/0x80 [ 1743.846764] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1743.851770] ? mark_held_locks+0xa6/0xf0 [ 1743.856100] handle_mm_fault+0x455/0x9c0 [ 1743.860572] __do_page_fault+0x549/0xad0 [ 1743.864820] ? spurious_fault+0x640/0x640 [ 1743.869093] ? do_page_fault+0x60/0x500 [ 1743.873246] ? page_fault+0x2f/0x50 [ 1743.876874] page_fault+0x45/0x50 [ 1743.880649] RIP: 0007:0x7 [ 1743.883437] RSP: 2000:000000c0004cf908 EFLAGS: 00000000 [ 1743.901304] Mem-Info: [ 1743.910417] active_anon:14711 inactive_anon:18153 isolated_anon:0 [ 1743.910417] active_file:10 inactive_file:27 isolated_file:0 [ 1743.910417] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1743.910417] slab_reclaimable:13064 slab_unreclaimable:118265 [ 1743.910417] mapped:52225 shmem:19221 pagetables:776 bounce:0 [ 1743.910417] free:51052 free_pcp:211 free_cma:0 [ 1743.920613] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1744.047873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.080718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.088228] device bridge_slave_0 entered promiscuous mode [ 1744.110685] Node 0 active_anon:58748kB inactive_anon:64476kB active_file:40kB inactive_file:1708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175328kB dirty:8kB writeback:0kB shmem:68676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1744.110890] syz-executor.3 cpuset= [ 1744.180789] Node 1 active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1744.186522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.217779] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.240613] / mems_allowed=0-1 [ 1744.260674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.268499] CPU: 0 PID: 18541 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1744.276404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1744.285783] Call Trace: [ 1744.288406] dump_stack+0x1b2/0x281 [ 1744.292040] warn_alloc.cold+0x96/0x1cc [ 1744.296024] ? zone_watermark_ok_safe+0x220/0x220 [ 1744.301309] ? usleep_range+0x130/0x130 [ 1744.305281] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1744.310395] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1744.315417] ? run_timer_softirq+0x5a0/0x5a0 [ 1744.319842] __alloc_pages_nodemask+0x2127/0x2720 [ 1744.324697] ? lock_acquire+0x170/0x3f0 [ 1744.328682] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1744.333527] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1744.338034] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1744.343506] ? alloc_pages_current+0x16/0x260 [ 1744.348009] alloc_pages_current+0x155/0x260 [ 1744.352430] ion_page_pool_alloc+0x118/0x1b0 [ 1744.356858] ion_system_heap_allocate+0x133/0x8c0 [ 1744.361708] ? _raw_spin_unlock+0x29/0x40 [ 1744.365858] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1744.370792] ? ion_system_contig_heap_create+0x130/0x130 [ 1744.376260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1744.382591] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1744.387449] ion_alloc+0x27a/0x810 [ 1744.390621] lowmem_reserve[]: 0 2717 [ 1744.390993] ? ion_dma_buf_release+0x40/0x40 [ 1744.391006] ? __might_fault+0x177/0x1b0 [ 1744.394711] 2718 [ 1744.399126] ion_ioctl+0xea/0x1f0 [ 1744.408653] ? ion_query_heaps+0x360/0x360 [ 1744.412921] ? _raw_spin_unlock+0x29/0x40 [ 1744.417076] ? ion_query_heaps+0x360/0x360 [ 1744.421319] do_vfs_ioctl+0x75a/0xff0 [ 1744.425130] ? ioctl_preallocate+0x1a0/0x1a0 [ 1744.429556] ? lock_downgrade+0x740/0x740 [ 1744.433796] ? __fget+0x225/0x360 [ 1744.437249] ? do_vfs_ioctl+0xff0/0xff0 [ 1744.441223] ? security_file_ioctl+0x83/0xb0 [ 1744.445636] SyS_ioctl+0x7f/0xb0 [ 1744.449018] ? do_vfs_ioctl+0xff0/0xff0 [ 1744.450620] 2718 2718 [ 1744.452988] do_syscall_64+0x1d5/0x640 [ 1744.453003] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1744.459363] RIP: 0033:0x466459 [ 1744.468182] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1744.475892] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1744.483169] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1744.490686] Node 0 [ 1744.491303] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1744.491324] DMA32 free:906516kB min:36200kB low:45248kB high:54296kB active_anon:58748kB inactive_anon:64476kB active_file:40kB inactive_file:1708kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2940kB bounce:0kB free_pcp:868kB local_pcp:152kB free_cma:0kB [ 1744.493535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1744.493543] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1744.562576] lowmem_reserve[]: 0 0 0 0 0 [ 1744.565241] device bridge_slave_1 entered promiscuous mode [ 1744.567520] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.644700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.652096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.678488] lowmem_reserve[]: 0 0 0 0 0 [ 1744.681715] device bridge_slave_0 entered promiscuous mode [ 1744.690476] Node 1 Normal free:1235240kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1744.725990] lowmem_reserve[]: 0 0 0 0 0 [ 1744.731021] Node 0 DMA: 2*4kB (UE) 22*8kB (UE) 26*16kB (UE) 27*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11320kB [ 1744.749087] Node 0 DMA32: 46*4kB (ME) 282*8kB (E) 168*16kB (UME) 40*32kB (UME) 5339*64kB (UME) 2295*128kB (UME) 605*256kB (UME) 126*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 861256kB [ 1744.767531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.772620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1744.782138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.787308] Node 1 Normal: 18*4kB (UM) 6*8kB (UM) 5*16kB (ME) 475*32kB (UM) 5685*64kB (UME) 1628*128kB (UM) 646*256kB (U) 312*512kB (U) 113*1024kB (U) 45*2048kB (U) 28*4096kB (U) = 1235304kB [ 1744.809935] device bridge_slave_1 entered promiscuous mode [ 1744.818641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1744.819597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.839022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1744.846553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1744.864483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.881523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1744.888920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1744.897297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.918337] device bridge_slave_1 left promiscuous mode [ 1744.924572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.934698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.944216] 20948 total pagecache pages [ 1744.949141] 0 pages in swap cache [ 1744.960943] device bridge_slave_0 left promiscuous mode [ 1744.968370] Swap cache stats: add 0, delete 0, find 0/0 [ 1744.975536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.983131] Free swap = 0kB [ 1744.988548] Total swap = 0kB [ 1744.999088] device veth1_macvtap left promiscuous mode [ 1745.009722] 2097051 pages RAM [ 1745.014818] 0 pages HighMem/MovableOnly [ 1745.020437] device veth0_macvtap left promiscuous mode [ 1745.027743] warn_alloc_show_mem: 1 callbacks suppressed [ 1745.027747] Mem-Info: [ 1745.031905] 363849 pages reserved [ 1745.038714] active_anon:14623 inactive_anon:18153 isolated_anon:0 [ 1745.038714] active_file:526 inactive_file:1423 isolated_file:0 [ 1745.038714] unevictable:0 dirty:21 writeback:0 unstable:0 [ 1745.038714] slab_reclaimable:13072 slab_unreclaimable:117905 [ 1745.038714] mapped:53477 shmem:19221 pagetables:767 bounce:0 [ 1745.038714] free:481217 free_pcp:150 free_cma:0 [ 1745.044122] 0 pages cma reserved [ 1745.078940] device veth1_vlan left promiscuous mode [ 1745.086872] device veth0_vlan left promiscuous mode [ 1745.120540] Node 0 active_anon:58396kB inactive_anon:64476kB active_file:3292kB inactive_file:5216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178544kB dirty:84kB writeback:0kB shmem:68676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1745.131626] Out of memory (oom_kill_allocating_task): Kill process 7950 (syz-fuzzer) score 0 or sacrifice child [ 1745.183188] Node 1 active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1745.189220] Killed process 18544 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1745.222347] Node 0 DMA free:11320kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.254691] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1745.257808] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1745.269184] Node 0 DMA32 free:607348kB min:36200kB low:45248kB high:54296kB active_anon:58396kB inactive_anon:64476kB active_file:3292kB inactive_file:5316kB unevictable:0kB writepending:84kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2756kB bounce:0kB free_pcp:896kB local_pcp:196kB free_cma:0kB [ 1745.324634] systemd[1]: Failed to start Journal Service. [ 1745.330385] lowmem_reserve[]: 0 0 0 0 0 [ 1745.338950] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.344657] systemd[1]: Dependency failed for Flush Journal to Persistent Storage. [ 1745.371096] lowmem_reserve[]: 0 0 0 0 0 [ 1745.387997] Node 1 Normal free:1235304kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:164kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1745.417800] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'. [ 1745.423550] lowmem_reserve[]: [ 1745.433789] device hsr_slave_1 left promiscuous mode [ 1745.442747] 0 0 0 0 0 [ 1745.445374] Node 0 DMA: 2*4kB (UE) 20*8kB (UE) 24*16kB (UE) 25*32kB (UE) 8*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11336kB [ 1745.455532] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1745.461257] Node 0 [ 1745.472513] device hsr_slave_0 left promiscuous mode [ 1745.476284] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1745.480061] DMA32: 31*4kB (UME) 284*8kB (ME) 88*16kB (ME) 14*32kB (UE) 430*64kB (UME) 2285*128kB (UE) 599*256kB (UE) 126*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 542108kB [ 1745.513438] team0 (unregistering): Port device team_slave_1 removed [ 1745.517318] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1745.526513] Node 0 [ 1745.531522] team0 (unregistering): Port device team_slave_0 removed [ 1745.540369] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1745.555739] systemd[1]: Stopped Journal Service. [ 1745.564225] Node 1 [ 1745.568085] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1745.577798] Normal: 18*4kB (UM) 6*8kB (UM) 5*16kB (ME) 475*32kB (UM) 5685*64kB (UME) 1628*128kB (UM) 646*256kB (U) 312*512kB (U) 113*1024kB (U) 45*2048kB (U) 28*4096kB (U) = 1235304kB [ 1745.599400] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1745.610358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.629555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.632720] systemd[1]: Starting Journal Service... [ 1745.649100] Bluetooth: hci2 command 0x040f tx timeout [ 1745.654095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1745.654639] Bluetooth: hci0 command 0x040f tx timeout [ 1745.680416] bond0 (unregistering): Released all slaves [ 1745.694098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1745.711826] 22198 total pagecache pages [ 1745.713277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1745.725437] 0 pages in swap cache [ 1745.728899] Swap cache stats: add 0, delete 0, find 0/0 [ 1745.740661] Free swap = 0kB [ 1745.743745] Total swap = 0kB [ 1745.746780] 2097051 pages RAM [ 1745.757352] 0 pages HighMem/MovableOnly [ 1745.770851] 363849 pages reserved [ 1745.774699] 0 pages cma reserved [ 1745.798958] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1745.828270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1745.909516] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1745.998793] systemd-journald[18830]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1746.017486] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1746.037356] team0: Port device team_slave_0 added [ 1746.079819] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1746.101524] team0: Port device team_slave_1 added [ 1746.187847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.194551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.264784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.286924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.304721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.374366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.391724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1746.424872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1746.485906] device hsr_slave_0 entered promiscuous mode [ 1746.505495] device hsr_slave_1 entered promiscuous mode [ 1746.525662] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1746.533062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1746.868878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1746.928755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.938496] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1746.953272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1746.959496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1746.971585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1746.981282] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1746.987400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1747.009288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1747.020429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1747.030255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1747.042986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.049533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.062162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1747.075827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1747.085303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1747.097756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1747.106384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.112794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.126211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1747.133664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1747.149012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1747.156667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1747.177910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1747.189997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1747.199501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1747.217894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1747.225564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1747.233771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1747.244422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1747.254989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1747.272830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1747.283962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1747.296571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1747.309916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1747.327093] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1747.333231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1747.340524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1747.348949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1747.370087] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1747.379114] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1747.386182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1747.395758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1747.407837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1747.496143] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1747.515009] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1747.522623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1747.535212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1747.589664] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1747.598994] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1747.607757] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1747.620475] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1747.627470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1747.636719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1747.649689] device veth0_vlan entered promiscuous mode [ 1747.658025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1747.666884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1747.680058] device veth1_vlan entered promiscuous mode [ 1747.686562] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1747.698550] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1747.713663] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1747.720833] Bluetooth: hci2 command 0x0419 tx timeout [ 1747.732814] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1747.740348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1747.748712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1747.757107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1747.765295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1747.775519] device veth0_macvtap entered promiscuous mode [ 1747.783594] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1747.790425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1747.801836] device veth1_macvtap entered promiscuous mode [ 1747.816748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1747.828066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1747.838034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1747.848894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.859071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1747.869171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.879011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1747.892264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.901915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1747.912032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.922928] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1747.929956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1747.939058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1747.948252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1747.960987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1747.971765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1747.982325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1747.992690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1748.002442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1748.012634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1748.022320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1748.032522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1748.044338] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1748.051820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1748.059437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1748.070964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1748.125291] device bridge_slave_1 left promiscuous mode [ 1748.131018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.138441] device bridge_slave_0 left promiscuous mode [ 1748.147427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.162073] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1748.178072] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1748.218722] bond0 (unregistering): Released all slaves [ 1749.158762] IPVS: ftp: loaded support on port[0] = 21 [ 1749.342180] chnl_net:caif_netlink_parms(): no params data found [ 1749.436896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.444132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.452250] device bridge_slave_0 entered promiscuous mode [ 1749.459784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.467361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.478385] device bridge_slave_1 entered promiscuous mode [ 1749.515117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1749.525686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1749.554299] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1749.562186] team0: Port device team_slave_0 added [ 1749.568712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1749.578058] team0: Port device team_slave_1 added [ 1749.607412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.614413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.640405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.657712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.664318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.691770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.703873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1749.712259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1749.743358] device hsr_slave_0 entered promiscuous mode [ 1749.749532] device hsr_slave_1 entered promiscuous mode [ 1749.757201] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1749.765273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1749.888378] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1749.930230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.940698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1749.950093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1749.958365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1749.966116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1749.980349] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1749.987324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.001682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1750.008798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1750.021687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1750.029460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.038879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.053320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1750.064859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1750.072677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1750.082397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1750.090229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.096715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.107475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1750.115381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1750.126577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1750.133922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1750.145110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1750.152557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1750.161476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1750.171825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1750.183005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1750.192501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1750.199711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1750.208599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1750.216817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1750.225908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1750.236666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1750.244442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1750.253400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1750.263122] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1750.269225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1750.286942] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1750.295598] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1750.305422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1750.312337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1750.324884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1750.432560] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1750.441079] Bluetooth: hci0 command 0x0409 tx timeout [ 1750.449242] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1750.457657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1750.470483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1750.524073] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1750.536324] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1750.543532] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1750.555279] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1750.563008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1750.573469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1750.583918] device veth0_vlan entered promiscuous mode [ 1750.591628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1750.599193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1750.614248] device veth1_vlan entered promiscuous mode [ 1750.620456] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1750.633946] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1750.648253] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1750.661177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1750.670291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1750.678650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1750.692828] device veth0_macvtap entered promiscuous mode [ 1750.699303] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1750.709716] device veth1_macvtap entered promiscuous mode [ 1750.721524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1750.733396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1750.743565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.754098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.764586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.774771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.784095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.795049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.805214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.815245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.824974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.835220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.846689] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1750.853965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.863663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1750.871427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1750.879346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1750.889706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.906549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.915847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.925920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.935615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.945547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.955335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.965317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.974990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.986033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.996712] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1751.004102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.012443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1751.020973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:57:27 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x28400, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, 0xfffffffffffffffd, 0x800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) eventfd(0x1) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x154080, 0x0) 07:57:27 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) 07:57:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10180}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8460dd58af900bdbf88ca594bd4262c81846186787f41af6c06d137da7a5a08d8f4336beda1aef34e22198a9de39", @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf255d0000000800a500000000006400a6800a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00006400a6800a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000800a500010000002800a6800a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000"], 0x114}, 0x1, 0x0, 0x0, 0x4040014}, 0x4800) 07:57:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) socketpair(0x28, 0x4, 0xbb1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x91) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00', r2) 07:57:27 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x7fffffff, 0x3d}) 07:57:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x59}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xe9, 0x1a, 0x1}) 07:57:27 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x80000000, 0x6f}) 07:57:27 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x103, 0x12, 0x1}) 07:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880)='nl80211\x00', r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x15c, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xb5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40090) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1dece52eab3b2bed0b9d0020020079c0cc823a9de63914a86bd978dc514d2689b6f92c6b7876fd5fffe9a4eace691ce75233e76dbc5cbf230b78f1b0ada4dc8ed6dc8804edb0c814da796c6ede9e2eef51b684274f1510ceff30d9b0ea10ace476256985f6bf7035db57b968726fd67838bccc9d4c640186b85a043f48c6d580501314c56d1dbd07ea441e2ab14177dc6f840aa300b19839c9b99f34f56d43d6fa38b95f904390de6f66e8e7e7bd9f3b94ec889079de21a27beba8f8dadd92ecbe148f8ab6ce96661c45443a17a1c930e3209ef0bc0fe1ba9e472520636e32af9f05e1"], 0x14}}, 0x0) socketpair(0x2, 0x2, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x2b0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x69, 0x91, "7a8dc9961a0cb6e359145d882136457368d1ebdac29a8b933a9ff67909803368998e094a9b18328a50f18129692e5d47a3d9100b9dde4cac7f09c9e2cd67894a17cf3c57fc23ed6264a4b9e0f15d627564d3b515f34ecdeac4596ab75a10bbf7feedd3b484"}, @NL80211_ATTR_PROBE_RESP={0x5b, 0x91, "63eb1c727c88c0f414ef335df384561d718d76c79735e9feeab599007eec29d25ef3379e1e4fd723e35765d0a9fb7f181750d4f2a04d84690c15cf6d1595283cb448995ce478b094f5e24ba00909a039511e2a5a80ed8f"}, @NL80211_ATTR_IE_PROBE_RESP={0x1cb, 0x7f, [@peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @perr={0x84, 0xaf, {0x7f, 0xb, [@not_ext={{}, @broadcast, 0x5, "", 0x3c}, @ext={{}, @device_b, 0xffff, @broadcast, 0x12}, @not_ext={{}, @broadcast, 0x0, "", 0x28}, @ext={{}, @device_a, 0x3, @device_a, 0x2c}, @not_ext={{}, @device_b, 0x5, "", 0x25}, @ext={{}, @device_a, 0x9, @device_a, 0xe}, @ext={{}, @broadcast, 0xd846, @broadcast, 0x9}, @not_ext={{}, @broadcast, 0x7b, "", 0x32}, @not_ext={{}, @broadcast, 0x3, "", 0x8}, @not_ext={{}, @broadcast, 0xf1, "", 0xb}, @ext={{}, @device_a, 0x8000, @device_b, 0x3b}]}}, @perr={0x84, 0x15, {0xb6, 0x1, [@ext={{}, @broadcast, 0x2, @device_a, 0x20}]}}, @random_vendor={0xdd, 0xe9, "e3104c56e3b911301f026b596fa784a3b2454ff7c39bda16d78fb9d46bed8e4a957623ab33492e014d9078c034db0d27bdcd8919445946b2bf8568dc81125f793a87bf80badad8ff4b1ff51d6c1783359fa7b8b20082de9a9bc2e23ba25881b0120a49527123bc76b89f7b67c40d757220246373655a183f960a5faa348f5c2e883a2db22a7b248ab83fcf87e84fb2c37bee96f55a8e120de932b2ca4b6adcd419220dd282912062a2c891373611bdcc39c773c797fac95e6465537d841be38f1989efd2de0b925625cf1a71584cd3bac9e311429a0574250e64a5b68cad8fd716430170a46f56bafb"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_chsw={0x76, 0x6, {0x9, 0x7f, 0x7, 0x100}}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000004}, 0x1050) 07:57:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 07:57:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @val={0x0, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c814) 07:57:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1751.480025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:57:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1752.520902] Bluetooth: hci0 command 0x041b tx timeout 07:57:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@mesh_chsw={0x76, 0x0, {0x3, 0xbb, 0x29, 0x3}}, @channel_switch={0x25, 0x3, {0x0, 0xb2, 0x7}}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c850}, 0x200440d4) 07:57:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) 07:57:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 07:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x128, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf298}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x524}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYBLOB="78373f57410a61eded8e51a1c65dd7808f5cae09c80a00d1c9676dde07fbe769fbfaa5d753a8e168c30d8a766b983c62467046cdc163d70bd98cba94647494be010380c688c2f533efae60f2eff9513471b7422540839a0af528624ef186001f72342e105910681b14892713466d97e0716d430f0b2cc3160c68c92cb29500be5b1eabbfcd0ce06c62a2"], 0x14}}, 0x0) 07:57:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000a40)={&(0x7f00000004c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x2a8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3b0f5b8b5cfb88c}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x80}, 0x48004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', r2) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r10, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7}, @void, @val={0xc, 0x99, {0xfff, 0x4}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x45}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4d}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x77}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x68015) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) 07:57:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x6f}) 07:57:29 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xd0, 0x1}) 07:57:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x42, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x20, 0x34, @random="bf87cde85236563f03990e169a9376e79bcd007168edb75f2f3d9341"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c2) 07:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7a947d54}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40004) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000fdffffffffff1602000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xc91}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xbde4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xf9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x800) 07:57:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x6f}) 07:57:29 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) 07:57:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1754.545684] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1754.574064] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1754.583756] CPU: 0 PID: 19271 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1754.591695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.600763] Bluetooth: hci0 command 0x040f tx timeout [ 1754.601192] Call Trace: [ 1754.601235] dump_stack+0x1b2/0x281 [ 1754.601250] warn_alloc.cold+0x96/0x1cc [ 1754.616718] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1754.622241] ? zone_watermark_ok_safe+0x220/0x220 [ 1754.627153] __alloc_pages_nodemask+0x2127/0x2720 [ 1754.632039] ? lock_acquire+0x170/0x3f0 [ 1754.636040] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1754.640976] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1754.646486] ? __mutex_unlock_slowpath+0x75/0x770 [ 1754.651447] alloc_pages_current+0x155/0x260 [ 1754.655889] ion_page_pool_alloc+0x118/0x1b0 [ 1754.660336] ion_system_heap_allocate+0x133/0x8c0 [ 1754.665206] ? ion_alloc+0x187/0x810 [ 1754.669017] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1754.674631] ? ion_system_contig_heap_create+0x130/0x130 [ 1754.680921] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1754.685987] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1754.690882] ion_alloc+0x204/0x810 [ 1754.694506] ? ion_dma_buf_release+0x40/0x40 [ 1754.698945] ? __might_fault+0x177/0x1b0 [ 1754.703026] ion_ioctl+0xea/0x1f0 [ 1754.706498] ? ion_query_heaps+0x360/0x360 [ 1754.711452] ? ion_query_heaps+0x360/0x360 [ 1754.715719] do_vfs_ioctl+0x75a/0xff0 [ 1754.719543] ? ioctl_preallocate+0x1a0/0x1a0 [ 1754.724151] ? lock_downgrade+0x740/0x740 [ 1754.728348] ? __fget+0x225/0x360 [ 1754.731843] ? do_vfs_ioctl+0xff0/0xff0 [ 1754.736804] ? security_file_ioctl+0x83/0xb0 [ 1754.741229] SyS_ioctl+0x7f/0xb0 [ 1754.744652] ? do_vfs_ioctl+0xff0/0xff0 [ 1754.748656] do_syscall_64+0x1d5/0x640 [ 1754.752570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1754.757776] RIP: 0033:0x466459 [ 1754.760991] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.769107] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1754.776477] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1754.783848] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1754.791164] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1754.798450] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1754.817368] Mem-Info: [ 1754.822037] active_anon:15484 inactive_anon:20185 isolated_anon:0 [ 1754.822037] active_file:2317 inactive_file:4986 isolated_file:0 [ 1754.822037] unevictable:0 dirty:94 writeback:25 unstable:0 [ 1754.822037] slab_reclaimable:12857 slab_unreclaimable:116049 [ 1754.822037] mapped:57611 shmem:21268 pagetables:744 bounce:0 [ 1754.822037] free:86968 free_pcp:194 free_cma:0 [ 1754.861542] Node 0 active_anon:61840kB inactive_anon:72604kB active_file:9264kB inactive_file:19944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:195628kB dirty:172kB writeback:100kB shmem:76864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1754.897513] Node 1 active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1754.933123] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1754.978564] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1754.997547] Node 0 DMA32 free:269916kB min:36200kB low:45248kB high:54296kB active_anon:61840kB inactive_anon:72604kB active_file:9676kB inactive_file:18468kB unevictable:0kB writepending:472kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2812kB bounce:0kB free_pcp:824kB local_pcp:708kB free_cma:0kB [ 1755.035109] lowmem_reserve[]: 0 0 0 0 0 [ 1755.041191] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1755.068658] lowmem_reserve[]: 0 0 0 0 0 [ 1755.075886] Node 1 Normal free:67716kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1755.105549] lowmem_reserve[]: 0 0 0 0 0 [ 1755.109690] Node 0 DMA: 2*4kB (UE) 21*8kB (UE) 24*16kB (UE) 25*32kB (UE) 2*64kB (UE) 9*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11088kB [ 1755.129083] Node 0 DMA32: 6241*4kB (UME) 10121*8kB (UME) 6352*16kB (UME) 1975*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 270764kB [ 1755.147208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1755.160374] Node 1 Normal: 17*4kB (M) 7*8kB (UM) 6*16kB (UME) 477*32kB (UM) 6*64kB (UME) 1*128kB (M) 0*256kB 1*512kB (U) 48*1024kB (U) 3*2048kB (U) 0*4096kB = 71804kB [ 1755.176645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1755.186819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1755.196303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1755.206194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1755.217342] 27937 total pagecache pages [ 1755.222903] 0 pages in swap cache [ 1755.226584] Swap cache stats: add 0, delete 0, find 0/0 [ 1755.235326] Free swap = 0kB [ 1755.238478] Total swap = 0kB [ 1755.243557] 2097051 pages RAM [ 1755.246816] 0 pages HighMem/MovableOnly [ 1755.253263] 363849 pages reserved [ 1755.257029] 0 pages cma reserved [ 1755.638763] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1755.662317] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1755.673158] CPU: 1 PID: 19251 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1755.681249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.691188] Call Trace: [ 1755.693796] dump_stack+0x1b2/0x281 [ 1755.697432] warn_alloc.cold+0x96/0x1cc [ 1755.701439] ? zone_watermark_ok_safe+0x220/0x220 [ 1755.706414] __alloc_pages_nodemask+0x2127/0x2720 [ 1755.711264] ? io_schedule_timeout+0x140/0x140 [ 1755.715884] ? lock_acquire+0x170/0x3f0 [ 1755.719900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1755.724871] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1755.730447] ? __mutex_unlock_slowpath+0x75/0x770 [ 1755.735488] alloc_pages_current+0x155/0x260 [ 1755.739908] ion_page_pool_alloc+0x118/0x1b0 [ 1755.744323] ion_system_heap_allocate+0x133/0x8c0 [ 1755.749175] ? ion_alloc+0x187/0x810 [ 1755.752894] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1755.758354] ? ion_system_contig_heap_create+0x130/0x130 [ 1755.763837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1755.768863] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1755.773714] ion_alloc+0x204/0x810 [ 1755.777282] ? ion_dma_buf_release+0x40/0x40 [ 1755.781746] ? __might_fault+0x177/0x1b0 [ 1755.785839] ion_ioctl+0xea/0x1f0 [ 1755.789305] ? ion_query_heaps+0x360/0x360 [ 1755.794004] ? ion_query_heaps+0x360/0x360 [ 1755.798251] do_vfs_ioctl+0x75a/0xff0 [ 1755.802065] ? ioctl_preallocate+0x1a0/0x1a0 [ 1755.806489] ? lock_downgrade+0x740/0x740 [ 1755.810650] ? __fget+0x225/0x360 [ 1755.814139] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.818121] ? security_file_ioctl+0x83/0xb0 [ 1755.822552] SyS_ioctl+0x7f/0xb0 [ 1755.825923] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.829930] do_syscall_64+0x1d5/0x640 [ 1755.833826] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1755.839021] RIP: 0033:0x466459 [ 1755.843697] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.851412] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1755.858685] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1755.868264] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1755.875715] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1755.883081] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1755.907452] Mem-Info: [ 1755.911981] active_anon:15486 inactive_anon:20185 isolated_anon:12 [ 1755.911981] active_file:2912 inactive_file:2588 isolated_file:13 [ 1755.911981] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1755.911981] slab_reclaimable:12856 slab_unreclaimable:116027 [ 1755.911981] mapped:57396 shmem:21268 pagetables:744 bounce:0 [ 1755.911981] free:34229 free_pcp:200 free_cma:0 [ 1755.947364] Node 0 active_anon:61848kB inactive_anon:72604kB active_file:11644kB inactive_file:10352kB unevictable:0kB isolated(anon):48kB isolated(file):52kB mapped:194768kB dirty:20kB writeback:0kB shmem:76864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1755.976441] Node 1 active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1756.003469] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.031542] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1756.036605] Node 0 DMA32 free:199324kB min:36200kB low:45248kB high:54296kB active_anon:61848kB inactive_anon:72604kB active_file:11652kB inactive_file:10740kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2812kB bounce:0kB free_pcp:732kB local_pcp:620kB free_cma:0kB [ 1756.071249] lowmem_reserve[]: 0 0 0 0 0 [ 1756.075263] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.102521] lowmem_reserve[]: 0 0 0 0 0 [ 1756.106537] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:96kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.135966] lowmem_reserve[]: 0 0 0 0 0 [ 1756.140081] Node 0 DMA: 2*4kB (UE) 21*8kB (UE) 24*16kB (UE) 25*32kB (UE) 2*64kB (UE) 9*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11088kB [ 1756.157841] Node 0 DMA32: 121*4kB (ME) 321*8kB (UME) 96*16kB (UME) 15*32kB (ME) 1984*64kB (UM) 540*128kB (UM) 367*256kB (U) 50*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 320716kB [ 1756.176109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1756.201401] Node 1 Normal: 17*4kB (M) 7*8kB (UM) 6*16kB (UME) 477*32kB (UM) 837*64kB (UME) 100*128kB (UM) 1*256kB (U) 1*512kB (U) 26*1024kB (U) 5*2048kB (U) 0*4096kB = 119484kB [ 1756.240718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1756.249596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1756.270616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1756.279499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1756.315584] 26628 total pagecache pages [ 1756.324246] 0 pages in swap cache [ 1756.334752] Swap cache stats: add 0, delete 0, find 0/0 [ 1756.346903] Free swap = 0kB [ 1756.357246] Total swap = 0kB [ 1756.369138] 2097051 pages RAM [ 1756.377452] 0 pages HighMem/MovableOnly [ 1756.383639] 363849 pages reserved [ 1756.387238] 0 pages cma reserved [ 1756.680856] Bluetooth: hci0 command 0x0419 tx timeout 07:57:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x6f}) 07:57:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) 07:57:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x8004) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x800000000080101, 0x21}) 07:57:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0xc800) 07:57:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000000}) 07:57:33 executing program 3: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="68000000d09fc441373198379deb62a8590ec0f209348443929f47a8e109c3ca520b3f761c4f6b9042c138e0a12969520becceb43ff83d0902b95bd1817ea1cded440026152a369f589009a3ff01000000000000457db896b216d308a95ef54fd45cd5498f77b40c3e363eee3cdecb139257c756e485fd02eabf3f36cc3ad60fe4e81e173ce3ff", @ANYRESHEX, @ANYBLOB="040425bd7010fc08ad1c1fdbdf2536000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x68}, 0x1, 0x0, 0x0, 0xc014}, 0x2004c890) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) accept(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000600)=""/155, 0x9b}], 0x1, &(0x7f00000006c0)=""/221, 0xdd}, 0x40000000) r2 = socket$kcm(0x29, 0x2, 0x0) accept(r2, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) accept(r3, 0x0, 0x0) r4 = accept(r1, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000580)=0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3, 0xc, 0x1}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x600c0, 0x0) 07:57:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x8, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x76}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004880}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 07:57:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd0, 0x2a, 0x1}) 07:57:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'caif0\x00'}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) 07:57:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000000}) 07:57:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0xf31d0aa4bd94077, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x28}}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) 07:57:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000000}) 07:57:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x401}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) 07:57:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x240480, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) 07:57:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x884) 07:57:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:57:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x101, 0x21}) 07:57:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000440)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) 07:57:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 07:57:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:57:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="7b0cf1b357ac85"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="46794069cb62"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @phonet={0x23, 0xf8, 0x8f}, @ipx={0x4, 0x0, 0x9, "35ba5fd5a9f8", 0x2}, @nfc={0x27, 0x0, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000180)='wlan0\x00', 0x3fb1, 0x0, 0xfffe}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) 07:57:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000440)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) [ 1759.486265] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1759.542141] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1759.557675] CPU: 0 PID: 19310 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1759.565594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.574970] Call Trace: [ 1759.578267] dump_stack+0x1b2/0x281 [ 1759.581944] warn_alloc.cold+0x96/0x1cc [ 1759.586024] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1759.591068] ? zone_watermark_ok_safe+0x220/0x220 [ 1759.595931] __alloc_pages_nodemask+0x2127/0x2720 [ 1759.600786] ? __schedule+0x893/0x1de0 [ 1759.604692] ? lock_acquire+0x170/0x3f0 [ 1759.608688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1759.613567] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1759.619057] ? __mutex_unlock_slowpath+0x75/0x770 [ 1759.624000] alloc_pages_current+0x155/0x260 [ 1759.628678] ion_page_pool_alloc+0x118/0x1b0 [ 1759.633126] ion_system_heap_allocate+0x133/0x8c0 [ 1759.637972] ? ion_alloc+0x187/0x810 [ 1759.641716] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1759.647199] ? ion_system_contig_heap_create+0x130/0x130 [ 1759.652695] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1759.657730] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1759.662585] ion_alloc+0x204/0x810 [ 1759.666137] ? ion_dma_buf_release+0x40/0x40 [ 1759.670669] ? __might_fault+0x177/0x1b0 [ 1759.675268] ion_ioctl+0xea/0x1f0 [ 1759.678737] ? ion_query_heaps+0x360/0x360 [ 1759.683623] ? ion_query_heaps+0x360/0x360 [ 1759.687888] do_vfs_ioctl+0x75a/0xff0 [ 1759.691959] ? ioctl_preallocate+0x1a0/0x1a0 [ 1759.696376] ? lock_downgrade+0x740/0x740 [ 1759.700533] ? __fget+0x225/0x360 [ 1759.703995] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.708062] ? security_file_ioctl+0x83/0xb0 [ 1759.712477] SyS_ioctl+0x7f/0xb0 [ 1759.715927] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.719900] do_syscall_64+0x1d5/0x640 [ 1759.723810] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1759.728995] RIP: 0033:0x466459 [ 1759.732176] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.739886] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1759.747161] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1759.754524] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1759.761797] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1759.769070] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1760.040379] Mem-Info: [ 1760.059724] active_anon:15984 inactive_anon:20185 isolated_anon:0 [ 1760.059724] active_file:1242 inactive_file:3372 isolated_file:12 [ 1760.059724] unevictable:0 dirty:56 writeback:0 unstable:0 [ 1760.059724] slab_reclaimable:12871 slab_unreclaimable:115245 [ 1760.059724] mapped:56780 shmem:21268 pagetables:771 bounce:0 [ 1760.059724] free:136691 free_pcp:213 free_cma:0 [ 1760.097346] Node 0 active_anon:63688kB inactive_anon:72604kB active_file:4580kB inactive_file:12664kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:191764kB dirty:220kB writeback:0kB shmem:76864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1760.135800] Node 1 active_anon:248kB inactive_anon:8136kB active_file:388kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35256kB dirty:4kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1760.192376] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.225356] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1760.231327] Node 0 DMA32 free:481356kB min:36200kB low:45248kB high:54296kB active_anon:63688kB inactive_anon:72604kB active_file:4580kB inactive_file:10228kB unevictable:0kB writepending:220kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2820kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.234159] syz-executor.4: [ 1760.260995] lowmem_reserve[]: 0 0 0 0 0 [ 1760.268199] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.289375] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1760.302167] lowmem_reserve[]: 0 0 0 0 0 [ 1760.319169] Node 1 Normal free:64192kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:8136kB active_file:388kB inactive_file:228kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:264kB bounce:0kB free_pcp:728kB local_pcp:0kB free_cma:0kB [ 1760.322372] syz-executor.4 cpuset= [ 1760.353917] lowmem_reserve[]: 0 0 0 0 0 [ 1760.363298] Node 0 DMA: 55*4kB (UE) 2*8kB (UE) 3*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11100kB [ 1760.377299] / mems_allowed=0-1 [ 1760.385063] Node 0 DMA32: 11942*4kB (UE) 13223*8kB (UME) 13176*16kB (UME) 6242*32kB (UME) 144*64kB (U) 8*128kB (U) 32*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 582544kB [ 1760.388597] CPU: 0 PID: 19326 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1760.401707] Node 0 [ 1760.409351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1760.409356] Call Trace: [ 1760.409379] dump_stack+0x1b2/0x281 [ 1760.409392] warn_alloc.cold+0x96/0x1cc [ 1760.409407] ? zone_watermark_ok_safe+0x220/0x220 [ 1760.416802] Normal: [ 1760.421016] __alloc_pages_nodemask+0x2127/0x2720 [ 1760.421029] ? io_schedule_timeout+0x140/0x140 [ 1760.421044] ? lock_acquire+0x170/0x3f0 [ 1760.421059] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1760.421079] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1760.421090] ? __mutex_unlock_slowpath+0x75/0x770 [ 1760.421103] alloc_pages_current+0x155/0x260 [ 1760.421115] ion_page_pool_alloc+0x118/0x1b0 [ 1760.421124] ion_system_heap_allocate+0x133/0x8c0 [ 1760.421133] ? ion_alloc+0x187/0x810 [ 1760.421144] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1760.421153] ? ion_system_contig_heap_create+0x130/0x130 [ 1760.421162] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1760.421172] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1760.421182] ion_alloc+0x204/0x810 [ 1760.421196] ? ion_dma_buf_release+0x40/0x40 [ 1760.421209] ? __might_fault+0x177/0x1b0 [ 1760.421221] ion_ioctl+0xea/0x1f0 [ 1760.421230] ? ion_query_heaps+0x360/0x360 [ 1760.421243] ? ion_query_heaps+0x360/0x360 [ 1760.421253] do_vfs_ioctl+0x75a/0xff0 [ 1760.421265] ? ioctl_preallocate+0x1a0/0x1a0 [ 1760.421273] ? lock_downgrade+0x740/0x740 [ 1760.421287] ? __fget+0x225/0x360 [ 1760.421298] ? do_vfs_ioctl+0xff0/0xff0 [ 1760.431471] 0*4kB 0*8kB [ 1760.436343] ? security_file_ioctl+0x83/0xb0 [ 1760.436354] SyS_ioctl+0x7f/0xb0 [ 1760.436362] ? do_vfs_ioctl+0xff0/0xff0 [ 1760.436373] do_syscall_64+0x1d5/0x640 [ 1760.436387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1760.436395] RIP: 0033:0x466459 [ 1760.436399] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.436408] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1760.436413] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1760.436418] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1760.436424] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1760.436429] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1760.630719] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1760.639531] Node 1 Normal: 998*4kB (UM) 1659*8kB (UM) 1455*16kB (UM) 1097*32kB (U) 15*64kB (U) 12*128kB (U) 123*256kB (U) 12*512kB (U) 34*1024kB (U) 0*2048kB 0*4096kB = 150592kB [ 1760.656612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.665593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.674581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.683562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.694842] 25420 total pagecache pages [ 1760.698893] 0 pages in swap cache [ 1760.702585] Swap cache stats: add 0, delete 0, find 0/0 [ 1760.708044] Free swap = 0kB [ 1760.711190] Total swap = 0kB [ 1760.714299] 2097051 pages RAM [ 1760.717465] 0 pages HighMem/MovableOnly [ 1760.721579] 363849 pages reserved [ 1760.725088] 0 pages cma reserved [ 1761.661768] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1761.699080] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1761.713456] CPU: 0 PID: 19301 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1761.721384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.730761] Call Trace: [ 1761.733534] dump_stack+0x1b2/0x281 [ 1761.737184] warn_alloc.cold+0x96/0x1cc [ 1761.741605] ? zone_watermark_ok_safe+0x220/0x220 [ 1761.746741] __alloc_pages_nodemask+0x2127/0x2720 [ 1761.751695] ? lock_acquire+0x170/0x3f0 [ 1761.756651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1761.761867] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1761.767675] ? __mutex_unlock_slowpath+0x75/0x770 [ 1761.772980] alloc_pages_current+0x155/0x260 [ 1761.777504] ion_page_pool_alloc+0x118/0x1b0 [ 1761.781923] ion_system_heap_allocate+0x133/0x8c0 [ 1761.786952] ? ion_alloc+0x187/0x810 [ 1761.790679] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1761.796153] ? ion_system_contig_heap_create+0x130/0x130 [ 1761.801745] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1761.806774] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1761.811860] ion_alloc+0x204/0x810 [ 1761.815422] ? ion_dma_buf_release+0x40/0x40 [ 1761.819865] ? __might_fault+0x177/0x1b0 [ 1761.824142] ion_ioctl+0xea/0x1f0 [ 1761.827614] ? ion_query_heaps+0x360/0x360 [ 1761.831861] ? ion_query_heaps+0x360/0x360 [ 1761.836114] do_vfs_ioctl+0x75a/0xff0 [ 1761.840889] ? ioctl_preallocate+0x1a0/0x1a0 [ 1761.845326] ? lock_downgrade+0x740/0x740 [ 1761.849491] ? __fget+0x225/0x360 [ 1761.852962] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.857136] ? security_file_ioctl+0x83/0xb0 [ 1761.861575] SyS_ioctl+0x7f/0xb0 [ 1761.864992] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.869243] do_syscall_64+0x1d5/0x640 [ 1761.873146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1761.878387] RIP: 0033:0x466459 [ 1761.881602] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.889425] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1761.896707] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1761.904599] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1761.911891] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1761.919170] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1761.974787] warn_alloc_show_mem: 1 callbacks suppressed [ 1761.974791] Mem-Info: [ 1761.982931] active_anon:15985 inactive_anon:20185 isolated_anon:0 [ 1761.982931] active_file:137 inactive_file:93 isolated_file:32 [ 1761.982931] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1761.982931] slab_reclaimable:12836 slab_unreclaimable:115742 [ 1761.982931] mapped:52889 shmem:21268 pagetables:771 bounce:0 [ 1761.982931] free:25204 free_pcp:18 free_cma:0 [ 1762.043033] Node 0 active_anon:63692kB inactive_anon:72604kB active_file:40kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175872kB dirty:0kB writeback:0kB shmem:76864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1762.078767] oom_reaper: reaped process 19326 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1762.089342] Node 1 active_anon:248kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1762.123972] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.150735] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1762.155835] Node 0 DMA32 free:17740kB min:36200kB low:45248kB high:54296kB active_anon:63692kB inactive_anon:72604kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2820kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1762.176022] oom_reaper: reaped process 19310 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1762.185426] lowmem_reserve[]: 0 0 0 0 0 [ 1762.199518] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.224040] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1762.233721] lowmem_reserve[]: 0 0 0 0 0 [ 1762.240601] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1762.244347] Node 1 [ 1762.254292] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1762.258355] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:264kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1762.287392] syz-executor.0 cpuset= [ 1762.311871] lowmem_reserve[]: [ 1762.313829] syz-fuzzer cpuset= [ 1762.315442] 0 [ 1762.318558] / [ 1762.326056] 0 [ 1762.327776] syz-executor.4 cpuset=/ [ 1762.329574] 0 [ 1762.329584] mems_allowed=0-1 [ 1762.335339] 0 0 [ 1762.340178] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 15*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1762.341610] mems_allowed=0-1 [ 1762.362592] CPU: 1 PID: 19326 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1762.369649] Node 0 [ 1762.370483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1762.370485] DMA32: 593*4kB [ 1762.372706] Call Trace: [ 1762.372726] dump_stack+0x1b2/0x281 [ 1762.372739] warn_alloc.cold+0x96/0x1cc [ 1762.372751] ? zone_watermark_ok_safe+0x220/0x220 [ 1762.372761] ? usleep_range+0x130/0x130 [ 1762.372769] ? try_to_free_pages+0x23f/0x6e0 [ 1762.372780] ? _find_next_bit+0xdb/0x100 [ 1762.372790] ? run_timer_softirq+0x5a0/0x5a0 [ 1762.372805] __alloc_pages_nodemask+0x2127/0x2720 [ 1762.372821] ? lock_acquire+0x170/0x3f0 [ 1762.393239] (UME) [ 1762.395302] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1762.400116] 469*8kB [ 1762.404084] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1762.404100] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1762.404117] alloc_pages_current+0x155/0x260 [ 1762.404129] ion_page_pool_alloc+0x118/0x1b0 [ 1762.404137] ion_system_heap_allocate+0x133/0x8c0 [ 1762.404146] ? ion_alloc+0x187/0x810 [ 1762.404156] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1762.404165] ? ion_system_contig_heap_create+0x130/0x130 [ 1762.404175] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1762.404186] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1762.404196] ion_alloc+0x204/0x810 [ 1762.404213] ? ion_dma_buf_release+0x40/0x40 [ 1762.420686] (UME) [ 1762.421960] ? __might_fault+0x177/0x1b0 [ 1762.425912] 148*16kB [ 1762.428065] ion_ioctl+0xea/0x1f0 [ 1762.441574] / [ 1762.445108] ? ion_query_heaps+0x360/0x360 [ 1762.449502] mems_allowed=0-1 [ 1762.453939] ? ion_query_heaps+0x360/0x360 [ 1762.453950] do_vfs_ioctl+0x75a/0xff0 [ 1762.453961] ? ioctl_preallocate+0x1a0/0x1a0 [ 1762.453970] ? lock_downgrade+0x740/0x740 [ 1762.453983] ? __fget+0x225/0x360 [ 1762.453991] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.454002] ? security_file_ioctl+0x83/0xb0 [ 1762.454011] SyS_ioctl+0x7f/0xb0 [ 1762.454018] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.454029] do_syscall_64+0x1d5/0x640 [ 1762.454043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1762.471574] (ME) [ 1762.473446] RIP: 0033:0x466459 [ 1762.478467] 53*32kB [ 1762.483309] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.483319] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1762.483324] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1762.483328] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1762.483333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1762.483337] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1762.486443] CPU: 1 PID: 7965 Comm: syz-fuzzer Not tainted 4.14.231-syzkaller #0 [ 1762.522931] (ME) [ 1762.524822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1762.528965] 15*64kB [ 1762.532402] Call Trace: [ 1762.532423] dump_stack+0x1b2/0x281 [ 1762.532434] dump_header+0x178/0x82f [ 1762.532444] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1762.532452] ? ___ratelimit+0x2cd/0x530 [ 1762.532461] oom_kill_process.cold+0x10/0xa40 [ 1762.532478] out_of_memory+0xe3e/0x1190 [ 1762.532491] ? oom_killer_disable+0x1c0/0x1c0 [ 1762.532499] ? mutex_trylock+0x152/0x1a0 [ 1762.532510] __alloc_pages_nodemask+0x23e1/0x2720 [ 1762.532532] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1762.574106] (UM) [ 1762.582374] alloc_pages_current+0x155/0x260 [ 1762.582388] filemap_fault+0x11a1/0x1ad0 [ 1762.582406] ext4_filemap_fault+0x84/0xb0 [ 1762.582415] __do_fault+0xfa/0x380 [ 1762.582424] __handle_mm_fault+0x2497/0x4620 [ 1762.582434] ? vm_insert_page+0x7c0/0x7c0 [ 1762.582452] ? mark_held_locks+0xa6/0xf0 [ 1762.582463] handle_mm_fault+0x455/0x9c0 [ 1762.582476] __do_page_fault+0x549/0xad0 [ 1762.582487] ? spurious_fault+0x640/0x640 [ 1762.622203] 1*128kB [ 1762.630719] ? do_page_fault+0x60/0x500 [ 1762.630729] ? page_fault+0x2f/0x50 [ 1762.630735] page_fault+0x45/0x50 [ 1762.630743] RIP: 5598600:0x19a954961d4 [ 1762.630747] RSP: 03e7:000000c0001b1e40 EFLAGS: 00000003 [ 1762.705962] Mem-Info: [ 1762.717279] CPU: 0 PID: 19310 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1762.758092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1762.765409] active_anon:15960 inactive_anon:20185 isolated_anon:0 [ 1762.765409] active_file:36 inactive_file:1019 isolated_file:0 [ 1762.765409] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1762.765409] slab_reclaimable:12836 slab_unreclaimable:115760 [ 1762.765409] mapped:53297 shmem:21268 pagetables:771 bounce:0 [ 1762.765409] free:43756 free_pcp:126 free_cma:0 [ 1762.767441] Call Trace: [ 1762.767465] dump_stack+0x1b2/0x281 [ 1762.767491] warn_alloc.cold+0x96/0x1cc [ 1762.811510] ? zone_watermark_ok_safe+0x220/0x220 [ 1762.816363] ? usleep_range+0x130/0x130 [ 1762.820396] ? try_to_free_pages+0x23f/0x6e0 [ 1762.824816] ? _find_next_bit+0xdb/0x100 [ 1762.828899] ? run_timer_softirq+0x5a0/0x5a0 [ 1762.833352] __alloc_pages_nodemask+0x2127/0x2720 [ 1762.838219] ? lock_acquire+0x170/0x3f0 [ 1762.842231] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1762.847115] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1762.851707] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1762.857198] alloc_pages_current+0x155/0x260 [ 1762.861691] ion_page_pool_alloc+0x118/0x1b0 [ 1762.866108] ion_system_heap_allocate+0x133/0x8c0 [ 1762.870982] ? ion_alloc+0x187/0x810 [ 1762.874701] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1762.880171] ? ion_system_contig_heap_create+0x130/0x130 [ 1762.885635] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1762.890663] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1762.895515] ion_alloc+0x204/0x810 [ 1762.899062] ? ion_dma_buf_release+0x40/0x40 [ 1762.903476] ? __might_fault+0x177/0x1b0 [ 1762.907544] ion_ioctl+0xea/0x1f0 [ 1762.911006] ? ion_query_heaps+0x360/0x360 [ 1762.915257] ? ion_query_heaps+0x360/0x360 [ 1762.919770] do_vfs_ioctl+0x75a/0xff0 [ 1762.923600] ? ioctl_preallocate+0x1a0/0x1a0 [ 1762.928030] ? lock_downgrade+0x740/0x740 [ 1762.932184] ? __fget+0x225/0x360 [ 1762.935818] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.939802] ? security_file_ioctl+0x83/0xb0 [ 1762.940615] Node 0 active_anon:63592kB inactive_anon:72604kB active_file:140kB inactive_file:4872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179172kB dirty:0kB writeback:0kB shmem:76864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1762.944212] SyS_ioctl+0x7f/0xb0 [ 1762.975608] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.979598] do_syscall_64+0x1d5/0x640 [ 1762.984198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1762.989404] RIP: 0033:0x466459 [ 1762.992607] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.000319] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1763.007679] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1763.014969] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1763.022238] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1763.030117] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1763.041784] (M) 13*256kB (U) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17676kB [ 1763.050641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1763.050862] Node 1 active_anon:248kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1763.080696] Node 1 Normal: 20*4kB (M) 26*8kB (UM) 8*16kB (UM) 2*32kB (M) 7*64kB (UM) 0*128kB 1*256kB (U) 1*512kB (U) 7*1024kB (U) 7*2048kB (U) 1*4096kB (U) = 27296kB [ 1763.140827] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.144427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.190622] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1763.195708] Node 0 DMA32 free:206336kB min:36200kB low:45248kB high:54296kB active_anon:63512kB inactive_anon:72604kB active_file:84kB inactive_file:4972kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2820kB bounce:0kB free_pcp:1452kB local_pcp:728kB free_cma:0kB [ 1763.214432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.260627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1763.269543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1763.270694] lowmem_reserve[]: 0 0 0 0 0 [ 1763.300602] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.300665] 22540 total pagecache pages [ 1763.360635] 0 pages in swap cache [ 1763.364224] Swap cache stats: add 0, delete 0, find 0/0 [ 1763.364471] lowmem_reserve[]: [ 1763.369589] Free swap = 0kB [ 1763.369597] Total swap = 0kB [ 1763.379142] 0 0 0 0 0 [ 1763.385933] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:264kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1763.390762] 2097051 pages RAM [ 1763.440683] 0 pages HighMem/MovableOnly [ 1763.444691] 363849 pages reserved [ 1763.448137] 0 pages cma reserved [ 1763.474189] lowmem_reserve[]: 0 0 0 0 0 [ 1763.478227] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 15*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1763.524975] Node 0 DMA32: 16444*4kB (UME) 11289*8kB (UME) 8723*16kB (UME) 1954*32kB (UE) 217*64kB (UM) 61*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 379880kB [ 1763.570663] warn_alloc_show_mem: 1 callbacks suppressed [ 1763.570668] Mem-Info: [ 1763.572944] Node 0 [ 1763.576698] active_anon:15940 inactive_anon:20185 isolated_anon:12 [ 1763.576698] active_file:97 inactive_file:1312 isolated_file:0 [ 1763.576698] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1763.576698] slab_reclaimable:12826 slab_unreclaimable:116347 [ 1763.576698] mapped:53644 shmem:21268 pagetables:771 bounce:0 [ 1763.576698] free:97873 free_pcp:350 free_cma:0 [ 1763.579346] Normal: 0*4kB [ 1763.600639] Node 0 active_anon:63512kB inactive_anon:72604kB active_file:384kB inactive_file:5244kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:179760kB dirty:76kB writeback:0kB shmem:76864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1763.681928] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1763.689402] Node 1 active_anon:248kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1763.700397] syz-executor.4 cpuset= [ 1763.730704] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1763.749929] / mems_allowed=0-1 [ 1763.754042] CPU: 1 PID: 19326 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1763.756657] Node 0 [ 1763.761936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.761941] Call Trace: [ 1763.761961] dump_stack+0x1b2/0x281 [ 1763.761974] warn_alloc.cold+0x96/0x1cc [ 1763.761986] ? zone_watermark_ok_safe+0x220/0x220 [ 1763.762007] __alloc_pages_nodemask+0x2127/0x2720 [ 1763.762021] ? finish_task_switch+0x178/0x610 [ 1763.770316] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.774692] ? lock_acquire+0x170/0x3f0 [ 1763.774709] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1763.774727] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1763.774739] ? __mutex_unlock_slowpath+0x75/0x770 [ 1763.774755] alloc_pages_current+0x155/0x260 [ 1763.774767] ion_page_pool_alloc+0x118/0x1b0 [ 1763.774776] ion_system_heap_allocate+0x133/0x8c0 [ 1763.774787] ? _raw_spin_unlock+0x29/0x40 [ 1763.774799] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1763.781835] lowmem_reserve[]: [ 1763.784981] ? ion_system_contig_heap_create+0x130/0x130 [ 1763.784995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1763.793163] 0 [ 1763.794703] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1763.794715] ion_alloc+0x27a/0x810 [ 1763.810681] 2717 [ 1763.825422] ? ion_dma_buf_release+0x40/0x40 [ 1763.825435] ? __might_fault+0x177/0x1b0 [ 1763.825446] ion_ioctl+0xea/0x1f0 [ 1763.825454] ? ion_query_heaps+0x360/0x360 [ 1763.825465] ? ion_query_heaps+0x360/0x360 [ 1763.825474] do_vfs_ioctl+0x75a/0xff0 [ 1763.825486] ? ioctl_preallocate+0x1a0/0x1a0 [ 1763.835049] 2718 [ 1763.839739] ? lock_downgrade+0x740/0x740 [ 1763.839754] ? __fget+0x225/0x360 [ 1763.839766] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.844773] 2718 [ 1763.849028] ? security_file_ioctl+0x83/0xb0 [ 1763.849040] SyS_ioctl+0x7f/0xb0 [ 1763.849050] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.853568] 2718 [ 1763.858284] do_syscall_64+0x1d5/0x640 [ 1763.858301] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1763.858312] RIP: 0033:0x466459 [ 1763.867361] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.867373] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1763.867377] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1763.867382] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1763.867386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1763.867391] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1763.887226] Node 1 [ 1763.888107] Node 0 DMA32 free:223248kB min:36200kB low:45248kB high:54296kB active_anon:61452kB inactive_anon:72604kB active_file:2300kB inactive_file:2372kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2820kB bounce:0kB free_pcp:364kB local_pcp:244kB free_cma:0kB [ 1763.888136] lowmem_reserve[]: [ 1763.904871] Normal: [ 1763.906008] 0 0 0 0 0 [ 1763.906028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.914634] 2256*4kB [ 1763.918442] lowmem_reserve[]: [ 1763.938314] (UM) [ 1763.939021] 0 [ 1763.948972] 157*8kB [ 1763.950615] 0 [ 1763.954003] (UM) [ 1763.956567] 0 [ 1763.967169] 135*16kB [ 1763.975909] 0 0 [ 1763.988361] (UM) [ 1763.999364] 130*32kB [ 1764.005198] Node 1 Normal free:26968kB min:53696kB low:67120kB high:80544kB active_anon:248kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:116kB bounce:0kB free_pcp:200kB local_pcp:200kB free_cma:0kB [ 1764.005224] lowmem_reserve[]: 0 0 0 0 0 [ 1764.005243] Node 0 DMA: 6*4kB (UE) 2*8kB (UE) 2*16kB (UE) [ 1764.018642] (UM) [ 1764.044857] 15*32kB [ 1764.079431] 2*64kB [ 1764.081587] (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10984kB [ 1764.081637] Node 0 DMA32: 132*4kB (ME) 249*8kB (UE) [ 1764.088723] (UM) [ 1764.091058] 8122*16kB (UME) 1965*32kB (UE) 2*64kB (U) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB [ 1764.100661] 2*128kB [ 1764.101278] 0*4096kB [ 1764.103292] (U) [ 1764.105649] = 196888kB [ 1764.143646] 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (U) 1*4096kB (U) = 26968kB [ 1764.143684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.143690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.143695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.143700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.143704] 22572 total pagecache pages [ 1764.143713] 0 pages in swap cache [ 1764.143718] Swap cache stats: add 0, delete 0, find 0/0 [ 1764.143720] Free swap = 0kB [ 1764.143723] Total swap = 0kB [ 1764.143729] 2097051 pages RAM [ 1764.143732] 0 pages HighMem/MovableOnly [ 1764.143735] 363849 pages reserved [ 1764.143738] 0 pages cma reserved [ 1764.143782] Out of memory (oom_kill_allocating_task): Kill process 7965 (syz-fuzzer) score 0 or sacrifice child [ 1764.190614] Node 0 [ 1764.209585] Killed process 18909 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1764.220621] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1764.299934] oom_reaper: reaped process 18909 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1764.302544] Node 1 Normal: 2256*4kB (UM) 157*8kB (UM) 135*16kB (UM) 130*32kB (UM) 2*64kB (UM) 2*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (U) 1*4096kB (U) = 26968kB [ 1764.344626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.356006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.368508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 07:57:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x105800, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048040}, 0x24048000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000410}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x1814, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x770, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "717f91bf1fc9380ddb0c628dcac87ba9199dd6a9525dc808221c939c5836e696"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3499f91c96beee4324055cf6c14e7c65b4b9f8b8464324409224006ce6ceedaa"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @mcast1, 0x5}}]}, {0x2c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "aa7208c7c997624f3e7f0e4ca178530a11f7b4f5a46092544df29331bd3119c7"}]}, {0x3d0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7307e0e26c3ccadb471f8fe7f9492de7ec4fa1b1ff26d9c4bb49bbfb8abe51c5"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x1d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xe}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffa}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x1024, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f83e720dc112c0deb2f9432863f29beb58e4ae88e79d23d7a4dfc0ff9ad7f3bf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @ipv4={[], [], @loopback}, 0x4}}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8c96e3c5d742f98d5c880f05bd2fb127ec35648a0ffc285f7ecb8d23a89fa1eb"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}, {0xc38, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x4f0, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x16}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x5d8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x2b}, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "be23d81bae420a2f3590e91b897a884297777cf4a2faaf9e43b8e859a4a77c48"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "38e10f8e13d16e380638094e0f4b8fe930d6a9bd90d3938f686278dcb4bd7796"}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ef96f6443731ad752b2cc9a27b1886fa92ec1539c6ff50620afb115005098c90"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}]}, 0x1814}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040004) 07:57:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={r2, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r3}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) 07:57:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044041}, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) [ 1764.379316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.397373] 23682 total pagecache pages [ 1764.407861] 0 pages in swap cache [ 1764.411401] Swap cache stats: add 0, delete 0, find 0/0 [ 1764.417346] Free swap = 0kB [ 1764.428744] Total swap = 0kB 07:57:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000440)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) [ 1764.436936] 2097051 pages RAM [ 1764.440418] 0 pages HighMem/MovableOnly [ 1764.452890] 363849 pages reserved [ 1764.456381] 0 pages cma reserved 07:57:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1764.905889] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1764.918331] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1764.926345] CPU: 0 PID: 19352 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1764.934307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1764.943794] Call Trace: [ 1764.946416] dump_stack+0x1b2/0x281 [ 1764.950335] warn_alloc.cold+0x96/0x1cc [ 1764.954336] ? zone_watermark_ok_safe+0x220/0x220 [ 1764.959412] __alloc_pages_nodemask+0x2127/0x2720 [ 1764.964275] ? __schedule+0x893/0x1de0 [ 1764.968190] ? lock_acquire+0x170/0x3f0 [ 1764.972362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1764.977874] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1764.983343] ? __mutex_unlock_slowpath+0x75/0x770 [ 1764.988209] alloc_pages_current+0x155/0x260 [ 1764.992635] ion_page_pool_alloc+0x118/0x1b0 [ 1764.997089] ion_system_heap_allocate+0x133/0x8c0 [ 1765.002386] ? ion_alloc+0x187/0x810 [ 1765.006295] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1765.011891] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.017383] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1765.022422] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.027305] ion_alloc+0x204/0x810 [ 1765.030871] ? ion_dma_buf_release+0x40/0x40 [ 1765.035305] ? __might_fault+0x177/0x1b0 [ 1765.039409] ion_ioctl+0xea/0x1f0 [ 1765.042898] ? ion_query_heaps+0x360/0x360 [ 1765.047146] ? ion_query_heaps+0x360/0x360 [ 1765.054294] do_vfs_ioctl+0x75a/0xff0 [ 1765.058679] ? ioctl_preallocate+0x1a0/0x1a0 [ 1765.063208] ? lock_downgrade+0x740/0x740 [ 1765.067386] ? __fget+0x225/0x360 [ 1765.070877] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.074894] ? security_file_ioctl+0x83/0xb0 [ 1765.079315] SyS_ioctl+0x7f/0xb0 [ 1765.082689] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.086687] do_syscall_64+0x1d5/0x640 [ 1765.098182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1765.103380] RIP: 0033:0x466459 [ 1765.106580] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.114298] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1765.121574] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1765.129124] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1765.136421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1765.145374] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1765.202048] warn_alloc_show_mem: 1 callbacks suppressed [ 1765.202052] Mem-Info: [ 1765.220702] active_anon:14865 inactive_anon:20183 isolated_anon:0 [ 1765.220702] active_file:2492 inactive_file:2372 isolated_file:32 [ 1765.220702] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1765.220702] slab_reclaimable:12822 slab_unreclaimable:116399 [ 1765.220702] mapped:47703 shmem:21265 pagetables:774 bounce:0 [ 1765.220702] free:22241 free_pcp:248 free_cma:0 [ 1765.272053] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1765.285479] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1765.307621] Node 0 active_anon:59084kB inactive_anon:72596kB active_file:8732kB inactive_file:7980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153200kB dirty:8kB writeback:0kB shmem:76852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1765.309735] syz-executor.3 cpuset= [ 1765.341325] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1765.365656] CPU: 1 PID: 19310 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1765.373772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.383243] Call Trace: [ 1765.385858] dump_stack+0x1b2/0x281 [ 1765.389515] warn_alloc.cold+0x96/0x1cc [ 1765.393496] ? zone_watermark_ok_safe+0x220/0x220 [ 1765.398362] __alloc_pages_nodemask+0x2127/0x2720 [ 1765.403315] ? io_schedule_timeout+0x140/0x140 [ 1765.407938] ? lock_acquire+0x170/0x3f0 [ 1765.411935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.417074] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1765.420521] Node 1 active_anon:376kB inactive_anon:8136kB active_file:12kB inactive_file:164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34812kB dirty:8kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1765.422639] ? __mutex_unlock_slowpath+0x75/0x770 [ 1765.422650] ? policy_node+0xc6/0x110 [ 1765.422661] alloc_pages_current+0x155/0x260 [ 1765.422675] ion_page_pool_alloc+0x118/0x1b0 [ 1765.422684] ion_system_heap_allocate+0x133/0x8c0 [ 1765.422696] ? _raw_spin_unlock+0x29/0x40 [ 1765.422705] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1765.422714] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.422725] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.422735] ion_alloc+0x27a/0x810 [ 1765.422746] ? ion_dma_buf_release+0x40/0x40 [ 1765.422761] ? __might_fault+0x177/0x1b0 [ 1765.508625] ion_ioctl+0xea/0x1f0 [ 1765.512086] ? ion_query_heaps+0x360/0x360 [ 1765.516360] ? ion_query_heaps+0x360/0x360 [ 1765.520596] do_vfs_ioctl+0x75a/0xff0 [ 1765.524401] ? ioctl_preallocate+0x1a0/0x1a0 [ 1765.528915] ? lock_downgrade+0x740/0x740 [ 1765.534233] ? __fget+0x225/0x360 [ 1765.538219] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.539921] Node 0 [ 1765.542228] ? security_file_ioctl+0x83/0xb0 [ 1765.542239] SyS_ioctl+0x7f/0xb0 [ 1765.542247] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.542259] do_syscall_64+0x1d5/0x640 [ 1765.542274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1765.542285] RIP: 0033:0x466459 [ 1765.549076] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1765.549304] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 [ 1765.564775] lowmem_reserve[]: [ 1765.567073] ORIG_RAX: 0000000000000010 [ 1765.567080] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1765.567085] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1765.567090] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1765.567100] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1765.579064] 0 [ 1765.595837] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1765.624746] / mems_allowed=0-1 [ 1765.680721] CPU: 1 PID: 19342 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1765.688636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.698122] Call Trace: [ 1765.700710] dump_stack+0x1b2/0x281 [ 1765.704335] warn_alloc.cold+0x96/0x1cc [ 1765.708301] ? zone_watermark_ok_safe+0x220/0x220 [ 1765.713163] __alloc_pages_nodemask+0x2127/0x2720 [ 1765.718006] ? io_schedule_timeout+0x140/0x140 [ 1765.722583] ? lock_acquire+0x170/0x3f0 [ 1765.726644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.731485] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1765.736981] ? __mutex_unlock_slowpath+0x75/0x770 [ 1765.741816] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 1765.746659] alloc_pages_current+0x155/0x260 [ 1765.751063] ion_page_pool_alloc+0x118/0x1b0 [ 1765.755477] ion_system_heap_allocate+0x133/0x8c0 [ 1765.760338] ? ion_alloc+0x187/0x810 [ 1765.764046] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1765.769490] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.774937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1765.779959] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.784818] ion_alloc+0x204/0x810 [ 1765.788354] ? ion_dma_buf_release+0x40/0x40 [ 1765.792845] ? __might_fault+0x177/0x1b0 [ 1765.797001] ion_ioctl+0xea/0x1f0 [ 1765.800442] ? ion_query_heaps+0x360/0x360 [ 1765.804669] ? ion_query_heaps+0x360/0x360 [ 1765.808894] do_vfs_ioctl+0x75a/0xff0 [ 1765.812693] ? ioctl_preallocate+0x1a0/0x1a0 [ 1765.817107] ? lock_downgrade+0x740/0x740 [ 1765.821249] ? __fget+0x225/0x360 [ 1765.824695] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.828662] ? security_file_ioctl+0x83/0xb0 [ 1765.833083] SyS_ioctl+0x7f/0xb0 [ 1765.836459] ? do_vfs_ioctl+0xff0/0xff0 [ 1765.840719] do_syscall_64+0x1d5/0x640 [ 1765.844624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1765.849924] RIP: 0033:0x466459 [ 1765.853132] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.860853] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1765.868121] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1765.875386] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1765.882668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1765.889948] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1765.937530] 2717 2718 2718 2718 [ 1765.944369] Node 0 DMA32 free:24692kB min:36200kB low:45248kB high:54296kB active_anon:59084kB inactive_anon:72596kB active_file:2564kB inactive_file:2576kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2908kB bounce:0kB free_pcp:704kB local_pcp:704kB free_cma:0kB [ 1766.004318] lowmem_reserve[]: 0 0 0 0 0 [ 1766.014982] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.095592] lowmem_reserve[]: 0 0 0 0 0 [ 1766.107473] Node 1 Normal free:570020kB min:53696kB low:67120kB high:80544kB active_anon:568kB inactive_anon:8136kB active_file:780kB inactive_file:3448kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:200kB bounce:0kB free_pcp:412kB local_pcp:192kB free_cma:0kB [ 1766.189367] lowmem_reserve[]: 0 0 0 0 0 [ 1766.196797] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11112kB [ 1766.231713] Node 0 DMA32: 463*4kB (UME) 357*8kB (UME) 161*16kB (UME) 66*32kB (UME) 159*64kB (UM) 27*128kB (UM) 0*256kB 0*512kB 14*1024kB (U) 4*2048kB (U) 0*4096kB = 45556kB [ 1766.245946] warn_alloc_show_mem: 1 callbacks suppressed [ 1766.245950] Mem-Info: [ 1766.264077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1766.272333] active_anon:14913 inactive_anon:20183 isolated_anon:0 [ 1766.272333] active_file:751 inactive_file:1425 isolated_file:4 [ 1766.272333] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1766.272333] slab_reclaimable:12817 slab_unreclaimable:116487 [ 1766.272333] mapped:54375 shmem:21265 pagetables:777 bounce:0 [ 1766.272333] free:212374 free_pcp:168 free_cma:0 [ 1766.287853] Node 1 Normal: 6*4kB (UM) 2*8kB (U) 5*16kB (UME) 3*32kB (UM) 3468*64kB (U) 1148*128kB (UM) 357*256kB (UM) 21*512kB (UM) 51*1024kB (UM) 108*2048kB (UM) 9*4096kB (U) = 781528kB [ 1766.360664] Bluetooth: hci5 command 0x0406 tx timeout [ 1766.367046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.384841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.391145] Node 0 active_anon:59084kB inactive_anon:72596kB active_file:2224kB inactive_file:2252kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:175332kB dirty:52kB writeback:0kB shmem:76852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1766.415862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.485396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.500740] Node 1 active_anon:568kB inactive_anon:8136kB active_file:780kB inactive_file:3548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:42168kB dirty:56kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1766.521017] 23494 total pagecache pages [ 1766.564287] 0 pages in swap cache [ 1766.579447] Swap cache stats: add 0, delete 0, find 0/0 [ 1766.585453] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.600201] Free swap = 0kB [ 1766.638842] Total swap = 0kB [ 1766.647433] 2097051 pages RAM [ 1766.658298] 0 pages HighMem/MovableOnly [ 1766.670051] 363849 pages reserved [ 1766.676962] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1766.682504] 0 pages cma reserved [ 1766.713650] Node 0 DMA32 free:44088kB min:36200kB low:45248kB high:54296kB active_anon:59084kB inactive_anon:72596kB active_file:2224kB inactive_file:2252kB unevictable:0kB writepending:52kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2908kB bounce:0kB free_pcp:828kB local_pcp:508kB free_cma:0kB [ 1766.848168] lowmem_reserve[]: 0 0 0 0 0 [ 1766.874271] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.012304] lowmem_reserve[]: 0 0 0 0 0 [ 1767.023479] Node 1 Normal free:53228kB min:53696kB low:67120kB high:80544kB active_anon:576kB inactive_anon:8136kB active_file:824kB inactive_file:1100kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:708kB local_pcp:0kB free_cma:0kB [ 1767.151671] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.162922] oom_reaper: reaped process 19352 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1767.183479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1767.197013] lowmem_reserve[]: 0 0 0 0 0 [ 1767.198576] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1767.203270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1767.211135] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1767.234059] CPU: 0 PID: 19355 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1767.241960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.249452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1767.251399] Call Trace: [ 1767.251425] dump_stack+0x1b2/0x281 [ 1767.251439] warn_alloc.cold+0x96/0x1cc [ 1767.251453] ? zone_watermark_ok_safe+0x220/0x220 [ 1767.258157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1767.260712] __alloc_pages_nodemask+0x2127/0x2720 [ 1767.260729] ? lock_acquire+0x170/0x3f0 [ 1767.260744] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1767.264381] Node 0 [ 1767.268338] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1767.273303] DMA32: [ 1767.279570] ? __mutex_unlock_slowpath+0x75/0x770 [ 1767.284441] 586*4kB [ 1767.288378] alloc_pages_current+0x155/0x260 [ 1767.293233] (UME) [ 1767.295521] ion_page_pool_alloc+0x118/0x1b0 [ 1767.300994] 1135*8kB [ 1767.303192] ion_system_heap_allocate+0x133/0x8c0 [ 1767.308002] (UME) [ 1767.310316] ? ion_alloc+0x187/0x810 [ 1767.314733] 257*16kB [ 1767.316836] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1767.321255] (UME) [ 1767.323653] ? ion_system_contig_heap_create+0x130/0x130 [ 1767.328564] 79*32kB [ 1767.330725] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1767.330738] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1767.330750] ion_alloc+0x204/0x810 [ 1767.330764] ? ion_dma_buf_release+0x40/0x40 [ 1767.334466] (UME) [ 1767.336960] ? __might_fault+0x177/0x1b0 [ 1767.342515] 2*64kB [ 1767.344631] ion_ioctl+0xea/0x1f0 [ 1767.350048] (M) [ 1767.352553] ? ion_query_heaps+0x360/0x360 [ 1767.352564] ? ion_query_heaps+0x360/0x360 [ 1767.352574] do_vfs_ioctl+0x75a/0xff0 [ 1767.352586] ? ioctl_preallocate+0x1a0/0x1a0 [ 1767.357584] 0*128kB [ 1767.362439] ? lock_downgrade+0x740/0x740 [ 1767.362453] ? __fget+0x225/0x360 [ 1767.362462] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.362473] ? security_file_ioctl+0x83/0xb0 [ 1767.362483] SyS_ioctl+0x7f/0xb0 [ 1767.366010] 0*256kB [ 1767.370431] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.372607] 0*512kB [ 1767.376617] do_syscall_64+0x1d5/0x640 [ 1767.378826] 0*1024kB [ 1767.382282] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1767.382291] RIP: 0033:0x466459 [ 1767.382295] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.382305] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1767.382313] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1767.384435] 0*2048kB [ 1767.388582] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1767.392841] 0*4096kB [ 1767.396584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1767.401011] = 18192kB [ 1767.403632] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1767.407869] Node 0 [ 1767.413715] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1767.419606] Normal: [ 1767.419749] (null) [ 1767.436433] syz-executor.4: [ 1767.455317] , order=0, oom_score_adj=0 [ 1767.471495] 0*4kB [ 1767.473507] in:imklog cpuset= [ 1767.480280] 0*8kB [ 1767.482736] / mems_allowed=0-1 [ 1767.482754] CPU: 0 PID: 18415 Comm: in:imklog Not tainted 4.14.231-syzkaller #0 [ 1767.482760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.482763] Call Trace: [ 1767.482782] dump_stack+0x1b2/0x281 [ 1767.482795] dump_header+0x178/0x82f [ 1767.482806] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1767.482815] ? ___ratelimit+0x2cd/0x530 [ 1767.482826] oom_kill_process.cold+0x10/0xa40 [ 1767.502022] device bridge_slave_1 left promiscuous mode [ 1767.511634] out_of_memory+0xe3e/0x1190 [ 1767.511647] ? oom_killer_disable+0x1c0/0x1c0 [ 1767.511656] ? mutex_trylock+0x152/0x1a0 [ 1767.511667] __alloc_pages_nodemask+0x23e1/0x2720 [ 1767.528724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.530445] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1767.536488] 0*16kB [ 1767.541085] alloc_pages_current+0x155/0x260 [ 1767.541099] filemap_fault+0x11a1/0x1ad0 [ 1767.541117] ext4_filemap_fault+0x84/0xb0 [ 1767.541130] __do_fault+0xfa/0x380 [ 1767.551600] page allocation failure: order:0 [ 1767.553251] __handle_mm_fault+0x2497/0x4620 [ 1767.556916] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1767.560719] ? vm_insert_page+0x7c0/0x7c0 [ 1767.560729] ? lock_downgrade+0x740/0x740 [ 1767.560741] ? mark_held_locks+0xa6/0xf0 [ 1767.560751] handle_mm_fault+0x455/0x9c0 [ 1767.560763] __do_page_fault+0x549/0xad0 [ 1767.560777] ? spurious_fault+0x640/0x640 [ 1767.565909] 0*32kB [ 1767.569866] ? do_page_fault+0x60/0x500 [ 1767.574415] (null) [ 1767.579714] ? page_fault+0x2f/0x50 [ 1767.583743] 0*64kB [ 1767.588180] page_fault+0x45/0x50 [ 1767.592475] syz-executor.4 cpuset= [ 1767.597245] RIP: 1fa0:0x1f9f [ 1767.603658] 0*128kB [ 1767.608414] RSP: 0000:00005637f53769d0 EFLAGS: 7f59e7464da0 [ 1767.610706] / [ 1767.615361] syz-executor.5: [ 1767.619829] 0*256kB [ 1767.623366] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.623382] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1767.623405] CPU: 0 PID: 19352 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1767.623410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.623414] Call Trace: [ 1767.623432] dump_stack+0x1b2/0x281 [ 1767.623446] warn_alloc.cold+0x96/0x1cc [ 1767.623459] ? zone_watermark_ok_safe+0x220/0x220 [ 1767.623469] ? usleep_range+0x130/0x130 [ 1767.623477] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1767.623490] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1767.623499] ? run_timer_softirq+0x5a0/0x5a0 [ 1767.623516] __alloc_pages_nodemask+0x2127/0x2720 [ 1767.623531] ? lock_acquire+0x170/0x3f0 [ 1767.623544] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1767.623554] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1767.623577] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1767.623592] ? alloc_pages_current+0x123/0x260 [ 1767.627397] syz-executor.0: [ 1767.631804] alloc_pages_current+0x155/0x260 [ 1767.631817] ion_page_pool_alloc+0x118/0x1b0 [ 1767.631826] ion_system_heap_allocate+0x133/0x8c0 [ 1767.631835] ? ion_alloc+0x187/0x810 [ 1767.631845] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1767.631853] ? ion_system_contig_heap_create+0x130/0x130 [ 1767.631863] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1767.631876] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1767.650907] 0*512kB [ 1767.651752] ion_alloc+0x204/0x810 [ 1767.655796] 0*1024kB [ 1767.659853] ? ion_dma_buf_release+0x40/0x40 [ 1767.663988] mems_allowed=0-1 [ 1767.668077] ? __might_fault+0x177/0x1b0 [ 1767.670672] device bridge_slave_0 left promiscuous mode [ 1767.674292] ion_ioctl+0xea/0x1f0 [ 1767.676697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.680245] ? ion_query_heaps+0x360/0x360 [ 1767.682830] page allocation failure: order:0 [ 1767.686162] ? ion_query_heaps+0x360/0x360 [ 1767.689679] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1767.692680] do_vfs_ioctl+0x75a/0xff0 [ 1767.692692] ? ioctl_preallocate+0x1a0/0x1a0 [ 1767.692702] ? lock_downgrade+0x740/0x740 [ 1767.692715] ? __fget+0x225/0x360 [ 1767.692726] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.710600] 0*2048kB [ 1767.718142] ? security_file_ioctl+0x83/0xb0 [ 1767.723276] (null) [ 1767.731106] SyS_ioctl+0x7f/0xb0 [ 1767.731117] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.731134] do_syscall_64+0x1d5/0x640 [ 1767.750585] 0*4096kB [ 1767.750644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1767.755452] = 0kB [ 1767.759414] RIP: 0033:0x466459 [ 1767.770576] syz-executor.0 cpuset= [ 1767.773890] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 [ 1767.778717] / [ 1767.782690] ORIG_RAX: 0000000000000010 [ 1767.800590] Node 1 [ 1767.801996] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1767.805091] Normal: [ 1767.809483] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1767.820610] mems_allowed=0-1 [ 1767.822431] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1767.830609] 23*4kB [ 1767.833303] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1767.833313] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1767.838314] (UM) [ 1767.853746] Mem-Info: [ 1767.879715] CPU: 1 PID: 19326 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1767.887155] active_anon:14925 inactive_anon:20183 isolated_anon:0 [ 1767.887155] active_file:16 inactive_file:16 isolated_file:0 [ 1767.887155] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1767.887155] slab_reclaimable:12817 slab_unreclaimable:116685 [ 1767.887155] mapped:52736 shmem:21265 pagetables:816 bounce:0 [ 1767.887155] free:13767 free_pcp:1 free_cma:0 [ 1767.887330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.891650] Node 0 active_anon:59092kB inactive_anon:72596kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171060kB dirty:0kB writeback:0kB shmem:76852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1767.899282] Call Trace: [ 1767.907506] Node 1 active_anon:608kB inactive_anon:8136kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39884kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1767.911652] dump_stack+0x1b2/0x281 [ 1767.911666] warn_alloc.cold+0x96/0x1cc [ 1767.911679] ? zone_watermark_ok_safe+0x220/0x220 [ 1767.911689] ? usleep_range+0x130/0x130 [ 1767.911700] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1767.915163] Node 0 [ 1767.919217] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1767.926002] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.926007] lowmem_reserve[]: [ 1767.928153] ? run_timer_softirq+0x5a0/0x5a0 [ 1767.931558] 0 [ 1767.935468] __alloc_pages_nodemask+0x2127/0x2720 [ 1767.939321] 2717 [ 1767.941728] ? lock_acquire+0x170/0x3f0 [ 1767.941743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1767.941753] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1767.941769] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1767.941783] ? alloc_pages_current+0x84/0x260 [ 1767.941794] alloc_pages_current+0x155/0x260 [ 1767.941806] ion_page_pool_alloc+0x118/0x1b0 [ 1767.941816] ion_system_heap_allocate+0x133/0x8c0 [ 1767.941827] ? _raw_spin_unlock+0x29/0x40 [ 1767.950964] 2718 [ 1767.952238] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1767.955778] 2718 [ 1767.961153] ? ion_system_contig_heap_create+0x130/0x130 [ 1767.961164] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1767.961175] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1767.961184] ion_alloc+0x27a/0x810 [ 1767.961198] ? ion_dma_buf_release+0x40/0x40 [ 1767.961209] ? __might_fault+0x177/0x1b0 [ 1767.961219] ion_ioctl+0xea/0x1f0 [ 1767.961227] ? ion_query_heaps+0x360/0x360 [ 1767.961239] ? ion_query_heaps+0x360/0x360 [ 1767.961248] do_vfs_ioctl+0x75a/0xff0 [ 1767.961259] ? ioctl_preallocate+0x1a0/0x1a0 [ 1767.963834] 2718 [ 1767.966964] ? lock_downgrade+0x740/0x740 [ 1767.976706] ? __fget+0x225/0x360 [ 1767.976716] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.976727] ? security_file_ioctl+0x83/0xb0 [ 1767.976736] SyS_ioctl+0x7f/0xb0 [ 1767.976744] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.976755] do_syscall_64+0x1d5/0x640 [ 1767.976769] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1767.976777] RIP: 0033:0x466459 [ 1767.976781] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.976791] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1767.976797] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1767.976802] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1767.976807] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1767.976812] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1767.995589] 22*8kB [ 1768.009276] CPU: 0 PID: 19310 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1768.032260] (UM) [ 1768.060737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.060742] Call Trace: [ 1768.060765] dump_stack+0x1b2/0x281 [ 1768.060778] warn_alloc.cold+0x96/0x1cc [ 1768.060794] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.070185] Mem-Info: [ 1768.097851] ? usleep_range+0x130/0x130 [ 1768.097862] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1768.097874] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1768.097883] ? run_timer_softirq+0x5a0/0x5a0 [ 1768.097906] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.100507] 22*16kB [ 1768.127662] ? lock_acquire+0x170/0x3f0 [ 1768.127679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.127688] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1768.127704] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.131370] active_anon:14925 inactive_anon:20183 isolated_anon:0 [ 1768.131370] active_file:16 inactive_file:16 isolated_file:0 [ 1768.131370] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1768.131370] slab_reclaimable:12817 slab_unreclaimable:116685 [ 1768.131370] mapped:52736 shmem:21265 pagetables:816 bounce:0 [ 1768.131370] free:13767 free_pcp:1 free_cma:0 [ 1768.135302] alloc_pages_current+0x155/0x260 [ 1768.140135] Node 0 active_anon:59092kB inactive_anon:72596kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171060kB dirty:0kB writeback:0kB shmem:76852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1768.144101] ion_page_pool_alloc+0x118/0x1b0 [ 1768.144110] ion_system_heap_allocate+0x133/0x8c0 [ 1768.144122] ? _raw_spin_unlock+0x29/0x40 [ 1768.144130] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1768.144140] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.160600] (UME) [ 1768.182168] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.182180] ion_alloc+0x27a/0x810 [ 1768.182195] ? ion_dma_buf_release+0x40/0x40 [ 1768.182206] ? __might_fault+0x177/0x1b0 [ 1768.190606] Node 1 active_anon:608kB inactive_anon:8136kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39884kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1768.191492] ion_ioctl+0xea/0x1f0 [ 1768.196305] Node 0 [ 1768.198377] ? ion_query_heaps+0x360/0x360 [ 1768.220608] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.222015] ? ion_query_heaps+0x360/0x360 [ 1768.226397] lowmem_reserve[]: [ 1768.230795] do_vfs_ioctl+0x75a/0xff0 [ 1768.230808] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.230818] ? lock_downgrade+0x740/0x740 [ 1768.230830] ? __fget+0x225/0x360 [ 1768.235674] 22*32kB [ 1768.239890] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.250597] (UM) [ 1768.254735] ? security_file_ioctl+0x83/0xb0 [ 1768.259727] 6*64kB [ 1768.264565] SyS_ioctl+0x7f/0xb0 [ 1768.264574] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.264585] do_syscall_64+0x1d5/0x640 [ 1768.264599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.264622] RIP: 0033:0x466459 [ 1768.280604] 0 [ 1768.284272] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 [ 1768.288505] 2717 [ 1768.292282] ORIG_RAX: 0000000000000010 [ 1768.292288] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1768.292292] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.292297] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1768.292301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.292306] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1768.310267] Node 0 [ 1768.318691] device veth1_macvtap left promiscuous mode [ 1768.323126] DMA32 free:44532kB min:36200kB low:45248kB high:54296kB active_anon:59000kB inactive_anon:72596kB active_file:28kB inactive_file:1424kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3036kB bounce:0kB free_pcp:124kB local_pcp:116kB free_cma:0kB [ 1768.334456] device veth0_macvtap left promiscuous mode [ 1768.335410] lowmem_reserve[]: [ 1768.367605] (M) [ 1768.410634] 0 [ 1768.486702] 2718 [ 1768.501129] 0 [ 1768.550654] device veth1_vlan left promiscuous mode [ 1768.700691] 0 [ 1768.701644] 2718 [ 1768.702732] 0 [ 1768.708185] 2718 [ 1768.710239] 0 [ 1768.714320] 5*128kB [ 1768.791921] Node 0 [ 1768.840619] Node 0 [ 1768.841711] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.842898] DMA32 free:273108kB min:36200kB low:45248kB high:54296kB active_anon:59000kB inactive_anon:72596kB active_file:28kB inactive_file:4724kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:3036kB bounce:0kB free_pcp:1412kB local_pcp:672kB free_cma:0kB [ 1768.845110] lowmem_reserve[]: [ 1768.870976] (UM) [ 1768.903038] lowmem_reserve[]: 0 0 0 0 0 [ 1768.909081] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.934937] 5*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (M) 4*4096kB (U) = 26156kB [ 1768.961203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1768.970169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.020625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.029494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.050626] lowmem_reserve[]: 0 0 0 0 0 [ 1769.054522] 0 0 [ 1769.054667] Node 1 Normal free:265440kB min:53696kB low:67120kB high:80544kB active_anon:608kB inactive_anon:8136kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:228kB bounce:0kB free_pcp:1268kB local_pcp:632kB free_cma:0kB [ 1769.056746] 0 [ 1769.086202] 22475 total pagecache pages [ 1769.092630] 0 pages in swap cache [ 1769.096082] Swap cache stats: add 0, delete 0, find 0/0 [ 1769.101491] Free swap = 0kB [ 1769.104502] Total swap = 0kB [ 1769.107514] 2097051 pages RAM [ 1769.130638] device veth0_vlan left promiscuous mode [ 1769.135847] lowmem_reserve[]: 0 0 0 0 0 [ 1769.139855] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1769.180717] 0 pages HighMem/MovableOnly [ 1769.184737] 363849 pages reserved [ 1769.188180] 0 pages cma reserved [ 1769.210697] Node 0 DMA32: 7450*4kB (UME) 8464*8kB (UME) 13887*16kB (UE) 3191*32kB (UME) 456*64kB (UM) 82*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 461752kB [ 1769.214628] 0 0 [ 1769.237272] Node 1 Normal free:265440kB min:53696kB low:67120kB high:80544kB active_anon:608kB inactive_anon:8136kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:228kB bounce:0kB free_pcp:1268kB local_pcp:636kB free_cma:0kB [ 1769.270646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1769.274547] lowmem_reserve[]: 0 0 0 0 0 [ 1769.285565] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1769.288314] Node 1 Normal: 232*4kB (UM) 222*8kB (UM) 208*16kB (UME) 213*32kB (UM) 248*64kB (UM) 154*128kB (UM) 56*256kB (UM) 20*512kB (UM) 92*1024kB (UM) 40*2048kB (UM) 4*4096kB (U) = 265520kB [ 1769.326636] Node 0 DMA32: 8369*4kB (UME) 8606*8kB (UME) 13962*16kB (UE) 4157*32kB (UME) 476*64kB (UM) 82*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 499956kB [ 1769.384556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1769.405980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.424713] Node 1 Normal: 473*4kB (UM) 1180*8kB (UM) 469*16kB (UME) 215*32kB (UM) 256*64kB (UM) 155*128kB (UM) 57*256kB (UM) 20*512kB (UM) 92*1024kB (UM) 40*2048kB (UM) 4*4096kB (U) = 279284kB [ 1769.447625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.452621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.456761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.515002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.516011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.570664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.571302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.592993] 22697 total pagecache pages [ 1769.593031] device hsr_slave_1 left promiscuous mode [ 1769.595198] 22697 total pagecache pages [ 1769.602352] 0 pages in swap cache [ 1769.602358] Swap cache stats: add 0, delete 0, find 0/0 [ 1769.602362] Free swap = 0kB [ 1769.602369] Total swap = 0kB [ 1769.609935] 0 pages in swap cache [ 1769.625066] device hsr_slave_0 left promiscuous mode [ 1769.646869] 2097051 pages RAM [ 1769.650088] 0 pages HighMem/MovableOnly [ 1769.651014] Swap cache stats: add 0, delete 0, find 0/0 [ 1769.654275] 363849 pages reserved [ 1769.667185] 0 pages cma reserved [ 1769.670618] Out of memory (oom_kill_allocating_task): Kill process 18415 (in:imklog) score 0 or sacrifice child [ 1769.681217] team0 (unregistering): Port device team_slave_1 removed [ 1769.687934] Killed process 18405 (rsyslogd) total-vm:254332kB, anon-rss:864kB, file-rss:0kB, shmem-rss:0kB [ 1769.690328] Free swap = 0kB [ 1769.706375] oom_reaper: reaped process 18405 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1769.742781] team0 (unregistering): Port device team_slave_0 removed [ 1769.750769] Total swap = 0kB [ 1769.753794] 2097051 pages RAM [ 1769.756915] 0 pages HighMem/MovableOnly [ 1769.776671] bond0 (unregistering): Releasing backup interface bond_slave_1 07:57:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000008c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25070000007800018008000300010000000800030000000000080003000200000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626174616476001400020076657468305f746f5f62726964676500080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="06000180080003000100000014005f746f5f626f6e640000001800018014000200626f6e645f736c6176655f310000000014000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x10c}}, 0x84) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff54c0}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0xfffffffffffffe3b, 0x2, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 07:57:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1769.802696] 363849 pages reserved [ 1769.818177] 0 pages cma reserved [ 1769.834568] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1769.893696] bond0 (unregistering): Released all slaves 07:57:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:57:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000800000000"], 0x14}}, 0x0) 07:57:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5080000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x5118, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x7}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x55}, @NL80211_ATTR_CSA_IES={0x4afc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0xafa0, 0x8001, 0xfdc2, 0x7fff, 0xfff, 0x5, 0xf2dd, 0x9]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2b, 0xf, [@prep={0x83, 0x1f, @not_ext={{}, 0x9, 0x4, @device_b, 0xff, "", 0x8, 0x10001, @device_b, 0x7fff}}, @challenge={0x10, 0x1, 0xb9}, @erp={0x2a, 0x1}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xca, 0x80, [@mic={0x8c, 0x18, {0x949, "aa7561b1c1a9", @long="9e51ca23bbe41d2e0a72d8d9da2d0208"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20}}, @fast_bss_trans={0x37, 0x93, {0x0, 0x2, "4ee25da80ea38d6617f76393bb2491e0", "c061a22691f1b8ba457c187c7bcf1ad0f2f162e1f11066d58295c859b67763c3", "870de50bd7fc49f472123368ea22fc041c55da769f8273c36ebc5ef63cc2e30c", [{0x1, 0x1e, "229194d1d14b2f1e0ac6e0effdcb8ae2dd8b4cbe68f9c7eeaedb021d3d29"}, {0x1, 0x1f, "479b783fed153b570722352600809d6dc66f35bbefb38b3dbdf638bcc2a859"}]}}, @measure_req={0x26, 0xc, {0x7, 0x5a, 0x69, "e2557ee993c272c240"}}]}, @NL80211_ATTR_BEACON_HEAD={0x3ff, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9f}, @device_a, @device_b, @random="0c89f0309690", {0xb, 0x86}}, 0x8000800, @random=0x4, 0xe000, @void, @void, @val={0x3, 0x1, 0x9d}, @val={0x4, 0x6, {0x4, 0xff, 0x200}}, @void, @val={0x5, 0x33, {0x5, 0xa9, 0xff, "5d765fbfe8179653d8b0cea9ef4787d3123d3ecc5cfe1b301deab7b5656ae56d9a223ef465a47efc3829fe8ed6009be1"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xfb, 0xb0, 0x8}}, @val={0x2d, 0x1a, {0x400, 0x0, 0x2, 0x0, {0x7, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x6, 0x6}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6}}, @val={0x76, 0x6, {0x0, 0x6, 0x2e, 0xffff}}, [{0xdd, 0x6d, "ccb55614bd6bea329a3816a31149ba5a91513bf2ae6f23258a5e7492b5b60431012318e30649a218e191d7f0d4761c0bd57e84fa94e97fb23d428136bb320c08650b18b8cbec4ca428ecb4dd4ed0c18aed7ce0f3774877adb59637fa80d636284fb1c920206bd16c2c014a9b78"}, {0xdd, 0x5d, "623fcff46a4f1ae6eea6c89c6efd85ce0607f6d84323597ddbd4239a6a679d23e918d255c5e8430c3525d6137888f8c4a75499f9f28eea4284c8687473410780f98c9b584558f33f08e530ebb4d1a0748560240e1e59987a89bb7bc610"}, {0xdd, 0x53, "352a3918e9dfa9286fc87e1ea1026778a1f74b27317adc3908231c4bf33fd26d89d71563a4c1412e0716d600a54b5dd50400486216d2f9b1fe8ddf4f0bbcd140b81fdd91d89c74556e2257dbbe23bff79751fa"}, {0xdd, 0xb, "a0f536e3638b6f44347a88"}, {0xdd, 0xa4, "975de28061b26f56831270864a8a1c92bac450959f0e52b466ea92737d1c2076ff701f6ec2676a427317814e9e0969ee747641e4698d0671e6355c8a2662c52160575a52dd47532bef2beb3a0e99331558947f785c4d66b0b405505d7fd4b1e620caf66cba19a07f988598bb0da0cd37c0aa56dd2e74193cb7f78430eea6e370f98e70bc6f157956b863d8bc6d106b9eb4c24dd219f6792a5246aea308308b5a4eab6833"}, {0xdd, 0xb8, "47ebf4ed325634e8fe26cf144e61147a98e2aab908875c2ce3dab83cfb48e247a1792aca7c4421ee922852b971a45fca3fc110ee677b2a8cdf89ce1b7429f81708b80f81451cec4c32cfa68679079ca93c72f2ef804e8b897fd4572b179480b3d35532c1829fbbfcf23188c98aec4a617a5a739bc98965a54462beeb0e30a3435485a3475e28d330dee1e9a3b9a7d80a7c8c2d7213a0dafc185d979ccb43de20bb27ea675dad3e45cb6b03703be4b53727a20c36c1b89393"}, {0xdd, 0x3a, "46bdbade8422e2c10eb668988d7cd26d6e1e586ff6ee4f5a0f8637ee93457f38570b74666f9912ed1fd4e2b7c703dccbfb9dbdbab1f224eb503a"}, {0xdd, 0x96, "d6edcfa93c79e193e828d715b4aaff09ce7ea7284307603948af8817d64b2989ade76adb4a733728f220da6e615c21561e72c5fbc0c3b056bbe281aac309e07a33ea1c92c257d44a7f10618573c8a039ab382248a530a5bf28f9e7cfb7705604361178cff54186bb4a3eda6a90789ab3baf9b190333bb1cba71227a04a59b51fa1b373b6d0a0c34b06c6b749a0cad2c7bb175c70ea9c"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xba, 0x7f, [@fast_bss_trans={0x37, 0x52, {0x1, 0x0, "3e11dcfeb4c99f4b240a649a3a6b7dfd", "a7698f005c65f04c6fcddc294d83d1ee540bba391293814bd4264d8c4f6de6cb", "0c75348bd2890e8cedf2db3186c3b26906d1a9ae8fa1dc08bcc01dc1987ad755"}}, @erp={0x2a, 0x1}, @cf={0x4, 0x6, {0x1, 0xd6, 0xff}}, @tim={0x5, 0x2b, {0x7, 0xd1, 0x0, "dfe9a50b5c073f9150ace2816ad53d060f1ebb3d18d3757e2ff638eeabb8d0ff9cc5bf048ea353fb"}}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x2, @device_a, 0x49cd, @broadcast, 0x1, 0x8, @device_b, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE={0xb8, 0x2a, [@fast_bss_trans={0x37, 0xac, {0x5, 0x5, "ca56b1518a32d19ae2b418ab5f929c00", "35af01cf46ae853b26bb8fcc7396ee1a0fc2a9152153637abfc2c1de04ac4962", "d8701c4fce652ed4dc1de6f019890c785e9e890f61178e54d35d5f0267f07590", [{0x2, 0x2, "b93a"}, {0x1, 0x1a, "7c73432bcb73028e1b3789ad54d1def266f65135b22a01e30e02"}, {0x1, 0x9, "6c5354962f2cddce7b"}, {0x1, 0x26, "2e2687cd087aed13ce426e1ba87f3f2587302bfa6ff53854d84b6cfe9f74688d4bb82774db73"}, {0x2, 0x5, "569c3334bd"}]}}, @supported_rates={0x1, 0x4, [{0x9}, {0x24}, {0x12}, {0xb, 0x1}]}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x95, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x74}, 0xa7, 0x3, @device_b, 0x10000, 0x81, 0xeb}}, @preq={0x82, 0x57, @ext={{0x0, 0x0, 0x1}, 0x14, 0x3f, 0x1f, @broadcast, 0x0, @broadcast, 0x1ff, 0x3, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x7fff}, {{0x0, 0x0, 0x1}, @broadcast, 0x64b8}, {{0x1}, @device_a, 0x3ff}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}]}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4, 0x49}}, @mic={0x8c, 0x10, {0x780, "357eb0bf5d79", @short="dc1297e582bf617f"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb5, 0x80}}]}, @NL80211_ATTR_PROBE_RESP={0x71c, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x23, 0x80, [@ht={0x2d, 0x1a, {0x80, 0x1, 0x5, 0x0, {0x9, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x308, 0x9, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_PROBE_RESP={0x7df, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x9, 0x6784, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x0, 0x2, 0x7f, 0xffff]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x2f, 0x91, "4912e098a913fa9623e3ca5398796587bbf08213b9301d6c5700b85655eb34e63fd656f97e3636dcd2e9f0"}, @NL80211_ATTR_IE_ASSOC_RESP={0x8, 0x80, [@ibss={0x6, 0x2, 0xff}]}, @NL80211_ATTR_BEACON_HEAD={0x3b5, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @initial, {0x6, 0x5}}, @ver_80211n={0x0, 0x7fc0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x81, @default, 0x850, @void, @val={0x1, 0x5, [{0xc, 0x1}, {0x9, 0x1}, {0x1b}, {0x56}, {0x48, 0x1}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb9, 0x62}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0xff, 0x9d, 0xfd}}, @val={0x2d, 0x1a, {0x400, 0x0, 0x2, 0x0, {0x1f, 0x7f8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xfdd1, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x1, 0x7f, 0x69}}, @val={0x76, 0x6, {0xe0, 0x0, 0x27, 0x8}}, [{0xdd, 0xe2, "a885eda260c4d540dd2b20290ea712da059412f29c75d9b24d3eb897cd8a09408c2ce56e83f93d851342595180e03973e63816bea4c435e5c52b431eab042f7b7c0e1e6f00421f1996b04a0322457183c38c721614faa1126776af709759b8e6f6a691f328491463a5344a811c8a7fdb414e8cf02412cf27f45ea677b0366513b37ebbcb1cec8083ad6aad4409201d6c284698e25a56d7ee9ec595c103a7f03bfbbfb723cce06719c8d1553431b6560f4c33c2cc492d68134caf063075d01d53561466fc9036782081dd21e9599e9466deffc07bcdda05f31a67fbccda8b63b4b742"}, {0xdd, 0xec, "fa6217fda93d718844e6f6bbaea066dad19bffe5a76ee588f641d1e2b6bcfd247129d86a420d40c845cb2c4df4c03961332b0f646dc822123e68a88c31299ee0603314e8b427bd8f67a59eba2fa00bf281e917afa9710224da42c0656c3f04311670ee9d8610e158c2e78f5a710cb021e299847525e62986cee47ef6a6b6da3c84f3a52a11bb55f7a691548434a12ee1b3676a5367f346cc4cb72649d6e14e1c69b0bc51ce8b336d576dea045f198f5b365fb8d3592ac0088ce80e7bd2f789601520021a75fa26be953ee10a2d8c214f048261ec38c7cb0a6ed9ca2b2092d067edac06a337a58b123981eed1"}, {0xdd, 0xa7, "7534b7b4118520bcbdb2e74156ad5f802fd9ae77f062051b0125040fb3aaf26038dd0bdd1747a60c87c13a203a52c1f1fb042df9280b4782f191ba35498bb0f83e0ac871f6aba812ed89cde2f6c0b94830246bf2b1ced128943f6655633a0e004b6d409f5287c5cc2a558ecbab87316437d77f35ed3e67d17074be9c03a0652d5c2f5c6bf44695834d2e25901548136c75f72276b0954ff4d199a8e9120998524f163640e3e3a9"}, {0xdd, 0x83, "e61e816aa324281f397badadb9732705bf9d5e5f948513514f76e894ec36389dd3eaf822ce19d27a4ff6691d5d4c05790fac9bede80b8302288879c9e6917f767c35889b20b56a6367279637bae455894a1b19b711b7e23715a0654aaf56c2784c356c8d2c9161f6b8651fbfca29ddda1f1087ee90bad606c84d3c862308c3f16000ce"}, {0xdd, 0x3d, "41a0f7d4af6c7bd8c3ddd18653fc1f0b1e64177aa82e3bbc520ee5104ab087402fb72a494f189401b081f0ace1b73c86223617855aac9bacb3f7f41d98"}]}}, @NL80211_ATTR_IE={0x2f, 0x2a, [@ssid={0x0, 0x19, @random="4e10114c4a7a4ced0b35d2d764dd5b23f0c8b146a053bf9e8a"}, @cf={0x4, 0x6, {0x2, 0x4e, 0x7, 0x3}}, @peer_mgmt={0x75, 0x6, {0x0, 0x7, @val=0xff, @void, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x651, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x23c, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd37}, @broadcast, @device_b, @initial, {0x9, 0xc46}}, 0x8, @random, 0x20, @val={0x0, 0x2, @random="8c20"}, @val={0x1, 0x5, [{0xe1be2e6baad90bb1, 0x1}, {0x6c, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0x3, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x6, 0x3}}, @val={0x6, 0x2, 0x3e}, @val={0x5, 0x45, {0x0, 0x51, 0x1, "4965754828cf1a588ec5f09955b849e7ba911eefbfd9fce8e24a72c1a708162147eacf4e9b66e7fbbc2f6be1f4c47bffb2d0c781c901a9a799510c1c9ba680e2a113"}}, @val={0x25, 0x3, {0x1, 0x70, 0x3}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x4, 0x7}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x20, 0xf0, 0x7, 0x3ff}}, [{0xdd, 0x8e, "b4b98002b21fa8d00d2a04cd47b422242f11799d668329c6e536f615f81134d8a84d66091d59e189c44f8a569d68e3e27b8462278b6bafca002b423b5d50d8c1f779d7507698dac97c8060d5140bc26def41c94709f6b928d4fac3d762fec63d040b06a46f51be954b635624339cb27dba6da5aa9fcc2de883893a4d4dc2dcd4bb14d3af8a088c39994986a6645f"}, {0xdd, 0x12, "ff76d236fe84cce0617e68606fe8ae9fc01a"}, {0xdd, 0xdc, "28d2c4020cd388a46f27452b4716c587dcca8b9ec39cd05328638b5414b93f09e09722a400e417efbc117a92854f119a2da3e214254570acdd2f7fa008dd879744612559cbcae9c64180d9304e7aac98ea48bf0155d7f816a09831acbb7d04b9c0380c2030eb839320e1deb6f3c1e9d5ccd976e6f4146bd3a0dfff394d1d7ffb072609d4ef7cc4212c0cac659cd8b9238a4469afe016d5872845fd1fb4499fab25950e118f8159e8eef4f66a5df69562513976372791827ef757e4e0545ea7c58e0b3fe9d888ca079f8ec6912c2d2268bd077b157d63681583925c0c"}, {0xdd, 0x17, "0fd682e2baac8b91b84b78e04eb70178f5fae6b047a75d"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x115, 0x80, [@mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2, @broadcast, 0x1, "", 0xff}}, @perr={0x84, 0x42, {0x69, 0x4, [@ext={{}, @device_b, 0xdff, @device_a, 0x35}, @ext={{}, @broadcast, 0x200, @broadcast, 0x7fff}, @not_ext={{}, @device_b, 0x1, "", 0x1e}, @not_ext={{}, @device_b, 0x200, "", 0x16}]}}, @fast_bss_trans={0x37, 0x70, {0x1f, 0x3, "5d75a51d492f0a16a9cc31e74beba568", "70e3ae3a4681719b82eefd5a0e06bf10c52bfa91c57260f5e32912c4f3495431", "ad776d0f153d335e647a046e46a4a327695e7ebae1d18c744135ffd199fedf48", [{0x2, 0x11, "cb4cf7ff16bf33a7afc9d9d7ae25f50adb"}, {0x2, 0x5, "bf7666111d"}, {0x4, 0x2, "649d"}]}}, @peer_mgmt={0x75, 0x6, {0x1, 0x9, @val=0x7f, @void, @void}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0x1d, {0x8, 0x1, 0x7, "b2d3037c6249b1651e503c362b6095dc18ef9b38b013805135c5"}}]}, @NL80211_ATTR_BEACON_TAIL={0x34, 0xf, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x0, 0x0, {0x3f, 0x8, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x4, 0x4}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1378, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x103, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x42, 0x2, "b76f8de6be0cbaeee4a5d1702e09c09f6e5bc3820d3575e0594725c26552f964c1407e6f4d7888d4a2ce348c8b168fb90982ace500d59cfe29cff334d574"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xdb, 0x3, "5b0ea26a37f72c07cdef23ba912bffb67ce722db3292d84b046c0be71b5fc371c34af0b0b2fcea44de87737071de2ae3a767e93994acbf208bca16431ee72bb251c48c6cd82d1423bf6f8426d54a2f9d87aa22f18a076a184c5d48b2464aa220ed1c572ba1e29cb4de4f10df911d34c911e829c7131df2f1f6bbefd80fb568b0c2b4f938f76c6e777795abab58d3f64e89a0c0502e0a8dbd143fca0ddf92c4869df917c994a130b64626fc55b7c06e7b4cd17e94a376e1b8fcb8349242eb2a36ea18eaa1857f11d8543bc43cd754de356afe306dcb98ef"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9f, 0x3, "737424242359d06f968a29ca5ce59a283a7af02a98231f4470f0b7d954e5a2ad3ae6222e711a0d31f23476259253ce945df227a3090e515037ccdc652a9670fd0845b5d2b31a17b9ff7b2b29f5c6ac207144a5886c8f4a3f223ed0c981e72aec6f9413db3db11aeb589e852c17778f4973543cfbadf6c3891acf09b5b48e4f30a89e04fc6e936098d9f93376bc0a98607bdb8ead22cae5ce411dfc"}, @NL80211_FTM_RESP_ATTR_LCI={0xa8, 0x2, "382771157d04ed34c9752c0c3e8d7ebf14abe52a210b81cf34dde4de374e2b2c80cac25635bedededca7130ee6e715acbf6977b67e3efc97536ef73b4dc425e30daba2768ef7a4e91dab375d3bf376c4c1889c3da0a52421ed10fdc4d8fa3635f4a4a5b60f212cab93d64a4b9c125116a831bc16a609e6730aada9bdcbf3a385360f3893db0324e57e0db3bc83517bae5ec2d29d83b9fcff6de20498d00b3e2144b1345d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x5be, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x85}, @device_b, @device_b, @initial, {0x9, 0x8}}, 0x1, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x36, 0x1}, {0x1, 0x1}, {0x9}, {0x4}, {0x24, 0x1}]}, @val={0x3, 0x1, 0x3}, @void, @void, @val={0x5, 0xca, {0x5, 0xbc, 0x1, "2db8dd0a174196588555463c3b7152806889d84978b67ab4a7637aed3719d0f80ce4d1c11e24644943179d5a0ff77b26e606534d7d9c4b818a4826ef0a7d0642c8e1a9cbf26d1e3110f8125c0229cd450744f6c23df8477b419c28943a4a27fe85653197ef94c709972317689e539a1d6e4db06d12bb43e0c80d768818115e3bdf5fcd6ae1543f502ab39a4fd2051d9f090ae79cdcdeeb39a8a384c8a72adf9215c562d2abe2b47920a858290fed4b753078dd4edf9b9f2ac87aed60ed90669c04f1dab7cb7b44"}}, @val={0x25, 0x3, {0x1, 0x2c, 0x6}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x2c, 0x6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x90, 0x40}}, @val={0x76, 0x6, {0x1f, 0x2, 0x81, 0x7}}, [{0xdd, 0x80, "ed6420e2e706ccadc5f4cc901563cb72771e3f15bffbc2afebc4f647c240c5a3bb4ac7e66a4a9d13f2dbc2bdd4fa45592cfca79c92dff4bf9a9bdd4f98a24d61a08b2ac023c16278b75321a8f9d0f9588bd6a45ce606107ff0d0023eb599d1daf075d3d0131bd98c7143b0f8a047cf7d116dd7e797f0c8fccaa3e6d221b100f1"}, {0xdd, 0xce, "daba8b35820cb1cbd5386979c4dc67b23efb8bad6590e5c1c90987261948c5bf508458d09de7265c41c1a6b73e8442b27e61f3939efecd68d2cc20e2c961409e2f0c15b89c26211709e20000b18dbb3594ef0aee9efba87e781259516f149079f2e2f2ae4a55ab6ce3ac4605babe39924fb28dda055b8862903f70cf2cc00b071366c308b90cdbbdb67c82beac6fe06cdb3c0dc2616863277fbdcd40d68ab8b5989b1541ffeb5d1676af4b180e1b72c47b8ecec48a4a0babbac9b8cb07785061f1dfa97d4ecf911603359ff69bdf"}, {0xdd, 0xc0, "4b6be8528335596371da7ac54bf9f5d66cde186d811a9d4845fa909317e8bd4e12b0446ec7bc6bae7d0578676ca534e17fba08309a1d3d04416e626d03655a6fa3c801be9b1d1006b59736e3a631a70269ae26fc37950361d2146fc2f527b0f8f928dc98441105ee5786088aea66f72b9f0a4bbcaeec18de0345fe30a8fce0c9f88603198ab687b30ed4dab87c080030c2fd86916034705544faeef05f2192bd88b4347a5c15fc653c9a00766f9dea2f8ee7e1567b53fdae3d96be337cdf960f"}, {0xdd, 0x9a, "57f65eee015cfd2e026b80ddf579f92eaeb07776822fc05d398c27ae71754b0e70fc930b2e46e5c707b109c5bc60e18ecd83913df8e4fd50258f7da213f7c5951f1d98279733f51be400ff1fbdb21718ad474fc56ec63d4df1e38a0eb4d12f8e0431776160880a9d4bdddfcf2798afc3364989793fa8c25fa5631442c7c1747aa2cb786dd5a78ed003f82e267e310640b811bcc509d7aff0c1ba"}, {0xdd, 0x59, "09792e16cd39d3b8faa4ee5f38c9f7c413d2b54ddcf409a63526031af7c24e8e1c6706166095be39900336a84836d69b542e090fca558cc01d8898b71f2e46fcbb7063167722fd7add6a1337b51e72161558511ca0b856bd0b"}, {0xdd, 0x8a, "b9221c4c222186df23e425cacf205f1f731b0fa224ec4a72780e67d1025daebcbea114cdff67982a572ef088dc813071c9051a91642495631b6876b8754c9f85404459784a3be7ea56e6217c69b3291030969109d6ff7fa2fada4fa419f1a18ac46cda5ccb757981116fce833c0713d7aa9822aaca132f796148ee10aba118b9bda25b5ef65d3a0d41f5"}, {0xdd, 0x9a, "74cad7f6c40522713ec24933e27ba2749d2aaf3fcfda71e91958c4ee6a1f36e451743cbab021fa6b22e7af316a8218b28a370648f6170a7458407c0a48a387acae8d70bf2ca3ce492497a1339e9affa8f2703a0ea2a67a6356eca52cda5c4157536c3fe8c731afabe16d9aac7a83d08e4c2d095e66176b3ff2f1962da6a7ad43147ec3ebb04ebb566ede35cb3bc2290fce51071b54e507292705"}, {0xdd, 0x32, "c276a5dc152ac4bfd1d7ca86f9f85ec7843482ca718f935cc2a245999ef27817cdb35275c20f222b74e7602b91623d53945f"}, {0xdd, 0x2b, "a6efc7a6c5b623577600e9dbaba148f40d0ba2625456f9232af987f1fd4399409fff580a98f6d8832b0c6d"}]}}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x3f, 0x7f, [@chsw_timing={0x68, 0x4, {0x1000, 0x1}}, @peer_mgmt={0x75, 0x8, {0x0, 0xfafe, @val=0xfffd, @val=0x3a, @void}}, @chsw_timing={0x68, 0x4, {0xfffc, 0x8}}, @dsss={0x3, 0x1, 0x70}, @dsss={0x3, 0x1, 0xa1}, @random_vendor={0xdd, 0x1d, "4b4a0b54f18402f46542c3c76319a074418e78f569693420d780a40ffe"}]}, @NL80211_ATTR_BEACON_HEAD={0x92, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x3, 0x7}}, 0x9, @default, 0x9208, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x30}, {0x4, 0x1}, {0x9, 0x1}, {0x36, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x6c, 0x1}, {0xc, 0x1}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x64, 0x7f}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x51, "8709edf0ea742f065973886115a376ac3c0a94b84076140ef445d07f4bc680bf14e34bb6892465a3040cfa469543e9dfb928353844a60af1d868fd698128c9856484d0d6ab70c05c10892aa45698e609ac"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x1b, 0x7f, [@dsss={0x3, 0x1, 0x3c}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @broadcast}}]}, @NL80211_ATTR_PROBE_RESP={0x7cc, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x162, 0x7f, [@fast_bss_trans={0x37, 0xb7, {0x7, 0x7, "7970a501edb4a93f77639ebf9ca8be07", "ef9ccec5b0097416b37d555a696c5c498aaed31c1cb18d431bc9210bab4f0425", "e86d052343d34a5a237d655833487309c5ed619468539a5e35dca2c95a49b0f2", [{0x3, 0x4, "2fabc986"}, {0x4}, {0x1, 0x19, "9cb7d7101bfc4996b367d28af90dd36f9a0af8636bcac0d782"}, {0x1, 0x16, "2815b28e477017e84fe8b9f00360b639fb3a60a7db6f"}, {0x4}, {0x4, 0xe, "e3a34228a280100962ba3d696dd1"}, {0x4, 0x16, "76fd9538a26e8fdc2a6e85cb93b96f5e060d7df79857"}]}}, @tim={0x5, 0xa0, {0x0, 0xa8, 0x8, "2fc519b4c664711a7cd30385a868fc16121922a4c85a67790dd7ff2da47ce3183f216c8ae776523b0d67bfe64629ce09127049b881930dbf3c4c83eb540dda381f5b46f2819e5c9da74f78488d08e5292570b0378ed593dc98e4158705f82d2eea7b6c1a393724c3b36a25bce109a982be3652a77147bb6ef8d5a60accda5ac332e8a822844858e8c14596c0b17072dff8ecbd91d736f82b47923cfc39"}}, @challenge={0x10, 0x1, 0x31}]}, @NL80211_ATTR_IE={0x11e, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xa3, 0xa9, 0xa6}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0x6c, 0xf7}}, @random_vendor={0xdd, 0x4b, "4b39a23a785366ed2da46b9658ca614aadb4f763d5c30427c7cab067dc9176daf03c2319065dbfe1d820f8c5675e2076a7988262af9c0eebe199023b64cb6743d776151cc7677790f32bf6"}, @random={0xf2, 0x1, "f6"}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @void, @val=0x2, @val="b60eccdf03c6c490bac1feaee717d919"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x40}}, @preq={0x82, 0x88, @not_ext={{0x1}, 0xa1, 0x4, 0x80, @device_b, 0x4, "", 0x6, 0x0, 0xa, [{{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0xba}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x80000001}, {{0x0, 0x0, 0x1}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_b, 0x300000}]}}, @channel_switch={0x25, 0x3, {0x0, 0xab, 0x4}}, @chsw_timing={0x68, 0x4, {0x7, 0x3}}]}, @NL80211_ATTR_FTM_RESPONDER={0x22c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd8, 0x2, "0366bec722bb05365f35091ff147a152b48345337bab63f71d0c33c92a023940808648372fdc2dce11cc31bbbda0fbc2fd99d55cf1782cf57b2c9239b11ae1384c8ec45438cf87a78651dbbfba55353bef8f9b8bbb5942aed4fc19818bfe588bc18b584aa252df50a59866c139a81a22eb900c818939351210396adc653d359bbf716f903e411c58ef705f8b3e0324ea9ef5f98a0a9484aaebfd879648c57fe500644cfc7344228e03b16d60c8bb8e54d881646618ed388a8c65ad2fb7893d0b5ce96004c42155ce3bbbf3f1eae4e78e7be93ad4"}, @NL80211_FTM_RESP_ATTR_LCI={0x6c, 0x2, "489f1dc167e8ea7d2f836ac2abe33c5d22e0284411f4f666ddd3f8ba6b9a3e6943c399345ec85bd677df07adec6b5c495cb8d8cf81fca75a46452a9c80218e2cbbb0bc92fdb01e94870bf70c6525f5cbf34aa343f2e732f4d9c278d2f91a7ccde9fc74febc1e704a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "33cd60c2cb048a3a38d664fc6f1a21e17886e7dc6e8b6b5ce37cbccea7246e69b878b66b833da94bf760d61ef06b6b7e5475da9aa2c26d8f35941760f29cabb7228bb432162d4108f11bd3970c19ed13707c420c9e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x79, 0x3, "9cc85dfb4f1212047462e08a73c070d5eff054d2a30756a3d18f48c64c7d1747e4beea1c34a1f84f87966fa5b8dc42e76bcd7bda8f78df803f018150d9f7db35d1f226e0b81f8ace9a1b89e77f1a9269c8cc22427a58e10918dddddeda3befa3bf8154f09ae4529c96716e0b383f82bcbd66af2927"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, @NL80211_ATTR_CSA_IES={0x5f4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@erp={0x2a, 0x1, {0x1}}, @channel_switch={0x25, 0x3, {0x0, 0xb1, 0x4}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2c8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xef, 0x3, "42e06ebc7e2ad2409706fb1d397d4a8531983a9d856a280af108d81f9226e4b4c4664df7668e97b5700c6693c073644c3cfd61d3319aeb38f4251650b6cc0afef728c6b687119e6a4e17b5bfdb1859d69629986ff58e9863245ac97dd85cb682234afb20b8f41268e0c5d88bfda84ca172a9d09fc52e6dd80b499605fbc5f463cb19b7a6c6b983d7cb0e60ab7582ccffc99088b19653d9466f30ca156966a19dd2760a91fbf6cdb2a05b92c3da73fa75aea84b97b7a2396af28cae893d568c4b6f47c9d8f6e4955f885b21802481e606eab33996161ca3da716dbda68158fe2e05625d918183250c39ac5e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x37, 0x3, "0bd4bd1280e7e83bc8233896dfadd233626b21c1fcb46634a843de3011566936e62460a4b11eab020fd9f537b54a3381a596f7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7b, 0x3, "8f6ad7329e64fbb2df27887539fa4b28aa89cd2f1416a7069c4a84b96e44c1697b656f027f7174893e82203d2f8e337139eb05ff2a23afc316f77535fae76bb439773d29a90fe6ffeddfc59e6d248fae109f7bfb6297d89418518e14df3a912b281507b8d8bdf739ab98d36ce657bbf01e632cb8edf6ab"}, @NL80211_FTM_RESP_ATTR_LCI={0x85, 0x2, "ad855cbc933f33f446554910004a9f1d5a66432983da109623796c74dd8780188b5d3d962881f781b3307b1242a09ab6ebaed30df6b4eef726bbb74f4c98e171fbbdb05952f776d31fbc7ea7b8964143dcc70fe335fc0e429efbf1b66b215b99afd7d9a46f653af101a4c509e98966141be25ebb08499da14f93ae3df7f38922f8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x86, 0x2, "a0c13f2849b3a54364d49402826a5578088cbca0244cba67ed0f3dc6df7fa766102f5a86a1d738e499d4bf087b845cbc9e88b5bfcbabd67170283514b89c35899b19aeabd10131ddcbc05e80f26681a03903b9618d0fe3d015e79b8cfeab69075a1ede32b9f1de9c1957420c0fee6b74ecc5bdeee4888e59bb51501b059f36ce734a"}]}, @NL80211_ATTR_FTM_RESPONDER={0x24, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1f, 0x2, "229bfdf3ecbecc0f14c948097e6e2ec30279d84d747b5776f53cee"}]}, @NL80211_ATTR_IE={0xa1, 0x2a, [@measure_req={0x26, 0x36, {0x1, 0x1f, 0x40, "bbeb4dee4486bf18106b93093cb88a705a7aed9f48ad9088a03fa977e8e41f1ea27c664acf518a00e6890e0a4c1b059698511e"}}, @preq={0x82, 0x4c, @ext={{0x1, 0x0, 0x1}, 0x7f, 0x1f, 0x0, @device_b, 0x7fffffff, @broadcast, 0xe36, 0x6d1, 0x4, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_b, 0x8001}]}}, @rann={0x7e, 0x15, {{0x1, 0x53}, 0x1, 0xfc, @device_b, 0x200, 0x401, 0x3}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x234, 0x80, [@mesh_chsw={0x76, 0x6, {0x0, 0x81, 0x7, 0x3ff}}, @random_vendor={0xdd, 0x61, "2bd7b0299f7a22a6d3a388777aff73134ee399f837ac086b8ac6fb1f413599d0cf185b0bb063a2fcb4f3358b83c2c11a046627bfc2034521b5462474e7fd00cd9c428723c4f5fbee128d4d40158cfc33104e04c5eb46440157c7b1bcb36028da30"}, @peer_mgmt={0x75, 0x18, {0x0, 0x7, @val=0x6, @val=0x2b, @val="3b7a58abc4ec9249f74c750fd57de44c"}}, @random_vendor={0xdd, 0xe9, "03b76bfc18ebc320eae2b6810b8d16fa1d6b8fb8a7dae0803d3810333e7bb592f78396d4732ec67dca2222f36d21d0ae3f52d0258120e503fbb5db934751a74ead31593ac4dafe41ffb6b9f2b9af6787b085780687ba3c2561c653c41fc3959a213d2579097cc17fa5ab462d55aeb01cebac96babe995e28164c09048280964b9cef5c69072e61fc43c8ca1a79b384b20d423a7ed8c368112f649d5cb4f26b164ef76f30b2117d3b3f09f2f1841d7e3e75343e5abc17f1345eef3f7c3ea959fba98a7baa3a4ad01a55085322e8b576040348fa1478bd43159f00392040eb9b5447b66709e2d5d156b9"}, @perr={0x84, 0xa2, {0x38, 0xa, [@ext={{}, @device_b, 0x3, @device_a, 0x27}, @not_ext={{}, @broadcast, 0x7ff, "", 0x2d}, @ext={{}, @device_a, 0x8, @broadcast, 0x30}, @not_ext={{}, @device_a, 0xff, "", 0x35}, @not_ext={{}, @device_b, 0x13f2, "", 0x5}, @ext={{}, @broadcast, 0x5c, @device_b, 0x6}, @not_ext={{}, @device_b, 0x7ff, "", 0x10}, @not_ext={{}, @device_b, 0x1ff, "", 0x20}, @ext={{}, @device_b, 0x7ff, @broadcast, 0x15}, @ext={{}, @device_b, 0x7f, @broadcast, 0x17}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x70, 0x41}}, @peer_mgmt={0x75, 0x14, {0x0, 0xfff, @void, @void, @val="7dddd24895547c6770cc4f6e3cb05165"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x0, 0x101, 0x7, 0xf5, 0x4, 0x7, 0x8, 0x7ff, 0x5]}]}]}, 0x5118}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0xf31d0aa4bd94077, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r3, 0x300, 0x9, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x7}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000845}, 0x40080) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000005480)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000005580)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005540)={&(0x7f00000054c0)={0x5c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01001ce60b090000000002000000"], 0x14}}, 0x0) [ 1770.512811] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1770.545755] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1770.557415] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1770.587818] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1770.610678] CPU: 0 PID: 19352 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1770.618681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.620829] syz-executor.0 cpuset= [ 1770.628167] Call Trace: [ 1770.628191] dump_stack+0x1b2/0x281 [ 1770.628212] warn_alloc.cold+0x96/0x1cc [ 1770.628224] ? zone_watermark_ok_safe+0x220/0x220 [ 1770.628246] __alloc_pages_nodemask+0x2127/0x2720 [ 1770.651765] ? io_schedule_timeout+0x140/0x140 [ 1770.656924] ? lock_acquire+0x170/0x3f0 [ 1770.660921] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1770.665781] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1770.671269] ? __mutex_unlock_slowpath+0x75/0x770 [ 1770.676141] alloc_pages_current+0x155/0x260 [ 1770.680586] ion_page_pool_alloc+0x118/0x1b0 [ 1770.685186] ion_system_heap_allocate+0x133/0x8c0 [ 1770.690066] ? _raw_spin_unlock+0x29/0x40 [ 1770.691207] / [ 1770.694236] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1770.700992] ? ion_system_contig_heap_create+0x130/0x130 [ 1770.705498] mems_allowed=0-1 07:57:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80)='TIPCv2\x00', r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0xf31d0aa4bd94077, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xfc, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4f8}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6af6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9129}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004880}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}, @NL80211_ATTR_IE={0x6d, 0x2a, [@mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x40, 0x3f, 0x8001, 0x500}}, @preq={0x82, 0x57, @ext={{0x1}, 0x7, 0x0, 0x1828, @device_b, 0x3c, @broadcast, 0x3, 0xffff, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0x5}, {{}, @broadcast, 0xfffffffd}, {{0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c810}, 0x4000040) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @val={0x0, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x60}, {0x8, 0x0, 0xe00}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0xffffffcd}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0xffffffff}, {0x8}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x700, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x288, 0x8, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "aa4a4aed6e4ec11416b49ce1e26dd71053a70b05a22f6b7d1155e0105afa32d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PEERS={0x404, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "376709b74ba9ba885356df520bba88ae4530436b920a052b1c06d0ef4d6d901f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d461467bc01d7fae2679f364db20f05177e8376c60789922bd838182c6d45783"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4bf8e09485aac85eeb80f4f61e5e4b6093fb4b0726aad6ac57201f64775a3780"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ca68935074f916167784bc039708ebe4aab40bd430104ba99d9a606a53dcc7e"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3a}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x40014c0) [ 1771.437181] warn_alloc_show_mem: 3 callbacks suppressed [ 1771.437186] Mem-Info: [ 1771.460819] active_anon:15412 inactive_anon:20184 isolated_anon:0 [ 1771.460819] active_file:1903 inactive_file:2512 isolated_file:0 [ 1771.460819] unevictable:0 dirty:84 writeback:0 unstable:0 [ 1771.460819] slab_reclaimable:12866 slab_unreclaimable:118381 [ 1771.460819] mapped:55774 shmem:21267 pagetables:784 bounce:0 [ 1771.460819] free:66310 free_pcp:200 free_cma:0 [ 1771.533982] Node 0 active_anon:61072kB inactive_anon:72600kB active_file:7572kB inactive_file:10040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183212kB dirty:324kB writeback:0kB shmem:76860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1771.574414] Node 1 active_anon:576kB inactive_anon:8136kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39884kB dirty:12kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1771.645591] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.768732] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1771.787986] Node 0 DMA32 free:35700kB min:36200kB low:45248kB high:54296kB active_anon:61072kB inactive_anon:72600kB active_file:3156kB inactive_file:2900kB unevictable:0kB writepending:372kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2924kB bounce:0kB free_pcp:812kB local_pcp:296kB free_cma:0kB [ 1771.839186] lowmem_reserve[]: 0 0 0 0 0 [ 1771.847090] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.879353] lowmem_reserve[]: 0 0 0 0 0 [ 1771.883784] Node 1 Normal free:53612kB min:53696kB low:67120kB high:80544kB active_anon:576kB inactive_anon:8136kB active_file:40kB inactive_file:8kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.917403] lowmem_reserve[]: 0 0 0 0 0 [ 1771.921495] Node 0 DMA: 19*4kB (UE) 23*8kB (UE) 24*16kB (UE) 5*32kB (UE) 5*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10980kB [ 1771.984909] Node 0 DMA32: 624*4kB (UME) 421*8kB (ME) 183*16kB (ME) 839*32kB (UME) 11*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36472kB [ 1772.044970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1772.055798] Node 1 Normal: 9*4kB (M) 964*8kB (UM) 1228*16kB (UME) 821*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53668kB [ 1772.073070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.082708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.094171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.103791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.115230] 21305 total pagecache pages [ 1772.119225] 0 pages in swap cache [ 1772.123566] Swap cache stats: add 0, delete 0, find 0/0 [ 1772.129016] Free swap = 0kB [ 1772.135143] Total swap = 0kB [ 1772.138173] 2097051 pages RAM [ 1772.142070] 0 pages HighMem/MovableOnly [ 1772.146041] 363849 pages reserved [ 1772.149485] 0 pages cma reserved [ 1772.313496] oom_reaper: reaped process 19342 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1772.401565] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1772.421573] systemd-journal cpuset=/ mems_allowed=0-1 [ 1772.426895] CPU: 0 PID: 18830 Comm: systemd-journal Not tainted 4.14.231-syzkaller #0 [ 1772.434863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1772.450385] Call Trace: [ 1772.452981] dump_stack+0x1b2/0x281 [ 1772.456614] dump_header+0x178/0x82f [ 1772.460327] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1772.465427] ? ___ratelimit+0x2cd/0x530 [ 1772.469398] oom_kill_process.cold+0x10/0xa40 [ 1772.474092] out_of_memory+0xe3e/0x1190 [ 1772.478256] ? oom_killer_disable+0x1c0/0x1c0 [ 1772.484050] ? mutex_trylock+0x152/0x1a0 [ 1772.488123] __alloc_pages_nodemask+0x23e1/0x2720 [ 1772.493076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1772.497930] alloc_pages_current+0x155/0x260 [ 1772.502424] filemap_fault+0x11a1/0x1ad0 [ 1772.506499] ext4_filemap_fault+0x84/0xb0 [ 1772.510642] __do_fault+0xfa/0x380 [ 1772.514177] __handle_mm_fault+0x2497/0x4620 [ 1772.518674] ? vm_insert_page+0x7c0/0x7c0 [ 1772.523087] ? mark_held_locks+0xa6/0xf0 [ 1772.527254] handle_mm_fault+0x455/0x9c0 [ 1772.532626] __do_page_fault+0x549/0xad0 [ 1772.536899] ? spurious_fault+0x640/0x640 [ 1772.541071] ? do_page_fault+0x60/0x500 [ 1772.545069] ? page_fault+0x2f/0x50 [ 1772.548702] page_fault+0x45/0x50 [ 1772.552590] RIP: 0001:0xffffffffffffffff [ 1772.556908] RSP: 22051e0:00007ffc16a33170 EFLAGS: 7ffc16a32f80 [ 1772.573312] Mem-Info: [ 1772.581794] active_anon:15428 inactive_anon:20184 isolated_anon:0 [ 1772.581794] active_file:26 inactive_file:0 isolated_file:11 [ 1772.581794] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1772.581794] slab_reclaimable:12857 slab_unreclaimable:118425 [ 1772.581794] mapped:52774 shmem:21267 pagetables:807 bounce:0 [ 1772.581794] free:13863 free_pcp:0 free_cma:0 [ 1772.616795] Node 0 active_anon:61136kB inactive_anon:72600kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:171212kB dirty:80kB writeback:0kB shmem:76860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1772.646314] Node 1 active_anon:576kB inactive_anon:8136kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39884kB dirty:12kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1772.675093] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.708360] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1772.714920] Node 0 DMA32 free:17660kB min:36200kB low:45248kB high:54296kB active_anon:61136kB inactive_anon:72600kB active_file:328kB inactive_file:388kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:3016kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.746980] lowmem_reserve[]: 0 0 0 0 0 [ 1772.751093] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.777663] lowmem_reserve[]: 0 0 0 0 0 [ 1772.781806] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:576kB inactive_anon:8136kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.810096] lowmem_reserve[]: 0 0 0 0 0 [ 1772.814170] Node 0 DMA: 12*4kB (UE) 23*8kB (UE) 24*16kB (UE) 5*32kB (UE) 5*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1772.833802] Node 0 DMA32: 623*4kB (ME) 419*8kB (ME) 183*16kB (ME) 259*32kB (UME) 11*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17892kB [ 1772.848329] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1772.859227] Node 1 Normal: 12*4kB (M) 7*8kB (UM) 33*16kB (UME) 821*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26904kB [ 1772.873001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.881909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.890500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.899450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.908108] 21305 total pagecache pages [ 1772.912165] 0 pages in swap cache [ 1772.915629] Swap cache stats: add 0, delete 0, find 0/0 [ 1772.921048] Free swap = 0kB [ 1772.924057] Total swap = 0kB [ 1772.927064] 2097051 pages RAM [ 1772.930153] 0 pages HighMem/MovableOnly [ 1772.934204] 363849 pages reserved [ 1772.937651] 0 pages cma reserved [ 1772.941073] Out of memory (oom_kill_allocating_task): Kill process 18830 (systemd-journal) score 0 or sacrifice child [ 1772.955562] Killed process 18830 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2200kB [ 1772.967906] oom_reaper: reaped process 18830 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2200kB [ 1772.991346] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1773.008491] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1773.013351] CPU: 1 PID: 7949 Comm: syz-fuzzer Not tainted 4.14.231-syzkaller #0 [ 1773.020884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.031116] Call Trace: [ 1773.033711] dump_stack+0x1b2/0x281 [ 1773.037437] dump_header+0x178/0x82f [ 1773.041149] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1773.046254] ? ___ratelimit+0x2cd/0x530 [ 1773.050239] oom_kill_process.cold+0x10/0xa40 [ 1773.054740] out_of_memory+0xe3e/0x1190 [ 1773.058705] ? oom_killer_disable+0x1c0/0x1c0 [ 1773.063196] ? mutex_trylock+0x152/0x1a0 [ 1773.067447] __alloc_pages_nodemask+0x23e1/0x2720 [ 1773.072320] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1773.077185] alloc_pages_current+0x155/0x260 [ 1773.081588] filemap_fault+0x11a1/0x1ad0 [ 1773.085668] ext4_filemap_fault+0x84/0xb0 [ 1773.089808] __do_fault+0xfa/0x380 [ 1773.093351] __handle_mm_fault+0x2497/0x4620 [ 1773.097768] ? vm_insert_page+0x7c0/0x7c0 [ 1773.101909] ? lock_downgrade+0x740/0x740 [ 1773.106058] ? mark_held_locks+0xa6/0xf0 [ 1773.110115] handle_mm_fault+0x455/0x9c0 [ 1773.114184] __do_page_fault+0x549/0xad0 [ 1773.118237] ? spurious_fault+0x640/0x640 [ 1773.122377] ? do_page_fault+0x60/0x500 [ 1773.126338] ? page_fault+0x2f/0x50 [ 1773.130908] page_fault+0x45/0x50 [ 1773.134352] RIP: 0000:0x9414d4 [ 1773.137527] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1773.160051] Mem-Info: [ 1773.168059] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1773.168460] syz-executor.5: [ 1773.179835] syz-executor.3: [ 1773.182966] syz-executor.3: [ 1773.184029] active_anon:15259 inactive_anon:20184 isolated_anon:0 [ 1773.184029] active_file:10 inactive_file:21 isolated_file:0 [ 1773.184029] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1773.184029] slab_reclaimable:12851 slab_unreclaimable:118191 [ 1773.184029] mapped:52788 shmem:21267 pagetables:796 bounce:0 [ 1773.184029] free:13896 free_pcp:0 free_cma:0 [ 1773.185981] page allocation failure: order:0 [ 1773.189010] Node 0 active_anon:60488kB inactive_anon:72600kB active_file:24kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171268kB dirty:0kB writeback:0kB shmem:76860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1773.230609] page allocation failure: order:0 [ 1773.257066] page allocation failure: order:0 [ 1773.263134] systemd-journal cpuset=/ mems_allowed=0-1 [ 1773.274982] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1773.276527] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1773.282674] CPU: 1 PID: 18830 Comm: systemd-journal Not tainted 4.14.231-syzkaller #0 [ 1773.282680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.282683] Call Trace: [ 1773.282707] dump_stack+0x1b2/0x281 [ 1773.301674] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1773.307114] warn_alloc.cold+0x96/0x1cc [ 1773.309689] (null) [ 1773.313305] ? zone_watermark_ok_safe+0x220/0x220 [ 1773.313314] ? usleep_range+0x130/0x130 [ 1773.313321] ? try_to_free_pages+0x23f/0x6e0 [ 1773.313330] ? _find_next_bit+0xdb/0x100 [ 1773.313338] ? run_timer_softirq+0x5a0/0x5a0 [ 1773.313351] __alloc_pages_nodemask+0x2127/0x2720 [ 1773.313369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1773.313392] alloc_pages_current+0x155/0x260 [ 1773.313404] filemap_fault+0x11a1/0x1ad0 [ 1773.313423] ext4_filemap_fault+0x84/0xb0 [ 1773.313433] __do_fault+0xfa/0x380 [ 1773.313443] __handle_mm_fault+0x2497/0x4620 [ 1773.313453] ? vm_insert_page+0x7c0/0x7c0 [ 1773.333015] (null) [ 1773.335460] ? mark_held_locks+0xa6/0xf0 [ 1773.339844] syz-executor.5 cpuset= [ 1773.343901] handle_mm_fault+0x455/0x9c0 [ 1773.343915] __do_page_fault+0x549/0xad0 [ 1773.343925] ? spurious_fault+0x640/0x640 [ 1773.343938] ? do_page_fault+0x60/0x500 [ 1773.343947] ? page_fault+0x2f/0x50 [ 1773.343953] page_fault+0x45/0x50 [ 1773.343961] RIP: 0001:0xffffffffffffffff [ 1773.343965] RSP: 22051e0:00007ffc16a33170 EFLAGS: 7ffc16a32f80 [ 1773.352639] syz-executor.3 cpuset= [ 1773.360054] syz-executor.3 cpuset= [ 1773.375035] / [ 1773.434064] / [ 1773.443984] Node 1 active_anon:548kB inactive_anon:8136kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39884kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1773.445955] / [ 1773.475042] warn_alloc_show_mem: 2 callbacks suppressed [ 1773.475046] Mem-Info: [ 1773.484569] mems_allowed=0-1 [ 1773.486601] mems_allowed=0-1 [ 1773.487678] CPU: 1 PID: 19355 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1773.498639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.507994] Call Trace: [ 1773.510590] dump_stack+0x1b2/0x281 [ 1773.514224] warn_alloc.cold+0x96/0x1cc [ 1773.518225] ? zone_watermark_ok_safe+0x220/0x220 [ 1773.523065] ? usleep_range+0x130/0x130 [ 1773.527054] ? try_to_free_pages+0x23f/0x6e0 [ 1773.531505] ? _find_next_bit+0xdb/0x100 [ 1773.535563] ? run_timer_softirq+0x5a0/0x5a0 [ 1773.539975] __alloc_pages_nodemask+0x2127/0x2720 [ 1773.544845] ? lock_acquire+0x170/0x3f0 [ 1773.546819] mems_allowed=0-1 [ 1773.548819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1773.556839] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1773.560015] active_anon:15259 inactive_anon:20184 isolated_anon:0 [ 1773.560015] active_file:10 inactive_file:21 isolated_file:0 [ 1773.560015] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1773.560015] slab_reclaimable:12851 slab_unreclaimable:118191 [ 1773.560015] mapped:52788 shmem:21267 pagetables:796 bounce:0 [ 1773.560015] free:13896 free_pcp:0 free_cma:0 [ 1773.561350] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1773.561369] alloc_pages_current+0x155/0x260 [ 1773.561384] ion_page_pool_alloc+0x118/0x1b0 [ 1773.561394] ion_system_heap_allocate+0x133/0x8c0 [ 1773.561403] ? ion_alloc+0x187/0x810 [ 1773.561414] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1773.561424] ? ion_system_contig_heap_create+0x130/0x130 [ 1773.561433] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1773.561443] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1773.561454] ion_alloc+0x204/0x810 [ 1773.561467] ? ion_dma_buf_release+0x40/0x40 [ 1773.561491] ? __might_fault+0x177/0x1b0 [ 1773.650384] ion_ioctl+0xea/0x1f0 [ 1773.653838] ? ion_query_heaps+0x360/0x360 [ 1773.658434] ? ion_query_heaps+0x360/0x360 [ 1773.662690] do_vfs_ioctl+0x75a/0xff0 [ 1773.666496] ? ioctl_preallocate+0x1a0/0x1a0 [ 1773.670925] ? lock_downgrade+0x740/0x740 [ 1773.675088] ? __fget+0x225/0x360 [ 1773.679082] ? do_vfs_ioctl+0xff0/0xff0 [ 1773.683064] ? security_file_ioctl+0x83/0xb0 [ 1773.687498] SyS_ioctl+0x7f/0xb0 [ 1773.691304] ? do_vfs_ioctl+0xff0/0xff0 [ 1773.695290] do_syscall_64+0x1d5/0x640 [ 1773.699188] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1773.704508] RIP: 0033:0x466459 [ 1773.707695] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1773.715411] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1773.722694] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1773.729978] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1773.737269] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1773.744538] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1773.752788] CPU: 0 PID: 19352 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1773.759054] Node 0 [ 1773.760690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.760694] Call Trace: [ 1773.760714] dump_stack+0x1b2/0x281 [ 1773.760731] warn_alloc.cold+0x96/0x1cc [ 1773.762967] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1773.772312] ? zone_watermark_ok_safe+0x220/0x220 [ 1773.772322] ? usleep_range+0x130/0x130 [ 1773.772331] ? try_to_free_pages+0x23f/0x6e0 [ 1773.772341] ? _find_next_bit+0xdb/0x100 [ 1773.772353] ? run_timer_softirq+0x5a0/0x5a0 [ 1773.778126] lowmem_reserve[]: [ 1773.778557] __alloc_pages_nodemask+0x2127/0x2720 [ 1773.782533] 0 [ 1773.808711] ? lock_acquire+0x170/0x3f0 [ 1773.808728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1773.808739] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1773.808754] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1773.813722] 2717 [ 1773.817856] alloc_pages_current+0x155/0x260 [ 1773.830283] 2718 [ 1773.834297] ion_page_pool_alloc+0x118/0x1b0 [ 1773.834308] ion_system_heap_allocate+0x133/0x8c0 [ 1773.838700] 2718 [ 1773.841803] ? _raw_spin_unlock+0x29/0x40 [ 1773.841814] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1773.841823] ? ion_system_contig_heap_create+0x130/0x130 [ 1773.841837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1773.846786] 2718 [ 1773.848582] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1773.857362] ion_alloc+0x27a/0x810 [ 1773.861874] Node 0 [ 1773.867282] ? ion_dma_buf_release+0x40/0x40 [ 1773.869325] DMA32 free:17752kB min:36200kB low:45248kB high:54296kB active_anon:60488kB inactive_anon:72600kB active_file:24kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2972kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1773.873712] ? __might_fault+0x177/0x1b0 [ 1773.873725] ion_ioctl+0xea/0x1f0 [ 1773.873734] ? ion_query_heaps+0x360/0x360 [ 1773.873746] ? ion_query_heaps+0x360/0x360 [ 1773.873756] do_vfs_ioctl+0x75a/0xff0 [ 1773.875840] lowmem_reserve[]: [ 1773.880787] ? ioctl_preallocate+0x1a0/0x1a0 [ 1773.880796] ? lock_downgrade+0x740/0x740 [ 1773.880808] ? __fget+0x225/0x360 [ 1773.880817] ? do_vfs_ioctl+0xff0/0xff0 [ 1773.880830] ? security_file_ioctl+0x83/0xb0 [ 1773.885771] 0 [ 1773.887846] SyS_ioctl+0x7f/0xb0 [ 1773.892019] 0 [ 1773.896892] ? do_vfs_ioctl+0xff0/0xff0 [ 1773.902374] 0 [ 1773.907444] do_syscall_64+0x1d5/0x640 [ 1773.909488] 0 [ 1773.914503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1773.914517] RIP: 0033:0x466459 [ 1773.914522] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1773.914535] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1773.918063] 0 [ 1773.920280] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1773.920288] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1773.952713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1773.952720] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1773.959687] CPU: 0 PID: 19342 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1773.973087] Node 0 active_anon:60488kB inactive_anon:72600kB active_file:24kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171268kB dirty:0kB writeback:0kB shmem:76860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1773.976162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1773.980645] Node 0 [ 1773.984895] Call Trace: [ 1773.988356] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1773.992341] dump_stack+0x1b2/0x281 [ 1773.992356] warn_alloc.cold+0x96/0x1cc [ 1773.992367] ? zone_watermark_ok_safe+0x220/0x220 [ 1773.992376] ? usleep_range+0x130/0x130 [ 1773.992387] ? try_to_free_pages+0x23f/0x6e0 [ 1773.996811] Node 1 active_anon:548kB inactive_anon:8136kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39884kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1773.998588] ? _find_next_bit+0xdb/0x100 [ 1774.001981] Node 0 [ 1774.003750] ? run_timer_softirq+0x5a0/0x5a0 [ 1774.007728] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1774.009526] __alloc_pages_nodemask+0x2127/0x2720 [ 1774.013461] lowmem_reserve[]: [ 1774.015201] ? lock_acquire+0x170/0x3f0 [ 1774.020385] 0 [ 1774.023593] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1774.023603] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1774.023618] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1774.023637] alloc_pages_current+0x155/0x260 [ 1774.031395] lowmem_reserve[]: [ 1774.038622] ion_page_pool_alloc+0x118/0x1b0 [ 1774.040394] 0 [ 1774.047667] ion_system_heap_allocate+0x133/0x8c0 [ 1774.047677] ? ion_alloc+0x187/0x810 [ 1774.047686] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1774.047695] ? ion_system_contig_heap_create+0x130/0x130 [ 1774.047708] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1774.055036] 0 [ 1774.062357] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1774.062369] ion_alloc+0x204/0x810 [ 1774.062384] ? ion_dma_buf_release+0x40/0x40 [ 1774.062395] ? __might_fault+0x177/0x1b0 [ 1774.069679] 2717 [ 1774.077548] ion_ioctl+0xea/0x1f0 [ 1774.077559] ? ion_query_heaps+0x360/0x360 [ 1774.077569] ? ion_query_heaps+0x360/0x360 [ 1774.077579] do_vfs_ioctl+0x75a/0xff0 [ 1774.077590] ? ioctl_preallocate+0x1a0/0x1a0 [ 1774.105751] 0 [ 1774.115061] ? lock_downgrade+0x740/0x740 [ 1774.115076] ? __fget+0x225/0x360 [ 1774.115085] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.115097] ? security_file_ioctl+0x83/0xb0 [ 1774.115108] SyS_ioctl+0x7f/0xb0 [ 1774.130606] 0 [ 1774.145249] ? do_vfs_ioctl+0xff0/0xff0 [ 1774.145263] do_syscall_64+0x1d5/0x640 [ 1774.145276] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1774.145288] RIP: 0033:0x466459 [ 1774.160610] 0 [ 1774.161696] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 [ 1774.166116] Node 1 [ 1774.193103] ORIG_RAX: 0000000000000010 [ 1774.193110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1774.193114] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1774.193119] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1774.193123] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1774.193128] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1774.270636] 2718 [ 1774.480678] Normal free:295376kB min:53696kB low:67120kB high:80544kB active_anon:548kB inactive_anon:8136kB active_file:20kB inactive_file:2116kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:116kB free_cma:0kB [ 1774.540687] 2718 2718 [ 1774.543961] Node 0 DMA32 free:46160kB min:36200kB low:45248kB high:54296kB active_anon:60488kB inactive_anon:72600kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2972kB bounce:0kB free_pcp:228kB local_pcp:128kB free_cma:0kB [ 1774.570616] lowmem_reserve[]: 0 0 0 0 0 [ 1774.577666] Node 0 DMA: 12*4kB (UE) 23*8kB (UE) 24*16kB (UE) 5*32kB (UE) 5*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1774.630624] lowmem_reserve[]: 0 0 0 0 0 [ 1774.634658] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1774.650602] Node 0 DMA32: 642*4kB (UME) 427*8kB (ME) 185*16kB (UME) 61*32kB (ME) 145*64kB (UM) 28*128kB (UM) 0*256kB 0*512kB 14*1024kB (U) 4*2048kB (U) 0*4096kB = 46288kB [ 1774.700759] lowmem_reserve[]: 0 0 0 0 0 [ 1774.720617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1774.723781] Node 1 [ 1774.731970] Node 1 Normal: 0*4kB 0*8kB 3*16kB (ME) 1*32kB (U) 2708*64kB (UM) 789*128kB (U) 193*256kB (UM) 31*512kB (UM) 199*1024kB (U) 10*2048kB (U) 0*4096kB = 563920kB [ 1774.770649] Normal free:600912kB min:53696kB low:67120kB high:80544kB active_anon:548kB inactive_anon:8136kB active_file:20kB inactive_file:2116kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:236kB local_pcp:124kB free_cma:0kB [ 1774.770655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1774.770664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1774.820647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1774.831987] lowmem_reserve[]: 0 0 0 0 0 [ 1774.836000] Node 0 DMA: 12*4kB (UE) 23*8kB (UE) 24*16kB (UE) 5*32kB (UE) 5*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1774.840929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1774.920617] Node 0 DMA32: 611*4kB (UME) 428*8kB (UME) 184*16kB (ME) 62*32kB (UME) 1642*64kB (UM) 84*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 126892kB [ 1774.930610] 21854 total pagecache pages [ 1774.940448] 0 pages in swap cache [ 1774.960604] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 1774.960648] Swap cache stats: add 0, delete 0, find 0/0 [ 1774.960656] Free swap = 0kB [ 1774.967865] 0*512kB [ 1775.013827] Total swap = 0kB [ 1775.019187] 2097051 pages RAM [ 1775.020626] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1775.026712] Node 1 Normal: 0*4kB 1*8kB (U) 3*16kB (ME) 1*32kB (U) 3375*64kB (UM) 1021*128kB (U) 276*256kB (UM) 58*512kB (UM) 78*1024kB (U) 28*2048kB (U) 0*4096kB = 584344kB [ 1775.060609] 0 pages HighMem/MovableOnly [ 1775.064752] 363849 pages reserved [ 1775.068481] 0 pages cma reserved [ 1775.100615] Out of memory (oom_kill_allocating_task): Kill process 7949 (syz-fuzzer) score 0 or sacrifice child [ 1775.114317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1775.134086] Killed process 18543 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1775.150614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1775.187321] oom_reaper: reaped process 18543 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1775.216526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1775.250681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1775.259294] 22766 total pagecache pages [ 1775.280062] 0 pages in swap cache [ 1775.300718] Swap cache stats: add 0, delete 0, find 0/0 [ 1775.306169] Free swap = 0kB [ 1775.309185] Total swap = 0kB [ 1775.320670] 2097051 pages RAM [ 1775.324152] 0 pages HighMem/MovableOnly [ 1775.328138] 363849 pages reserved [ 1775.350496] 0 pages cma reserved [ 1775.360641] systemd-journal invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 1775.401052] systemd-journal cpuset=/ mems_allowed=0-1 [ 1775.410755] CPU: 0 PID: 18830 Comm: systemd-journal Not tainted 4.14.231-syzkaller #0 [ 1775.418786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.428145] Call Trace: [ 1775.430995] dump_stack+0x1b2/0x281 [ 1775.434983] dump_header+0x178/0x82f [ 1775.438724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1775.443852] ? ___ratelimit+0x2cd/0x530 [ 1775.447878] oom_kill_process.cold+0x10/0xa40 [ 1775.452394] out_of_memory+0xe3e/0x1190 [ 1775.456381] ? pagefault_out_of_memory+0xaa/0xd0 [ 1775.461156] ? oom_killer_disable+0x1c0/0x1c0 [ 1775.465660] ? mutex_trylock+0x152/0x1a0 [ 1775.469723] ? pagefault_out_of_memory+0xaa/0xd0 [ 1775.474590] pagefault_out_of_memory+0xbb/0xd0 [ 1775.479267] ? out_of_memory+0x1190/0x1190 [ 1775.483514] ? lock_downgrade+0x740/0x740 [ 1775.488355] mm_fault_error+0xad/0x2c0 [ 1775.492455] __do_page_fault+0x93c/0xad0 [ 1775.496528] ? spurious_fault+0x640/0x640 [ 1775.500765] ? do_page_fault+0x60/0x500 [ 1775.504763] ? page_fault+0x2f/0x50 [ 1775.508387] page_fault+0x45/0x50 [ 1775.511838] RIP: 0001:0xffffffffffffffff [ 1775.516019] RSP: 22051e0:00007ffc16a33170 EFLAGS: 7ffc16a32f80 [ 1775.619680] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1775.653080] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1775.658315] CPU: 0 PID: 19355 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1775.665514] syz-executor.3: [ 1775.666196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.666207] page allocation failure: order:4 [ 1775.669208] Call Trace: [ 1775.678646] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1775.683007] dump_stack+0x1b2/0x281 [ 1775.683024] warn_alloc.cold+0x96/0x1cc [ 1775.685592] (null) [ 1775.692710] ? zone_watermark_ok_safe+0x220/0x220 [ 1775.692733] __alloc_pages_nodemask+0x2127/0x2720 [ 1775.692749] ? lock_acquire+0x170/0x3f0 [ 1775.692764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1775.699464] syz-executor.3 cpuset= [ 1775.703447] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1775.703459] ? __mutex_unlock_slowpath+0x75/0x770 [ 1775.703478] alloc_pages_current+0x155/0x260 [ 1775.705616] / [ 1775.710459] ion_page_pool_alloc+0x118/0x1b0 [ 1775.715337] Mem-Info: [ 1775.719248] ion_system_heap_allocate+0x133/0x8c0 [ 1775.724142] mems_allowed=0-1 [ 1775.727618] ? _raw_spin_unlock+0x29/0x40 [ 1775.733212] active_anon:15259 inactive_anon:20184 isolated_anon:0 [ 1775.733212] active_file:86 inactive_file:87 isolated_file:0 [ 1775.733212] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1775.733212] slab_reclaimable:12847 slab_unreclaimable:117762 [ 1775.733212] mapped:44179 shmem:21267 pagetables:759 bounce:0 [ 1775.733212] free:14133 free_pcp:0 free_cma:0 [ 1775.738084] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1775.750613] Node 0 active_anon:60288kB inactive_anon:72600kB active_file:160kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136568kB dirty:0kB writeback:0kB shmem:76860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1775.751336] ? ion_system_contig_heap_create+0x130/0x130 [ 1775.756184] Node 1 active_anon:748kB inactive_anon:8136kB active_file:184kB inactive_file:220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40148kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1775.759349] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1775.780607] Node 0 [ 1775.796916] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1775.796928] ion_alloc+0x27a/0x810 [ 1775.796943] ? ion_dma_buf_release+0x40/0x40 [ 1775.796958] ? __might_fault+0x177/0x1b0 [ 1775.820622] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1775.829648] ion_ioctl+0xea/0x1f0 [ 1775.850597] lowmem_reserve[]: [ 1775.862693] ? ion_query_heaps+0x360/0x360 [ 1775.862705] ? ion_query_heaps+0x360/0x360 [ 1775.862715] do_vfs_ioctl+0x75a/0xff0 [ 1775.862727] ? ioctl_preallocate+0x1a0/0x1a0 [ 1775.890602] 0 [ 1775.913940] ? lock_downgrade+0x740/0x740 [ 1775.913957] ? __fget+0x225/0x360 [ 1775.913966] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.913978] ? security_file_ioctl+0x83/0xb0 [ 1775.913989] SyS_ioctl+0x7f/0xb0 [ 1775.940600] 2717 [ 1775.943177] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.946608] 2718 [ 1775.950581] do_syscall_64+0x1d5/0x640 [ 1775.950596] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1775.950605] RIP: 0033:0x466459 [ 1775.950613] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 [ 1775.970609] 2718 [ 1775.970816] ORIG_RAX: 0000000000000010 [ 1775.975997] 2718 [ 1775.979186] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1775.999898] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.007342] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1776.007353] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1776.021983] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1776.029283] CPU: 1 PID: 19342 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1776.037171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.046528] Call Trace: [ 1776.049163] dump_stack+0x1b2/0x281 [ 1776.052799] warn_alloc.cold+0x96/0x1cc [ 1776.056790] ? zone_watermark_ok_safe+0x220/0x220 [ 1776.061673] __alloc_pages_nodemask+0x2127/0x2720 [ 1776.064230] warn_alloc_show_mem: 3 callbacks suppressed [ 1776.064234] Mem-Info: [ 1776.066527] ? io_schedule_timeout+0x140/0x140 [ 1776.076542] active_anon:15240 inactive_anon:20182 isolated_anon:0 [ 1776.076542] active_file:39 inactive_file:46 isolated_file:0 [ 1776.076542] unevictable:0 dirty:0 writeback:22 unstable:0 [ 1776.076542] slab_reclaimable:12847 slab_unreclaimable:117733 [ 1776.076542] mapped:44100 shmem:21264 pagetables:745 bounce:0 [ 1776.076542] free:14309 free_pcp:27 free_cma:0 [ 1776.079507] ? lock_acquire+0x170/0x3f0 [ 1776.117454] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.121240] Node 0 active_anon:60244kB inactive_anon:72592kB active_file:108kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136484kB dirty:0kB writeback:40kB shmem:76848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1776.122301] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1776.156123] ? __mutex_unlock_slowpath+0x75/0x770 [ 1776.158262] Node 1 active_anon:716kB inactive_anon:8136kB active_file:48kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39916kB dirty:0kB writeback:48kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1776.160984] ? retint_kernel+0x2d/0x2d [ 1776.160999] alloc_pages_current+0x155/0x260 [ 1776.161013] ion_page_pool_alloc+0x118/0x1b0 [ 1776.161023] ion_system_heap_allocate+0x133/0x8c0 [ 1776.161034] ? _raw_spin_unlock+0x29/0x40 [ 1776.161041] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1776.161049] ? ion_system_contig_heap_create+0x130/0x130 [ 1776.161059] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.161072] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1776.195816] Node 0 [ 1776.196334] ion_alloc+0x27a/0x810 [ 1776.203196] DMA32 free:18964kB min:36200kB low:45248kB high:54296kB active_anon:60244kB inactive_anon:72592kB active_file:468kB inactive_file:80kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2752kB bounce:0kB free_pcp:108kB local_pcp:108kB free_cma:0kB [ 1776.205577] ? ion_dma_buf_release+0x40/0x40 [ 1776.209707] lowmem_reserve[]: [ 1776.214639] ? __might_fault+0x177/0x1b0 [ 1776.214652] ion_ioctl+0xea/0x1f0 [ 1776.214662] ? ion_query_heaps+0x360/0x360 [ 1776.214673] ? ion_query_heaps+0x360/0x360 [ 1776.214683] do_vfs_ioctl+0x75a/0xff0 [ 1776.214693] ? ioctl_preallocate+0x1a0/0x1a0 [ 1776.214702] ? lock_downgrade+0x740/0x740 [ 1776.214714] ? __fget+0x225/0x360 [ 1776.214723] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.214734] ? security_file_ioctl+0x83/0xb0 [ 1776.214744] SyS_ioctl+0x7f/0xb0 [ 1776.214751] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.214761] do_syscall_64+0x1d5/0x640 [ 1776.214778] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1776.227875] 0 [ 1776.230506] RIP: 0033:0x466459 [ 1776.232857] 0 [ 1776.236312] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 [ 1776.273100] Node 0 [ 1776.276618] ORIG_RAX: 0000000000000010 [ 1776.280134] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.284339] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1776.284345] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.284350] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1776.284355] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1776.284359] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1776.351330] syz-executor.3: [ 1776.358702] 0 [ 1776.382683] page allocation failure: order:0 [ 1776.400252] 0 [ 1776.402758] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1776.424555] 0 [ 1776.428571] (null) [ 1776.438060] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1776.445849] CPU: 1 PID: 19342 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1776.453750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.453754] Call Trace: [ 1776.453772] dump_stack+0x1b2/0x281 [ 1776.453786] warn_alloc.cold+0x96/0x1cc [ 1776.453798] ? zone_watermark_ok_safe+0x220/0x220 [ 1776.453807] ? usleep_range+0x130/0x130 [ 1776.453815] ? try_to_free_pages+0x23f/0x6e0 [ 1776.453826] ? _find_next_bit+0xdb/0x100 [ 1776.453836] ? run_timer_softirq+0x5a0/0x5a0 [ 1776.453852] __alloc_pages_nodemask+0x2127/0x2720 [ 1776.453869] ? lock_acquire+0x170/0x3f0 [ 1776.453883] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.475064] lowmem_reserve[]: [ 1776.478211] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1776.488039] 0 [ 1776.490712] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1776.490725] ? retint_kernel+0x2d/0x2d [ 1776.490739] alloc_pages_current+0x155/0x260 [ 1776.490753] ion_page_pool_alloc+0x118/0x1b0 [ 1776.490763] ion_system_heap_allocate+0x133/0x8c0 [ 1776.490775] ? _raw_spin_unlock+0x29/0x40 [ 1776.490786] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1776.506824] Node 0 [ 1776.509535] ? ion_system_contig_heap_create+0x130/0x130 [ 1776.515474] 2717 [ 1776.517114] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.518894] 2718 [ 1776.524335] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1776.524347] ion_alloc+0x27a/0x810 [ 1776.524360] ? ion_dma_buf_release+0x40/0x40 [ 1776.524371] ? __might_fault+0x177/0x1b0 [ 1776.524382] ion_ioctl+0xea/0x1f0 [ 1776.524390] ? ion_query_heaps+0x360/0x360 [ 1776.524400] ? ion_query_heaps+0x360/0x360 [ 1776.524411] do_vfs_ioctl+0x75a/0xff0 [ 1776.524421] ? ioctl_preallocate+0x1a0/0x1a0 [ 1776.524430] ? lock_downgrade+0x740/0x740 [ 1776.524444] ? __fget+0x225/0x360 [ 1776.524453] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.524465] ? security_file_ioctl+0x83/0xb0 [ 1776.524480] SyS_ioctl+0x7f/0xb0 [ 1776.524487] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.524499] do_syscall_64+0x1d5/0x640 [ 1776.524513] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1776.540237] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.542043] RIP: 0033:0x466459 [ 1776.542049] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.542058] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1776.542063] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.542068] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1776.542073] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1776.542078] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1776.550669] 2718 [ 1776.555882] lowmem_reserve[]: [ 1776.559266] 2718 [ 1776.563854] 0 [ 1776.661287] 0 [ 1776.770844] Node 0 DMA32 free:139292kB min:36200kB low:45248kB high:54296kB active_anon:60160kB inactive_anon:72588kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2688kB bounce:0kB free_pcp:1348kB local_pcp:680kB free_cma:0kB [ 1776.827273] 0 0 0 [ 1776.830009] Node 1 Normal free:550656kB min:53696kB low:67120kB high:80544kB active_anon:708kB inactive_anon:8136kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:868kB local_pcp:384kB free_cma:0kB [ 1776.866268] lowmem_reserve[]: 0 0 0 0 0 [ 1776.870388] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.897214] lowmem_reserve[]: 0 0 0 0 0 [ 1776.901876] Node 0 DMA: 1*4kB (E) 19*8kB (UE) 24*16kB (UE) 5*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11196kB [ 1776.944035] lowmem_reserve[]: 0 0 0 0 0 [ 1776.948086] Node 1 Normal free:539932kB min:53696kB low:67120kB high:80544kB active_anon:708kB inactive_anon:8136kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:208kB local_pcp:120kB free_cma:0kB [ 1776.950677] Node 0 DMA32: 140*4kB (UE) 334*8kB (ME) 149*16kB (UME) 41*32kB (ME) 237*64kB (UM) 180*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45136kB [ 1777.024101] lowmem_reserve[]: 0 0 0 0 0 [ 1777.028164] Node 0 DMA: 1*4kB (E) 6*8kB (UE) 24*16kB (UE) 5*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11092kB [ 1777.040650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1777.070610] Node 0 DMA32: 140*4kB (UE) 334*8kB (ME) 149*16kB (UME) 41*32kB (ME) 237*64kB (UM) 180*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45136kB [ 1777.071360] Node 1 [ 1777.088373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.110654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.110703] Normal: 0*4kB 3*8kB (UM) 7*16kB (UME) 7*32kB (UM) 4299*64kB (UME) 833*128kB (UM) 9*256kB (UM) 53*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 412584kB [ 1777.131870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1777.146694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.150617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.153523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.170639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.170831] Node 1 [ 1777.179228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.179234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.179238] 21890 total pagecache pages [ 1777.179252] 0 pages in swap cache [ 1777.179257] Swap cache stats: add 0, delete 0, find 0/0 [ 1777.179260] Free swap = 0kB [ 1777.179268] Normal: [ 1777.213833] Total swap = 0kB [ 1777.220377] 2097051 pages RAM [ 1777.223974] 0 pages HighMem/MovableOnly [ 1777.225716] device bridge_slave_1 left promiscuous mode [ 1777.233936] 363849 pages reserved [ 1777.234350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.237396] 0 pages cma reserved [ 1777.244427] 0*4kB 3*8kB (UM) 6*16kB [ 1777.250936] device bridge_slave_0 left promiscuous mode [ 1777.260225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.260674] Out of memory (oom_kill_allocating_task): Kill process 18830 (systemd-journal) score 0 or sacrifice child [ 1777.278200] (ME) 6*32kB (M) 3269*64kB (UME) 833*128kB (UM) 9*256kB (UM) 53*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 346616kB [ 1777.301962] Killed process 18830 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:2200kB [ 1777.303430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.322308] device veth1_macvtap left promiscuous mode [ 1777.327621] device veth0_macvtap left promiscuous mode [ 1777.341174] device veth1_vlan left promiscuous mode [ 1777.355839] device veth0_vlan left promiscuous mode [ 1777.364321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.411511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.424127] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1777.442152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.451232] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1777.469029] 22741 total pagecache pages [ 1777.478083] systemd[1]: Stopped Journal Service. [ 1777.491307] 0 pages in swap cache [ 1777.494787] Swap cache stats: add 0, delete 0, find 0/0 [ 1777.500299] Free swap = 0kB [ 1777.533294] systemd[1]: Starting Journal Service... [ 1777.540176] Total swap = 0kB [ 1777.551408] 2097051 pages RAM [ 1777.564881] 0 pages HighMem/MovableOnly [ 1777.569074] 363849 pages reserved [ 1777.576578] 0 pages cma reserved [ 1777.749598] oom_reaper: reaped process 19376 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1777.762325] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1777.785810] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1777.791835] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1777.798912] in:imklog cpuset=/ mems_allowed=0-1 [ 1777.812792] CPU: 0 PID: 19387 Comm: in:imklog Not tainted 4.14.231-syzkaller #0 [ 1777.820255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1777.829607] Call Trace: [ 1777.832203] dump_stack+0x1b2/0x281 [ 1777.835835] dump_header+0x178/0x82f [ 1777.839554] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1777.844679] ? ___ratelimit+0x2cd/0x530 [ 1777.848661] oom_kill_process.cold+0x10/0xa40 [ 1777.853174] out_of_memory+0xe3e/0x1190 [ 1777.857152] ? oom_killer_disable+0x1c0/0x1c0 [ 1777.861646] ? mutex_trylock+0x152/0x1a0 [ 1777.865729] __alloc_pages_nodemask+0x23e1/0x2720 [ 1777.870618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1777.875491] alloc_pages_current+0x155/0x260 [ 1777.879920] filemap_fault+0x11a1/0x1ad0 [ 1777.883993] ext4_filemap_fault+0x84/0xb0 [ 1777.888150] __do_fault+0xfa/0x380 [ 1777.891700] __handle_mm_fault+0x2497/0x4620 [ 1777.896125] ? vm_insert_page+0x7c0/0x7c0 [ 1777.900271] ? lock_downgrade+0x740/0x740 [ 1777.904446] ? mark_held_locks+0xa6/0xf0 [ 1777.908508] handle_mm_fault+0x455/0x9c0 [ 1777.912575] __do_page_fault+0x549/0xad0 [ 1777.917164] ? spurious_fault+0x640/0x640 [ 1777.921310] ? do_page_fault+0x60/0x500 [ 1777.925282] ? page_fault+0x2f/0x50 [ 1777.928903] page_fault+0x45/0x50 [ 1777.932349] RIP: 1fa0:0x1f9f [ 1777.935357] RSP: 0000:000055ccb3d069d0 EFLAGS: 7fcb19db1da0 [ 1777.935384] CPU: 1 PID: 19376 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1777.948970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1777.952141] Mem-Info: [ 1777.958321] Call Trace: [ 1777.958344] dump_stack+0x1b2/0x281 [ 1777.964014] active_anon:15216 inactive_anon:20181 isolated_anon:0 [ 1777.964014] active_file:54 inactive_file:23 isolated_file:0 [ 1777.964014] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1777.964014] slab_reclaimable:12836 slab_unreclaimable:116700 [ 1777.964014] mapped:43562 shmem:21263 pagetables:706 bounce:0 [ 1777.964014] free:13694 free_pcp:0 free_cma:0 [ 1777.966929] warn_alloc.cold+0x96/0x1cc [ 1778.003479] Node 0 active_anon:59968kB inactive_anon:72588kB active_file:20kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134264kB dirty:72kB writeback:0kB shmem:76844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1778.004174] ? zone_watermark_ok_safe+0x220/0x220 [ 1778.035194] Node 1 active_anon:896kB inactive_anon:8136kB active_file:196kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39984kB dirty:16kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1778.036777] ? usleep_range+0x130/0x130 [ 1778.067710] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.067923] ? try_to_free_pages+0x23f/0x6e0 [ 1778.067936] ? _find_next_bit+0xdb/0x100 [ 1778.097356] lowmem_reserve[]: [ 1778.098534] ? run_timer_softirq+0x5a0/0x5a0 [ 1778.102661] 0 [ 1778.106139] __alloc_pages_nodemask+0x2127/0x2720 [ 1778.110513] 2717 [ 1778.112313] ? lock_acquire+0x170/0x3f0 [ 1778.112330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1778.112339] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1778.112355] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1778.112372] alloc_pages_current+0x155/0x260 [ 1778.112382] ion_page_pool_alloc+0x118/0x1b0 [ 1778.112392] ion_system_heap_allocate+0x133/0x8c0 [ 1778.112402] ? ion_alloc+0x187/0x810 [ 1778.112412] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1778.112421] ? ion_system_contig_heap_create+0x130/0x130 [ 1778.112432] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1778.120451] 2718 [ 1778.123376] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1778.123389] ion_alloc+0x204/0x810 [ 1778.123402] ? ion_dma_buf_release+0x40/0x40 [ 1778.123413] ? __might_fault+0x177/0x1b0 [ 1778.123424] ion_ioctl+0xea/0x1f0 [ 1778.123433] ? ion_query_heaps+0x360/0x360 [ 1778.123444] ? ion_query_heaps+0x360/0x360 [ 1778.128286] 2718 [ 1778.132780] do_vfs_ioctl+0x75a/0xff0 [ 1778.132793] ? ioctl_preallocate+0x1a0/0x1a0 [ 1778.132802] ? lock_downgrade+0x740/0x740 [ 1778.132814] ? __fget+0x225/0x360 [ 1778.132822] ? do_vfs_ioctl+0xff0/0xff0 [ 1778.132837] ? security_file_ioctl+0x83/0xb0 [ 1778.132846] SyS_ioctl+0x7f/0xb0 [ 1778.132853] ? do_vfs_ioctl+0xff0/0xff0 [ 1778.132865] do_syscall_64+0x1d5/0x640 [ 1778.132879] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1778.132892] RIP: 0033:0x466459 [ 1778.140658] 2718 [ 1778.142745] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 [ 1778.151999] ORIG_RAX: 0000000000000010 [ 1778.152006] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1778.152010] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1778.152015] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1778.152019] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1778.152024] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1778.155704] syz-executor.3: [ 1778.155814] Node 0 [ 1778.165949] page allocation failure: order:0 [ 1778.166809] DMA32 free:17964kB min:36200kB low:45248kB high:54296kB active_anon:59900kB inactive_anon:72584kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2608kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1778.175154] warn_alloc_show_mem: 2 callbacks suppressed [ 1778.175158] Mem-Info: [ 1778.178732] lowmem_reserve[]: [ 1778.186777] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1778.191057] 0 0 [ 1778.197921] active_anon:15225 inactive_anon:20180 isolated_anon:0 [ 1778.197921] active_file:13 inactive_file:14 isolated_file:0 [ 1778.197921] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1778.197921] slab_reclaimable:12836 slab_unreclaimable:116714 [ 1778.197921] mapped:43521 shmem:21263 pagetables:714 bounce:0 [ 1778.197921] free:13981 free_pcp:4 free_cma:0 [ 1778.199012] 0 [ 1778.203314] Node 0 active_anon:59912kB inactive_anon:72584kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134200kB dirty:0kB writeback:0kB shmem:76844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1778.205352] 0 [ 1778.209148] Node 1 active_anon:988kB inactive_anon:8136kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39884kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1778.213582] 0 [ 1778.213591] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.213609] lowmem_reserve[]: 0 0 0 0 0 [ 1778.213628] Node 1 Normal free:26984kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:8136kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.213644] lowmem_reserve[]: 0 0 0 [ 1778.217814] (null) [ 1778.221294] 0 [ 1778.228408] syz-executor.3 cpuset= [ 1778.229668] 0 [ 1778.233090] / [ 1778.244193] Node 0 [ 1778.246135] Node 0 [ 1778.249585] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.251666] DMA: 2*4kB (ME) 1*8kB [ 1778.257055] mems_allowed=0-1 [ 1778.261076] (E) 21*16kB (UME) 6*32kB (UME) 7*64kB (UME) 6*128kB (UME) [ 1778.270595] lowmem_reserve[]: [ 1778.275702] 4*256kB [ 1778.289933] CPU: 1 PID: 19355 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1778.290329] (UME) [ 1778.297558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1778.297563] Call Trace: [ 1778.297586] dump_stack+0x1b2/0x281 [ 1778.297599] warn_alloc.cold+0x96/0x1cc [ 1778.297611] ? zone_watermark_ok_safe+0x220/0x220 [ 1778.297620] ? usleep_range+0x130/0x130 [ 1778.297629] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1778.297641] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1778.297653] ? run_timer_softirq+0x5a0/0x5a0 [ 1778.300706] 4*512kB [ 1778.302906] __alloc_pages_nodemask+0x2127/0x2720 [ 1778.307282] (UME) [ 1778.335223] ? lock_acquire+0x170/0x3f0 [ 1778.335239] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1778.335248] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1778.335264] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1778.335276] ? retint_kernel+0x2d/0x2d [ 1778.335288] alloc_pages_current+0x155/0x260 [ 1778.335297] ion_page_pool_alloc+0x118/0x1b0 [ 1778.335307] ion_system_heap_allocate+0x133/0x8c0 [ 1778.335318] ? _raw_spin_unlock+0x29/0x40 [ 1778.335330] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1778.340790] 2*1024kB [ 1778.343108] ? ion_system_contig_heap_create+0x130/0x130 [ 1778.346288] (ME) [ 1778.353382] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1778.353395] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1778.353406] ion_alloc+0x27a/0x810 [ 1778.353420] ? ion_dma_buf_release+0x40/0x40 [ 1778.353431] ? __might_fault+0x177/0x1b0 [ 1778.353441] ion_ioctl+0xea/0x1f0 [ 1778.353451] ? ion_query_heaps+0x360/0x360 [ 1778.355462] 0 [ 1778.388538] ? ion_query_heaps+0x360/0x360 [ 1778.388550] do_vfs_ioctl+0x75a/0xff0 [ 1778.388561] ? ioctl_preallocate+0x1a0/0x1a0 [ 1778.388570] ? lock_downgrade+0x740/0x740 [ 1778.388582] ? __fget+0x225/0x360 [ 1778.388590] ? do_vfs_ioctl+0xff0/0xff0 [ 1778.388601] ? security_file_ioctl+0x83/0xb0 [ 1778.388611] SyS_ioctl+0x7f/0xb0 [ 1778.388618] ? do_vfs_ioctl+0xff0/0xff0 [ 1778.388629] do_syscall_64+0x1d5/0x640 [ 1778.388644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1778.388657] RIP: 0033:0x466459 [ 1778.393214] 2*2048kB [ 1778.417935] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1778.417945] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1778.417950] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1778.417955] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1778.417959] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1778.417964] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1778.784016] device hsr_slave_1 left promiscuous mode [ 1778.789091] 2717 2718 2718 2718 [ 1778.827513] Node 0 DMA32 free:172032kB min:36200kB low:45248kB high:54296kB active_anon:60100kB inactive_anon:72584kB active_file:108kB inactive_file:7808kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2608kB bounce:0kB free_pcp:496kB local_pcp:0kB free_cma:0kB [ 1778.857391] lowmem_reserve[]: 0 0 0 0 0 [ 1778.861674] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.887610] lowmem_reserve[]: 0 0 0 0 0 [ 1778.889085] device hsr_slave_0 left promiscuous mode [ 1778.895927] Node 1 Normal free:338936kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:8136kB active_file:44kB inactive_file:2568kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:244kB bounce:0kB free_pcp:676kB local_pcp:0kB free_cma:0kB [ 1778.927371] lowmem_reserve[]: 0 0 0 0 0 [ 1778.932168] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 12*16kB (UE) 19*32kB (UE) 9*64kB (UME) 5*128kB (UE) 4*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11256kB [ 1778.948885] Node 0 DMA32: 208*4kB (UE) 421*8kB (UE) 152*16kB (UME) 199*32kB (UME) 3951*64kB (UM) 687*128kB (U) 3*256kB (UM) 1*512kB (U) 14*1024kB (U) 0*2048kB 0*4096kB = 369416kB [ 1778.966104] team0 (unregistering): Port device team_slave_1 removed [ 1778.967008] systemd-journald[19411]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1778.987866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1779.006351] team0 (unregistering): Port device team_slave_0 removed [ 1779.010692] Node 1 Normal: 19*4kB (UM) 11*8kB (UM) 13*16kB (UME) 11*32kB (UM) 501*64kB (UME) 231*128kB (UM) 24*256kB (UM) 45*512kB (UM) 224*1024kB (U) 32*2048kB (U) 0*4096kB = 386452kB [ 1779.042986] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1779.046183] systemd-journald[19411]: /dev/kmsg buffer overrun, some messages lost. [ 1779.057843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1779.066773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1779.084654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1779.105521] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1779.110649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1779.130609] 28921 total pagecache pages [ 1779.134668] 0 pages in swap cache [ 1779.138116] Swap cache stats: add 0, delete 0, find 0/0 [ 1779.150614] Free swap = 0kB [ 1779.153708] Total swap = 0kB [ 1779.156727] 2097051 pages RAM [ 1779.159850] 0 pages HighMem/MovableOnly [ 1779.180602] 363849 pages reserved [ 1779.184086] 0 pages cma reserved [ 1779.260254] bond0 (unregistering): Released all slaves [ 1779.413343] (UE) 0*4096kB = 10976kB [ 1779.417037] Node 0 DMA32: 381*4kB (UME) 1145*8kB (UME) 168*16kB (UME) 206*32kB (UME) 5184*64kB (UM) 1344*128kB (UM) 152*256kB (UM) 15*512kB (U) 5*1024kB (UM) 0*2048kB 0*4096kB = 575484kB [ 1779.460605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1779.480770] Node 1 Normal: 248*4kB (UM) 207*8kB (UM) 199*16kB (UME) 186*32kB (UM) 6759*64kB (UME) 1152*128kB (UM) 262*256kB (UM) 77*512kB (UM) 248*1024kB (U) 47*2048kB (U) 1*4096kB (U) = 1052616kB [ 1779.533347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1779.542566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1779.570648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1779.579612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1779.592508] 28921 total pagecache pages [ 1779.596528] 0 pages in swap cache [ 1779.600067] Swap cache stats: add 0, delete 0, find 0/0 [ 1779.606260] Free swap = 0kB [ 1779.609451] Total swap = 0kB [ 1779.645942] 2097051 pages RAM [ 1779.649101] 0 pages HighMem/MovableOnly [ 1779.663260] 363849 pages reserved [ 1779.666743] 0 pages cma reserved [ 1779.670104] Out of memory (oom_kill_allocating_task): Kill process 19387 (in:imklog) score 0 or sacrifice child [ 1779.725412] Killed process 19370 (rsyslogd) total-vm:254332kB, anon-rss:784kB, file-rss:0kB, shmem-rss:0kB [ 1779.764908] oom_reaper: reaped process 19370 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1779.807072] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1779.849965] systemd[1]: rsyslog.service: Unit entered failed state. [ 1779.893569] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1780.218821] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1780.243415] systemd[1]: Stopped System Logging Service. [ 1780.303407] systemd[1]: Starting System Logging Service... [ 1782.311024] IPVS: ftp: loaded support on port[0] = 21 [ 1782.479837] chnl_net:caif_netlink_parms(): no params data found [ 1782.685575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.695950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.704425] device bridge_slave_0 entered promiscuous mode [ 1782.712543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.719008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.727407] device bridge_slave_1 entered promiscuous mode [ 1782.755735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1782.765767] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1782.793032] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1782.801450] team0: Port device team_slave_0 added [ 1782.807332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1782.814847] team0: Port device team_slave_1 added [ 1782.837562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.844848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.871258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.883760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.891807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.917121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1782.928391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1782.936361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1782.964149] device hsr_slave_0 entered promiscuous mode [ 1782.970290] device hsr_slave_1 entered promiscuous mode [ 1782.976923] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1782.984277] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1783.095710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.102165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.108856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.115337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1783.156964] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1783.163550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.174112] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1783.183926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1783.191930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.198758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.209765] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1783.216478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1783.226630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1783.236067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.242816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1783.262635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1783.270379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.277565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.286578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1783.305241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1783.315273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1783.326596] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1783.333644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1783.341465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1783.349248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1783.357112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1783.371787] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1783.381200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1783.387990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1783.396419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1783.406671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1783.442857] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1783.505050] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1783.515455] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1783.522956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1783.531586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1783.577691] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1783.586183] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1783.593344] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1783.603546] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1783.611444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1783.623488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1783.633668] device veth0_vlan entered promiscuous mode [ 1783.641584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1783.649415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1783.660898] device veth1_vlan entered promiscuous mode [ 1783.667079] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1783.678040] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1783.693755] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1783.704859] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1783.712522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1783.719926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1783.728391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1783.736820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1783.747258] device veth0_macvtap entered promiscuous mode [ 1783.754505] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1783.764332] device veth1_macvtap entered promiscuous mode [ 1783.772122] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1783.785385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1783.796840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1783.812435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1783.825699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.835657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1783.850011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.859273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1783.872718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.885039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1783.897769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.909162] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1783.919008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1783.927277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1783.937816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1783.946000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1783.956696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1783.966671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1783.977903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1783.987648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1783.998011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.007295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1784.017889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.028605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1784.038520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1784.048023] Bluetooth: hci0 command 0x0409 tx timeout [ 1784.055311] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1784.062566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1784.070429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1784.078708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:58:00 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80068c, 0x12280) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x101, 0x21}) 07:58:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfffffff8, 0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x442001, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x7ffffffd, 0x53}) 07:58:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @val={0x0, 0x3, r3}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) 07:58:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044041}, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) 07:58:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) socket$l2tp(0x2, 0x2, 0x73) [ 1784.789282] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1784.797271] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1784.824826] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1784.836451] CPU: 1 PID: 19673 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1784.845076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.851900] syz-executor.0 cpuset= [ 1784.854544] Call Trace: [ 1784.854567] dump_stack+0x1b2/0x281 [ 1784.854581] warn_alloc.cold+0x96/0x1cc [ 1784.868352] ? zone_watermark_ok_safe+0x220/0x220 [ 1784.870610] / [ 1784.879083] __alloc_pages_nodemask+0x2127/0x2720 [ 1784.885662] ? lock_acquire+0x170/0x3f0 [ 1784.889671] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1784.894536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1784.896684] mems_allowed=0-1 [ 1784.900008] ? __mutex_unlock_slowpath+0x75/0x770 [ 1784.900025] alloc_pages_current+0x155/0x260 [ 1784.900039] ion_page_pool_alloc+0x118/0x1b0 [ 1784.916827] ion_system_heap_allocate+0x133/0x8c0 [ 1784.921792] ? ion_alloc+0x187/0x810 [ 1784.925599] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1784.931434] ? ion_system_contig_heap_create+0x130/0x130 [ 1784.937237] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1784.942269] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1784.947122] ion_alloc+0x204/0x810 [ 1784.950688] ? ion_dma_buf_release+0x40/0x40 [ 1784.955487] ? __might_fault+0x177/0x1b0 [ 1784.959590] ion_ioctl+0xea/0x1f0 [ 1784.963318] ? ion_query_heaps+0x360/0x360 [ 1784.967555] ? ion_query_heaps+0x360/0x360 [ 1784.971787] do_vfs_ioctl+0x75a/0xff0 [ 1784.975619] ? ioctl_preallocate+0x1a0/0x1a0 [ 1784.980028] ? lock_downgrade+0x740/0x740 [ 1784.984194] ? __fget+0x225/0x360 [ 1784.987697] ? do_vfs_ioctl+0xff0/0xff0 [ 1784.991671] ? security_file_ioctl+0x83/0xb0 [ 1784.996169] SyS_ioctl+0x7f/0xb0 [ 1784.999537] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.003961] do_syscall_64+0x1d5/0x640 [ 1785.007866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1785.013336] RIP: 0033:0x466459 [ 1785.016528] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.025718] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1785.032993] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1785.040268] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1785.047628] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1785.054944] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1785.098764] CPU: 0 PID: 19677 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1785.106705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.116089] Call Trace: [ 1785.118682] dump_stack+0x1b2/0x281 [ 1785.122332] warn_alloc.cold+0x96/0x1cc [ 1785.126396] ? zone_watermark_ok_safe+0x220/0x220 [ 1785.131429] __alloc_pages_nodemask+0x2127/0x2720 [ 1785.136320] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1785.141084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.146052] ? policy_node+0xe3/0x110 [ 1785.149848] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1785.154700] alloc_pages_current+0x155/0x260 [ 1785.159106] ion_page_pool_alloc+0x118/0x1b0 [ 1785.163521] ion_system_heap_allocate+0x133/0x8c0 [ 1785.168361] ? ion_alloc+0x187/0x810 [ 1785.172067] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1785.177524] ? ion_system_contig_heap_create+0x130/0x130 [ 1785.182973] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1785.188105] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1785.192946] ion_alloc+0x204/0x810 [ 1785.196483] ? ion_dma_buf_release+0x40/0x40 [ 1785.200885] ? __might_fault+0x177/0x1b0 [ 1785.204944] ion_ioctl+0xea/0x1f0 [ 1785.208393] ? ion_query_heaps+0x360/0x360 [ 1785.212627] ? ion_query_heaps+0x360/0x360 [ 1785.216856] do_vfs_ioctl+0x75a/0xff0 [ 1785.220669] ? ioctl_preallocate+0x1a0/0x1a0 [ 1785.225070] ? lock_downgrade+0x740/0x740 [ 1785.229212] ? __fget+0x225/0x360 [ 1785.232664] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.236634] ? security_file_ioctl+0x83/0xb0 [ 1785.241053] SyS_ioctl+0x7f/0xb0 [ 1785.244410] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.248379] do_syscall_64+0x1d5/0x640 [ 1785.252266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1785.257555] RIP: 0033:0x466459 [ 1785.260836] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.268539] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1785.275809] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1785.283076] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1785.290345] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1785.299097] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1785.349218] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1785.365011] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1785.393224] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1785.398517] CPU: 0 PID: 19674 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1785.406425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.415797] Call Trace: [ 1785.418390] dump_stack+0x1b2/0x281 [ 1785.422033] warn_alloc.cold+0x96/0x1cc [ 1785.426016] ? zone_watermark_ok_safe+0x220/0x220 [ 1785.430893] __alloc_pages_nodemask+0x2127/0x2720 [ 1785.435738] ? _raw_spin_unlock_irq+0x24/0x80 [ 1785.440234] ? lock_acquire+0x170/0x3f0 [ 1785.444214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.449062] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1785.454515] ? __mutex_unlock_slowpath+0x75/0x770 [ 1785.459456] alloc_pages_current+0x155/0x260 [ 1785.463863] ion_page_pool_alloc+0x118/0x1b0 [ 1785.468269] ion_system_heap_allocate+0x133/0x8c0 [ 1785.473124] ? ion_alloc+0x187/0x810 [ 1785.476832] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1785.482294] ? ion_system_contig_heap_create+0x130/0x130 [ 1785.487938] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1785.492954] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1785.497814] ion_alloc+0x204/0x810 [ 1785.501354] ? ion_dma_buf_release+0x40/0x40 [ 1785.505777] ? __might_fault+0x177/0x1b0 [ 1785.509836] ion_ioctl+0xea/0x1f0 [ 1785.513282] ? ion_query_heaps+0x360/0x360 [ 1785.517515] ? ion_query_heaps+0x360/0x360 [ 1785.521743] do_vfs_ioctl+0x75a/0xff0 [ 1785.525537] ? ioctl_preallocate+0x1a0/0x1a0 [ 1785.529936] ? lock_downgrade+0x740/0x740 [ 1785.534123] ? __fget+0x225/0x360 [ 1785.537584] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.541562] ? security_file_ioctl+0x83/0xb0 [ 1785.545979] SyS_ioctl+0x7f/0xb0 [ 1785.549345] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.553328] do_syscall_64+0x1d5/0x640 [ 1785.557234] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1785.562621] RIP: 0033:0x466459 [ 1785.566201] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.575347] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1785.582959] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1785.590256] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1785.597532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1785.604814] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1785.641631] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1785.646820] CPU: 0 PID: 19668 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1785.654706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.664152] Call Trace: [ 1785.667541] dump_stack+0x1b2/0x281 [ 1785.671297] warn_alloc.cold+0x96/0x1cc [ 1785.677720] ? zone_watermark_ok_safe+0x220/0x220 [ 1785.682700] __alloc_pages_nodemask+0x2127/0x2720 [ 1785.688191] ? _raw_spin_unlock_irq+0x24/0x80 [ 1785.692921] ? lock_acquire+0x170/0x3f0 [ 1785.697003] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.701952] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1785.707780] ? __mutex_unlock_slowpath+0x75/0x770 [ 1785.712631] alloc_pages_current+0x155/0x260 [ 1785.718873] ion_page_pool_alloc+0x118/0x1b0 [ 1785.723380] ion_system_heap_allocate+0x133/0x8c0 [ 1785.728222] ? ion_alloc+0x187/0x810 [ 1785.731948] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1785.737598] ? ion_system_contig_heap_create+0x130/0x130 [ 1785.744281] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1785.749732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1785.754577] ion_alloc+0x204/0x810 [ 1785.758116] ? ion_dma_buf_release+0x40/0x40 [ 1785.762517] ? __might_fault+0x177/0x1b0 [ 1785.766589] ion_ioctl+0xea/0x1f0 [ 1785.770061] ? ion_query_heaps+0x360/0x360 [ 1785.774292] ? ion_query_heaps+0x360/0x360 [ 1785.778529] do_vfs_ioctl+0x75a/0xff0 [ 1785.782356] ? ioctl_preallocate+0x1a0/0x1a0 [ 1785.786767] ? lock_downgrade+0x740/0x740 [ 1785.790919] ? __fget+0x225/0x360 [ 1785.794366] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.798346] ? security_file_ioctl+0x83/0xb0 [ 1785.802748] SyS_ioctl+0x7f/0xb0 [ 1785.806123] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.810107] do_syscall_64+0x1d5/0x640 [ 1785.820198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1785.825417] RIP: 0033:0x466459 [ 1785.828614] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.836332] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1785.843610] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1785.850891] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1785.858347] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1785.865620] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1785.884403] warn_alloc_show_mem: 1 callbacks suppressed [ 1785.884407] Mem-Info: [ 1785.892858] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1785.893774] active_anon:14837 inactive_anon:22223 isolated_anon:0 [ 1785.893774] active_file:159 inactive_file:172 isolated_file:36 [ 1785.893774] unevictable:0 dirty:32 writeback:5 unstable:0 [ 1785.893774] slab_reclaimable:12766 slab_unreclaimable:117058 [ 1785.893774] mapped:44272 shmem:23313 pagetables:801 bounce:0 [ 1785.893774] free:25146 free_pcp:81 free_cma:0 [ 1785.911600] syz-executor.3 cpuset= [ 1785.948348] Node 0 active_anon:58632kB inactive_anon:80756kB active_file:328kB inactive_file:284kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:141396kB dirty:128kB writeback:20kB shmem:85044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1785.948919] / [ 1785.952236] Node 1 active_anon:716kB inactive_anon:8136kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34892kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1786.015046] mems_allowed=0-1 [ 1786.017036] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.018693] CPU: 1 PID: 19678 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1786.044970] lowmem_reserve[]: [ 1786.052650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.052655] Call Trace: [ 1786.052678] dump_stack+0x1b2/0x281 [ 1786.052691] warn_alloc.cold+0x96/0x1cc [ 1786.052703] ? zone_watermark_ok_safe+0x220/0x220 [ 1786.052724] __alloc_pages_nodemask+0x2127/0x2720 [ 1786.052740] ? lock_acquire+0x170/0x3f0 [ 1786.055953] 0 [ 1786.065226] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1786.065245] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1786.065256] ? __mutex_unlock_slowpath+0x75/0x770 [ 1786.065270] alloc_pages_current+0x155/0x260 [ 1786.065284] ion_page_pool_alloc+0x118/0x1b0 [ 1786.067979] 2717 [ 1786.071491] ion_system_heap_allocate+0x133/0x8c0 [ 1786.071501] ? ion_alloc+0x187/0x810 [ 1786.071511] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1786.071519] ? ion_system_contig_heap_create+0x130/0x130 [ 1786.071530] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1786.071545] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1786.075576] 2718 [ 1786.080337] ion_alloc+0x204/0x810 [ 1786.080353] ? ion_dma_buf_release+0x40/0x40 [ 1786.080366] ? __might_fault+0x177/0x1b0 [ 1786.080377] ion_ioctl+0xea/0x1f0 [ 1786.086553] 2718 [ 1786.089167] ? ion_query_heaps+0x360/0x360 [ 1786.089180] ? ion_query_heaps+0x360/0x360 [ 1786.089191] do_vfs_ioctl+0x75a/0xff0 [ 1786.091059] 2718 [ 1786.095820] ? ioctl_preallocate+0x1a0/0x1a0 [ 1786.095831] ? lock_downgrade+0x740/0x740 [ 1786.095846] ? __fget+0x225/0x360 [ 1786.106144] ? do_vfs_ioctl+0xff0/0xff0 [ 1786.106157] ? security_file_ioctl+0x83/0xb0 [ 1786.106167] SyS_ioctl+0x7f/0xb0 [ 1786.106179] ? do_vfs_ioctl+0xff0/0xff0 [ 1786.110708] Node 0 [ 1786.115023] do_syscall_64+0x1d5/0x640 [ 1786.115041] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1786.115052] RIP: 0033:0x466459 [ 1786.117188] DMA32 free:36144kB min:36200kB low:45248kB high:54296kB active_anon:58592kB inactive_anon:80756kB active_file:176kB inactive_file:636kB unevictable:0kB writepending:248kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2956kB bounce:0kB free_pcp:144kB local_pcp:40kB free_cma:0kB [ 1786.121921] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1786.121932] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1786.121936] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1786.121942] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1786.121947] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1786.121952] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1786.211893] syz-executor.2: [ 1786.217208] Bluetooth: hci0 command 0x041b tx timeout [ 1786.230630] page allocation failure: order:4 [ 1786.253776] lowmem_reserve[]: [ 1786.297443] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1786.310659] 0 [ 1786.313241] (null) [ 1786.325115] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1786.326126] 0 0 0 0 [ 1786.333326] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.341074] CPU: 1 PID: 19669 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1786.363963] lowmem_reserve[]: [ 1786.366828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.366838] 0 [ 1786.369929] Call Trace: [ 1786.379334] 0 [ 1786.381089] dump_stack+0x1b2/0x281 [ 1786.381104] warn_alloc.cold+0x96/0x1cc [ 1786.383667] 0 [ 1786.385528] ? zone_watermark_ok_safe+0x220/0x220 [ 1786.385552] __alloc_pages_nodemask+0x2127/0x2720 [ 1786.389860] 0 [ 1786.393857] ? lock_acquire+0x170/0x3f0 [ 1786.393880] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1786.393898] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1786.393911] ? __mutex_unlock_slowpath+0x75/0x770 [ 1786.395700] 0 [ 1786.400540] alloc_pages_current+0x155/0x260 [ 1786.407183] ion_page_pool_alloc+0x118/0x1b0 [ 1786.411187] Node 1 [ 1786.416009] ion_system_heap_allocate+0x133/0x8c0 [ 1786.421496] Normal free:53356kB min:53696kB low:67120kB high:80544kB active_anon:716kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.426275] ? ion_alloc+0x187/0x810 [ 1786.428054] lowmem_reserve[]: [ 1786.432447] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1786.432457] ? ion_system_contig_heap_create+0x130/0x130 [ 1786.432466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1786.432477] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1786.432488] ion_alloc+0x204/0x810 [ 1786.432501] ? ion_dma_buf_release+0x40/0x40 [ 1786.436892] 0 [ 1786.439118] ? __might_fault+0x177/0x1b0 [ 1786.444462] 0 [ 1786.472641] ion_ioctl+0xea/0x1f0 [ 1786.472652] ? ion_query_heaps+0x360/0x360 [ 1786.472663] ? ion_query_heaps+0x360/0x360 [ 1786.472679] do_vfs_ioctl+0x75a/0xff0 [ 1786.476484] 0 [ 1786.479587] ? ioctl_preallocate+0x1a0/0x1a0 [ 1786.485096] 0 [ 1786.490692] ? lock_downgrade+0x740/0x740 [ 1786.490706] ? __fget+0x225/0x360 [ 1786.490716] ? do_vfs_ioctl+0xff0/0xff0 [ 1786.490730] ? security_file_ioctl+0x83/0xb0 [ 1786.495733] 0 [ 1786.500573] SyS_ioctl+0x7f/0xb0 [ 1786.500582] ? do_vfs_ioctl+0xff0/0xff0 [ 1786.500593] do_syscall_64+0x1d5/0x640 [ 1786.500607] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1786.500617] RIP: 0033:0x466459 [ 1786.508738] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 [ 1786.510591] Node 0 [ 1786.514573] ORIG_RAX: 0000000000000010 [ 1786.514582] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1786.516364] DMA: [ 1786.519797] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1786.519805] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1786.524070] 7*4kB [ 1786.528244] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1786.532784] (UME) [ 1786.534526] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1786.637310] 8*8kB (ME) 23*16kB (UME) 27*32kB (UME) 4*64kB (UME) 2*128kB (UE) 4*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11052kB [ 1786.669861] oom_reaper: reaped process 19674 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1786.703888] Node 0 DMA32: 873*4kB (UME) 640*8kB (ME) 205*16kB (ME) 80*32kB (ME) 42*64kB (M) 11*128kB (M) 8*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 26228kB [ 1786.772861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1786.787584] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1786.805461] Node 1 Normal: 32*4kB (UM) 23*8kB (M) 20*16kB (UME) 17*32kB (M) 17*64kB (UME) 11*128kB (M) 5*256kB (UM) 89*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 50520kB [ 1786.820650] systemd-journal cpuset=/ mems_allowed=0-1 [ 1786.825979] CPU: 1 PID: 19411 Comm: systemd-journal Not tainted 4.14.231-syzkaller #0 [ 1786.834382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.844120] Call Trace: [ 1786.849974] dump_stack+0x1b2/0x281 [ 1786.853616] dump_header+0x178/0x82f [ 1786.857338] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1786.857850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.866570] ? ___ratelimit+0x2cd/0x530 [ 1786.866582] oom_kill_process.cold+0x10/0xa40 [ 1786.866600] out_of_memory+0xe3e/0x1190 [ 1786.866613] ? oom_killer_disable+0x1c0/0x1c0 [ 1786.875937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.880012] ? mutex_trylock+0x152/0x1a0 [ 1786.884527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.888448] __alloc_pages_nodemask+0x23e1/0x2720 [ 1786.893239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.901784] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1786.901808] alloc_pages_current+0x155/0x260 [ 1786.905937] 23339 total pagecache pages [ 1786.914962] filemap_fault+0x11a1/0x1ad0 [ 1786.914981] ext4_filemap_fault+0x84/0xb0 [ 1786.914991] __do_fault+0xfa/0x380 [ 1786.915006] __handle_mm_fault+0x2497/0x4620 [ 1786.919878] 0 pages in swap cache [ 1786.928463] ? vm_insert_page+0x7c0/0x7c0 [ 1786.928472] ? check_stack_object+0x86/0xa0 [ 1786.928486] ? mark_held_locks+0xa6/0xf0 [ 1786.928496] handle_mm_fault+0x455/0x9c0 [ 1786.928509] __do_page_fault+0x549/0xad0 [ 1786.938418] Swap cache stats: add 0, delete 0, find 0/0 [ 1786.942801] ? spurious_fault+0x640/0x640 [ 1786.942810] ? do_page_fault+0x60/0x500 [ 1786.942819] ? page_fault+0x2f/0x50 [ 1786.942829] page_fault+0x45/0x50 [ 1786.946890] Free swap = 0kB [ 1786.950944] RIP: 0001:0x55d9de3cd860 [ 1786.950949] RSP: e9b82070:00007ffce9b7f040 EFLAGS: 7ffce9b7efc0 [ 1787.005188] Mem-Info: [ 1787.025115] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1787.037987] active_anon:14838 inactive_anon:22223 isolated_anon:0 [ 1787.037987] active_file:23 inactive_file:12 isolated_file:0 [ 1787.037987] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1787.037987] slab_reclaimable:12765 slab_unreclaimable:116834 [ 1787.037987] mapped:43950 shmem:23313 pagetables:801 bounce:0 [ 1787.037987] free:13968 free_pcp:65 free_cma:0 [ 1787.054389] Total swap = 0kB [ 1787.076697] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1787.096489] 2097051 pages RAM [ 1787.099624] 0 pages HighMem/MovableOnly [ 1787.100397] CPU: 1 PID: 19674 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1787.107166] 363849 pages reserved [ 1787.111781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1787.111786] Call Trace: [ 1787.111806] dump_stack+0x1b2/0x281 [ 1787.111820] warn_alloc.cold+0x96/0x1cc [ 1787.111834] ? f2fs_init_extent_tree+0x110/0xd60 [ 1787.115451] 0 pages cma reserved [ 1787.124812] ? zone_watermark_ok_safe+0x220/0x220 [ 1787.124823] ? usleep_range+0x130/0x130 [ 1787.124831] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1787.124843] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1787.124855] ? run_timer_softirq+0x5a0/0x5a0 [ 1787.132001] Node 0 active_anon:58636kB inactive_anon:80756kB active_file:88kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140984kB dirty:0kB writeback:0kB shmem:85044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.135101] __alloc_pages_nodemask+0x2127/0x2720 [ 1787.139865] Node 1 active_anon:716kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.143507] ? lock_acquire+0x170/0x3f0 [ 1787.143524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1787.143533] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1787.143550] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1787.148390] Node 0 [ 1787.152388] alloc_pages_current+0x155/0x260 [ 1787.152403] ion_page_pool_alloc+0x118/0x1b0 [ 1787.152412] ion_system_heap_allocate+0x133/0x8c0 [ 1787.152422] ? ion_alloc+0x187/0x810 [ 1787.157548] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.162992] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1787.163003] ? ion_system_contig_heap_create+0x130/0x130 [ 1787.163013] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1787.163024] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1787.163035] ion_alloc+0x204/0x810 [ 1787.167431] lowmem_reserve[]: [ 1787.195203] ? ion_dma_buf_release+0x40/0x40 [ 1787.195216] ? __might_fault+0x177/0x1b0 [ 1787.195226] ion_ioctl+0xea/0x1f0 [ 1787.195234] ? ion_query_heaps+0x360/0x360 [ 1787.195245] ? ion_query_heaps+0x360/0x360 [ 1787.200077] 0 [ 1787.226793] do_vfs_ioctl+0x75a/0xff0 [ 1787.226806] ? ioctl_preallocate+0x1a0/0x1a0 [ 1787.226815] ? lock_downgrade+0x740/0x740 [ 1787.226827] ? __fget+0x225/0x360 [ 1787.226838] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.230822] 2717 [ 1787.235643] ? security_file_ioctl+0x83/0xb0 [ 1787.240113] 2718 [ 1787.245558] SyS_ioctl+0x7f/0xb0 [ 1787.245567] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.245578] do_syscall_64+0x1d5/0x640 [ 1787.245592] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1787.245602] RIP: 0033:0x466459 [ 1787.247822] 2718 [ 1787.252224] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.252234] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1787.252239] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1787.252243] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1787.252248] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1787.252253] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1787.264224] warn_alloc_show_mem: 5 callbacks suppressed [ 1787.264228] Mem-Info: [ 1787.299992] 2718 [ 1787.312977] active_anon:14838 inactive_anon:22223 isolated_anon:0 [ 1787.312977] active_file:23 inactive_file:12 isolated_file:0 [ 1787.312977] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1787.312977] slab_reclaimable:12765 slab_unreclaimable:116834 [ 1787.312977] mapped:43950 shmem:23313 pagetables:801 bounce:0 [ 1787.312977] free:13968 free_pcp:65 free_cma:0 [ 1787.361526] Node 0 active_anon:58636kB inactive_anon:80756kB active_file:88kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140984kB dirty:0kB writeback:0kB shmem:85044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.386990] Node 0 [ 1787.405767] Node 1 active_anon:716kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.437050] DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:58596kB inactive_anon:80756kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2956kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 1787.457080] Node 0 [ 1787.501711] lowmem_reserve[]: [ 1787.528876] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.560182] 0 [ 1787.589931] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1787.630907] 0 0 0 0 [ 1787.636058] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.659506] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:58596kB inactive_anon:80756kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2956kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 1787.682809] lowmem_reserve[]: [ 1787.720395] lowmem_reserve[]: [ 1787.721004] 0 0 0 0 0 [ 1787.729195] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:716kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:232kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1787.748985] 0 0 0 0 0 [ 1787.784259] lowmem_reserve[]: 0 0 0 0 0 [ 1787.788276] Node 0 DMA: 6*4kB (UME) 7*8kB (UME) 15*16kB (UME) 25*32kB (UME) 4*64kB (UME) 3*128kB (UME) 4*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1787.807972] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.824374] Node 0 [ 1787.870285] lowmem_reserve[]: [ 1787.872308] DMA32: 817*4kB (UME) 610*8kB (UME) 186*16kB (UME) 76*32kB (UME) 33*64kB (M) 8*128kB (M) 5*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18484kB [ 1787.878979] 0 0 0 0 0 [ 1787.920980] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1787.948280] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:716kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:232kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1787.953965] Node 1 [ 1788.000015] lowmem_reserve[]: [ 1788.001654] Normal: 31*4kB (M) 23*8kB (M) 20*16kB (UME) 17*32kB (M) 17*64kB (UME) 12*128kB (UM) 4*256kB (M) 43*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26836kB [ 1788.027820] 0 0 0 0 0 [ 1788.030360] Node 0 DMA: 6*4kB (UME) 7*8kB (UME) 15*16kB (UME) 25*32kB (UME) 4*64kB (UME) 3*128kB (UME) 4*256kB (UE) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1788.040106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.067948] Node 0 DMA32: 817*4kB (UME) 610*8kB (UME) 186*16kB (UME) 76*32kB (UME) 33*64kB (M) 8*128kB (M) 5*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18484kB [ 1788.077095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.109399] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1788.112876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.140319] Node 1 Normal: 31*4kB (M) 23*8kB (M) 20*16kB (UME) 17*32kB (M) 17*64kB (UME) 12*128kB (UM) 4*256kB (M) 43*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26836kB [ 1788.149929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.179215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.184775] 23341 total pagecache pages [ 1788.210064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.213468] 0 pages in swap cache [ 1788.238639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.243321] Swap cache stats: add 0, delete 0, find 0/0 [ 1788.270077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.274101] Free swap = 0kB [ 1788.288511] Bluetooth: hci0 command 0x040f tx timeout [ 1788.298713] 23341 total pagecache pages [ 1788.329652] 0 pages in swap cache [ 1788.331433] Total swap = 0kB [ 1788.336170] 2097051 pages RAM [ 1788.339273] 0 pages HighMem/MovableOnly [ 1788.359045] Swap cache stats: add 0, delete 0, find 0/0 [ 1788.364137] 363849 pages reserved [ 1788.367936] 0 pages cma reserved [ 1788.388886] Free swap = 0kB [ 1788.393031] Out of memory (oom_kill_allocating_task): Kill process 19411 (systemd-journal) score 0 or sacrifice child [ 1788.430191] Total swap = 0kB [ 1788.432031] Killed process 19411 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1564kB [ 1788.455555] 2097051 pages RAM [ 1788.458780] 0 pages HighMem/MovableOnly [ 1788.465540] oom_reaper: reaped process 19411 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1564kB [ 1788.489110] 363849 pages reserved [ 1788.501837] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1788.536056] 0 pages cma reserved [ 1788.592362] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1788.628816] CPU: 1 PID: 19418 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1788.636836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.646299] Call Trace: [ 1788.648896] dump_stack+0x1b2/0x281 [ 1788.652522] dump_header+0x178/0x82f [ 1788.656241] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1788.661355] ? ___ratelimit+0x2cd/0x530 [ 1788.665336] oom_kill_process.cold+0x10/0xa40 [ 1788.669848] out_of_memory+0xe3e/0x1190 [ 1788.673825] ? oom_killer_disable+0x1c0/0x1c0 [ 1788.678321] ? mutex_trylock+0x152/0x1a0 [ 1788.682390] __alloc_pages_nodemask+0x23e1/0x2720 [ 1788.687256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1788.692258] alloc_pages_current+0x155/0x260 [ 1788.696689] filemap_fault+0x11a1/0x1ad0 [ 1788.700953] ext4_filemap_fault+0x84/0xb0 [ 1788.705114] __do_fault+0xfa/0x380 [ 1788.708669] __handle_mm_fault+0x2497/0x4620 [ 1788.713095] ? vm_insert_page+0x7c0/0x7c0 [ 1788.717248] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1788.721688] ? nanosleep_copyout+0x100/0x100 [ 1788.726121] ? mark_held_locks+0xa6/0xf0 [ 1788.730191] handle_mm_fault+0x455/0x9c0 [ 1788.734263] __do_page_fault+0x549/0xad0 [ 1788.738333] ? spurious_fault+0x640/0x640 [ 1788.742506] ? do_page_fault+0x60/0x500 [ 1788.746491] ? page_fault+0x2f/0x50 [ 1788.750128] page_fault+0x45/0x50 [ 1788.753598] RIP: 1b3e5a:0x6 [ 1788.756524] RSP: 0008:00007ffd0884d5dc EFLAGS: 00000032 [ 1788.788980] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1788.922324] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1789.011726] systemd[1]: Stopped Journal Service. [ 1789.059644] systemd[1]: Starting Journal Service... [ 1789.342731] Mem-Info: [ 1789.345206] active_anon:14718 inactive_anon:22222 isolated_anon:0 [ 1789.345206] active_file:275 inactive_file:217 isolated_file:64 [ 1789.345206] unevictable:0 dirty:24 writeback:0 unstable:0 [ 1789.345206] slab_reclaimable:12762 slab_unreclaimable:116440 [ 1789.345206] mapped:52717 shmem:23313 pagetables:802 bounce:0 [ 1789.345206] free:17197 free_pcp:262 free_cma:0 [ 1789.384504] Node 0 active_anon:58216kB inactive_anon:80752kB active_file:84kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141488kB dirty:72kB writeback:0kB shmem:85044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1789.413817] Node 1 active_anon:732kB inactive_anon:8136kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67456kB dirty:24kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1789.441528] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.469993] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1789.487384] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1789.509593] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1789.511305] Node 0 DMA32 free:17872kB min:36200kB low:45248kB high:54296kB active_anon:58316kB inactive_anon:80752kB active_file:164kB inactive_file:264kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.514831] CPU: 1 PID: 19674 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1789.549789] lowmem_reserve[]: [ 1789.551357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.551362] Call Trace: [ 1789.551384] dump_stack+0x1b2/0x281 [ 1789.551403] warn_alloc.cold+0x96/0x1cc [ 1789.554497] 0 [ 1789.563869] ? zone_watermark_ok_safe+0x220/0x220 [ 1789.563891] __alloc_pages_nodemask+0x2127/0x2720 [ 1789.563913] ? lock_acquire+0x170/0x3f0 [ 1789.566586] 0 [ 1789.570246] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1789.574247] 0 [ 1789.576107] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1789.580890] 0 [ 1789.585700] ? __mutex_unlock_slowpath+0x75/0x770 [ 1789.589664] 0 [ 1789.591461] ? alloc_pages_current+0xe3/0x260 [ 1789.591471] alloc_pages_current+0x155/0x260 [ 1789.591484] ion_page_pool_alloc+0x118/0x1b0 [ 1789.591494] ion_system_heap_allocate+0x133/0x8c0 [ 1789.591506] ? _raw_spin_unlock+0x29/0x40 [ 1789.598130] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1789.603627] Node 0 [ 1789.605387] ? ion_system_contig_heap_create+0x130/0x130 [ 1789.610231] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.612030] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1789.612043] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1789.612063] ion_alloc+0x27a/0x810 [ 1789.612077] ? ion_dma_buf_release+0x40/0x40 [ 1789.616557] lowmem_reserve[]: [ 1789.621050] ? __might_fault+0x177/0x1b0 [ 1789.621063] ion_ioctl+0xea/0x1f0 [ 1789.621073] ? ion_query_heaps+0x360/0x360 [ 1789.621084] ? ion_query_heaps+0x360/0x360 [ 1789.625504] 0 [ 1789.630359] do_vfs_ioctl+0x75a/0xff0 [ 1789.634521] 0 [ 1789.639415] ? ioctl_preallocate+0x1a0/0x1a0 [ 1789.641663] 0 [ 1789.647080] ? lock_downgrade+0x740/0x740 [ 1789.647096] ? __fget+0x225/0x360 [ 1789.672037] 0 [ 1789.677009] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.681866] 0 [ 1789.685362] ? security_file_ioctl+0x83/0xb0 [ 1789.692860] SyS_ioctl+0x7f/0xb0 [ 1789.692871] ? do_vfs_ioctl+0xff0/0xff0 [ 1789.692882] do_syscall_64+0x1d5/0x640 [ 1789.692897] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1789.692908] RIP: 0033:0x466459 [ 1789.696954] Node 1 [ 1789.700515] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.704864] Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:8136kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.709111] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1789.710935] lowmem_reserve[]: [ 1789.714696] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1789.714703] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1789.716492] 0 [ 1789.720897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1789.720903] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1789.728043] Mem-Info: [ 1789.730362] 0 [ 1789.732260] active_anon:14737 inactive_anon:22222 isolated_anon:0 [ 1789.732260] active_file:19 inactive_file:33 isolated_file:0 [ 1789.732260] unevictable:0 dirty:24 writeback:0 unstable:0 [ 1789.732260] slab_reclaimable:12762 slab_unreclaimable:116455 [ 1789.732260] mapped:52234 shmem:23313 pagetables:801 bounce:0 [ 1789.732260] free:13932 free_pcp:0 free_cma:0 [ 1789.732279] Node 0 active_anon:58216kB inactive_anon:80752kB active_file:52kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141480kB dirty:72kB writeback:0kB shmem:85044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1789.732295] Node 1 active_anon:732kB inactive_anon:8136kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67456kB dirty:24kB writeback:0kB shmem:8208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1789.732298] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.732319] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1789.732339] Node 0 DMA32 free:17872kB min:36200kB low:45248kB high:54296kB active_anon:58316kB inactive_anon:80752kB active_file:164kB inactive_file:264kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.732358] lowmem_reserve[]: 0 0 0 0 0 [ 1789.732376] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.732397] lowmem_reserve[]: 0 0 0 0 0 [ 1789.732424] Node 1 Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:8136kB active_file:0kB inactive_file:256kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:332kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.732443] lowmem_reserve[]: 0 0 0 0 0 [ 1789.732462] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (E) 13*32kB (UE) 9*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11004kB [ 1789.732533] Node 0 DMA32: 793*4kB (UME) 621*8kB (UME) 199*16kB (UME) 65*32kB (UME) 43*64kB (M) 11*128kB (M) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1789.732603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1789.732654] Node 1 Normal: 57*4kB (UM) 46*8kB (UM) 41*16kB (UME) 28*32kB (UM) 22*64kB (UME) 7*128kB (M) 64*256kB (UM) [ 1789.753652] 0 [ 1789.759696] 12*512kB [ 1789.779151] 0 [ 1789.806073] (UM) [ 1789.825121] 0 [ 1789.834369] 0*1024kB [ 1789.896926] 0*2048kB [ 1789.921766] Node 0 [ 1789.946409] 0*4096kB [ 1789.969014] DMA: [ 1790.016582] = 26980kB [ 1790.032719] 1*4kB [ 1790.072227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.092835] (E) [ 1790.110527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.127013] 1*8kB [ 1790.145045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.167062] (E) [ 1790.183220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.188438] 1*16kB [ 1790.205064] 23346 total pagecache pages [ 1790.210740] (E) 13*32kB (UE) 9*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11004kB [ 1790.215763] 0 pages in swap cache [ 1790.237499] Swap cache stats: add 0, delete 0, find 0/0 [ 1790.239536] Node 0 [ 1790.245269] Free swap = 0kB [ 1790.249409] DMA32: [ 1790.250511] Total swap = 0kB [ 1790.250520] 793*4kB [ 1790.263722] 2097051 pages RAM [ 1790.269157] 0 pages HighMem/MovableOnly [ 1790.272077] (UME) 621*8kB (UME) 199*16kB (UME) 65*32kB (UME) 43*64kB (M) 11*128kB (M) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1790.279965] 363849 pages reserved [ 1790.300752] 0 pages cma reserved [ 1790.306358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1790.336248] Node 1 Normal: 39*4kB (M) 32*8kB (UM) 37*16kB (UME) 28*32kB (UM) 22*64kB (UME) 7*128kB (M) 64*256kB (UM) 12*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26732kB [ 1790.372832] Bluetooth: hci0 command 0x0419 tx timeout [ 1790.387224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.404169] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1790.409138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.433212] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1790.437640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.438367] CPU: 1 PID: 19674 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1790.447255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.455093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.455099] Call Trace: [ 1790.455121] dump_stack+0x1b2/0x281 [ 1790.455135] warn_alloc.cold+0x96/0x1cc [ 1790.455149] ? f2fs_init_extent_tree+0x110/0xd60 [ 1790.463842] 23346 total pagecache pages [ 1790.473174] ? zone_watermark_ok_safe+0x220/0x220 [ 1790.473184] ? usleep_range+0x130/0x130 [ 1790.473193] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1790.473205] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1790.473216] ? run_timer_softirq+0x5a0/0x5a0 [ 1790.475790] 0 pages in swap cache [ 1790.479518] __alloc_pages_nodemask+0x2127/0x2720 [ 1790.483507] Swap cache stats: add 0, delete 0, find 0/0 [ 1790.488317] ? lock_acquire+0x170/0x3f0 [ 1790.492323] Free swap = 0kB [ 1790.497125] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1790.501112] Total swap = 0kB [ 1790.506197] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1790.511256] 2097051 pages RAM [ 1790.515637] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1790.519062] 0 pages HighMem/MovableOnly [ 1790.524161] ? alloc_pages_current+0xe3/0x260 [ 1790.524172] alloc_pages_current+0x155/0x260 [ 1790.524186] ion_page_pool_alloc+0x118/0x1b0 [ 1790.524196] ion_system_heap_allocate+0x133/0x8c0 [ 1790.529564] 363849 pages reserved [ 1790.533539] ? _raw_spin_unlock+0x29/0x40 [ 1790.533549] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1790.533558] ? ion_system_contig_heap_create+0x130/0x130 [ 1790.533569] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1790.533582] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1790.536579] 0 pages cma reserved [ 1790.541416] ion_alloc+0x27a/0x810 [ 1790.541435] ? ion_dma_buf_release+0x40/0x40 [ 1790.541450] ? __might_fault+0x177/0x1b0 [ 1790.544469] Out of memory (oom_kill_allocating_task): Kill process 19418 (syz-executor.2) score 0 or sacrifice child [ 1790.548956] ion_ioctl+0xea/0x1f0 [ 1790.552108] Killed process 19669 (syz-executor.2) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1790.557485] ? ion_query_heaps+0x360/0x360 [ 1790.573400] oom_reaper: reaped process 19669 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1790.574750] ? ion_query_heaps+0x360/0x360 [ 1790.580615] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1790.583039] do_vfs_ioctl+0x75a/0xff0 [ 1790.587347] (null) [ 1790.592279] ? ioctl_preallocate+0x1a0/0x1a0 [ 1790.592289] ? lock_downgrade+0x740/0x740 [ 1790.592302] ? __fget+0x225/0x360 [ 1790.592314] ? do_vfs_ioctl+0xff0/0xff0 [ 1790.597856] , order=0, oom_score_adj=0 [ 1790.603673] ? security_file_ioctl+0x83/0xb0 [ 1790.603684] SyS_ioctl+0x7f/0xb0 [ 1790.603692] ? do_vfs_ioctl+0xff0/0xff0 [ 1790.603703] do_syscall_64+0x1d5/0x640 [ 1790.603717] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1790.608549] ion_system_heap cpuset= [ 1790.611947] RIP: 0033:0x466459 [ 1790.611951] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1790.611960] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1790.611965] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1790.611970] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1790.611974] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1790.611983] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1790.615513] / mems_allowed=0-1 [ 1790.889736] systemd-journald[19683]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1790.920624] CPU: 0 PID: 4246 Comm: ion_system_heap Not tainted 4.14.231-syzkaller #0 [ 1790.929586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.939302] Call Trace: [ 1790.941917] dump_stack+0x1b2/0x281 [ 1790.945551] dump_header+0x178/0x82f [ 1790.949277] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1790.954399] ? ___ratelimit+0x2cd/0x530 [ 1790.958403] oom_kill_process.cold+0x10/0xa40 [ 1790.962949] ? lock_downgrade+0x740/0x740 [ 1790.967149] out_of_memory+0x2dc/0x1190 [ 1790.971140] ? oom_killer_disable+0x1c0/0x1c0 [ 1790.975727] ? mutex_trylock+0x152/0x1a0 [ 1790.979791] __alloc_pages_nodemask+0x23e1/0x2720 [ 1790.984940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1790.989795] ? kasan_kmalloc+0xeb/0x160 [ 1790.993780] ? ion_heap_deferred_free+0x22a/0x470 [ 1790.998657] ? cache_grow_begin+0x3f/0x700 [ 1791.002901] cache_grow_begin+0x91/0x700 [ 1791.006990] fallback_alloc+0x207/0x2c0 [ 1791.011002] kmem_cache_alloc_node_trace+0xed/0x400 [ 1791.016024] alloc_vmap_area+0xf0/0x7c0 [ 1791.020007] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1791.025480] ? purge_vmap_area_lazy+0xb0/0xb0 [ 1791.029994] ? __get_vm_area_node+0xed/0x340 [ 1791.034410] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1791.039692] __get_vm_area_node+0x126/0x340 [ 1791.044018] vmap+0xd5/0x290 [ 1791.047038] ? ion_heap_clear_pages+0x23/0x70 [ 1791.051557] ? vunmap+0x50/0x50 [ 1791.054832] ? __vunmap+0x21c/0x300 [ 1791.058461] ion_heap_clear_pages+0x23/0x70 [ 1791.062782] ion_heap_sglist_zero+0x165/0x220 [ 1791.067287] ? ion_heap_clear_pages+0x70/0x70 [ 1791.071804] ? pagerange_is_ram_callback+0x100/0x100 [ 1791.077014] ? ion_heap_deferred_free+0x222/0x470 [ 1791.082213] ion_system_heap_free+0x1d0/0x240 [ 1791.086809] ion_buffer_destroy+0x132/0x190 [ 1791.091138] ion_heap_deferred_free+0x22a/0x470 [ 1791.092977] systemd-journald[19683]: /dev/kmsg buffer overrun, some messages lost. [ 1791.095813] ? __schedule+0x867/0x1de0 [ 1791.107415] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1791.112086] ? wait_woken+0x230/0x230 [ 1791.115909] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1791.121017] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1791.125702] kthread+0x30d/0x420 [ 1791.129069] ? kthread_create_on_node+0xd0/0xd0 [ 1791.133751] ret_from_fork+0x24/0x30 [ 1791.281345] Mem-Info: [ 1791.283827] active_anon:14786 inactive_anon:24249 isolated_anon:0 [ 1791.283827] active_file:60 inactive_file:28 isolated_file:0 [ 1791.283827] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1791.283827] slab_reclaimable:12755 slab_unreclaimable:115830 [ 1791.283827] mapped:52573 shmem:25337 pagetables:820 bounce:0 [ 1791.283827] free:20193 free_pcp:63 free_cma:0 [ 1791.321755] Node 0 active_anon:58268kB inactive_anon:80692kB active_file:124kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141468kB dirty:80kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.380442] Node 1 active_anon:876kB inactive_anon:16304kB active_file:16kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68824kB dirty:0kB writeback:0kB shmem:16308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.407034] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1791.416354] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.431187] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1791.454802] lowmem_reserve[]: 0 [ 1791.459167] CPU: 1 PID: 19669 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1791.459175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.462480] 2717 [ 1791.470320] Call Trace: [ 1791.479975] 2718 [ 1791.482040] dump_stack+0x1b2/0x281 [ 1791.482055] warn_alloc.cold+0x96/0x1cc [ 1791.484613] 2718 [ 1791.486681] ? zone_watermark_ok_safe+0x220/0x220 [ 1791.490278] 2718 [ 1791.494245] ? usleep_range+0x130/0x130 [ 1791.494254] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1791.494266] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1791.494276] ? run_timer_softirq+0x5a0/0x5a0 [ 1791.494293] __alloc_pages_nodemask+0x2127/0x2720 [ 1791.501168] ? lock_acquire+0x170/0x3f0 [ 1791.501186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1791.501197] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1791.503240] Node 0 [ 1791.507208] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1791.512344] DMA32 free:17720kB min:36200kB low:45248kB high:54296kB active_anon:58268kB inactive_anon:80692kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.517300] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1791.521720] lowmem_reserve[]: [ 1791.526526] alloc_pages_current+0x155/0x260 [ 1791.530473] 0 [ 1791.535331] ion_page_pool_alloc+0x118/0x1b0 [ 1791.535341] ion_system_heap_allocate+0x133/0x8c0 [ 1791.535350] ? ion_alloc+0x187/0x810 [ 1791.535360] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1791.535372] ? ion_system_contig_heap_create+0x130/0x130 [ 1791.539868] 0 [ 1791.542098] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1791.542111] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1791.542121] ion_alloc+0x204/0x810 [ 1791.542136] ? ion_dma_buf_release+0x40/0x40 [ 1791.547583] 0 [ 1791.575551] ? __might_fault+0x177/0x1b0 [ 1791.575565] ion_ioctl+0xea/0x1f0 [ 1791.575576] ? ion_query_heaps+0x360/0x360 [ 1791.575587] ? ion_query_heaps+0x360/0x360 [ 1791.575601] do_vfs_ioctl+0x75a/0xff0 [ 1791.580446] 0 [ 1791.583576] ? ioctl_preallocate+0x1a0/0x1a0 [ 1791.583585] ? lock_downgrade+0x740/0x740 [ 1791.583597] ? __fget+0x225/0x360 [ 1791.583605] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.583620] ? security_file_ioctl+0x83/0xb0 [ 1791.588024] 0 [ 1791.589831] SyS_ioctl+0x7f/0xb0 [ 1791.599271] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.603011] Node 0 [ 1791.608414] do_syscall_64+0x1d5/0x640 [ 1791.613933] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.615701] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1791.620731] lowmem_reserve[]: [ 1791.625533] RIP: 0033:0x466459 [ 1791.629051] 0 [ 1791.633446] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1791.633456] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1791.633460] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1791.633465] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1791.633474] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1791.633479] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1791.647234] warn_alloc_show_mem: 1 callbacks suppressed [ 1791.647239] Mem-Info: [ 1791.660184] 0 [ 1791.669196] active_anon:14789 inactive_anon:24255 isolated_anon:0 [ 1791.669196] active_file:6 inactive_file:16 isolated_file:0 [ 1791.669196] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1791.669196] slab_reclaimable:12755 slab_unreclaimable:115845 [ 1791.669196] mapped:52549 shmem:25360 pagetables:821 bounce:0 [ 1791.669196] free:13898 free_pcp:0 free_cma:0 [ 1791.682275] 0 [ 1791.691449] Node 0 active_anon:58268kB inactive_anon:80692kB active_file:20kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141452kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.703290] 0 [ 1791.723946] Node 1 active_anon:888kB inactive_anon:16328kB active_file:4kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68744kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.736389] 0 [ 1791.740426] Node 0 [ 1791.759654] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.774445] Node 1 [ 1791.782086] lowmem_reserve[]: [ 1791.794613] Normal free:26904kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:16328kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.824656] 0 [ 1791.853320] lowmem_reserve[]: [ 1791.899549] 2717 [ 1791.938514] 0 [ 1791.951267] 2718 2718 2718 [ 1791.957773] Node 0 DMA32 free:17720kB min:36200kB low:45248kB high:54296kB active_anon:58268kB inactive_anon:80692kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.971848] 0 [ 1791.993974] lowmem_reserve[]: 0 0 0 0 0 [ 1792.003065] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.008542] 0 [ 1792.037143] lowmem_reserve[]: 0 0 0 0 0 [ 1792.046880] 0 0 [ 1792.047897] Node 1 [ 1792.048888] Node 0 [ 1792.048908] Normal free:26904kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:16328kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:408kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.048913] lowmem_reserve[]: [ 1792.063108] DMA: [ 1792.093601] 0 0 0 0 0 [ 1792.098178] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 12*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1792.109609] 2*4kB [ 1792.125836] Node 0 DMA32: 757*4kB (UME) 607*8kB (ME) 193*16kB (ME) 56*32kB (UME) 43*64kB (M) 12*128kB (UM) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17820kB [ 1792.134434] (UE) [ 1792.158428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1792.167968] 1*8kB [ 1792.188975] Node 1 Normal: 62*4kB (UM) 51*8kB (M) 41*16kB (ME) 23*32kB (UM) 28*64kB (ME) 7*128kB (M) 1*256kB (M) 1*512kB (M) 21*1024kB (U) 0*2048kB 0*4096kB = 27008kB [ 1792.198326] (E) [ 1792.221277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.230864] 1*16kB (E) 2*32kB (UE) 12*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1792.243117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.259871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.265134] Node 0 DMA32: 757*4kB (UME) 607*8kB (ME) 193*16kB (ME) 56*32kB (UME) 43*64kB (M) 12*128kB (UM) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17820kB [ 1792.279754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.304406] 25390 total pagecache pages [ 1792.308413] 0 pages in swap cache [ 1792.313065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1792.318442] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.343228] Free swap = 0kB [ 1792.346475] Total swap = 0kB [ 1792.350059] 2097051 pages RAM [ 1792.351402] Node 1 Normal: 62*4kB (UM) 51*8kB (M) 41*16kB (ME) 23*32kB (UM) 28*64kB (ME) 7*128kB (M) 1*256kB (M) 1*512kB (M) 21*1024kB (U) 0*2048kB 0*4096kB = 27008kB [ 1792.360172] 0 pages HighMem/MovableOnly [ 1792.387529] 363849 pages reserved [ 1792.391127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.397555] 0 pages cma reserved [ 1792.399975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.782502] IPVS: ftp: loaded support on port[0] = 21 [ 1792.957835] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1793.185059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1793.209737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1793.210358] syz-executor.2: [ 1793.231096] 25441 total pagecache pages [ 1793.238198] 0 pages in swap cache [ 1793.238976] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1793.255609] Swap cache stats: add 0, delete 0, find 0/0 [ 1793.278112] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1793.285322] Free swap = 0kB [ 1793.288115] CPU: 0 PID: 19669 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1793.288403] Total swap = 0kB [ 1793.296283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.296288] Call Trace: [ 1793.296311] dump_stack+0x1b2/0x281 [ 1793.296325] warn_alloc.cold+0x96/0x1cc [ 1793.296336] ? zone_watermark_ok_safe+0x220/0x220 [ 1793.296357] __alloc_pages_nodemask+0x2127/0x2720 [ 1793.296366] ? io_schedule_timeout+0x140/0x140 [ 1793.296381] ? lock_acquire+0x170/0x3f0 [ 1793.296396] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1793.296412] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1793.296426] ? __mutex_unlock_slowpath+0x75/0x770 [ 1793.296441] alloc_pages_current+0x155/0x260 [ 1793.296454] ion_page_pool_alloc+0x118/0x1b0 [ 1793.296463] ion_system_heap_allocate+0x133/0x8c0 [ 1793.296473] ? _raw_spin_unlock+0x29/0x40 [ 1793.296482] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1793.296491] ? ion_system_contig_heap_create+0x130/0x130 [ 1793.296504] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1793.314515] 2097051 pages RAM [ 1793.315047] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1793.318994] 0 pages HighMem/MovableOnly [ 1793.323846] ion_alloc+0x27a/0x810 [ 1793.323861] ? ion_dma_buf_release+0x40/0x40 [ 1793.323872] ? __might_fault+0x177/0x1b0 [ 1793.323890] ion_ioctl+0xea/0x1f0 [ 1793.323899] ? ion_query_heaps+0x360/0x360 [ 1793.323910] ? ion_query_heaps+0x360/0x360 [ 1793.323919] do_vfs_ioctl+0x75a/0xff0 [ 1793.323929] ? ioctl_preallocate+0x1a0/0x1a0 [ 1793.323939] ? lock_downgrade+0x740/0x740 [ 1793.323952] ? __fget+0x225/0x360 [ 1793.323961] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.323972] ? security_file_ioctl+0x83/0xb0 [ 1793.323983] SyS_ioctl+0x7f/0xb0 [ 1793.323990] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.324001] do_syscall_64+0x1d5/0x640 [ 1793.324016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.324027] RIP: 0033:0x466459 [ 1793.347549] 363849 pages reserved [ 1793.349251] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 [ 1793.376711] 0 pages cma reserved [ 1793.376763] ORIG_RAX: 0000000000000010 [ 1793.399344] Out of memory: Kill process 19670 (syz-executor.3) score 1004 or sacrifice child [ 1793.402625] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1793.402631] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1793.402636] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1793.402640] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1793.402645] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1793.428950] Mem-Info: [ 1793.460288] Killed process 19673 (syz-executor.3) total-vm:93516kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1793.517315] active_anon:14805 inactive_anon:24258 isolated_anon:0 [ 1793.517315] active_file:48 inactive_file:7 isolated_file:0 [ 1793.517315] unevictable:0 dirty:13 writeback:1 unstable:0 [ 1793.517315] slab_reclaimable:12755 slab_unreclaimable:115936 [ 1793.517315] mapped:52550 shmem:25364 pagetables:825 bounce:0 [ 1793.517315] free:13748 free_pcp:0 free_cma:0 [ 1793.590888] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1793.607413] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1793.614979] CPU: 0 PID: 19678 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1793.622871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.632772] Call Trace: [ 1793.635391] dump_stack+0x1b2/0x281 [ 1793.639028] warn_alloc.cold+0x96/0x1cc [ 1793.643194] ? zone_watermark_ok_safe+0x220/0x220 [ 1793.648910] ? usleep_range+0x130/0x130 [ 1793.652893] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1793.658003] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1793.663027] ? run_timer_softirq+0x5a0/0x5a0 [ 1793.667455] __alloc_pages_nodemask+0x2127/0x2720 [ 1793.678683] ? lock_acquire+0x170/0x3f0 [ 1793.682953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1793.688067] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1793.692579] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1793.698052] ? alloc_pages_current+0x37/0x260 [ 1793.702561] alloc_pages_current+0x155/0x260 [ 1793.707077] ion_page_pool_alloc+0x118/0x1b0 [ 1793.711514] ion_system_heap_allocate+0x133/0x8c0 [ 1793.716807] ? ion_alloc+0x187/0x810 [ 1793.720530] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1793.725992] ? ion_system_contig_heap_create+0x130/0x130 [ 1793.731479] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1793.736510] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1793.741367] ion_alloc+0x204/0x810 [ 1793.744936] ? ion_dma_buf_release+0x40/0x40 [ 1793.749358] ? __might_fault+0x177/0x1b0 [ 1793.753433] ion_ioctl+0xea/0x1f0 [ 1793.756898] ? ion_query_heaps+0x360/0x360 [ 1793.761155] ? ion_query_heaps+0x360/0x360 [ 1793.765689] do_vfs_ioctl+0x75a/0xff0 [ 1793.769600] ? ioctl_preallocate+0x1a0/0x1a0 [ 1793.770352] Node 0 active_anon:58220kB inactive_anon:80692kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:4kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1793.774452] ? lock_downgrade+0x740/0x740 [ 1793.774467] ? __fget+0x225/0x360 [ 1793.774476] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.774487] ? security_file_ioctl+0x83/0xb0 [ 1793.774496] SyS_ioctl+0x7f/0xb0 [ 1793.774504] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.774515] do_syscall_64+0x1d5/0x640 [ 1793.774531] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.774540] RIP: 0033:0x466459 [ 1793.774544] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.774559] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1793.811583] syz-executor.3: [ 1793.813900] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1793.818315] page allocation failure: order:0 [ 1793.821715] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1793.821721] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1793.821726] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1793.916028] oom_reaper: reaped process 19673 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1793.950866] systemd[1]: systemd-rfkill.service: Main process exited, code=exited, status=127/n/a 07:58:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40044041}, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) [ 1794.013989] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 1794.061842] Node 1 active_anon:972kB inactive_anon:16340kB active_file:52kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68772kB dirty:44kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1794.105492] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 1794.141975] systemd[1]: systemd-rfkill.service: Failed with result 'exit-code'. [ 1794.216666] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:72kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.259993] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1794.267862] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1794.286700] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1794.306987] CPU: 1 PID: 19673 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1794.315856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1794.325233] Call Trace: [ 1794.327836] dump_stack+0x1b2/0x281 [ 1794.331501] warn_alloc.cold+0x96/0x1cc [ 1794.335486] ? zone_watermark_ok_safe+0x220/0x220 [ 1794.340362] ? usleep_range+0x130/0x130 [ 1794.344459] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1794.349570] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1794.354597] ? run_timer_softirq+0x5a0/0x5a0 [ 1794.359020] __alloc_pages_nodemask+0x2127/0x2720 [ 1794.363881] ? lock_acquire+0x170/0x3f0 [ 1794.367867] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1794.372718] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1794.377236] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1794.382705] ? alloc_pages_current+0xe3/0x260 [ 1794.387212] alloc_pages_current+0x155/0x260 [ 1794.391628] ion_page_pool_alloc+0x118/0x1b0 [ 1794.396043] ion_system_heap_allocate+0x133/0x8c0 [ 1794.400902] ? ion_alloc+0x187/0x810 [ 1794.404638] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1794.410208] ? ion_system_contig_heap_create+0x130/0x130 [ 1794.415673] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1794.420708] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1794.425652] ion_alloc+0x204/0x810 [ 1794.429296] ? ion_dma_buf_release+0x40/0x40 [ 1794.433715] ? __might_fault+0x177/0x1b0 [ 1794.437788] ion_ioctl+0xea/0x1f0 [ 1794.441245] ? ion_query_heaps+0x360/0x360 [ 1794.445514] ? ion_query_heaps+0x360/0x360 [ 1794.449773] do_vfs_ioctl+0x75a/0xff0 [ 1794.453599] ? ioctl_preallocate+0x1a0/0x1a0 [ 1794.458016] ? lock_downgrade+0x740/0x740 [ 1794.462175] ? __fget+0x225/0x360 [ 1794.465634] ? do_vfs_ioctl+0xff0/0xff0 [ 1794.469611] ? security_file_ioctl+0x83/0xb0 [ 1794.474023] SyS_ioctl+0x7f/0xb0 [ 1794.477392] ? do_vfs_ioctl+0xff0/0xff0 [ 1794.481379] do_syscall_64+0x1d5/0x640 [ 1794.485281] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1794.490493] RIP: 0033:0x466459 [ 1794.493272] syz-executor.4: [ 1794.493694] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 [ 1794.493703] page allocation failure: order:4 [ 1794.496705] ORIG_RAX: 0000000000000010 [ 1794.496712] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1794.496717] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1794.496723] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1794.496728] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1794.496733] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1794.501326] Node 0 [ 1794.530697] Bluetooth: hci2 command 0x0409 tx timeout [ 1794.534095] DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:58184kB inactive_anon:80692kB active_file:808kB inactive_file:748kB unevictable:0kB writepending:36kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7840kB pagetables:2800kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 1794.569486] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1794.591017] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1794.599288] syz-executor.3: [ 1794.612794] in:imklog cpuset=/ mems_allowed=0-1 [ 1794.620506] CPU: 1 PID: 19420 Comm: in:imklog Not tainted 4.14.231-syzkaller #0 [ 1794.628040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1794.637396] Call Trace: [ 1794.639990] dump_stack+0x1b2/0x281 [ 1794.643619] dump_header+0x178/0x82f [ 1794.646804] (null) [ 1794.647331] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1794.649487] syz-executor.4 cpuset= [ 1794.654580] ? ___ratelimit+0x2cd/0x530 [ 1794.654591] oom_kill_process.cold+0x10/0xa40 [ 1794.654608] out_of_memory+0xe3e/0x1190 [ 1794.654624] ? oom_killer_disable+0x1c0/0x1c0 [ 1794.658177] page allocation failure: order:4 [ 1794.662134] ? mutex_trylock+0x152/0x1a0 [ 1794.662147] __alloc_pages_nodemask+0x23e1/0x2720 [ 1794.662169] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1794.666649] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1794.670622] alloc_pages_current+0x155/0x260 [ 1794.670636] filemap_fault+0x11a1/0x1ad0 [ 1794.670655] ext4_filemap_fault+0x84/0xb0 [ 1794.675224] / [ 1794.679633] __do_fault+0xfa/0x380 [ 1794.683745] (null) [ 1794.688514] __handle_mm_fault+0x2497/0x4620 [ 1794.693423] mems_allowed=0-1 [ 1794.700576] ? vm_insert_page+0x7c0/0x7c0 [ 1794.700588] ? lock_downgrade+0x740/0x740 [ 1794.700601] ? mark_held_locks+0xa6/0xf0 [ 1794.700614] handle_mm_fault+0x455/0x9c0 [ 1794.705320] syz-executor.3 cpuset= [ 1794.709382] __do_page_fault+0x549/0xad0 [ 1794.720588] / [ 1794.721002] ? spurious_fault+0x640/0x640 [ 1794.725479] mems_allowed=0-1 [ 1794.761567] ? do_page_fault+0x60/0x500 [ 1794.765537] ? page_fault+0x2f/0x50 [ 1794.769154] page_fault+0x45/0x50 [ 1794.772620] RIP: 1fa0:0x1f9f [ 1794.775619] RSP: 0000:000055febd3aa9d0 EFLAGS: 7f5a6e2c8da0 [ 1794.775645] CPU: 0 PID: 19768 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1794.787706] lowmem_reserve[]: [ 1794.789249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1794.789259] 0 [ 1794.792351] Call Trace: [ 1794.792372] dump_stack+0x1b2/0x281 [ 1794.792385] warn_alloc.cold+0x96/0x1cc [ 1794.792397] ? zone_watermark_ok_safe+0x220/0x220 [ 1794.792417] __alloc_pages_nodemask+0x2127/0x2720 [ 1794.792433] ? lock_acquire+0x170/0x3f0 [ 1794.792446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1794.792463] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1794.792475] ? __mutex_unlock_slowpath+0x75/0x770 [ 1794.808128] 0 [ 1794.809809] alloc_pages_current+0x155/0x260 [ 1794.813838] 0 [ 1794.818708] ion_page_pool_alloc+0x118/0x1b0 [ 1794.830525] 0 [ 1794.833024] ion_system_heap_allocate+0x133/0x8c0 [ 1794.833034] ? ion_alloc+0x187/0x810 [ 1794.833044] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1794.833052] ? ion_system_contig_heap_create+0x130/0x130 [ 1794.833061] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1794.833072] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1794.833086] ion_alloc+0x204/0x810 [ 1794.838533] 0 [ 1794.843393] ? ion_dma_buf_release+0x40/0x40 [ 1794.843405] ? __might_fault+0x177/0x1b0 [ 1794.843421] ion_ioctl+0xea/0x1f0 [ 1794.843430] ? ion_query_heaps+0x360/0x360 [ 1794.843441] ? ion_query_heaps+0x360/0x360 [ 1794.843450] do_vfs_ioctl+0x75a/0xff0 [ 1794.843462] ? ioctl_preallocate+0x1a0/0x1a0 [ 1794.843471] ? lock_downgrade+0x740/0x740 [ 1794.843483] ? __fget+0x225/0x360 [ 1794.843492] ? do_vfs_ioctl+0xff0/0xff0 [ 1794.843506] ? security_file_ioctl+0x83/0xb0 [ 1794.855866] SyS_ioctl+0x7f/0xb0 [ 1794.857640] Node 0 [ 1794.862470] ? do_vfs_ioctl+0xff0/0xff0 [ 1794.862483] do_syscall_64+0x1d5/0x640 [ 1794.862497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1794.862505] RIP: 0033:0x466459 [ 1794.862509] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1794.862519] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1794.862524] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1794.862529] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1794.862533] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1794.862538] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1794.916884] CPU: 0 PID: 19678 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1794.924312] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.926120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1794.929577] lowmem_reserve[]: [ 1794.933535] Call Trace: [ 1794.933558] dump_stack+0x1b2/0x281 [ 1794.933570] warn_alloc.cold+0x96/0x1cc [ 1794.933581] ? zone_watermark_ok_safe+0x220/0x220 [ 1794.933602] __alloc_pages_nodemask+0x2127/0x2720 [ 1794.933612] ? lock_acquire+0x170/0x3f0 [ 1794.933624] ? lock_acquire+0x170/0x3f0 [ 1794.933639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1794.933655] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1794.939882] warn_alloc_show_mem: 1 callbacks suppressed [ 1794.939886] Mem-Info: [ 1794.941411] ? __mutex_unlock_slowpath+0x75/0x770 [ 1794.941426] alloc_pages_current+0x155/0x260 [ 1794.941439] ion_page_pool_alloc+0x118/0x1b0 [ 1794.941449] ion_system_heap_allocate+0x133/0x8c0 [ 1794.941459] ? _raw_spin_unlock+0x29/0x40 [ 1794.941468] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1794.941477] ? ion_system_contig_heap_create+0x130/0x130 [ 1794.941490] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1794.948445] active_anon:14889 inactive_anon:24258 isolated_anon:0 [ 1794.948445] active_file:22 inactive_file:24 isolated_file:0 [ 1794.948445] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1794.948445] slab_reclaimable:12754 slab_unreclaimable:115839 [ 1794.948445] mapped:52606 shmem:25364 pagetables:839 bounce:0 [ 1794.948445] free:13902 free_pcp:0 free_cma:0 [ 1794.951666] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1794.951679] ion_alloc+0x27a/0x810 [ 1794.951693] ? ion_dma_buf_release+0x40/0x40 [ 1794.951704] ? __might_fault+0x177/0x1b0 [ 1794.951714] ion_ioctl+0xea/0x1f0 [ 1794.951723] ? ion_query_heaps+0x360/0x360 [ 1794.951734] ? ion_query_heaps+0x360/0x360 [ 1794.951743] do_vfs_ioctl+0x75a/0xff0 [ 1794.951755] ? ioctl_preallocate+0x1a0/0x1a0 [ 1794.956950] Node 0 active_anon:58384kB inactive_anon:80692kB active_file:76kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141552kB dirty:36kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1794.956968] Node 1 active_anon:1172kB inactive_anon:16340kB active_file:12kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68872kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1794.960154] ? lock_downgrade+0x740/0x740 [ 1794.974877] 0 [ 1794.975559] ? __fget+0x225/0x360 [ 1794.982942] 0 [ 1794.990100] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.004924] Node 0 [ 1795.012519] ? security_file_ioctl+0x83/0xb0 [ 1795.012531] SyS_ioctl+0x7f/0xb0 [ 1795.012539] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.012550] do_syscall_64+0x1d5/0x640 [ 1795.012564] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1795.012572] RIP: 0033:0x466459 [ 1795.012576] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.012586] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1795.012590] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1795.012596] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1795.012600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1795.012611] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1795.044090] 0 [ 1795.208533] Mem-Info: [ 1795.234274] DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1795.388213] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1795.393347] Node 0 DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:58388kB inactive_anon:80692kB active_file:24kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2840kB bounce:0kB free_pcp:244kB local_pcp:124kB free_cma:0kB [ 1795.401805] active_anon:14901 inactive_anon:24258 isolated_anon:0 [ 1795.401805] active_file:16 inactive_file:17 isolated_file:0 [ 1795.401805] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1795.401805] slab_reclaimable:12772 slab_unreclaimable:115903 [ 1795.401805] mapped:52560 shmem:25364 pagetables:844 bounce:0 [ 1795.401805] free:13945 free_pcp:91 free_cma:0 [ 1795.430840] 0 [ 1795.464811] lowmem_reserve[]: [ 1795.465963] syz-executor.3: [ 1795.466663] 0 [ 1795.469760] page allocation failure: order:0 [ 1795.477183] 0 [ 1795.486149] 0 0 0 0 [ 1795.489839] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1795.490467] Node 0 [ 1795.490470] (null) [ 1795.490476] syz-executor.3 cpuset= [ 1795.515007] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:16340kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:536kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1795.520440] / [ 1795.555252] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1795.563153] Node 0 active_anon:58388kB inactive_anon:80692kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1795.599979] lowmem_reserve[]: [ 1795.621503] mems_allowed=0-1 [ 1795.627755] CPU: 0 PID: 19678 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1795.628914] lowmem_reserve[]: [ 1795.635666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.635670] Call Trace: [ 1795.635692] dump_stack+0x1b2/0x281 [ 1795.635706] warn_alloc.cold+0x96/0x1cc [ 1795.635717] ? zone_watermark_ok_safe+0x220/0x220 [ 1795.635726] ? usleep_range+0x130/0x130 [ 1795.635735] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1795.635747] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1795.635758] ? run_timer_softirq+0x5a0/0x5a0 [ 1795.635774] __alloc_pages_nodemask+0x2127/0x2720 [ 1795.635789] ? lock_acquire+0x170/0x3f0 [ 1795.635803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1795.657949] 0 [ 1795.658428] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1795.688421] 0 [ 1795.690523] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1795.708972] alloc_pages_current+0x155/0x260 [ 1795.713434] ion_page_pool_alloc+0x118/0x1b0 [ 1795.717856] ion_system_heap_allocate+0x133/0x8c0 [ 1795.717966] 0 [ 1795.722705] ? _raw_spin_unlock+0x29/0x40 [ 1795.722715] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1795.722724] ? ion_system_contig_heap_create+0x130/0x130 [ 1795.722734] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1795.722745] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1795.722754] ion_alloc+0x27a/0x810 [ 1795.722766] ? ion_dma_buf_release+0x40/0x40 [ 1795.722778] ? __might_fault+0x177/0x1b0 [ 1795.722790] ion_ioctl+0xea/0x1f0 [ 1795.722799] ? ion_query_heaps+0x360/0x360 [ 1795.722811] ? ion_query_heaps+0x360/0x360 [ 1795.722820] do_vfs_ioctl+0x75a/0xff0 [ 1795.722832] ? ioctl_preallocate+0x1a0/0x1a0 [ 1795.722840] ? lock_downgrade+0x740/0x740 [ 1795.722852] ? __fget+0x225/0x360 [ 1795.722862] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.722874] ? security_file_ioctl+0x83/0xb0 [ 1795.722884] SyS_ioctl+0x7f/0xb0 [ 1795.722891] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.722901] do_syscall_64+0x1d5/0x640 [ 1795.722914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1795.722923] RIP: 0033:0x466459 [ 1795.722928] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.722938] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1795.722944] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1795.722949] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1795.722954] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1795.722959] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1795.737854] Node 1 active_anon:1216kB inactive_anon:16340kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68820kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1795.756445] 0 [ 1795.772532] Node 0 [ 1795.788046] 0 [ 1795.803107] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1795.819364] 0 [ 1795.839854] lowmem_reserve[]: [ 1795.854206] 0 [ 1795.880620] 0 [ 1795.956850] 0 0 [ 1795.979792] Node 0 DMA: 3*4kB (UE) 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 12*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11084kB [ 1795.981442] 2717 2718 2718 2718 [ 1796.009812] Node 0 DMA32 free:35752kB min:36200kB low:45248kB high:54296kB active_anon:58388kB inactive_anon:80692kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2840kB bounce:0kB free_pcp:1048kB local_pcp:328kB free_cma:0kB [ 1796.040156] Node 0 DMA32: 408*4kB (UME) 598*8kB (ME) 201*16kB (ME) 72*32kB (UME) 30*64kB (UM) 51*128kB (UM) 44*256kB (U) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36256kB [ 1796.043872] lowmem_reserve[]: [ 1796.056401] 0 [ 1796.060237] 0 [ 1796.061551] Node 1 Normal free:53952kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:16340kB active_file:72kB inactive_file:76kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:536kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1796.070657] 0 [ 1796.147397] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1796.249793] Node 1 Normal: 88*4kB (UM) 60*8kB (UM) 42*16kB (UME) 146*32kB (UM) 150*64kB (UME) 41*128kB (UM) 73*256kB (UM) 22*512kB (UE) 3*1024kB (U) 0*2048kB 0*4096kB = 54048kB [ 1796.341860] 0 0 0 [ 1796.344057] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.378117] lowmem_reserve[]: 0 0 0 0 0 [ 1796.387793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.415297] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 12*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11076kB [ 1796.457048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.460918] lowmem_reserve[]: 0 0 0 0 0 [ 1796.465929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.470181] Node 1 [ 1796.480813] Node 0 DMA32: 724*4kB (ME) 600*8kB (ME) 201*16kB (ME) 67*32kB (ME) 29*64kB (UM) 40*128kB (UM) 44*256kB (U) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35904kB [ 1796.485189] Normal free:53416kB min:53696kB low:67120kB high:80544kB active_anon:1216kB inactive_anon:16340kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:536kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.499070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.530295] lowmem_reserve[]: [ 1796.541326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1796.547665] 0 [ 1796.555489] Node 1 Normal: [ 1796.557313] 0 [ 1796.557321] 88*4kB [ 1796.560253] 0 [ 1796.562790] (UM) 60*8kB (UM) 42*16kB (UME) 146*32kB (UM) 150*64kB (UME) 41*128kB (UM) 73*256kB (UM) 22*512kB (UE) 3*1024kB (U) 0*2048kB 0*4096kB = 54048kB [ 1796.567690] 0 [ 1796.583486] 25446 total pagecache pages [ 1796.590854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.599793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.600602] 0 [ 1796.608904] 0 pages in swap cache [ 1796.610270] Node 0 [ 1796.613754] Swap cache stats: add 0, delete 0, find 0/0 [ 1796.613759] Free swap = 0kB [ 1796.613762] Total swap = 0kB [ 1796.613769] 2097051 pages RAM [ 1796.613772] 0 pages HighMem/MovableOnly [ 1796.613775] 363849 pages reserved [ 1796.613778] 0 pages cma reserved [ 1796.630635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.630643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.630647] 25446 total pagecache pages [ 1796.630656] 0 pages in swap cache [ 1796.630662] Swap cache stats: add 0, delete 0, find 0/0 [ 1796.630668] Free swap = 0kB [ 1796.634748] Bluetooth: hci2 command 0x041b tx timeout [ 1796.638176] Total swap = 0kB [ 1796.646012] DMA: [ 1796.670646] 2097051 pages RAM [ 1796.676353] 0*4kB [ 1796.691205] 0 pages HighMem/MovableOnly [ 1796.698019] 363849 pages reserved [ 1796.699211] 2*8kB [ 1796.710945] 0 pages cma reserved [ 1796.713872] (UE) 1*16kB (E) 2*32kB (UE) 12*64kB (UE) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10976kB [ 1796.733964] Node 0 DMA32: 724*4kB (ME) 601*8kB (UME) 202*16kB (UME) 68*32kB (UME) 29*64kB (UM) 16*128kB (M) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18040kB [ 1796.753948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1796.856553] Node 1 Normal: 85*4kB (M) 56*8kB (UM) 40*16kB (ME) 21*32kB (UM) 6004*64kB (UME) 202*128kB (UM) 27*256kB (UM) 11*512kB (UE) 36*1024kB (U) 1*2048kB (U) 0*4096kB = 463668kB [ 1796.973781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.990691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.002099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.011132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.019712] 26015 total pagecache pages [ 1797.024577] 0 pages in swap cache [ 1797.028640] Swap cache stats: add 0, delete 0, find 0/0 [ 1797.068790] Free swap = 0kB [ 1797.072343] Total swap = 0kB [ 1797.075828] 2097051 pages RAM [ 1797.079753] 0 pages HighMem/MovableOnly [ 1797.083323] chnl_net:caif_netlink_parms(): no params data found [ 1797.101472] 363849 pages reserved [ 1797.106932] 0 pages cma reserved [ 1797.119620] Out of memory (oom_kill_allocating_task): Kill process 19420 (in:imklog) score 0 or sacrifice child [ 1797.150707] Killed process 19417 (rsyslogd) total-vm:254332kB, anon-rss:852kB, file-rss:0kB, shmem-rss:0kB [ 1797.189870] oom_reaper: reaped process 19417 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1797.258778] systemd[1]: systemd-rfkill.service: Failed to fork: Cannot allocate memory [ 1797.293553] systemd[1]: systemd-rfkill.service: Failed to run 'start' task: Cannot allocate memory [ 1797.374909] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 1797.419599] systemd[1]: systemd-rfkill.service: Failed with result 'resources'. [ 1797.458929] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1797.534911] systemd[1]: rsyslog.service: Unit entered failed state. [ 1797.681550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.688000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.700969] kworker/u4:5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1797.729393] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 1797.738756] CPU: 1 PID: 19815 Comm: kworker/u4:5 Not tainted 4.14.231-syzkaller #0 [ 1797.746472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.755918] Call Trace: [ 1797.758536] dump_stack+0x1b2/0x281 [ 1797.762175] dump_header+0x178/0x82f [ 1797.765892] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1797.771084] ? ___ratelimit+0x2cd/0x530 [ 1797.775064] oom_kill_process.cold+0x10/0xa40 [ 1797.779559] ? lock_downgrade+0x740/0x740 [ 1797.783718] out_of_memory+0x2dc/0x1190 [ 1797.787701] ? oom_killer_disable+0x1c0/0x1c0 [ 1797.792198] ? mutex_trylock+0x152/0x1a0 [ 1797.796266] __alloc_pages_nodemask+0x23e1/0x2720 [ 1797.801147] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1797.805984] ? cache_grow_begin+0x3f/0x700 [ 1797.810202] cache_grow_begin+0x91/0x700 [ 1797.814258] fallback_alloc+0x207/0x2c0 [ 1797.818218] kmem_cache_alloc+0x1e5/0x3c0 [ 1797.822354] getname_kernel+0x4e/0x340 [ 1797.826240] call_usermodehelper_exec_async+0x2df/0x510 [ 1797.831589] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1797.837057] ret_from_fork+0x24/0x30 [ 1797.846463] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1797.904397] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1797.909556] CPU: 0 PID: 19673 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1797.917457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.924741] Mem-Info: [ 1797.926823] Call Trace: [ 1797.929248] active_anon:14591 inactive_anon:24258 isolated_anon:0 [ 1797.929248] active_file:28 inactive_file:0 isolated_file:0 [ 1797.929248] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1797.929248] slab_reclaimable:12812 slab_unreclaimable:116917 [ 1797.929248] mapped:52615 shmem:25364 pagetables:850 bounce:0 [ 1797.929248] free:13925 free_pcp:30 free_cma:0 [ 1797.931817] dump_stack+0x1b2/0x281 [ 1797.931831] warn_alloc.cold+0x96/0x1cc [ 1797.931842] ? zone_watermark_ok_safe+0x220/0x220 [ 1797.931862] __alloc_pages_nodemask+0x2127/0x2720 [ 1797.931872] ? io_schedule_timeout+0x140/0x140 [ 1797.931887] ? lock_acquire+0x170/0x3f0 [ 1797.931902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1797.931935] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1797.968978] syz-executor.2: [ 1797.972625] ? __mutex_unlock_slowpath+0x75/0x770 [ 1797.972635] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1797.972649] alloc_pages_current+0x155/0x260 [ 1797.972663] ion_page_pool_alloc+0x118/0x1b0 [ 1797.972675] ion_system_heap_allocate+0x133/0x8c0 [ 1797.977505] page allocation failure: order:0 [ 1797.982346] ? _raw_spin_unlock+0x29/0x40 [ 1797.982356] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1797.982365] ? ion_system_contig_heap_create+0x130/0x130 [ 1797.982375] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1797.982386] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1797.982395] ion_alloc+0x27a/0x810 [ 1797.982407] ? ion_dma_buf_release+0x40/0x40 [ 1797.982419] ? __might_fault+0x177/0x1b0 [ 1797.982430] ion_ioctl+0xea/0x1f0 [ 1797.982439] ? ion_query_heaps+0x360/0x360 [ 1797.982450] ? ion_query_heaps+0x360/0x360 [ 1797.982459] do_vfs_ioctl+0x75a/0xff0 [ 1797.982471] ? ioctl_preallocate+0x1a0/0x1a0 [ 1797.982483] ? lock_downgrade+0x740/0x740 [ 1797.991486] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1797.995850] ? __fget+0x225/0x360 [ 1798.003893] (null) [ 1798.004313] ? do_vfs_ioctl+0xff0/0xff0 [ 1798.009128] syz-executor.2 cpuset= [ 1798.013961] ? security_file_ioctl+0x83/0xb0 [ 1798.013973] SyS_ioctl+0x7f/0xb0 [ 1798.013981] ? do_vfs_ioctl+0xff0/0xff0 [ 1798.013992] do_syscall_64+0x1d5/0x640 [ 1798.014006] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1798.014013] RIP: 0033:0x466459 [ 1798.014018] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1798.014027] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1798.014033] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1798.014037] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1798.014042] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1798.014047] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1798.037182] warn_alloc_show_mem: 3 callbacks suppressed [ 1798.037187] Mem-Info: [ 1798.044059] Node 0 active_anon:57260kB inactive_anon:80692kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.068526] active_anon:14572 inactive_anon:24258 isolated_anon:0 [ 1798.068526] active_file:15 inactive_file:16 isolated_file:0 [ 1798.068526] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1798.068526] slab_reclaimable:12824 slab_unreclaimable:116929 [ 1798.068526] mapped:52601 shmem:25364 pagetables:826 bounce:0 [ 1798.068526] free:13944 free_pcp:30 free_cma:0 [ 1798.071978] / [ 1798.088004] Node 0 active_anon:57260kB inactive_anon:80692kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.100070] Node 1 active_anon:1028kB inactive_anon:16340kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68984kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.111702] Node 1 active_anon:1028kB inactive_anon:16340kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68984kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.135692] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.135713] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1798.135731] Node 0 DMA32 free:18076kB min:36200kB low:45248kB high:54296kB active_anon:57260kB inactive_anon:80692kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2724kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1798.149385] Node 0 [ 1798.162396] mems_allowed=0-1 [ 1798.183264] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.196258] lowmem_reserve[]: [ 1798.251182] CPU: 0 PID: 19669 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1798.256496] 0 [ 1798.256968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.284957] 0 [ 1798.311851] Call Trace: [ 1798.311875] dump_stack+0x1b2/0x281 [ 1798.311888] warn_alloc.cold+0x96/0x1cc [ 1798.311900] ? zone_watermark_ok_safe+0x220/0x220 [ 1798.311908] ? usleep_range+0x130/0x130 [ 1798.311917] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1798.311928] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1798.311941] ? run_timer_softirq+0x5a0/0x5a0 [ 1798.339270] 0 [ 1798.365884] __alloc_pages_nodemask+0x2127/0x2720 [ 1798.365902] ? lock_acquire+0x170/0x3f0 [ 1798.365916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1798.365926] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1798.365941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1798.365959] alloc_pages_current+0x155/0x260 [ 1798.371102] 0 [ 1798.399791] ion_page_pool_alloc+0x118/0x1b0 [ 1798.399801] ion_system_heap_allocate+0x133/0x8c0 [ 1798.399812] ? _raw_spin_unlock+0x29/0x40 [ 1798.399820] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1798.399828] ? ion_system_contig_heap_create+0x130/0x130 [ 1798.399837] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1798.399848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1798.399856] ion_alloc+0x27a/0x810 [ 1798.399868] ? ion_dma_buf_release+0x40/0x40 [ 1798.399882] ? __might_fault+0x177/0x1b0 [ 1798.399893] ion_ioctl+0xea/0x1f0 [ 1798.399900] ? ion_query_heaps+0x360/0x360 [ 1798.399911] ? ion_query_heaps+0x360/0x360 [ 1798.399921] do_vfs_ioctl+0x75a/0xff0 [ 1798.399932] ? ioctl_preallocate+0x1a0/0x1a0 [ 1798.399941] ? lock_downgrade+0x740/0x740 [ 1798.399953] ? __fget+0x225/0x360 [ 1798.399961] ? do_vfs_ioctl+0xff0/0xff0 [ 1798.399971] ? security_file_ioctl+0x83/0xb0 [ 1798.399981] SyS_ioctl+0x7f/0xb0 [ 1798.399994] ? do_vfs_ioctl+0xff0/0xff0 [ 1798.402930] 0 [ 1798.405335] do_syscall_64+0x1d5/0x640 [ 1798.434031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1798.442018] Node 0 [ 1798.443743] RIP: 0033:0x466459 [ 1798.453415] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.455070] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 [ 1798.457638] lowmem_reserve[]: [ 1798.461248] ORIG_RAX: 0000000000000010 [ 1798.461254] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1798.461259] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1798.461263] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1798.461268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1798.461273] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1798.690709] Bluetooth: hci2 command 0x040f tx timeout [ 1798.698373] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1798.751056] Node 0 DMA32 free:27020kB min:36200kB low:45248kB high:54296kB active_anon:57260kB inactive_anon:80692kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2724kB bounce:0kB free_pcp:460kB local_pcp:260kB free_cma:0kB [ 1798.788158] lowmem_reserve[]: 0 0 0 0 0 [ 1798.793433] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.825424] lowmem_reserve[]: 0 0 0 0 0 [ 1798.830715] Node 1 Normal free:264240kB min:53696kB low:67120kB high:80544kB active_anon:1428kB inactive_anon:16340kB active_file:356kB inactive_file:4956kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:728kB bounce:0kB free_pcp:480kB local_pcp:172kB free_cma:0kB [ 1798.866292] lowmem_reserve[]: 0 0 0 0 0 [ 1798.881348] Node 0 DMA: 5*4kB (U) 2*8kB (UE) 3*16kB (UE) 1*32kB (E) 6*64kB (UE) 5*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11124kB [ 1798.934640] Node 0 DMA32: 657*4kB (UME) 616*8kB (UME) 213*16kB (UME) 74*32kB (UME) 151*64kB (UME) 105*128kB (UM) 21*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 42836kB [ 1798.961792] device bridge_slave_0 entered promiscuous mode [ 1798.985036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.006101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.021130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1799.035340] device bridge_slave_1 entered promiscuous mode [ 1799.050641] Node 1 Normal: 3*4kB (UME) 3*8kB (E) 1*16kB (E) 1*32kB (E) 4*64kB (UME) 28*128kB (UM) 151*256kB (UE) 1*512kB (M) 108*1024kB (U) 12*2048kB (U) 0*4096kB = 178260kB [ 1799.103305] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1799.140955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.145103] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1799.160924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.169544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.206534] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1799.230807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.239397] 27425 total pagecache pages [ 1799.277518] 0 pages in swap cache [ 1799.288674] Swap cache stats: add 0, delete 0, find 0/0 [ 1799.300637] Free swap = 0kB [ 1799.303680] Total swap = 0kB [ 1799.311489] 0 0 0 0 0 [ 1799.314056] Node 1 Normal free:53592kB min:53696kB low:67120kB high:80544kB active_anon:1756kB inactive_anon:16340kB active_file:1284kB inactive_file:920kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:648kB bounce:0kB free_pcp:780kB local_pcp:524kB free_cma:0kB [ 1799.314872] 2097051 pages RAM [ 1799.353398] 0 pages HighMem/MovableOnly [ 1799.357405] 363849 pages reserved [ 1799.363095] 0 pages cma reserved [ 1799.373840] lowmem_reserve[]: 0 0 0 0 0 [ 1799.377873] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 1*32kB (E) 6*64kB (UE) 5*128kB (UE) 5*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11064kB [ 1799.432969] Node 0 DMA32: 631*4kB (UME) 591*8kB (UME) 196*16kB (UME) 66*32kB (UME) 52*64kB (UME) 19*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18260kB [ 1799.467124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1799.482455] Node 1 Normal: 110*4kB (UME) 85*8kB (UME) 64*16kB (ME) 52*32kB (ME) 57*64kB (ME) 9*128kB (ME) 3*256kB (ME) 2*512kB (UM) 12*1024kB (UM) 11*2048kB (U) 0*4096kB = 45216kB [ 1799.503302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.512292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.525425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.545063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.562550] 25412 total pagecache pages [ 1799.566559] 0 pages in swap cache [ 1799.570006] Swap cache stats: add 0, delete 0, find 0/0 [ 1799.588788] Free swap = 0kB [ 1799.596342] Total swap = 0kB [ 1799.599382] 2097051 pages RAM [ 1799.619703] 0 pages HighMem/MovableOnly [ 1799.635907] 363849 pages reserved [ 1799.639836] 0 pages cma reserved [ 1799.658960] Out of memory: Kill process 19663 (syz-executor.5) score 1004 or sacrifice child [ 1799.670006] Killed process 19668 (syz-executor.5) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1799.684432] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1799.702935] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1799.708176] CPU: 1 PID: 19673 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1799.716067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.725452] Call Trace: [ 1799.728317] dump_stack+0x1b2/0x281 [ 1799.732135] warn_alloc.cold+0x96/0x1cc [ 1799.736146] ? zone_watermark_ok_safe+0x220/0x220 [ 1799.741188] ? usleep_range+0x130/0x130 [ 1799.745187] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1799.750318] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1799.755374] ? run_timer_softirq+0x5a0/0x5a0 [ 1799.759805] __alloc_pages_nodemask+0x2127/0x2720 [ 1799.764698] ? lock_acquire+0x170/0x3f0 [ 1799.768787] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1799.773771] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1799.778292] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1799.783786] alloc_pages_current+0x155/0x260 [ 1799.788302] ion_page_pool_alloc+0x118/0x1b0 [ 1799.792733] ion_system_heap_allocate+0x133/0x8c0 [ 1799.797905] ? _raw_spin_unlock+0x29/0x40 [ 1799.802065] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1799.807009] ? ion_system_contig_heap_create+0x130/0x130 [ 1799.812473] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1799.817504] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1799.822653] ion_alloc+0x27a/0x810 [ 1799.826221] ? ion_dma_buf_release+0x40/0x40 [ 1799.832049] ? __might_fault+0x177/0x1b0 [ 1799.836145] ion_ioctl+0xea/0x1f0 [ 1799.839616] ? ion_query_heaps+0x360/0x360 [ 1799.844133] ? ion_query_heaps+0x360/0x360 [ 1799.849518] do_vfs_ioctl+0x75a/0xff0 [ 1799.853860] ? ioctl_preallocate+0x1a0/0x1a0 [ 1799.858540] ? lock_downgrade+0x740/0x740 [ 1799.862882] ? __fget+0x225/0x360 [ 1799.866430] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.870525] ? security_file_ioctl+0x83/0xb0 [ 1799.875125] SyS_ioctl+0x7f/0xb0 [ 1799.879070] ? do_vfs_ioctl+0xff0/0xff0 [ 1799.883260] do_syscall_64+0x1d5/0x640 [ 1799.887165] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1799.892486] RIP: 0033:0x466459 [ 1799.895692] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1799.903431] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1799.910724] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1799.917995] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1799.925268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1799.932542] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1799.943022] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1799.943664] warn_alloc_show_mem: 1 callbacks suppressed [ 1799.943667] Mem-Info: [ 1799.963561] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1799.966990] active_anon:14715 inactive_anon:24258 isolated_anon:0 [ 1799.966990] active_file:42 inactive_file:0 isolated_file:0 [ 1799.966990] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1799.966990] slab_reclaimable:12874 slab_unreclaimable:118781 [ 1799.966990] mapped:52619 shmem:25364 pagetables:828 bounce:0 [ 1799.966990] free:13909 free_pcp:30 free_cma:0 [ 1800.002087] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1800.013707] Node 0 active_anon:57104kB inactive_anon:80692kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1800.026538] rsyslogd cpuset= [ 1800.046296] Node 1 active_anon:1856kB inactive_anon:16336kB active_file:44kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69100kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1800.070605] CPU: 0 PID: 19668 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1800.081346] / [ 1800.084334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.084339] mems_allowed=0-1 [ 1800.092844] Node 0 [ 1800.095381] Call Trace: [ 1800.098489] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.100708] dump_stack+0x1b2/0x281 [ 1800.100721] warn_alloc.cold+0x96/0x1cc [ 1800.100733] ? zone_watermark_ok_safe+0x220/0x220 [ 1800.100742] ? usleep_range+0x130/0x130 [ 1800.100750] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1800.100762] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1800.100772] ? run_timer_softirq+0x5a0/0x5a0 [ 1800.100788] __alloc_pages_nodemask+0x2127/0x2720 [ 1800.105535] lowmem_reserve[]: [ 1800.128855] ? lock_acquire+0x170/0x3f0 [ 1800.128871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1800.128881] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1800.128897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1800.128915] alloc_pages_current+0x155/0x260 [ 1800.128925] ion_page_pool_alloc+0x118/0x1b0 [ 1800.128934] ion_system_heap_allocate+0x133/0x8c0 [ 1800.128943] ? ion_alloc+0x187/0x810 [ 1800.128953] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1800.128961] ? ion_system_contig_heap_create+0x130/0x130 [ 1800.128969] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1800.128978] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1800.128986] ion_alloc+0x204/0x810 [ 1800.128998] ? ion_dma_buf_release+0x40/0x40 [ 1800.129010] ? __might_fault+0x177/0x1b0 [ 1800.129021] ion_ioctl+0xea/0x1f0 [ 1800.129030] ? ion_query_heaps+0x360/0x360 [ 1800.129042] ? ion_query_heaps+0x360/0x360 [ 1800.129052] do_vfs_ioctl+0x75a/0xff0 [ 1800.129064] ? ioctl_preallocate+0x1a0/0x1a0 [ 1800.129071] ? lock_downgrade+0x740/0x740 [ 1800.129083] ? __fget+0x225/0x360 [ 1800.129093] ? do_vfs_ioctl+0xff0/0xff0 [ 1800.129104] ? security_file_ioctl+0x83/0xb0 [ 1800.129113] SyS_ioctl+0x7f/0xb0 [ 1800.129119] ? do_vfs_ioctl+0xff0/0xff0 [ 1800.129130] do_syscall_64+0x1d5/0x640 [ 1800.129145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1800.129152] RIP: 0033:0x466459 [ 1800.129157] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1800.129166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1800.129171] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1800.129175] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1800.129180] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1800.129185] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1800.342164] CPU: 1 PID: 19821 Comm: rsyslogd Not tainted 4.14.231-syzkaller #0 [ 1800.349738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.359093] Call Trace: [ 1800.361693] dump_stack+0x1b2/0x281 [ 1800.365326] dump_header+0x178/0x82f [ 1800.369068] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1800.374174] ? ___ratelimit+0x2cd/0x530 [ 1800.378152] oom_kill_process.cold+0x10/0xa40 [ 1800.382653] out_of_memory+0xe3e/0x1190 [ 1800.386625] ? oom_killer_disable+0x1c0/0x1c0 [ 1800.391121] ? mutex_trylock+0x152/0x1a0 [ 1800.395178] __alloc_pages_nodemask+0x23e1/0x2720 [ 1800.400028] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1800.404880] alloc_pages_current+0x155/0x260 [ 1800.409296] filemap_fault+0x11a1/0x1ad0 [ 1800.413379] ext4_filemap_fault+0x84/0xb0 [ 1800.417524] __do_fault+0xfa/0x380 [ 1800.421062] __handle_mm_fault+0x2497/0x4620 [ 1800.425469] ? vm_insert_page+0x7c0/0x7c0 [ 1800.429609] ? __fd_install+0x227/0x5c0 [ 1800.433591] ? mark_held_locks+0xa6/0xf0 [ 1800.437656] handle_mm_fault+0x455/0x9c0 [ 1800.441718] __do_page_fault+0x549/0xad0 [ 1800.445869] ? spurious_fault+0x640/0x640 [ 1800.450037] ? do_page_fault+0x60/0x500 [ 1800.454007] ? page_fault+0x2f/0x50 [ 1800.457631] page_fault+0x45/0x50 [ 1800.461074] RIP: 0001:0x7ffe6051b3e0 [ 1800.464954] RSP: 14842460:0000000000000008 EFLAGS: 7f78c8e49ea0 [ 1800.467649] Mem-Info: [ 1800.477682] active_anon:14740 inactive_anon:24257 isolated_anon:0 [ 1800.477682] active_file:16 inactive_file:440 isolated_file:0 [ 1800.477682] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1800.477682] slab_reclaimable:12894 slab_unreclaimable:118807 [ 1800.477682] mapped:52830 shmem:25364 pagetables:831 bounce:0 [ 1800.477682] free:86876 free_pcp:153 free_cma:0 [ 1800.512433] Node 0 active_anon:57104kB inactive_anon:80692kB active_file:20kB inactive_file:892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141720kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1800.541594] Node 1 active_anon:1856kB inactive_anon:16336kB active_file:44kB inactive_file:1168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69700kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1800.570664] Node 0 DMA free:11476kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.598289] 0 2717 2718 2718 2718 [ 1800.604322] Node 0 DMA32 free:89624kB min:36200kB low:45248kB high:54296kB active_anon:57104kB inactive_anon:80692kB active_file:20kB inactive_file:2092kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2664kB bounce:0kB free_pcp:396kB local_pcp:224kB free_cma:0kB [ 1800.640267] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1800.647049] Node 0 DMA32 free:121008kB min:36200kB low:45248kB high:54296kB active_anon:57104kB inactive_anon:80692kB active_file:20kB inactive_file:2992kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2664kB bounce:0kB free_pcp:500kB local_pcp:328kB free_cma:0kB [ 1800.690140] lowmem_reserve[]: 0 0 0 0 0 [ 1800.695183] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.731721] lowmem_reserve[]: 0 0 0 0 0 [ 1800.740095] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.775126] Bluetooth: hci2 command 0x0419 tx timeout [ 1800.780618] lowmem_reserve[]: 0 0 0 0 0 [ 1800.784629] Node 1 Normal free:571964kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:16336kB active_file:44kB inactive_file:1168kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:660kB bounce:0kB free_pcp:752kB local_pcp:120kB free_cma:0kB [ 1800.820789] lowmem_reserve[]: 0 0 0 0 0 [ 1800.824810] Node 1 Normal free:572064kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:16336kB active_file:644kB inactive_file:352kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:660kB bounce:0kB free_pcp:808kB local_pcp:120kB free_cma:0kB [ 1800.880717] lowmem_reserve[]: 0 0 0 0 0 [ 1800.884746] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 13*64kB (UE) 6*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11920kB [ 1800.900252] lowmem_reserve[]: 0 0 0 0 0 [ 1800.904323] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 13*64kB (UE) 6*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11920kB [ 1800.919946] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1800.930716] Node 0 DMA32: 20*4kB (UME) 295*8kB (UE) 135*16kB (UME) 68*32kB (UME) 477*64kB (UME) 135*128kB (UME) 15*256kB (UE) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 61496kB [ 1800.950802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1800.955759] team0: Port device team_slave_0 added [ 1800.961603] Node 0 DMA32: 20*4kB (UME) 239*8kB (UE) 135*16kB (UME) 66*32kB (UME) 426*64kB (UME) 135*128kB (UME) 15*256kB (UE) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 57720kB [ 1800.981504] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1801.001124] Node 1 Normal: 2317*4kB (UME) 30*8kB (UME) 78*16kB (UME) 67*32kB (UME) 4580*64kB (UME) 165*128kB (UME) 17*256kB (UME) 10*512kB (UM) 156*1024kB (UM) 37*2048kB (U) 0*4096kB = 572132kB [ 1801.004818] team0: Port device team_slave_1 added [ 1801.030672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1801.050642] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.059502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.078741] Node 1 Normal: 54*4kB (UME) 30*8kB (UME) 78*16kB (UME) 66*32kB (UME) 4580*64kB (UME) 165*128kB (UME) 17*256kB (UME) 10*512kB (UM) 156*1024kB (UM) 37*2048kB (U) 0*4096kB = 563048kB [ 1801.110709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.120000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.129774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.129801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.144971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.170881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.190691] 27093 total pagecache pages [ 1801.200143] 0 pages in swap cache [ 1801.203756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.230651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.239289] 27093 total pagecache pages [ 1801.243646] Swap cache stats: add 0, delete 0, find 0/0 [ 1801.249023] Free swap = 0kB [ 1801.260641] Total swap = 0kB [ 1801.262213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.263693] 2097051 pages RAM [ 1801.277256] 0 pages in swap cache [ 1801.280752] Swap cache stats: add 0, delete 0, find 0/0 [ 1801.286141] Free swap = 0kB [ 1801.289162] Total swap = 0kB [ 1801.310636] 2097051 pages RAM [ 1801.312440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.313761] 0 pages HighMem/MovableOnly [ 1801.319985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.324005] 0 pages HighMem/MovableOnly [ 1801.324010] 363849 pages reserved [ 1801.324014] 0 pages cma reserved [ 1801.345594] 363849 pages reserved [ 1801.403266] 0 pages cma reserved [ 1801.419338] Out of memory (oom_kill_allocating_task): Kill process 19821 (rsyslogd) score 0 or sacrifice child [ 1801.434313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 07:58:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1801.461778] Killed process 19821 (rsyslogd) total-vm:25752kB, anon-rss:264kB, file-rss:4kB, shmem-rss:0kB [ 1801.475282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1801.491470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 07:58:17 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xd3, 0x2}) [ 1801.537923] oom_reaper: reaped process 19668 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1801.577567] device hsr_slave_0 entered promiscuous mode [ 1801.584620] device hsr_slave_1 entered promiscuous mode 07:58:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x23, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010101}, 0x3, 0x3, 0x4, 0x3}}, 0x26) [ 1801.622501] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1801.636617] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1801.646269] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL 07:58:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) socket$l2tp(0x2, 0x2, 0x73) [ 1801.760406] systemd[1]: Failed to start System Logging Service. [ 1801.967961] oom_reaper: reaped process 19768 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1802.142206] systemd-cgroups invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1802.173078] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1802.191348] CPU: 0 PID: 19858 Comm: systemd-cgroups Not tainted 4.14.231-syzkaller #0 [ 1802.199354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.208712] Call Trace: [ 1802.211318] dump_stack+0x1b2/0x281 [ 1802.214950] dump_header+0x178/0x82f [ 1802.218769] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1802.223875] ? ___ratelimit+0x2cd/0x530 [ 1802.227848] oom_kill_process.cold+0x10/0xa40 [ 1802.232357] out_of_memory+0xe3e/0x1190 [ 1802.236344] ? oom_killer_disable+0x1c0/0x1c0 [ 1802.240842] ? mutex_trylock+0x152/0x1a0 [ 1802.244905] __alloc_pages_nodemask+0x23e1/0x2720 [ 1802.249753] ? lock_acquire+0x170/0x3f0 [ 1802.253720] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1802.258753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.263601] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1802.268613] ? __lock_acquire+0x5fc/0x3f20 [ 1802.272871] alloc_pages_vma+0xd2/0x6d0 [ 1802.276850] __handle_mm_fault+0xe4f/0x4620 [ 1802.281168] ? vm_insert_page+0x7c0/0x7c0 [ 1802.285314] ? vm_mmap_pgoff+0x168/0x1a0 [ 1802.289386] ? mark_held_locks+0xa6/0xf0 [ 1802.293447] handle_mm_fault+0x455/0x9c0 [ 1802.297592] __do_page_fault+0x549/0xad0 [ 1802.301650] ? spurious_fault+0x640/0x640 [ 1802.305789] ? do_page_fault+0x60/0x500 [ 1802.309751] ? page_fault+0x2f/0x50 [ 1802.313367] page_fault+0x45/0x50 [ 1802.316821] RIP: 0002:0x801 [ 1802.319736] RSP: 1f2f6000:00007ffd0e37f600 EFLAGS: 7ffd0e37f6e8 [ 1802.321256] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1802.341115] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1802.360647] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1802.365794] syz-executor.3 cpuset=/ [ 1802.365825] CPU: 0 PID: 19857 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1802.365834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.369583] mems_allowed=0-1 [ 1802.377338] Call Trace: [ 1802.377360] dump_stack+0x1b2/0x281 [ 1802.377373] warn_alloc.cold+0x96/0x1cc [ 1802.377384] ? zone_watermark_ok_safe+0x220/0x220 [ 1802.377406] __alloc_pages_nodemask+0x2127/0x2720 [ 1802.377423] ? lock_acquire+0x170/0x3f0 [ 1802.377437] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.377454] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1802.377465] ? __mutex_unlock_slowpath+0x75/0x770 [ 1802.377479] alloc_pages_current+0x155/0x260 [ 1802.377491] ion_page_pool_alloc+0x118/0x1b0 [ 1802.377511] ion_system_heap_allocate+0x133/0x8c0 [ 1802.442548] ? ion_alloc+0x187/0x810 [ 1802.446278] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1802.451737] ? ion_system_contig_heap_create+0x130/0x130 [ 1802.457186] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1802.462199] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1802.467041] ion_alloc+0x204/0x810 [ 1802.470577] ? ion_dma_buf_release+0x40/0x40 [ 1802.474985] ? __might_fault+0x177/0x1b0 [ 1802.479049] ion_ioctl+0xea/0x1f0 [ 1802.482528] ? ion_query_heaps+0x360/0x360 [ 1802.486764] ? ion_query_heaps+0x360/0x360 [ 1802.490995] do_vfs_ioctl+0x75a/0xff0 [ 1802.494801] ? ioctl_preallocate+0x1a0/0x1a0 [ 1802.499217] ? lock_downgrade+0x740/0x740 [ 1802.503370] ? __fget+0x225/0x360 [ 1802.506819] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.510799] ? security_file_ioctl+0x83/0xb0 [ 1802.515205] SyS_ioctl+0x7f/0xb0 [ 1802.518576] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.522560] do_syscall_64+0x1d5/0x640 [ 1802.526451] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1802.532713] RIP: 0033:0x466459 [ 1802.535928] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1802.543652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1802.551019] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1802.558508] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1802.565963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1802.573412] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1802.576782] Mem-Info: [ 1802.584379] CPU: 1 PID: 19863 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1802.592301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.601859] Call Trace: [ 1802.604463] dump_stack+0x1b2/0x281 [ 1802.608106] warn_alloc.cold+0x96/0x1cc [ 1802.612126] ? zone_watermark_ok_safe+0x220/0x220 [ 1802.617085] __alloc_pages_nodemask+0x2127/0x2720 [ 1802.621966] ? lock_acquire+0x170/0x3f0 [ 1802.625964] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.631009] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1802.636474] ? __mutex_unlock_slowpath+0x75/0x770 [ 1802.641340] alloc_pages_current+0x155/0x260 [ 1802.645757] ion_page_pool_alloc+0x118/0x1b0 [ 1802.650175] ion_system_heap_allocate+0x133/0x8c0 [ 1802.655163] ? ion_alloc+0x187/0x810 [ 1802.658884] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1802.664355] ? ion_system_contig_heap_create+0x130/0x130 [ 1802.669821] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1802.675681] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1802.680544] ion_alloc+0x204/0x810 [ 1802.684095] ? ion_dma_buf_release+0x40/0x40 [ 1802.688511] ? __might_fault+0x177/0x1b0 [ 1802.692575] ion_ioctl+0xea/0x1f0 [ 1802.696031] ? ion_query_heaps+0x360/0x360 [ 1802.700291] ? ion_query_heaps+0x360/0x360 [ 1802.704554] do_vfs_ioctl+0x75a/0xff0 [ 1802.708382] ? ioctl_preallocate+0x1a0/0x1a0 [ 1802.712829] ? lock_downgrade+0x740/0x740 [ 1802.717001] ? __fget+0x225/0x360 [ 1802.720475] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.724497] ? security_file_ioctl+0x83/0xb0 [ 1802.728947] SyS_ioctl+0x7f/0xb0 [ 1802.732422] ? do_vfs_ioctl+0xff0/0xff0 [ 1802.736431] do_syscall_64+0x1d5/0x640 [ 1802.740332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1802.745816] RIP: 0033:0x466459 [ 1802.749013] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1802.756729] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1802.764004] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1802.771288] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1802.778996] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1802.786268] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1802.804288] active_anon:14726 inactive_anon:24257 isolated_anon:0 [ 1802.804288] active_file:79 inactive_file:420 isolated_file:8 [ 1802.804288] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1802.804288] slab_reclaimable:12941 slab_unreclaimable:122678 [ 1802.804288] mapped:53006 shmem:25364 pagetables:830 bounce:0 [ 1802.804288] free:110842 free_pcp:425 free_cma:0 [ 1802.865620] warn_alloc_show_mem: 1 callbacks suppressed [ 1802.865625] Mem-Info: [ 1802.880613] Node 0 active_anon:56976kB inactive_anon:80692kB active_file:172kB inactive_file:292kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:141912kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1802.886122] active_anon:14726 inactive_anon:24257 isolated_anon:0 [ 1802.886122] active_file:79 inactive_file:361 isolated_file:8 [ 1802.886122] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1802.886122] slab_reclaimable:12941 slab_unreclaimable:122678 [ 1802.886122] mapped:53006 shmem:25364 pagetables:830 bounce:0 [ 1802.886122] free:86502 free_pcp:428 free_cma:0 [ 1802.940669] Node 1 active_anon:1928kB inactive_anon:16336kB active_file:144kB inactive_file:1152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70112kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1803.001564] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.061071] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1803.066241] Node 0 DMA32 free:44960kB min:36200kB low:45248kB high:54296kB active_anon:56976kB inactive_anon:80692kB active_file:260kB inactive_file:668kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2548kB bounce:0kB free_pcp:1040kB local_pcp:308kB free_cma:0kB [ 1803.130612] lowmem_reserve[]: 0 0 0 0 0 [ 1803.134641] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.188082] Node 0 active_anon:56976kB inactive_anon:80692kB active_file:188kB inactive_file:568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141924kB dirty:16kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1803.264474] lowmem_reserve[]: 0 0 0 0 0 [ 1803.268504] Node 1 Normal free:34724kB min:53696kB low:67120kB high:80544kB active_anon:1928kB inactive_anon:16336kB active_file:940kB inactive_file:1080kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:772kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1803.274119] Node 1 active_anon:1928kB inactive_anon:16336kB active_file:828kB inactive_file:780kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:70988kB dirty:16kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1803.305944] lowmem_reserve[]: 0 0 0 0 0 [ 1803.334437] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 12*32kB (UE) 1*64kB (E) 2*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1803.353822] Node 0 DMA32: 465*4kB (UME) 732*8kB (UME) 311*16kB (UME) 326*32kB (UME) 86*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28628kB [ 1803.369159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1803.384380] Node 1 Normal: 832*4kB (UME) 752*8kB (UM) 665*16kB (UME) 320*32kB (UME) 369*64kB (UM) 20*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (U) 0*4096kB = 62288kB [ 1803.406521] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.454059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.473449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.499373] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1803.505339] lowmem_reserve[]: [ 1803.517614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.530609] 0 2717 2718 2718 2718 [ 1803.534177] Node 0 DMA32 free:20364kB min:36200kB low:45248kB high:54296kB active_anon:56976kB inactive_anon:80692kB active_file:188kB inactive_file:568kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2548kB bounce:0kB free_pcp:268kB local_pcp:104kB free_cma:0kB [ 1803.537789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.579179] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1803.589958] CPU: 1 PID: 19870 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1803.597874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.607241] Call Trace: [ 1803.609871] dump_stack+0x1b2/0x281 [ 1803.613504] warn_alloc.cold+0x96/0x1cc [ 1803.617604] ? zone_watermark_ok_safe+0x220/0x220 [ 1803.622482] __alloc_pages_nodemask+0x2127/0x2720 [ 1803.622519] lowmem_reserve[]: [ 1803.627330] ? _raw_spin_unlock_irq+0x24/0x80 [ 1803.627346] ? lock_acquire+0x170/0x3f0 [ 1803.627361] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1803.641415] 0 [ 1803.643776] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1803.643789] ? __mutex_unlock_slowpath+0x75/0x770 [ 1803.650007] 0 [ 1803.651027] alloc_pages_current+0x155/0x260 [ 1803.651043] ion_page_pool_alloc+0x118/0x1b0 [ 1803.651052] ion_system_heap_allocate+0x133/0x8c0 [ 1803.651063] ? ion_alloc+0x187/0x810 [ 1803.658138] 0 [ 1803.662096] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1803.662107] ? ion_system_contig_heap_create+0x130/0x130 [ 1803.662116] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1803.662129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1803.662139] ion_alloc+0x204/0x810 [ 1803.680667] 0 [ 1803.684265] ? ion_dma_buf_release+0x40/0x40 [ 1803.684279] ? copy_user_generic_unrolled+0x89/0xc0 [ 1803.684296] ion_ioctl+0xea/0x1f0 [ 1803.700619] 0 [ 1803.700831] ? ion_query_heaps+0x360/0x360 [ 1803.706247] ? ion_query_heaps+0x360/0x360 [ 1803.721796] Node 0 [ 1803.725097] do_vfs_ioctl+0x75a/0xff0 [ 1803.725111] ? ioctl_preallocate+0x1a0/0x1a0 [ 1803.735948] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.739975] ? lock_downgrade+0x740/0x740 [ 1803.739990] ? __fget+0x225/0x360 [ 1803.772501] ? do_vfs_ioctl+0xff0/0xff0 [ 1803.776477] ? security_file_ioctl+0x83/0xb0 [ 1803.780887] SyS_ioctl+0x7f/0xb0 [ 1803.784251] ? do_vfs_ioctl+0xff0/0xff0 [ 1803.788228] do_syscall_64+0x1d5/0x640 [ 1803.792118] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1803.797324] RIP: 0033:0x466459 [ 1803.800510] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1803.808245] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1803.815537] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1803.822810] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1803.826160] lowmem_reserve[]: [ 1803.830090] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1803.830096] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1803.853797] 25451 total pagecache pages [ 1803.863185] 0 pages in swap cache [ 1803.866763] Swap cache stats: add 0, delete 0, find 0/0 [ 1803.878410] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1803.890540] Free swap = 0kB [ 1803.893611] Total swap = 0kB [ 1803.896865] 2097051 pages RAM [ 1803.899958] 0 pages HighMem/MovableOnly [ 1803.900626] 0 0 0 0 0 [ 1803.904099] syz-executor.5 cpuset= [ 1803.906444] Node 1 [ 1803.906446] / mems_allowed=0-1 [ 1803.910030] Normal free:34640kB min:53696kB low:67120kB high:80544kB active_anon:1928kB inactive_anon:16336kB active_file:84kB inactive_file:32kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:772kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 1803.912339] 363849 pages reserved [ 1803.912348] 0 pages cma reserved [ 1803.940613] lowmem_reserve[]: [ 1803.943913] CPU: 1 PID: 19668 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1803.947194] 0 [ 1803.950554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.950558] Call Trace: [ 1803.950580] dump_stack+0x1b2/0x281 [ 1803.950593] warn_alloc.cold+0x96/0x1cc [ 1803.950605] ? zone_watermark_ok_safe+0x220/0x220 [ 1803.950625] __alloc_pages_nodemask+0x2127/0x2720 [ 1803.950635] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1803.950644] ? finish_task_switch+0x178/0x610 [ 1803.950652] ? finish_task_switch+0x14d/0x610 [ 1803.950666] ? lock_acquire+0x170/0x3f0 [ 1803.950680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1803.950697] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1803.950712] ? __mutex_unlock_slowpath+0x75/0x770 [ 1803.980614] 0 [ 1803.983487] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1803.988338] 0 [ 1803.993185] alloc_pages_current+0x155/0x260 [ 1803.993200] ion_page_pool_alloc+0x118/0x1b0 [ 1803.993209] ion_system_heap_allocate+0x133/0x8c0 [ 1803.993225] ? _raw_spin_unlock+0x29/0x40 [ 1804.040610] 0 [ 1804.042744] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1804.047745] 0 [ 1804.052022] ? ion_system_contig_heap_create+0x130/0x130 [ 1804.052033] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1804.052045] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1804.052056] ion_alloc+0x27a/0x810 [ 1804.071952] ? ion_dma_buf_release+0x40/0x40 [ 1804.076775] Node 0 [ 1804.080313] ? __might_fault+0x177/0x1b0 [ 1804.090986] ion_ioctl+0xea/0x1f0 [ 1804.094455] ? ion_query_heaps+0x360/0x360 [ 1804.098717] ? ion_query_heaps+0x360/0x360 [ 1804.102955] do_vfs_ioctl+0x75a/0xff0 [ 1804.106765] ? ioctl_preallocate+0x1a0/0x1a0 [ 1804.110610] DMA: [ 1804.111172] ? lock_downgrade+0x740/0x740 [ 1804.111179] 2*4kB [ 1804.113234] ? __fget+0x225/0x360 [ 1804.117394] (UE) [ 1804.119554] ? do_vfs_ioctl+0xff0/0xff0 [ 1804.129060] ? security_file_ioctl+0x83/0xb0 [ 1804.133481] SyS_ioctl+0x7f/0xb0 [ 1804.136850] ? do_vfs_ioctl+0xff0/0xff0 [ 1804.140833] do_syscall_64+0x1d5/0x640 [ 1804.145180] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1804.150385] RIP: 0033:0x466459 [ 1804.150609] 1*8kB [ 1804.153684] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.155866] (U) [ 1804.163570] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1804.163576] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1804.163580] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1804.163585] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1804.163589] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1804.165643] Out of memory (oom_kill_allocating_task): Kill process 19858 (systemd-cgroups) score 0 or sacrifice child [ 1804.214901] Killed process 19858 (systemd-cgroups) total-vm:16948kB, anon-rss:88kB, file-rss:4kB, shmem-rss:0kB [ 1804.228552] oom_reaper: reaped process 19858 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1804.230122] warn_alloc_show_mem: 1 callbacks suppressed [ 1804.230126] Mem-Info: [ 1804.238827] 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1804.238891] Node 0 DMA32: 2009*4kB (UME) 546*8kB (UME) 188*16kB (UME) 111*32kB (UME) 414*64kB (UM) 16*128kB (UM) 2*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 49044kB [ 1804.238964] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 1804.249446] active_anon:14726 inactive_anon:24257 isolated_anon:0 [ 1804.249446] active_file:16 inactive_file:298 isolated_file:0 [ 1804.249446] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1804.249446] slab_reclaimable:12948 slab_unreclaimable:122254 [ 1804.249446] mapped:52859 shmem:25364 pagetables:830 bounce:0 [ 1804.249446] free:36378 free_pcp:487 free_cma:0 [ 1804.310616] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1804.350701] Node 1 Normal: 2*4kB (ME) 2*8kB (UM) 39*16kB (UME) 163*32kB (UME) 821*64kB (UM) 145*128kB (UME) 36*256kB (UME) 6*512kB (U) 19*1024kB (U) 0*2048kB 0*4096kB = 108712kB [ 1804.390651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.399520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.450622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.459675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.504771] Node 0 active_anon:57176kB inactive_anon:80692kB active_file:524kB inactive_file:2740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1804.510613] 26879 total pagecache pages [ 1804.580621] 0 pages in swap cache [ 1804.584130] Swap cache stats: add 0, delete 0, find 0/0 [ 1804.589490] Free swap = 0kB [ 1804.620619] Total swap = 0kB [ 1804.621099] Node 1 active_anon:1528kB inactive_anon:16336kB active_file:1240kB inactive_file:1436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70616kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1804.623665] 2097051 pages RAM [ 1804.720612] 0 pages HighMem/MovableOnly [ 1804.724620] 363849 pages reserved [ 1804.728078] 0 pages cma reserved [ 1804.740614] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.784037] systemd[1]: rsyslog.service: Unit entered failed state. [ 1804.797612] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1804.879418] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1804.906009] Node 0 DMA32 free:24300kB min:36200kB low:45248kB high:54296kB active_anon:56976kB inactive_anon:80692kB active_file:488kB inactive_file:368kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2548kB bounce:0kB free_pcp:520kB local_pcp:292kB free_cma:0kB [ 1804.973667] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1804.997751] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1805.004903] lowmem_reserve[]: 0 0 0 0 0 [ 1805.008911] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.035040] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1805.040643] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1805.056710] CPU: 1 PID: 17800 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1805.066720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.076071] Call Trace: [ 1805.078286] syz-executor.4 cpuset=/ [ 1805.078682] dump_stack+0x1b2/0x281 [ 1805.078696] dump_header+0x178/0x82f [ 1805.089627] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1805.090586] mems_allowed=0-1 [ 1805.094740] ? ___ratelimit+0x2cd/0x530 [ 1805.101861] oom_kill_process.cold+0x10/0xa40 [ 1805.106381] out_of_memory+0xe3e/0x1190 [ 1805.110355] ? oom_killer_disable+0x1c0/0x1c0 [ 1805.114871] ? mutex_trylock+0x152/0x1a0 [ 1805.119532] __alloc_pages_nodemask+0x23e1/0x2720 [ 1805.124414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1805.129277] alloc_pages_current+0x155/0x260 [ 1805.133774] filemap_fault+0x11a1/0x1ad0 [ 1805.137832] ext4_filemap_fault+0x84/0xb0 [ 1805.142000] __do_fault+0xfa/0x380 [ 1805.145550] __handle_mm_fault+0x2497/0x4620 [ 1805.149958] ? vm_insert_page+0x7c0/0x7c0 [ 1805.154120] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1805.158542] ? nanosleep_copyout+0x100/0x100 [ 1805.162958] ? mark_held_locks+0xa6/0xf0 [ 1805.167035] handle_mm_fault+0x455/0x9c0 [ 1805.171125] __do_page_fault+0x549/0xad0 [ 1805.175201] ? spurious_fault+0x640/0x640 [ 1805.179861] ? do_page_fault+0x60/0x500 [ 1805.183846] ? page_fault+0x2f/0x50 [ 1805.187462] page_fault+0x45/0x50 [ 1805.192381] RIP: 1b7fdb:0x6 [ 1805.195307] RSP: 0042:00007fff70018fac EFLAGS: 00000000 [ 1805.195332] CPU: 0 PID: 19768 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1805.208569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.216776] syz-executor.5 cpuset= [ 1805.218177] Call Trace: [ 1805.218187] / [ 1805.221829] dump_stack+0x1b2/0x281 [ 1805.229735] warn_alloc.cold+0x96/0x1cc [ 1805.233723] ? zone_watermark_ok_safe+0x220/0x220 [ 1805.238588] ? usleep_range+0x130/0x130 [ 1805.242566] ? try_to_free_pages+0x23f/0x6e0 [ 1805.246989] ? _find_next_bit+0xdb/0x100 [ 1805.249533] mems_allowed=0-1 [ 1805.251396] ? run_timer_softirq+0x5a0/0x5a0 [ 1805.251413] __alloc_pages_nodemask+0x2127/0x2720 [ 1805.251430] ? lock_acquire+0x170/0x3f0 [ 1805.251450] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1805.251461] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1805.251478] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1805.251497] alloc_pages_current+0x155/0x260 [ 1805.251512] ion_page_pool_alloc+0x118/0x1b0 [ 1805.293376] ion_system_heap_allocate+0x133/0x8c0 [ 1805.298226] ? ion_alloc+0x187/0x810 [ 1805.301942] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1805.307402] ? ion_system_contig_heap_create+0x130/0x130 [ 1805.312881] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1805.317905] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1805.322753] ion_alloc+0x204/0x810 [ 1805.326302] ? ion_dma_buf_release+0x40/0x40 [ 1805.330718] ? __might_fault+0x177/0x1b0 [ 1805.334786] ion_ioctl+0xea/0x1f0 [ 1805.338239] ? ion_query_heaps+0x360/0x360 [ 1805.342479] ? ion_query_heaps+0x360/0x360 [ 1805.346715] do_vfs_ioctl+0x75a/0xff0 [ 1805.350524] ? ioctl_preallocate+0x1a0/0x1a0 [ 1805.354723] lowmem_reserve[]: [ 1805.354926] ? lock_downgrade+0x740/0x740 [ 1805.354934] 0 [ 1805.358030] ? __fget+0x225/0x360 [ 1805.367424] ? do_vfs_ioctl+0xff0/0xff0 [ 1805.371410] ? security_file_ioctl+0x83/0xb0 [ 1805.375822] SyS_ioctl+0x7f/0xb0 [ 1805.379181] ? do_vfs_ioctl+0xff0/0xff0 [ 1805.383158] do_syscall_64+0x1d5/0x640 [ 1805.387050] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1805.392236] RIP: 0033:0x466459 [ 1805.395421] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.403139] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1805.406955] 0 [ 1805.410432] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1805.410440] 0 [ 1805.412227] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1805.412232] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1805.412237] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1805.436857] warn_alloc_show_mem: 1 callbacks suppressed [ 1805.436861] Mem-Info: [ 1805.450530] CPU: 1 PID: 19668 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1805.459531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.467958] active_anon:14578 inactive_anon:24257 isolated_anon:0 [ 1805.467958] active_file:17 inactive_file:15 isolated_file:0 [ 1805.467958] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1805.467958] slab_reclaimable:12903 slab_unreclaimable:123791 [ 1805.467958] mapped:52746 shmem:25364 pagetables:792 bounce:0 [ 1805.467958] free:13790 free_pcp:5 free_cma:0 [ 1805.468903] Call Trace: [ 1805.502287] Node 0 active_anon:56948kB inactive_anon:80692kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.504830] dump_stack+0x1b2/0x281 [ 1805.532545] Node 1 active_anon:1364kB inactive_anon:16336kB active_file:48kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69564kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.536110] warn_alloc.cold+0x96/0x1cc [ 1805.563397] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.567366] ? zone_watermark_ok_safe+0x220/0x220 [ 1805.567380] ? usleep_range+0x130/0x130 [ 1805.593539] lowmem_reserve[]: [ 1805.598336] ? queue_work_on+0x10d/0x1d0 [ 1805.602350] 0 [ 1805.605407] ? _find_next_bit+0xdb/0x100 [ 1805.609554] 2717 [ 1805.611373] ? run_timer_softirq+0x5a0/0x5a0 [ 1805.611390] __alloc_pages_nodemask+0x2127/0x2720 [ 1805.611409] ? lock_acquire+0x170/0x3f0 [ 1805.611424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1805.615500] 2718 [ 1805.617650] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1805.622128] 2718 [ 1805.626939] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1805.630949] 2718 [ 1805.635759] ? alloc_pages_current+0x73/0x260 [ 1805.642405] alloc_pages_current+0x155/0x260 [ 1805.642420] ion_page_pool_alloc+0x118/0x1b0 [ 1805.642429] ion_system_heap_allocate+0x133/0x8c0 [ 1805.642442] ? _raw_spin_unlock+0x29/0x40 [ 1805.642457] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1805.644706] Node 0 [ 1805.650265] ? ion_system_contig_heap_create+0x130/0x130 [ 1805.652391] DMA32 free:17804kB min:36200kB low:45248kB high:54296kB active_anon:56948kB inactive_anon:80692kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2540kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1805.656814] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1805.661275] lowmem_reserve[]: [ 1805.666166] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1805.671055] 0 [ 1805.675170] ion_alloc+0x27a/0x810 [ 1805.680336] 0 [ 1805.682666] ? ion_dma_buf_release+0x40/0x40 [ 1805.682679] ? __might_fault+0x177/0x1b0 [ 1805.682690] ion_ioctl+0xea/0x1f0 [ 1805.682700] ? ion_query_heaps+0x360/0x360 [ 1805.688229] 0 [ 1805.717741] ? ion_query_heaps+0x360/0x360 [ 1805.717753] do_vfs_ioctl+0x75a/0xff0 [ 1805.717766] ? ioctl_preallocate+0x1a0/0x1a0 [ 1805.717775] ? lock_downgrade+0x740/0x740 [ 1805.717789] ? __fget+0x225/0x360 [ 1805.722867] 0 [ 1805.725930] ? do_vfs_ioctl+0xff0/0xff0 [ 1805.730798] 0 [ 1805.732565] ? security_file_ioctl+0x83/0xb0 [ 1805.737890] SyS_ioctl+0x7f/0xb0 [ 1805.742332] Node 0 [ 1805.746345] ? do_vfs_ioctl+0xff0/0xff0 [ 1805.749874] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.754121] do_syscall_64+0x1d5/0x640 [ 1805.754138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1805.755919] lowmem_reserve[]: [ 1805.760137] RIP: 0033:0x466459 [ 1805.763961] 0 [ 1805.768325] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.772528] 0 [ 1805.775928] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1805.775936] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1805.777717] 0 [ 1805.781670] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1805.781676] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1805.781680] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1805.788857] 0 [ 1805.810919] 0 [ 1805.829180] 0 [ 1805.850366] 0 [ 1805.883856] Mem-Info: [ 1805.894727] Node 1 [ 1805.895756] Node 1 [ 1805.896599] Normal free:26396kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:16336kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.898385] Normal free:26396kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:16336kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.900154] lowmem_reserve[]: [ 1805.906786] active_anon:14578 inactive_anon:24257 isolated_anon:0 [ 1805.906786] active_file:17 inactive_file:15 isolated_file:0 [ 1805.906786] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1805.906786] slab_reclaimable:12903 slab_unreclaimable:123791 [ 1805.906786] mapped:52746 shmem:25364 pagetables:792 bounce:0 [ 1805.906786] free:13790 free_pcp:5 free_cma:0 [ 1805.918851] 0 [ 1805.953147] lowmem_reserve[]: [ 1805.982149] 0 [ 1806.010722] Node 0 active_anon:56948kB inactive_anon:80692kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1806.029887] 0 [ 1806.042693] 0 0 0 0 0 [ 1806.047020] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1806.065234] Node 1 active_anon:1364kB inactive_anon:16336kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69564kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1806.065512] 0 [ 1806.094531] Node 0 DMA32: 458*4kB (UME) 486*8kB (UME) 110*16kB (UME) 29*32kB (UME) 24*64kB (UM) 42*128kB (UM) 6*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17880kB [ 1806.094607] Node 0 Normal: [ 1806.112322] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1806.118941] 0 [ 1806.141477] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1806.141523] Node 1 Normal: 97*4kB (ME) 69*8kB (UM) 59*16kB (ME) 42*32kB (UME) 40*64kB (M) 19*128kB (ME) 11*256kB (UME) 0*512kB 15*1024kB (U) 0*2048kB 0*4096kB = 26396kB [ 1806.168019] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 2*512kB (UE) 2*1024kB [ 1806.168102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.168112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.198089] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1806.203415] Node 0 DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:56948kB inactive_anon:80692kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2540kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1806.219194] (UE) [ 1806.232562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.232569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.232574] 25396 total pagecache pages [ 1806.232585] 0 pages in swap cache [ 1806.232590] Swap cache stats: add 0, delete 0, find 0/0 [ 1806.232593] Free swap = 0kB [ 1806.232596] Total swap = 0kB [ 1806.232608] 2097051 pages RAM [ 1806.257600] 3*2048kB [ 1806.259724] lowmem_reserve[]: [ 1806.272823] (UME) 0*4096kB = 10960kB [ 1806.280854] 0 0 0 0 0 [ 1806.286075] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1806.296546] Node 0 [ 1806.318386] 0 pages HighMem/MovableOnly [ 1806.325290] 363849 pages reserved [ 1806.328521] DMA32: [ 1806.329080] 0 pages cma reserved [ 1806.329089] 458*4kB [ 1806.340110] lowmem_reserve[]: 0 0 0 0 0 [ 1806.343001] (UME) [ 1806.346508] Node 1 [ 1806.346512] 486*8kB (UME) [ 1806.348668] Normal free:26396kB min:53696kB low:67120kB high:80544kB active_anon:1364kB inactive_anon:16336kB active_file:44kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1806.366631] 110*16kB (UME) 29*32kB (UME) 24*64kB (UM) 42*128kB (UM) 6*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17880kB [ 1806.429886] lowmem_reserve[]: 0 0 0 0 0 [ 1806.468122] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1806.481091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1806.510748] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1806.519408] systemd[1]: Stopped System Logging Service. [ 1806.560946] Node 1 Normal: 3*4kB (UME) 1*8kB (U) 3*16kB (UE) 2*32kB (E) 2*64kB (UM) 20*128kB (UME) 11*256kB (UME) 0*512kB 136*1024kB (U) 37*2048kB (U) 0*4096kB = 220676kB [ 1806.571017] Node 0 DMA32: 426*4kB (UME) 807*8kB (UME) 123*16kB (UME) 32*32kB (UME) 25*64kB (UM) 42*128kB (UM) 6*256kB (U) 2*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 23760kB [ 1806.626342] systemd[1]: Starting System Logging Service... [ 1806.648348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.683593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1806.695295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.720618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.729489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.732007] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 0*16kB 1*32kB (E) 2321*64kB (UME) 117*128kB (UM) 51*256kB (UME) 3*512kB (U) 137*1024kB (U) 37*2048kB (U) 0*4096kB = 394236kB [ 1806.780660] 26913 total pagecache pages [ 1806.784689] 0 pages in swap cache [ 1806.820677] Swap cache stats: add 0, delete 0, find 0/0 [ 1806.826109] Free swap = 0kB [ 1806.829132] Total swap = 0kB [ 1806.851232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.860190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.884418] 2097051 pages RAM [ 1806.887571] 0 pages HighMem/MovableOnly [ 1806.917819] 363849 pages reserved [ 1806.925625] 0 pages cma reserved [ 1806.930748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.939717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.020636] 27247 total pagecache pages [ 1807.024913] 0 pages in swap cache [ 1807.028461] Swap cache stats: add 0, delete 0, find 0/0 [ 1807.055865] Free swap = 0kB [ 1807.058911] Total swap = 0kB [ 1807.078544] 2097051 pages RAM [ 1807.089655] 0 pages HighMem/MovableOnly [ 1807.111499] 363849 pages reserved [ 1807.114978] 0 pages cma reserved [ 1807.118769] Out of memory (oom_kill_allocating_task): Kill process 17800 (syz-executor.0) score 0 or sacrifice child [ 1807.190828] Killed process 19857 (syz-executor.0) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1807.208860] systemd[1]: Started Journal Service. [ 1807.228142] oom_reaper: reaped process 19857 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1807.794225] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1807.905074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1807.914934] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1807.933998] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1807.941578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1807.948701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1807.971165] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1807.977260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1808.004276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1808.031346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1808.039411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1808.055671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.062081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1808.078902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1808.086895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1808.100908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1808.108866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1808.135751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.142186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1808.187576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1808.194921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1808.221263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1808.242317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1808.249265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1808.261441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1808.269315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1808.317796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1808.334557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1808.355287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1808.381531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1808.392078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1808.421916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1808.430411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1808.480619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1808.515346] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1808.524672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1808.541237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1808.575153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1808.595540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1808.627773] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1808.651026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1808.659718] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1808.671056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1808.677983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1808.705506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1808.921766] oom_reaper: reaped process 19870 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1809.063994] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1809.078615] modprobe cpuset=/ mems_allowed=0-1 [ 1809.078840] syz-executor.4: [ 1809.090435] CPU: 1 PID: 19911 Comm: modprobe Not tainted 4.14.231-syzkaller #0 [ 1809.100832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.110285] Call Trace: [ 1809.110312] page allocation failure: order:4 [ 1809.112867] dump_stack+0x1b2/0x281 [ 1809.112878] dump_header+0x178/0x82f [ 1809.112888] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1809.112900] ? ___ratelimit+0x2cd/0x530 [ 1809.117487] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1809.121097] oom_kill_process.cold+0x10/0xa40 [ 1809.121115] out_of_memory+0xe3e/0x1190 [ 1809.121128] ? oom_killer_disable+0x1c0/0x1c0 [ 1809.121139] ? mutex_trylock+0x152/0x1a0 [ 1809.124832] (null) [ 1809.129938] __alloc_pages_nodemask+0x23e1/0x2720 [ 1809.133928] syz-executor.4 cpuset= [ 1809.140992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1809.141002] ? SyS_faccessat+0x52a/0x680 [ 1809.141013] ? do_syscall_64+0x1d5/0x640 [ 1809.145491] / [ 1809.149454] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1809.154678] mems_allowed=0-1 [ 1809.158700] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1809.197338] ? cache_grow_begin+0x3f/0x700 [ 1809.201566] cache_grow_begin+0x91/0x700 [ 1809.205623] fallback_alloc+0x207/0x2c0 [ 1809.209626] kmem_cache_alloc+0x1e5/0x3c0 [ 1809.213792] getname_flags+0xc8/0x550 [ 1809.217584] do_sys_open+0x1ce/0x410 [ 1809.221286] ? filp_open+0x60/0x60 [ 1809.224819] ? __do_page_fault+0x159/0xad0 [ 1809.229045] ? do_syscall_64+0x4c/0x640 [ 1809.233010] ? do_sys_open+0x410/0x410 [ 1809.236891] do_syscall_64+0x1d5/0x640 [ 1809.240773] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1809.245970] RIP: 0033:0x7f52ab1da1b7 [ 1809.249707] RSP: 002b:00007ffd3c5cbf28 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1809.257452] RAX: ffffffffffffffda RBX: 00007ffd3c5cc010 RCX: 00007f52ab1da1b7 [ 1809.264748] RDX: 00007f52ab3e6170 RSI: 0000000000080000 RDI: 00007f52ab3e6d68 [ 1809.272037] RBP: 00007ffd3c5cbf80 R08: 0000000000000000 R09: 00007ffd3c5cbfff [ 1809.279306] R10: 00007ffd3c5cc010 R11: 0000000000000246 R12: 00007f52ab3e6170 [ 1809.286573] R13: 0000000000000000 R14: 00007ffd3c5cbfff R15: 0000000000000000 [ 1809.293949] CPU: 0 PID: 19768 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1809.301836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.311213] Call Trace: [ 1809.313830] dump_stack+0x1b2/0x281 [ 1809.317472] warn_alloc.cold+0x96/0x1cc [ 1809.321467] ? zone_watermark_ok_safe+0x220/0x220 [ 1809.326331] __alloc_pages_nodemask+0x2127/0x2720 [ 1809.331181] ? lock_acquire+0x170/0x3f0 [ 1809.334463] Mem-Info: [ 1809.335171] ? lock_acquire+0x170/0x3f0 [ 1809.337574] active_anon:14940 inactive_anon:24257 isolated_anon:0 [ 1809.337574] active_file:79 inactive_file:21 isolated_file:0 [ 1809.337574] unevictable:0 dirty:104 writeback:0 unstable:0 [ 1809.337574] slab_reclaimable:12775 slab_unreclaimable:123421 [ 1809.337574] mapped:52795 shmem:25364 pagetables:802 bounce:0 [ 1809.337574] free:13910 free_pcp:0 free_cma:0 [ 1809.342860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1809.342877] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1809.342889] ? __mutex_unlock_slowpath+0x75/0x770 [ 1809.342903] alloc_pages_current+0x155/0x260 [ 1809.342916] ion_page_pool_alloc+0x118/0x1b0 [ 1809.342925] ion_system_heap_allocate+0x133/0x8c0 [ 1809.342949] ? _raw_spin_unlock+0x29/0x40 [ 1809.382753] Node 0 active_anon:58492kB inactive_anon:80692kB active_file:272kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:400kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1809.386558] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1809.386568] ? ion_system_contig_heap_create+0x130/0x130 [ 1809.386579] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1809.386590] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1809.386600] ion_alloc+0x27a/0x810 [ 1809.386614] ? ion_dma_buf_release+0x40/0x40 [ 1809.395700] Node 1 active_anon:1268kB inactive_anon:16336kB active_file:44kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69760kB dirty:16kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1809.395935] ? __might_fault+0x177/0x1b0 [ 1809.400318] Node 0 [ 1809.405180] ion_ioctl+0xea/0x1f0 [ 1809.405190] ? ion_query_heaps+0x360/0x360 [ 1809.405200] ? ion_query_heaps+0x360/0x360 [ 1809.405210] do_vfs_ioctl+0x75a/0xff0 [ 1809.405221] ? ioctl_preallocate+0x1a0/0x1a0 [ 1809.405230] ? lock_downgrade+0x740/0x740 [ 1809.405242] ? __fget+0x225/0x360 [ 1809.405251] ? do_vfs_ioctl+0xff0/0xff0 [ 1809.405262] ? security_file_ioctl+0x83/0xb0 [ 1809.405272] SyS_ioctl+0x7f/0xb0 [ 1809.405279] ? do_vfs_ioctl+0xff0/0xff0 [ 1809.405290] do_syscall_64+0x1d5/0x640 [ 1809.405304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1809.405312] RIP: 0033:0x466459 [ 1809.405317] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1809.405327] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1809.405335] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1809.418448] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.437488] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1809.437494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1809.437499] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1809.470728] warn_alloc_show_mem: 1 callbacks suppressed [ 1809.470732] Mem-Info: [ 1809.499379] lowmem_reserve[]: [ 1809.523801] active_anon:14940 inactive_anon:24257 isolated_anon:0 [ 1809.523801] active_file:77 inactive_file:46 isolated_file:0 [ 1809.523801] unevictable:0 dirty:104 writeback:0 unstable:0 [ 1809.523801] slab_reclaimable:12775 slab_unreclaimable:123421 [ 1809.523801] mapped:52795 shmem:25364 pagetables:802 bounce:0 [ 1809.523801] free:13910 free_pcp:0 free_cma:0 [ 1809.531050] 0 [ 1809.546675] Node 0 active_anon:58492kB inactive_anon:80692kB active_file:252kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:400kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1809.551273] 2717 [ 1809.565378] Node 1 active_anon:1268kB inactive_anon:16336kB active_file:44kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69760kB dirty:16kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1809.578943] 2718 [ 1809.594270] Node 0 [ 1809.608689] 2718 [ 1809.626937] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.626944] lowmem_reserve[]: [ 1809.637321] 2718 [ 1809.651241] 0 [ 1809.708156] 2717 [ 1809.758214] Node 0 [ 1809.781880] 2718 2718 2718 [ 1809.787102] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:58492kB inactive_anon:80692kB active_file:188kB inactive_file:200kB unevictable:0kB writepending:400kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.788583] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:58492kB inactive_anon:80692kB active_file:188kB inactive_file:180kB unevictable:0kB writepending:400kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.824025] lowmem_reserve[]: 0 0 0 0 0 [ 1809.863386] lowmem_reserve[]: 0 0 0 0 0 [ 1809.867517] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.868735] Node 0 [ 1809.898082] lowmem_reserve[]: 0 0 0 0 0 [ 1809.898107] Node 1 Normal free:26628kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:16336kB active_file:44kB inactive_file:76kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.898127] lowmem_reserve[]: 0 0 0 0 0 [ 1809.898145] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1809.898205] Node 0 DMA32: 421*4kB (UME) 482*8kB (UME) 115*16kB (UME) 31*32kB (UME) 47*64kB (UME) 25*128kB (UME) 2*256kB (UE) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 1809.898270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1809.898317] Node 1 Normal: 101*4kB (ME) 79*8kB [ 1809.905447] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.912354] (ME) [ 1809.941828] lowmem_reserve[]: [ 1809.959063] 55*16kB [ 1809.973308] 0 [ 1810.003643] (UME) 41*32kB (UME) 42*64kB (UM) 20*128kB (UME) 10*256kB (ME) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26908kB [ 1810.042761] 0 0 0 0 [ 1810.046749] Node 1 Normal free:26628kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:16336kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:660kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.056441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.083609] lowmem_reserve[]: 0 0 0 0 0 [ 1810.095785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.098241] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1810.128116] Node 0 DMA32: 420*4kB (UME) 481*8kB (UME) 113*16kB (UME) 31*32kB (UME) 46*64kB (ME) 25*128kB (UME) 2*256kB (UE) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17544kB [ 1810.136399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.151996] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1810.170215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.182791] Node 1 Normal: 101*4kB (ME) 79*8kB (ME) 55*16kB (UME) 41*32kB (UME) 42*64kB (UM) 19*128kB (ME) 10*256kB (ME) 31*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 1810.191302] 25499 total pagecache pages [ 1810.209937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.215454] 0 pages in swap cache [ 1810.221896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.226432] Swap cache stats: add 0, delete 0, find 0/0 [ 1810.236994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.246113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.248342] Free swap = 0kB [ 1810.260120] 25499 total pagecache pages [ 1810.260451] Total swap = 0kB [ 1810.264217] 0 pages in swap cache [ 1810.264223] Swap cache stats: add 0, delete 0, find 0/0 [ 1810.264227] Free swap = 0kB [ 1810.264234] Total swap = 0kB [ 1810.283392] 2097051 pages RAM [ 1810.287201] 2097051 pages RAM [ 1810.290351] 0 pages HighMem/MovableOnly [ 1810.291021] 0 pages HighMem/MovableOnly [ 1810.296578] 363849 pages reserved [ 1810.298905] 363849 pages reserved [ 1810.309781] 0 pages cma reserved [ 1810.312732] 0 pages cma reserved [ 1810.316526] Out of memory (oom_kill_allocating_task): Kill process 19911 (modprobe) score 0 or sacrifice child [ 1810.338954] Killed process 19911 (modprobe) total-vm:468kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1810.349959] oom_reaper: reaped process 19911 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1810.375183] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1810.420673] systemd-journal cpuset=/ mems_allowed=0-1 [ 1810.426041] CPU: 1 PID: 19683 Comm: systemd-journal Not tainted 4.14.231-syzkaller #0 [ 1810.434296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.443652] Call Trace: [ 1810.446253] dump_stack+0x1b2/0x281 [ 1810.449924] dump_header+0x178/0x82f [ 1810.453653] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1810.458791] ? ___ratelimit+0x2cd/0x530 [ 1810.462774] oom_kill_process.cold+0x10/0xa40 [ 1810.467289] out_of_memory+0xe3e/0x1190 [ 1810.471275] ? oom_killer_disable+0x1c0/0x1c0 [ 1810.475771] ? mutex_trylock+0x152/0x1a0 [ 1810.479839] __alloc_pages_nodemask+0x23e1/0x2720 [ 1810.484704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.489565] alloc_pages_current+0x155/0x260 [ 1810.493979] filemap_fault+0x11a1/0x1ad0 [ 1810.498051] ext4_filemap_fault+0x84/0xb0 [ 1810.502198] __do_fault+0xfa/0x380 [ 1810.505738] __handle_mm_fault+0x2497/0x4620 [ 1810.510148] ? vm_insert_page+0x7c0/0x7c0 [ 1810.514322] ? mark_held_locks+0xa6/0xf0 [ 1810.518389] handle_mm_fault+0x455/0x9c0 [ 1810.522454] __do_page_fault+0x549/0xad0 [ 1810.526524] ? spurious_fault+0x640/0x640 [ 1810.530675] ? do_page_fault+0x60/0x500 [ 1810.534647] ? page_fault+0x2f/0x50 [ 1810.538271] page_fault+0x45/0x50 [ 1810.541718] RIP: 0001:0xffffffffffffffff [ 1810.545772] RSP: e280d1e0:00007ffc4ffb2fd0 EFLAGS: 7ffc4ffb2de0 [ 1810.580899] Mem-Info: [ 1810.612642] active_anon:14940 inactive_anon:24257 isolated_anon:0 [ 1810.612642] active_file:106 inactive_file:268 isolated_file:32 [ 1810.612642] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1810.612642] slab_reclaimable:12775 slab_unreclaimable:123420 [ 1810.612642] mapped:53020 shmem:25364 pagetables:802 bounce:0 [ 1810.612642] free:49405 free_pcp:169 free_cma:0 [ 1810.680693] Node 0 active_anon:58492kB inactive_anon:80692kB active_file:72kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1810.756740] Node 1 active_anon:1268kB inactive_anon:16336kB active_file:304kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70160kB dirty:16kB writeback:100kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1810.825707] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.876029] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1810.881513] Node 0 DMA32 free:17640kB min:36200kB low:45248kB high:54296kB active_anon:58492kB inactive_anon:80692kB active_file:84kB inactive_file:200kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.910758] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.924500] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.937414] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.941197] lowmem_reserve[]: [ 1810.955550] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1810.960651] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1810.963860] syz-executor.2 cpuset= [ 1810.969553] CPU: 1 PID: 19857 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1810.969554] / mems_allowed=0-1 [ 1810.973082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.973087] Call Trace: [ 1810.973114] dump_stack+0x1b2/0x281 [ 1810.973128] warn_alloc.cold+0x96/0x1cc [ 1810.973141] ? zone_watermark_ok_safe+0x220/0x220 [ 1811.008766] ? usleep_range+0x130/0x130 [ 1811.012825] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1811.017936] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1811.023601] ? run_timer_softirq+0x5a0/0x5a0 [ 1811.028021] __alloc_pages_nodemask+0x2127/0x2720 [ 1811.033175] ? lock_acquire+0x170/0x3f0 [ 1811.037267] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1811.042246] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1811.047118] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1811.053142] alloc_pages_current+0x155/0x260 [ 1811.057606] ion_page_pool_alloc+0x118/0x1b0 [ 1811.062028] ion_system_heap_allocate+0x133/0x8c0 [ 1811.066910] ? ion_alloc+0x187/0x810 [ 1811.070622] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1811.076142] ? ion_system_contig_heap_create+0x130/0x130 [ 1811.081597] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1811.086624] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1811.091472] ion_alloc+0x204/0x810 [ 1811.095049] ? ion_dma_buf_release+0x40/0x40 [ 1811.099485] ? __might_fault+0x177/0x1b0 [ 1811.103853] ion_ioctl+0xea/0x1f0 [ 1811.107305] ? ion_query_heaps+0x360/0x360 [ 1811.111563] ? ion_query_heaps+0x360/0x360 [ 1811.115834] do_vfs_ioctl+0x75a/0xff0 [ 1811.119644] ? ioctl_preallocate+0x1a0/0x1a0 [ 1811.124049] ? lock_downgrade+0x740/0x740 [ 1811.128202] ? __fget+0x225/0x360 [ 1811.131740] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.135737] ? security_file_ioctl+0x83/0xb0 [ 1811.140174] SyS_ioctl+0x7f/0xb0 [ 1811.143539] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.147529] do_syscall_64+0x1d5/0x640 [ 1811.151443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.156669] RIP: 0033:0x466459 [ 1811.159901] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.167657] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1811.174956] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1811.182416] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1811.189704] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1811.198450] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1811.205763] CPU: 0 PID: 19870 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1811.208023] 0 [ 1811.213684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.213689] Call Trace: [ 1811.213710] dump_stack+0x1b2/0x281 [ 1811.213724] warn_alloc.cold+0x96/0x1cc [ 1811.213736] ? zone_watermark_ok_safe+0x220/0x220 [ 1811.213749] ? usleep_range+0x130/0x130 [ 1811.240657] 0 [ 1811.244440] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1811.244447] 0 [ 1811.246250] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1811.258451] ? run_timer_softirq+0x5a0/0x5a0 [ 1811.262879] __alloc_pages_nodemask+0x2127/0x2720 [ 1811.267735] ? lock_acquire+0x170/0x3f0 [ 1811.270621] 0 0 [ 1811.271739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1811.271751] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1811.273725] Node 0 [ 1811.278567] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1811.290701] alloc_pages_current+0x155/0x260 [ 1811.295120] ion_page_pool_alloc+0x118/0x1b0 [ 1811.299540] ion_system_heap_allocate+0x133/0x8c0 [ 1811.304408] ? ion_alloc+0x187/0x810 [ 1811.308131] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1811.310664] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.313586] ? ion_system_contig_heap_create+0x130/0x130 [ 1811.344813] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1811.349975] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1811.354823] ion_alloc+0x204/0x810 [ 1811.358367] ? ion_dma_buf_release+0x40/0x40 [ 1811.362781] ? copy_user_generic_unrolled+0x89/0xc0 [ 1811.367802] ion_ioctl+0xea/0x1f0 [ 1811.370635] lowmem_reserve[]: 0 [ 1811.371264] ? ion_query_heaps+0x360/0x360 [ 1811.371276] ? ion_query_heaps+0x360/0x360 [ 1811.374541] 0 [ 1811.378765] do_vfs_ioctl+0x75a/0xff0 [ 1811.388582] ? ioctl_preallocate+0x1a0/0x1a0 [ 1811.390627] 0 [ 1811.392994] ? lock_downgrade+0x740/0x740 [ 1811.393002] 0 [ 1811.394793] ? __fget+0x225/0x360 [ 1811.399034] 0 [ 1811.400844] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.400856] ? security_file_ioctl+0x83/0xb0 [ 1811.400865] SyS_ioctl+0x7f/0xb0 [ 1811.400873] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.400885] do_syscall_64+0x1d5/0x640 [ 1811.400899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.421799] RIP: 0033:0x466459 [ 1811.425670] Node 1 [ 1811.430840] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.430850] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1811.430855] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1811.430860] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1811.430864] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1811.430869] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1811.453532] CPU: 0 PID: 19768 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1811.488728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.498091] Call Trace: [ 1811.500646] Normal free:58656kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:16336kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:660kB bounce:0kB free_pcp:664kB local_pcp:684kB free_cma:0kB [ 1811.500684] dump_stack+0x1b2/0x281 [ 1811.532433] warn_alloc.cold+0x96/0x1cc [ 1811.536433] ? zone_watermark_ok_safe+0x220/0x220 [ 1811.541316] ? usleep_range+0x130/0x130 [ 1811.545330] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1811.550463] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1811.555493] ? run_timer_softirq+0x5a0/0x5a0 [ 1811.559927] __alloc_pages_nodemask+0x2127/0x2720 [ 1811.560844] lowmem_reserve[]: 0 0 [ 1811.564787] ? lock_acquire+0x170/0x3f0 [ 1811.564803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1811.568252] 0 [ 1811.572300] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1811.572316] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1811.572335] alloc_pages_current+0x155/0x260 [ 1811.572346] ion_page_pool_alloc+0x118/0x1b0 [ 1811.572355] ion_system_heap_allocate+0x133/0x8c0 [ 1811.572366] ? _raw_spin_unlock+0x29/0x40 [ 1811.572374] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1811.572383] ? ion_system_contig_heap_create+0x130/0x130 [ 1811.572397] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1811.591236] 0 [ 1811.593365] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1811.597751] 0 [ 1811.602610] ion_alloc+0x27a/0x810 [ 1811.602625] ? ion_dma_buf_release+0x40/0x40 [ 1811.602637] ? __might_fault+0x177/0x1b0 [ 1811.602647] ion_ioctl+0xea/0x1f0 [ 1811.602656] ? ion_query_heaps+0x360/0x360 [ 1811.602666] ? ion_query_heaps+0x360/0x360 [ 1811.602676] do_vfs_ioctl+0x75a/0xff0 [ 1811.602687] ? ioctl_preallocate+0x1a0/0x1a0 [ 1811.622192] ? lock_downgrade+0x740/0x740 [ 1811.624026] Node 0 [ 1811.628866] ? __fget+0x225/0x360 [ 1811.660642] DMA: [ 1811.664234] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.668367] 2*4kB [ 1811.670615] ? security_file_ioctl+0x83/0xb0 [ 1811.670626] SyS_ioctl+0x7f/0xb0 [ 1811.670635] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.670646] do_syscall_64+0x1d5/0x640 [ 1811.670660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.670670] RIP: 0033:0x466459 [ 1811.692891] (UE) [ 1811.694397] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.694409] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1811.694414] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1811.694419] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1811.694424] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1811.694429] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1811.761087] Mem-Info: [ 1811.763528] active_anon:14937 inactive_anon:24257 isolated_anon:0 [ 1811.763528] active_file:88 inactive_file:207 isolated_file:32 [ 1811.763528] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1811.763528] slab_reclaimable:12770 slab_unreclaimable:122999 [ 1811.763528] mapped:52971 shmem:25364 pagetables:802 bounce:0 [ 1811.763528] free:25011 free_pcp:171 free_cma:0 [ 1811.810616] 2*8kB (U) 2*16kB (UE) 3*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 11032kB [ 1811.830762] Node 0 DMA32: 172*4kB (UME) 487*8kB (ME) 538*16kB (UME) 397*32kB (UME) 127*64kB (UME) 34*128kB (UME) 1*256kB (E) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 41192kB [ 1811.860622] Node 0 active_anon:58484kB inactive_anon:80692kB active_file:144kB inactive_file:724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142024kB dirty:0kB writeback:0kB shmem:85040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1811.920626] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1811.960656] Node 1 Normal: 2714*4kB (UME) 1154*8kB (UME) 273*16kB (UME) 220*32kB (UME) 1219*64kB (UM) 930*128kB (UME) 70*256kB (UME) 10*512kB (U) 247*1024kB (U) 53*2048kB (U) 0*4096kB = 613064kB [ 1812.004698] Node 1 active_anon:1264kB inactive_anon:16336kB active_file:96kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69760kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.041222] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.041267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.067671] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1812.081519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.094504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.104162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.116199] 25761 total pagecache pages [ 1812.120188] 0 pages in swap cache [ 1812.130640] Node 0 DMA32 free:72344kB min:36200kB low:45248kB high:54296kB active_anon:58484kB inactive_anon:80692kB active_file:204kB inactive_file:680kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2548kB bounce:0kB free_pcp:840kB local_pcp:696kB free_cma:0kB [ 1812.134705] Swap cache stats: add 0, delete 0, find 0/0 [ 1812.160109] lowmem_reserve[]: 0 0 0 0 0 [ 1812.169261] Free swap = 0kB [ 1812.169483] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.173121] Total swap = 0kB [ 1812.198347] lowmem_reserve[]: 0 0 0 0 0 [ 1812.198374] Node 1 Normal free:814096kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:16336kB active_file:180kB inactive_file:368kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:660kB bounce:0kB free_pcp:1344kB local_pcp:680kB free_cma:0kB [ 1812.205241] 2097051 pages RAM [ 1812.205614] lowmem_reserve[]: 0 0 0 0 0 [ 1812.238607] 0 pages HighMem/MovableOnly [ 1812.242001] Node 0 [ 1812.245964] 363849 pages reserved [ 1812.245971] DMA: [ 1812.248181] 0 pages cma reserved [ 1812.248189] Out of memory (oom_kill_allocating_task): Kill process 19683 (systemd-journal) score 0 or sacrifice child [ 1812.248221] Killed process 19683 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2252kB [ 1812.318199] 5*4kB (UE) 4*8kB (U) 3*16kB (UE) 3*32kB (UE) 4*64kB (UE) 6*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 11972kB [ 1812.355823] Node 0 DMA32: 1918*4kB (UE) 500*8kB (UE) 560*16kB (UE) 437*32kB (UE) 423*64kB (UME) 43*128kB (UME) 77*256kB (UE) 6*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 92024kB [ 1812.400664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1812.411829] Node 1 Normal: 7399*4kB (UME) 1924*8kB (UME) 698*16kB (UME) 638*32kB (UME) 2485*64kB (UM) 1359*128kB (UME) 305*256kB (UME) 64*512kB (U) 253*1024kB (U) 55*2048kB (U) 0*4096kB = 892124kB [ 1812.455480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.456796] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1812.468344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.510908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.519779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.530920] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1812.534569] 28178 total pagecache pages [ 1812.553500] systemd[1]: Stopped Journal Service. [ 1812.592690] 0 pages in swap cache [ 1812.596171] Swap cache stats: add 0, delete 0, find 0/0 [ 1812.612658] systemd[1]: Starting Journal Service... [ 1812.624271] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1812.632783] Free swap = 0kB [ 1812.635815] Total swap = 0kB [ 1812.638826] 2097051 pages RAM [ 1812.665180] 0 pages HighMem/MovableOnly [ 1812.671846] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1812.681104] 363849 pages reserved [ 1812.684580] 0 pages cma reserved [ 1812.699423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1812.707871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1812.882866] systemd-journald[19920]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1812.888263] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1812.971913] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1812.978801] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1813.021193] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1813.048194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1813.061319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1813.102301] device veth0_vlan entered promiscuous mode [ 1813.120380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1813.131205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1813.151444] device veth1_vlan entered promiscuous mode [ 1813.157556] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1813.207573] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1813.247230] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1813.286796] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1813.324786] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1813.332753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1813.355531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1813.398582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1813.413428] device veth0_macvtap entered promiscuous mode [ 1813.419805] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1813.438733] device veth1_macvtap entered promiscuous mode [ 1813.462795] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1813.506948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1813.527531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1813.574109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1813.603271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.613291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1813.654270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.680657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1813.721278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.730514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1813.795187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.843532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1813.871366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.912529] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1813.950077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.971725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1813.979572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1814.012196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1814.040520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1814.076410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1814.106884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.125951] systemd[1]: Started Journal Service. [ 1814.142504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1814.173740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.214279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1814.241727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.268460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1814.301496] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1814.305965] syz-executor.0: [ 1814.326272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.340007] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1814.360502] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1814.367275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1814.383722] CPU: 1 PID: 19870 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1814.391638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.401003] Call Trace: [ 1814.403616] dump_stack+0x1b2/0x281 [ 1814.407264] warn_alloc.cold+0x96/0x1cc [ 1814.411256] ? zone_watermark_ok_safe+0x220/0x220 [ 1814.416165] __alloc_pages_nodemask+0x2127/0x2720 [ 1814.421025] ? __schedule+0x893/0x1de0 [ 1814.424939] ? lock_acquire+0x170/0x3f0 [ 1814.428941] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1814.433811] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1814.439325] ? __mutex_unlock_slowpath+0x75/0x770 [ 1814.444219] alloc_pages_current+0x155/0x260 [ 1814.448644] ion_page_pool_alloc+0x118/0x1b0 [ 1814.453071] ion_system_heap_allocate+0x133/0x8c0 [ 1814.457934] ? _raw_spin_unlock+0x29/0x40 [ 1814.462097] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1814.467046] ? ion_system_contig_heap_create+0x130/0x130 [ 1814.473282] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1814.478331] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1814.483218] ion_alloc+0x27a/0x810 [ 1814.486862] ? ion_dma_buf_release+0x40/0x40 [ 1814.491306] ? copy_user_generic_unrolled+0x89/0xc0 [ 1814.496350] ion_ioctl+0xea/0x1f0 [ 1814.499832] ? ion_query_heaps+0x360/0x360 [ 1814.504088] ? ion_query_heaps+0x360/0x360 [ 1814.508422] do_vfs_ioctl+0x75a/0xff0 [ 1814.512241] ? ioctl_preallocate+0x1a0/0x1a0 [ 1814.516658] ? lock_downgrade+0x740/0x740 [ 1814.519337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1814.520817] ? __fget+0x225/0x360 [ 1814.520827] ? do_vfs_ioctl+0xff0/0xff0 [ 1814.520839] ? security_file_ioctl+0x83/0xb0 [ 1814.520849] SyS_ioctl+0x7f/0xb0 [ 1814.520857] ? do_vfs_ioctl+0xff0/0xff0 [ 1814.520868] do_syscall_64+0x1d5/0x640 [ 1814.520884] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1814.520902] RIP: 0033:0x466459 [ 1814.531535] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1814.533466] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 [ 1814.537504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.541835] ORIG_RAX: 0000000000000010 [ 1814.541842] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1814.541847] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1814.541851] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1814.541855] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1814.541860] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1814.561085] syz-executor.0 cpuset= [ 1814.623284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1814.635005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1814.655055] warn_alloc_show_mem: 2 callbacks suppressed [ 1814.655060] Mem-Info: [ 1814.663542] active_anon:14958 inactive_anon:26285 isolated_anon:12 [ 1814.663542] active_file:1377 inactive_file:2544 isolated_file:0 [ 1814.663542] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1814.663542] slab_reclaimable:12760 slab_unreclaimable:124969 [ 1814.663542] mapped:55141 shmem:27412 pagetables:769 bounce:0 [ 1814.663542] free:102613 free_pcp:534 free_cma:0 [ 1814.704176] Node 0 active_anon:59060kB inactive_anon:88868kB active_file:5268kB inactive_file:9368kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:152456kB dirty:96kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1814.716270] / [ 1814.741654] Node 1 active_anon:772kB inactive_anon:16272kB active_file:240kB inactive_file:908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68008kB dirty:4kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1814.750668] mems_allowed=0-1 [ 1814.776071] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1814.800731] CPU: 0 PID: 19857 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1814.808105] lowmem_reserve[]: [ 1814.810118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.810126] 0 [ 1814.813217] Call Trace: [ 1814.813239] dump_stack+0x1b2/0x281 [ 1814.813252] warn_alloc.cold+0x96/0x1cc [ 1814.813264] ? zone_watermark_ok_safe+0x220/0x220 [ 1814.813285] __alloc_pages_nodemask+0x2127/0x2720 [ 1814.813295] ? switch_mm_irqs_off+0x601/0xeb0 [ 1814.813309] ? lock_acquire+0x170/0x3f0 [ 1814.813323] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1814.813340] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1814.850756] 2717 [ 1814.852478] ? __mutex_unlock_slowpath+0x75/0x770 [ 1814.858535] 2718 [ 1814.862521] ? policy_node+0x35/0x110 [ 1814.862533] alloc_pages_current+0x155/0x260 [ 1814.862553] ion_page_pool_alloc+0x118/0x1b0 [ 1814.862562] ion_system_heap_allocate+0x133/0x8c0 [ 1814.862574] ? _raw_spin_unlock+0x29/0x40 [ 1814.862582] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1814.862592] ? ion_system_contig_heap_create+0x130/0x130 [ 1814.862602] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1814.862611] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1814.862621] ion_alloc+0x27a/0x810 [ 1814.862637] ? ion_dma_buf_release+0x40/0x40 [ 1814.894288] 2718 [ 1814.895306] ? __might_fault+0x177/0x1b0 [ 1814.900140] 2718 [ 1814.904289] ion_ioctl+0xea/0x1f0 [ 1814.904299] ? ion_query_heaps+0x360/0x360 [ 1814.904310] ? ion_query_heaps+0x360/0x360 [ 1814.904319] do_vfs_ioctl+0x75a/0xff0 [ 1814.904330] ? ioctl_preallocate+0x1a0/0x1a0 [ 1814.904339] ? lock_downgrade+0x740/0x740 [ 1814.904351] ? __fget+0x225/0x360 [ 1814.904358] ? do_vfs_ioctl+0xff0/0xff0 [ 1814.904370] ? security_file_ioctl+0x83/0xb0 [ 1814.904379] SyS_ioctl+0x7f/0xb0 [ 1814.904386] ? do_vfs_ioctl+0xff0/0xff0 [ 1814.904399] do_syscall_64+0x1d5/0x640 [ 1814.925022] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1814.928543] Node 0 [ 1814.932969] RIP: 0033:0x466459 [ 1814.932974] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1814.932983] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1814.932988] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1814.932992] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1814.932997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1814.933001] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1815.067777] DMA32 free:188212kB min:36200kB low:45248kB high:54296kB active_anon:59064kB inactive_anon:88868kB active_file:5112kB inactive_file:9324kB unevictable:0kB writepending:112kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2612kB bounce:0kB free_pcp:888kB local_pcp:188kB free_cma:0kB [ 1815.108510] lowmem_reserve[]: 0 0 0 0 0 [ 1815.115820] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.152391] lowmem_reserve[]: 0 0 0 0 0 [ 1815.156418] Node 1 Normal free:715508kB min:53696kB low:67120kB high:80544kB active_anon:728kB inactive_anon:16272kB active_file:280kB inactive_file:988kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:464kB bounce:0kB free_pcp:1440kB local_pcp:744kB free_cma:0kB [ 1815.203243] lowmem_reserve[]: 0 0 0 0 0 [ 1815.207271] Node 0 DMA: 53*4kB (UE) 27*8kB (U) 21*16kB (UE) 17*32kB (UE) 11*64kB (UE) 8*128kB (UE) 3*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11996kB [ 1815.228180] Node 0 DMA32: 4319*4kB (UME) 1873*8kB (UME) 776*16kB (UME) 1777*32kB (UME) 1209*64kB (UM) 226*128kB (U) 7*256kB (U) 3*512kB (U) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 216292kB [ 1815.254554] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1815.266502] Node 1 Normal: 25433*4kB (UM) 5866*8kB (UM) 3261*16kB (UME) 3398*32kB (UME) 5527*64kB (UM) 761*128kB (U) 97*256kB (UM) 49*512kB (UM) 19*1024kB (U) 1*2048kB (U) 0*4096kB = 832132kB [ 1815.290888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.299748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.315625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.326330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.335156] 31465 total pagecache pages [ 1815.339725] 0 pages in swap cache [ 1815.345351] Swap cache stats: add 0, delete 0, find 0/0 [ 1815.351593] Free swap = 0kB [ 1815.354615] Total swap = 0kB [ 1815.357623] 2097051 pages RAM [ 1815.363719] 0 pages HighMem/MovableOnly [ 1815.368283] 363849 pages reserved [ 1815.372456] 0 pages cma reserved [ 1815.567860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:58:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10180}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8460dd58af900bdbf88ca594bd4262c81846186787f41af6c06d137da7a5a08d8f4336beda1aef34e22198a9de39", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4040014}, 0x4800) 07:58:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000bfa800000002080000"], 0x14}}, 0x10) 07:58:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20044041) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) 07:58:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r2) 07:58:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1100745ea558e505ca6549d000000000000802000000"], 0x14}}, 0x20000001) 07:58:32 executing program 1: socketpair(0x8, 0x4, 0x40, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x13, 0x3, 0x70bd29, 0x25dfdbff, {0x20, 0x9, 0x3, 0x8, {0x4e21, 0x4e23, [0x6bd, 0x4, 0x1], [0x6, 0x9, 0xcd, 0xffffff09], 0x0, [0x8, 0x7]}, 0xdc, 0xe337}}, 0x4c}, 0x1, 0x0, 0x0, 0x8804}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 07:58:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff}}}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="c193a8bca62bbd06d9eb"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x24008800) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0xf31d0aa4bd94077, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r2, 0x400, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x15) [ 1816.175664] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1816.177823] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1816.235147] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1816.258566] CPU: 0 PID: 19959 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1816.266920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1816.276283] Call Trace: [ 1816.278974] dump_stack+0x1b2/0x281 [ 1816.282726] warn_alloc.cold+0x96/0x1cc [ 1816.286712] ? zone_watermark_ok_safe+0x220/0x220 [ 1816.292370] __alloc_pages_nodemask+0x2127/0x2720 [ 1816.297240] ? __schedule+0x893/0x1de0 [ 1816.301766] ? lock_acquire+0x170/0x3f0 [ 1816.305752] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1816.310606] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1816.316181] ? __mutex_unlock_slowpath+0x75/0x770 [ 1816.321055] alloc_pages_current+0x155/0x260 [ 1816.325491] ion_page_pool_alloc+0x118/0x1b0 [ 1816.329931] ion_system_heap_allocate+0x133/0x8c0 [ 1816.334871] ? ion_alloc+0x187/0x810 [ 1816.338679] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1816.344430] ? ion_system_contig_heap_create+0x130/0x130 [ 1816.349975] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1816.354997] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1816.359842] ion_alloc+0x204/0x810 [ 1816.363431] ? ion_dma_buf_release+0x40/0x40 [ 1816.367857] ? __might_fault+0x177/0x1b0 [ 1816.371921] ion_ioctl+0xea/0x1f0 [ 1816.375370] ? ion_query_heaps+0x360/0x360 [ 1816.379617] ? ion_query_heaps+0x360/0x360 [ 1816.383851] do_vfs_ioctl+0x75a/0xff0 [ 1816.387652] ? ioctl_preallocate+0x1a0/0x1a0 [ 1816.392056] ? lock_downgrade+0x740/0x740 [ 1816.396225] ? __fget+0x225/0x360 [ 1816.399670] ? do_vfs_ioctl+0xff0/0xff0 [ 1816.403740] ? security_file_ioctl+0x83/0xb0 [ 1816.408141] SyS_ioctl+0x7f/0xb0 [ 1816.411499] ? do_vfs_ioctl+0xff0/0xff0 [ 1816.415473] do_syscall_64+0x1d5/0x640 [ 1816.419361] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1816.424557] RIP: 0033:0x466459 [ 1816.427748] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.435452] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1816.442732] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1816.450001] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1816.457278] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1816.464558] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1816.477611] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1816.489128] CPU: 1 PID: 19962 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1816.497038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1816.506412] Call Trace: [ 1816.509117] dump_stack+0x1b2/0x281 [ 1816.512752] warn_alloc.cold+0x96/0x1cc [ 1816.516728] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1816.521755] ? zone_watermark_ok_safe+0x220/0x220 [ 1816.526803] __alloc_pages_nodemask+0x2127/0x2720 [ 1816.531747] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1816.536255] ? finish_task_switch+0x178/0x610 [ 1816.540752] ? finish_task_switch+0x14d/0x610 [ 1816.545256] ? lock_acquire+0x170/0x3f0 [ 1816.549239] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1816.554100] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1816.559670] ? __mutex_unlock_slowpath+0x75/0x770 [ 1816.564524] ? alloc_pages_current+0x37/0x260 [ 1816.569034] alloc_pages_current+0x155/0x260 [ 1816.573461] ion_page_pool_alloc+0x118/0x1b0 [ 1816.577888] ion_system_heap_allocate+0x133/0x8c0 [ 1816.582744] ? ion_alloc+0x187/0x810 [ 1816.586470] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1816.591933] ? ion_system_contig_heap_create+0x130/0x130 [ 1816.597393] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1816.602429] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1816.607306] ion_alloc+0x204/0x810 [ 1816.611027] ? ion_dma_buf_release+0x40/0x40 [ 1816.615447] ? __might_fault+0x177/0x1b0 [ 1816.619536] ion_ioctl+0xea/0x1f0 [ 1816.623002] ? ion_query_heaps+0x360/0x360 [ 1816.627259] ? ion_query_heaps+0x360/0x360 [ 1816.631495] do_vfs_ioctl+0x75a/0xff0 [ 1816.635324] ? ioctl_preallocate+0x1a0/0x1a0 [ 1816.639735] ? lock_downgrade+0x740/0x740 [ 1816.643892] ? __fget+0x225/0x360 [ 1816.647346] ? do_vfs_ioctl+0xff0/0xff0 [ 1816.651438] ? security_file_ioctl+0x83/0xb0 [ 1816.655850] SyS_ioctl+0x7f/0xb0 [ 1816.659220] ? do_vfs_ioctl+0xff0/0xff0 [ 1816.663198] do_syscall_64+0x1d5/0x640 [ 1816.667090] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1816.672299] RIP: 0033:0x466459 [ 1816.675485] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.684013] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1816.691289] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1816.699005] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1816.706282] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1816.713558] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1816.795989] syz-executor.5: [ 1816.796223] warn_alloc_show_mem: 1 callbacks suppressed [ 1816.796227] Mem-Info: [ 1816.796282] page allocation failure: order:4 [ 1816.799678] syz-executor.3: [ 1816.815839] active_anon:15031 inactive_anon:26289 isolated_anon:0 [ 1816.815839] active_file:1562 inactive_file:2800 isolated_file:0 [ 1816.815839] unevictable:0 dirty:27 writeback:0 unstable:0 [ 1816.815839] slab_reclaimable:12752 slab_unreclaimable:123861 [ 1816.815839] mapped:55562 shmem:27412 pagetables:811 bounce:0 [ 1816.815839] free:116797 free_pcp:234 free_cma:0 [ 1816.818112] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1816.819394] Node 0 active_anon:59392kB inactive_anon:88884kB active_file:5840kB inactive_file:10848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154200kB dirty:72kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1816.889392] (null) [ 1816.894026] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1816.894779] page allocation failure: order:4 [ 1816.904721] CPU: 0 PID: 19963 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1816.904754] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1816.909144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1816.909148] Call Trace: [ 1816.909168] dump_stack+0x1b2/0x281 [ 1816.909184] warn_alloc.cold+0x96/0x1cc [ 1816.933280] (null) [ 1816.933788] ? zone_watermark_ok_safe+0x220/0x220 [ 1816.933811] __alloc_pages_nodemask+0x2127/0x2720 [ 1816.936823] syz-executor.3 cpuset= [ 1816.940472] ? lock_acquire+0x170/0x3f0 [ 1816.940491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1816.940508] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1816.950007] / [ 1816.951579] ? __mutex_unlock_slowpath+0x75/0x770 [ 1816.959590] mems_allowed=0-1 [ 1816.959938] ? retint_kernel+0x2d/0x2d [ 1816.989246] alloc_pages_current+0x155/0x260 [ 1816.993686] ion_page_pool_alloc+0x118/0x1b0 [ 1816.998116] ion_system_heap_allocate+0x133/0x8c0 [ 1817.002964] ? ion_alloc+0x187/0x810 [ 1817.003037] Node 1 active_anon:816kB inactive_anon:16272kB active_file:432kB inactive_file:400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68096kB dirty:16kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1817.006677] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1817.006688] ? ion_system_contig_heap_create+0x130/0x130 [ 1817.006698] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1817.006710] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1817.006721] ion_alloc+0x204/0x810 [ 1817.058298] ? ion_dma_buf_release+0x40/0x40 [ 1817.062718] ? __might_fault+0x177/0x1b0 [ 1817.066785] ion_ioctl+0xea/0x1f0 [ 1817.070232] ? ion_query_heaps+0x360/0x360 [ 1817.074463] ? ion_query_heaps+0x360/0x360 [ 1817.078703] do_vfs_ioctl+0x75a/0xff0 [ 1817.082504] ? ioctl_preallocate+0x1a0/0x1a0 [ 1817.085524] Node 0 [ 1817.087015] ? lock_downgrade+0x740/0x740 [ 1817.087031] ? __fget+0x225/0x360 [ 1817.087041] ? do_vfs_ioctl+0xff0/0xff0 [ 1817.090441] DMA free:11140kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1817.093439] ? security_file_ioctl+0x83/0xb0 [ 1817.093450] SyS_ioctl+0x7f/0xb0 [ 1817.093459] ? do_vfs_ioctl+0xff0/0xff0 [ 1817.093469] do_syscall_64+0x1d5/0x640 [ 1817.093485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1817.093494] RIP: 0033:0x466459 [ 1817.093499] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1817.093509] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1817.093514] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1817.093519] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1817.093523] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1817.093529] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1817.207854] CPU: 1 PID: 19981 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1817.216106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1817.225465] Call Trace: [ 1817.228075] dump_stack+0x1b2/0x281 [ 1817.231713] warn_alloc.cold+0x96/0x1cc [ 1817.235709] ? zone_watermark_ok_safe+0x220/0x220 [ 1817.240672] __alloc_pages_nodemask+0x2127/0x2720 [ 1817.245537] ? lock_acquire+0x170/0x3f0 [ 1817.249534] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1817.254396] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1817.259859] ? __mutex_unlock_slowpath+0x75/0x770 [ 1817.264724] alloc_pages_current+0x155/0x260 [ 1817.269195] ion_page_pool_alloc+0x118/0x1b0 [ 1817.273610] ion_system_heap_allocate+0x133/0x8c0 [ 1817.278469] ? ion_alloc+0x187/0x810 [ 1817.282184] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1817.287678] ? ion_system_contig_heap_create+0x130/0x130 [ 1817.293226] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1817.298251] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1817.303112] ion_alloc+0x204/0x810 [ 1817.306673] ? ion_dma_buf_release+0x40/0x40 [ 1817.311139] ? __might_fault+0x177/0x1b0 [ 1817.315211] ion_ioctl+0xea/0x1f0 [ 1817.318673] ? ion_query_heaps+0x360/0x360 [ 1817.322918] ? _raw_spin_unlock+0x29/0x40 [ 1817.327072] ? ion_query_heaps+0x360/0x360 [ 1817.331312] do_vfs_ioctl+0x75a/0xff0 [ 1817.335123] ? ioctl_preallocate+0x1a0/0x1a0 [ 1817.339534] ? lock_downgrade+0x740/0x740 [ 1817.343689] ? __fget+0x225/0x360 [ 1817.347175] ? do_vfs_ioctl+0xff0/0xff0 [ 1817.351153] ? security_file_ioctl+0x83/0xb0 [ 1817.355569] SyS_ioctl+0x7f/0xb0 [ 1817.358939] ? do_vfs_ioctl+0xff0/0xff0 [ 1817.362920] do_syscall_64+0x1d5/0x640 [ 1817.366817] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1817.372008] RIP: 0033:0x466459 [ 1817.375192] RSP: 002b:00007f8faa379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1817.383004] RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000466459 [ 1817.390280] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1817.397567] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1817.404845] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0 [ 1817.412130] R13: 00007ffdd07e8f7f R14: 00007f8faa379300 R15: 0000000000022000 [ 1817.461759] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1817.510643] Node 0 DMA32 free:45060kB min:36200kB low:45248kB high:54296kB active_anon:59452kB inactive_anon:88884kB active_file:7856kB inactive_file:7596kB unevictable:0kB writepending:56kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2824kB bounce:0kB free_pcp:796kB local_pcp:676kB free_cma:0kB [ 1817.558506] lowmem_reserve[]: 0 0 0 0 0 [ 1817.564283] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1817.661510] lowmem_reserve[]: 0 0 0 0 0 [ 1817.670115] Node 1 Normal free:479124kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16272kB active_file:388kB inactive_file:388kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:464kB bounce:0kB free_pcp:348kB local_pcp:180kB free_cma:0kB [ 1817.746920] lowmem_reserve[]: 0 0 0 0 0 [ 1817.755096] Node 0 DMA: 2*4kB (ME) 10*8kB (UM) 4*16kB (UE) 12*32kB (UME) 11*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11096kB [ 1817.806430] Node 0 DMA32: 571*4kB (ME) 549*8kB (UME) 230*16kB (UME) 579*32kB (UME) 175*64kB (UM) 32*128kB (UM) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45204kB [ 1817.840697] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1817.855883] Node 1 Normal: 1*4kB (U) 0*8kB 2*16kB (ME) 830*32kB (UE) 3444*64kB (UM) 561*128kB (U) 80*256kB (U) 12*512kB (U) 8*1024kB (UM) 0*2048kB 0*4096kB = 353636kB [ 1817.894024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1817.924222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1817.956644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1817.982143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1818.040852] 28538 total pagecache pages [ 1818.044847] 0 pages in swap cache [ 1818.060671] Swap cache stats: add 0, delete 0, find 0/0 [ 1818.069885] Free swap = 0kB [ 1818.073049] Total swap = 0kB [ 1818.076261] 2097051 pages RAM [ 1818.079371] 0 pages HighMem/MovableOnly [ 1818.083815] 363849 pages reserved [ 1818.091204] 0 pages cma reserved [ 1818.254283] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1818.300648] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1818.305805] CPU: 0 PID: 14213 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1818.313686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1818.323213] Call Trace: [ 1818.325806] dump_stack+0x1b2/0x281 [ 1818.329534] dump_header+0x178/0x82f [ 1818.333243] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1818.338437] ? ___ratelimit+0x2cd/0x530 [ 1818.342412] oom_kill_process.cold+0x10/0xa40 [ 1818.346916] out_of_memory+0xe3e/0x1190 [ 1818.350909] ? oom_killer_disable+0x1c0/0x1c0 [ 1818.356288] ? mutex_trylock+0x152/0x1a0 [ 1818.360348] __alloc_pages_nodemask+0x23e1/0x2720 [ 1818.365204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1818.370106] alloc_pages_current+0x155/0x260 [ 1818.374514] filemap_fault+0x11a1/0x1ad0 [ 1818.378609] ext4_filemap_fault+0x84/0xb0 [ 1818.382765] __do_fault+0xfa/0x380 [ 1818.386305] __handle_mm_fault+0x2497/0x4620 [ 1818.390712] ? vm_insert_page+0x7c0/0x7c0 [ 1818.394940] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1818.399492] ? nanosleep_copyout+0x100/0x100 [ 1818.404252] ? mark_held_locks+0xa6/0xf0 [ 1818.408313] handle_mm_fault+0x455/0x9c0 [ 1818.412376] __do_page_fault+0x549/0xad0 [ 1818.416451] ? spurious_fault+0x640/0x640 [ 1818.420590] ? do_page_fault+0x60/0x500 [ 1818.424557] ? page_fault+0x2f/0x50 [ 1818.428176] page_fault+0x45/0x50 [ 1818.431621] RIP: 1bb8bd:0x6 [ 1818.434539] RSP: 00c5:00007ffce51bfe5c EFLAGS: 00000032 [ 1818.528149] Mem-Info: [ 1818.540035] active_anon:15071 inactive_anon:26289 isolated_anon:0 [ 1818.540035] active_file:42 inactive_file:17 isolated_file:24 [ 1818.540035] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1818.540035] slab_reclaimable:12744 slab_unreclaimable:123992 [ 1818.540035] mapped:52649 shmem:27412 pagetables:822 bounce:0 [ 1818.540035] free:20620 free_pcp:340 free_cma:0 [ 1818.577547] Node 0 active_anon:59460kB inactive_anon:88884kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143024kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1818.664728] Node 1 active_anon:824kB inactive_anon:16272kB active_file:120kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:67572kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1818.696321] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1818.735736] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1818.744620] Node 0 DMA32 free:108780kB min:36200kB low:45248kB high:54296kB active_anon:59460kB inactive_anon:88884kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2824kB bounce:0kB free_pcp:668kB local_pcp:624kB free_cma:0kB [ 1818.820631] lowmem_reserve[]: 0 0 0 0 0 [ 1818.824674] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1818.860653] lowmem_reserve[]: 0 0 0 0 0 [ 1818.864687] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16272kB active_file:72kB inactive_file:536kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:464kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1818.893693] lowmem_reserve[]: 0 0 0 0 0 [ 1818.897708] Node 0 DMA: 2*4kB (UE) 3*8kB (U) 1*16kB (E) 10*32kB (UE) 10*64kB (UE) 8*128kB (UE) 3*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10992kB [ 1818.913040] Node 0 DMA32: 563*4kB (UME) 588*8kB (UME) 214*16kB (UME) 422*32kB (UME) 46*64kB (UM) 17*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29004kB [ 1818.931432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1818.950870] Node 1 Normal: 36*4kB (UM) 11*8kB (M) 6*16kB (ME) 5*32kB (UME) 7*64kB (UM) 1*128kB (M) 46*256kB (U) 12*512kB (U) 8*1024kB (UM) 0*2048kB 0*4096kB = 27176kB [ 1818.980633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1818.991889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.070733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.079701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.123533] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1819.126442] syz-executor.2: [ 1819.135857] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1819.135885] CPU: 1 PID: 19857 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1819.150510] page allocation failure: order:0 [ 1819.152216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1819.152220] Call Trace: [ 1819.152242] dump_stack+0x1b2/0x281 [ 1819.152256] warn_alloc.cold+0x96/0x1cc [ 1819.152271] ? zone_watermark_ok_safe+0x220/0x220 [ 1819.156684] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1819.166136] ? usleep_range+0x130/0x130 [ 1819.166147] ? try_to_free_pages+0x23f/0x6e0 [ 1819.166156] ? _find_next_bit+0xdb/0x100 [ 1819.166166] ? run_timer_softirq+0x5a0/0x5a0 [ 1819.166182] __alloc_pages_nodemask+0x2127/0x2720 [ 1819.168762] 27455 total pagecache pages [ 1819.172367] ? lock_acquire+0x170/0x3f0 [ 1819.172384] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1819.172396] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1819.176368] 0 pages in swap cache [ 1819.181208] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1819.181226] alloc_pages_current+0x155/0x260 [ 1819.181244] ion_page_pool_alloc+0x118/0x1b0 [ 1819.188351] (null) [ 1819.192307] ion_system_heap_allocate+0x133/0x8c0 [ 1819.192319] ? _raw_spin_unlock+0x29/0x40 [ 1819.192327] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1819.192336] ? ion_system_contig_heap_create+0x130/0x130 [ 1819.192350] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1819.196833] syz-executor.2 cpuset= [ 1819.201321] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1819.201332] ion_alloc+0x27a/0x810 [ 1819.201346] ? ion_dma_buf_release+0x40/0x40 [ 1819.201358] ? __might_fault+0x177/0x1b0 [ 1819.205788] Swap cache stats: add 0, delete 0, find 0/0 [ 1819.210609] ion_ioctl+0xea/0x1f0 [ 1819.210619] ? ion_query_heaps+0x360/0x360 [ 1819.210630] ? ion_query_heaps+0x360/0x360 [ 1819.210641] do_vfs_ioctl+0x75a/0xff0 [ 1819.210652] ? ioctl_preallocate+0x1a0/0x1a0 [ 1819.215043] Free swap = 0kB [ 1819.219017] ? lock_downgrade+0x740/0x740 [ 1819.219032] ? __fget+0x225/0x360 [ 1819.230599] / [ 1819.231807] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.237240] mems_allowed=0-1 [ 1819.241639] ? security_file_ioctl+0x83/0xb0 [ 1819.241650] SyS_ioctl+0x7f/0xb0 [ 1819.241659] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.241670] do_syscall_64+0x1d5/0x640 [ 1819.241684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1819.246097] Total swap = 0kB [ 1819.248208] RIP: 0033:0x466459 [ 1819.253087] 2097051 pages RAM [ 1819.257159] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1819.270602] 0 pages HighMem/MovableOnly [ 1819.272506] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1819.276031] 363849 pages reserved [ 1819.280854] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1819.280860] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1819.280864] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1819.280869] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1819.282030] CPU: 1 PID: 19870 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1819.284428] 0 pages cma reserved [ 1819.288826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1819.297739] warn_alloc_show_mem: 3 callbacks suppressed [ 1819.297743] Mem-Info: [ 1819.298211] Call Trace: [ 1819.301696] active_anon:15071 inactive_anon:26289 isolated_anon:0 [ 1819.301696] active_file:38 inactive_file:0 isolated_file:0 [ 1819.301696] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1819.301696] slab_reclaimable:12744 slab_unreclaimable:123992 [ 1819.301696] mapped:52638 shmem:27412 pagetables:822 bounce:0 [ 1819.301696] free:15606 free_pcp:0 free_cma:0 [ 1819.305879] dump_stack+0x1b2/0x281 [ 1819.310101] Node 0 active_anon:59460kB inactive_anon:88884kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143068kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1819.313872] warn_alloc.cold+0x96/0x1cc [ 1819.313883] ? zone_watermark_ok_safe+0x220/0x220 [ 1819.313893] ? usleep_range+0x130/0x130 [ 1819.313902] ? try_to_free_pages+0x23f/0x6e0 [ 1819.313913] ? _find_next_bit+0xdb/0x100 [ 1819.318321] Out of memory (oom_kill_allocating_task): Kill process 14213 (syz-executor.5) score 0 or sacrifice child [ 1819.321307] ? run_timer_softirq+0x5a0/0x5a0 [ 1819.321324] __alloc_pages_nodemask+0x2127/0x2720 [ 1819.321341] ? lock_acquire+0x170/0x3f0 [ 1819.325489] Killed process 19963 (syz-executor.5) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1819.328908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1819.330870] Node 1 active_anon:824kB inactive_anon:16272kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67484kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1819.334567] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1819.337647] Node 0 [ 1819.342053] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1819.342072] alloc_pages_current+0x155/0x260 [ 1819.342093] ion_page_pool_alloc+0x118/0x1b0 [ 1819.345452] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.349406] ion_system_heap_allocate+0x133/0x8c0 [ 1819.353315] lowmem_reserve[]: [ 1819.358459] ? _raw_spin_unlock+0x29/0x40 [ 1819.361487] 0 [ 1819.364632] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1819.367722] 2717 [ 1819.375425] ? ion_system_contig_heap_create+0x130/0x130 [ 1819.375436] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1819.375446] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1819.375457] ion_alloc+0x27a/0x810 [ 1819.375470] ? ion_dma_buf_release+0x40/0x40 [ 1819.379427] 2718 [ 1819.386700] ? copy_user_generic_unrolled+0x89/0xc0 [ 1819.386713] ion_ioctl+0xea/0x1f0 [ 1819.386722] ? ion_query_heaps+0x360/0x360 [ 1819.386733] ? ion_query_heaps+0x360/0x360 [ 1819.390207] 2718 [ 1819.397475] do_vfs_ioctl+0x75a/0xff0 [ 1819.397488] ? ioctl_preallocate+0x1a0/0x1a0 [ 1819.397497] ? lock_downgrade+0x740/0x740 [ 1819.397510] ? __fget+0x225/0x360 [ 1819.397521] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.404842] 2718 [ 1819.412950] ? security_file_ioctl+0x83/0xb0 [ 1819.412962] SyS_ioctl+0x7f/0xb0 [ 1819.412970] ? do_vfs_ioctl+0xff0/0xff0 [ 1819.412982] do_syscall_64+0x1d5/0x640 [ 1819.412996] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1819.428227] RIP: 0033:0x466459 [ 1819.428232] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1819.428241] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1819.428246] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1819.428251] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1819.428255] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1819.428260] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1819.437480] oom_reaper: reaped process 19963 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1819.445651] Node 0 DMA32 free:208348kB min:36200kB low:45248kB high:54296kB active_anon:59360kB inactive_anon:88884kB active_file:44kB inactive_file:112kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2824kB bounce:0kB free_pcp:100kB local_pcp:100kB free_cma:0kB [ 1819.956794] lowmem_reserve[]: 0 0 0 0 0 [ 1819.983869] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1820.025841] lowmem_reserve[]: 0 0 0 0 0 [ 1820.062179] Node 1 Normal free:1232400kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:16272kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:464kB bounce:0kB free_pcp:1420kB local_pcp:728kB free_cma:0kB [ 1820.121262] lowmem_reserve[]: 0 0 0 0 0 [ 1820.156530] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 9*32kB (UE) 14*64kB (UE) 9*128kB (UE) 3*256kB (UE) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 13392kB [ 1820.197766] Node 0 DMA32: 66*4kB (UE) 300*8kB (ME) 203*16kB (ME) 85*32kB (UME) 581*64kB (UME) 308*128kB (UME) 110*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 113912kB [ 1820.230738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1820.250720] Node 1 Normal: 5213*4kB (UM) 3094*8kB (UM) 1493*16kB (UME) 5*32kB (ME) 5217*64kB (UM) 1444*128kB (UM) 272*256kB (UM) 70*512kB (U) 366*1024kB (UM) 80*2048kB (U) 0*4096kB = 1232468kB [ 1820.270731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.279691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1820.288504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.340643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1820.349276] 28547 total pagecache pages [ 1820.380626] 0 pages in swap cache [ 1820.384107] Swap cache stats: add 0, delete 0, find 0/0 [ 1820.389476] Free swap = 0kB [ 1820.404940] Total swap = 0kB [ 1820.408608] 2097051 pages RAM [ 1820.444486] 0 pages HighMem/MovableOnly [ 1820.448505] 363849 pages reserved [ 1820.452058] 0 pages cma reserved 07:58:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x9, 0xb0a, 0x4, 0x492, r1, 0x6, [], 0x0, r1, 0x5, 0x5, 0x4}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffe, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}]}, 0x60}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r3) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000ffdbdf25860000000c00990007000000360000000800a100010400000500180123000000963351cc7a3f036135547f2228b4ccbddb595494b2198af491ad3b372701045489c07c54839a14072f21d17aa011b41caf1d2b7eb449ebdaea389ef9dc529425c27dafa61a4692cbf5c84a4244e49e775296490e78ee6b31e99aab171f58156e781e7e40"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48041) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600)='l2tp\x00', r5) r6 = accept(r3, &(0x7f0000000440)=@l2tp, &(0x7f00000004c0)=0x80) r7 = accept(r0, 0x0, &(0x7f0000000740)) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="cc0000438e00", @ANYRES16, @ANYBLOB="000225bd7000fbdbdf2511000000080005000400000008000400000000002c0003801400020076657468315f746f5f7465616d00000014000600000000000000000000000000000000013000028008000400090000000800030003000000060002004e20000014000100ff010000000000000000000000000001080006000000000020000380140006000000000000000000000000000000000108000500000000001c000380060007004e21000008000500e000000108000300020000000800040004000000"], 0xcc}, 0x1, 0x0, 0x0, 0x2400e805}, 0x20000000) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1e0, 0x12, 0x300, 0x70bd26, 0x25dfdbfd, {0x3, 0x3, 0xe4, 0x5, {0x4e24, 0x4e21, [0x1f, 0x6, 0x9, 0x20], [0x0, 0xfffffffc, 0x3f, 0x9], 0x0, [0x7, 0x5]}, 0x3, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "64750c79c367a203dd5c89f3e57edd699b38667f7a68a4fdb4732d2ce56fa8f308e3d56f7fd8b6b82e2ec3d0eeb7ff8da6559dc04b0771924b8a1e7b6ed79ac55496b09292a260e5d9764a2ace5cc3b8a4d1b49c41fcf7"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "86787d6fb034c0fde70f8b15a628d47b59bb936d5b00a6fbbae016dc85480f6f287e14584e53d52320ec1da7fde8"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xade, 0x78}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4@\x00\x00', @ANYRES16=r9, @ANYBLOB="000126bd7000ffdbdf251000000008000600", @ANYRES32=0x0, @ANYBLOB="080031000500000005002f00010000010000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x20008000) 07:58:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r2) 07:58:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1821.933309] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1821.947221] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1821.981815] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1821.986985] CPU: 0 PID: 19992 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1821.993822] oom_reaper: reaped process 19962 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1821.994968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.014714] Call Trace: [ 1822.017314] dump_stack+0x1b2/0x281 [ 1822.020975] warn_alloc.cold+0x96/0x1cc [ 1822.024955] ? zone_watermark_ok_safe+0x220/0x220 [ 1822.030003] __alloc_pages_nodemask+0x2127/0x2720 [ 1822.038968] ? lock_acquire+0x170/0x3f0 [ 1822.042965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1822.047818] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1822.053359] ? __mutex_unlock_slowpath+0x75/0x770 [ 1822.058212] alloc_pages_current+0x155/0x260 [ 1822.062975] ion_page_pool_alloc+0x118/0x1b0 [ 1822.067647] ion_system_heap_allocate+0x133/0x8c0 [ 1822.068150] oom_reaper: reaped process 19959 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1822.072492] ? ion_alloc+0x187/0x810 [ 1822.072503] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1822.072511] ? ion_system_contig_heap_create+0x130/0x130 [ 1822.072521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1822.072533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1822.072542] ion_alloc+0x204/0x810 [ 1822.072554] ? ion_dma_buf_release+0x40/0x40 [ 1822.072565] ? __might_fault+0x177/0x1b0 [ 1822.072576] ion_ioctl+0xea/0x1f0 [ 1822.072585] ? ion_query_heaps+0x360/0x360 [ 1822.072597] ? ion_query_heaps+0x360/0x360 [ 1822.072606] do_vfs_ioctl+0x75a/0xff0 [ 1822.072617] ? ioctl_preallocate+0x1a0/0x1a0 [ 1822.072626] ? lock_downgrade+0x740/0x740 [ 1822.072638] ? __fget+0x225/0x360 [ 1822.105747] syz-executor.0 cpuset= [ 1822.108482] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.118858] / [ 1822.120460] ? security_file_ioctl+0x83/0xb0 [ 1822.133909] mems_allowed=0-1 [ 1822.136163] SyS_ioctl+0x7f/0xb0 [ 1822.168147] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.172168] do_syscall_64+0x1d5/0x640 [ 1822.176063] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1822.181252] RIP: 0033:0x466459 [ 1822.184436] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1822.192579] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1822.199846] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1822.207138] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1822.214408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1822.221679] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1822.232382] CPU: 1 PID: 19987 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1822.240640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.241284] syz-executor.3: [ 1822.250123] Call Trace: [ 1822.250135] page allocation failure: order:0 [ 1822.253148] dump_stack+0x1b2/0x281 [ 1822.253161] warn_alloc.cold+0x96/0x1cc [ 1822.253173] ? zone_watermark_ok_safe+0x220/0x220 [ 1822.253193] __alloc_pages_nodemask+0x2127/0x2720 [ 1822.255826] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1822.260234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1822.263894] (null) [ 1822.267814] ? migrate_swap_stop+0x880/0x880 [ 1822.272855] syz-executor.3 cpuset= [ 1822.277743] ? lock_acquire+0x170/0x3f0 [ 1822.285081] / [ 1822.289962] ? wake_up_q+0x82/0xd0 [ 1822.292132] mems_allowed=0-1 [ 1822.296492] ? __mutex_unlock_slowpath+0x261/0x770 [ 1822.317417] alloc_pages_current+0x155/0x260 [ 1822.321848] ion_page_pool_alloc+0x118/0x1b0 [ 1822.326281] ion_system_heap_allocate+0x133/0x8c0 [ 1822.331122] ? ion_alloc+0x187/0x810 [ 1822.335379] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1822.341886] ? ion_system_contig_heap_create+0x130/0x130 [ 1822.349087] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1822.354202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1822.359749] ion_alloc+0x204/0x810 [ 1822.363748] ? ion_dma_buf_release+0x40/0x40 [ 1822.368163] ? __might_fault+0x177/0x1b0 [ 1822.372694] ion_ioctl+0xea/0x1f0 [ 1822.376252] ? ion_query_heaps+0x360/0x360 [ 1822.380504] ? ion_query_heaps+0x360/0x360 [ 1822.384832] do_vfs_ioctl+0x75a/0xff0 [ 1822.388639] ? ioctl_preallocate+0x1a0/0x1a0 [ 1822.393076] ? lock_downgrade+0x740/0x740 [ 1822.397321] ? __fget+0x225/0x360 [ 1822.400780] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.405188] ? security_file_ioctl+0x83/0xb0 [ 1822.409601] SyS_ioctl+0x7f/0xb0 [ 1822.412970] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.416968] do_syscall_64+0x1d5/0x640 [ 1822.420914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1822.426104] RIP: 0033:0x466459 [ 1822.429288] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1822.437006] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1822.444277] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1822.451554] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1822.459097] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1822.466396] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1822.473701] CPU: 0 PID: 19962 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1822.481715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.486714] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1822.491331] Call Trace: [ 1822.491353] dump_stack+0x1b2/0x281 [ 1822.491366] warn_alloc.cold+0x96/0x1cc [ 1822.491378] ? zone_watermark_ok_safe+0x220/0x220 [ 1822.491388] ? usleep_range+0x130/0x130 [ 1822.491399] ? try_to_free_pages+0x23f/0x6e0 [ 1822.524917] ? _find_next_bit+0xdb/0x100 [ 1822.529332] ? run_timer_softirq+0x5a0/0x5a0 [ 1822.535272] __alloc_pages_nodemask+0x2127/0x2720 [ 1822.540122] ? lock_acquire+0x170/0x3f0 [ 1822.544116] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1822.549132] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1822.553735] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1822.559292] alloc_pages_current+0x155/0x260 [ 1822.565565] ion_page_pool_alloc+0x118/0x1b0 [ 1822.569994] ion_system_heap_allocate+0x133/0x8c0 [ 1822.575148] ? ion_alloc+0x187/0x810 [ 1822.578890] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1822.584627] ? ion_system_contig_heap_create+0x130/0x130 [ 1822.590114] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1822.595142] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1822.600026] ion_alloc+0x204/0x810 [ 1822.603576] ? ion_dma_buf_release+0x40/0x40 [ 1822.607993] ? __might_fault+0x177/0x1b0 [ 1822.612066] ion_ioctl+0xea/0x1f0 [ 1822.615785] ? ion_query_heaps+0x360/0x360 [ 1822.622915] ? ion_query_heaps+0x360/0x360 [ 1822.627157] do_vfs_ioctl+0x75a/0xff0 [ 1822.630963] ? ioctl_preallocate+0x1a0/0x1a0 [ 1822.635376] ? lock_downgrade+0x740/0x740 [ 1822.641272] ? __fget+0x225/0x360 [ 1822.646745] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.650988] ? security_file_ioctl+0x83/0xb0 [ 1822.655415] SyS_ioctl+0x7f/0xb0 [ 1822.658821] ? do_vfs_ioctl+0xff0/0xff0 [ 1822.659600] (null) [ 1822.662911] do_syscall_64+0x1d5/0x640 [ 1822.662928] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1822.662937] RIP: 0033:0x466459 [ 1822.662941] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1822.662951] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1822.662962] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1822.662967] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1822.662971] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1822.662977] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1822.690648] Bluetooth: hci4 command 0x0406 tx timeout [ 1822.733786] warn_alloc_show_mem: 1 callbacks suppressed [ 1822.733791] Mem-Info: [ 1822.744626] active_anon:15105 inactive_anon:26289 isolated_anon:0 [ 1822.744626] active_file:18 inactive_file:13 isolated_file:0 [ 1822.744626] unevictable:0 dirty:1 writeback:1 unstable:0 [ 1822.744626] slab_reclaimable:12703 slab_unreclaimable:124392 [ 1822.744626] mapped:52645 shmem:27412 pagetables:822 bounce:0 [ 1822.744626] free:13921 free_pcp:0 free_cma:0 [ 1822.805311] Node 0 active_anon:59216kB inactive_anon:88884kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143096kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1822.839071] Node 1 active_anon:1204kB inactive_anon:16272kB active_file:32kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67484kB dirty:4kB writeback:4kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1822.870925] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1822.877403] syz-executor.4: [ 1822.885040] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1822.900604] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.919067] page allocation failure: order:0 [ 1822.927293] CPU: 0 PID: 19963 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1822.939577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.948931] Call Trace: [ 1822.951529] dump_stack+0x1b2/0x281 [ 1822.955164] warn_alloc.cold+0x96/0x1cc [ 1822.959142] ? zone_watermark_ok_safe+0x220/0x220 [ 1822.963993] ? usleep_range+0x130/0x130 [ 1822.967974] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1822.973098] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1822.974407] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1822.978111] ? run_timer_softirq+0x5a0/0x5a0 [ 1822.978130] __alloc_pages_nodemask+0x2127/0x2720 [ 1822.978147] ? lock_acquire+0x170/0x3f0 [ 1822.978163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1822.978173] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1822.978189] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1822.995052] , order=0, oom_score_adj=0 [ 1822.998507] ? __sanitizer_cov_trace_pc+0x28/0x50 [ 1822.998522] alloc_pages_current+0x155/0x260 [ 1822.998535] ion_page_pool_alloc+0x118/0x1b0 [ 1822.998544] ion_system_heap_allocate+0x133/0x8c0 [ 1822.998553] ? ion_alloc+0x187/0x810 [ 1822.998563] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1822.998571] ? ion_system_contig_heap_create+0x130/0x130 [ 1822.998581] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1822.998592] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1822.998601] ion_alloc+0x204/0x810 [ 1822.998617] ? ion_dma_buf_release+0x40/0x40 [ 1823.027260] (null) [ 1823.030974] ? __might_fault+0x177/0x1b0 [ 1823.030988] ion_ioctl+0xea/0x1f0 [ 1823.030997] ? ion_query_heaps+0x360/0x360 [ 1823.031009] ? ion_query_heaps+0x360/0x360 [ 1823.031025] do_vfs_ioctl+0x75a/0xff0 [ 1823.031037] ? ioctl_preallocate+0x1a0/0x1a0 [ 1823.031046] ? lock_downgrade+0x740/0x740 [ 1823.031062] ? __fget+0x225/0x360 [ 1823.038122] syz-executor.0 cpuset= [ 1823.039599] ? do_vfs_ioctl+0xff0/0xff0 [ 1823.039612] ? security_file_ioctl+0x83/0xb0 [ 1823.039622] SyS_ioctl+0x7f/0xb0 [ 1823.050683] syz-executor.4 cpuset= [ 1823.055512] ? do_vfs_ioctl+0xff0/0xff0 [ 1823.055526] do_syscall_64+0x1d5/0x640 [ 1823.055540] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1823.055548] RIP: 0033:0x466459 [ 1823.055552] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1823.055561] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1823.055566] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1823.055571] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1823.055575] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1823.055580] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1823.057272] lowmem_reserve[]: [ 1823.085260] / [ 1823.113506] 0 [ 1823.150672] / [ 1823.211249] 2717 2718 2718 2718 [ 1823.218931] Node 0 DMA32 free:44196kB min:36200kB low:45248kB high:54296kB active_anon:59216kB inactive_anon:88884kB active_file:196kB inactive_file:188kB unevictable:0kB writepending:24kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2736kB bounce:0kB free_pcp:252kB local_pcp:108kB free_cma:0kB [ 1823.279702] lowmem_reserve[]: 0 0 0 0 0 [ 1823.290638] mems_allowed=0-1 [ 1823.294246] CPU: 1 PID: 17800 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1823.294475] Node 0 [ 1823.302142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1823.302147] Call Trace: [ 1823.302166] dump_stack+0x1b2/0x281 [ 1823.302177] dump_header+0x178/0x82f [ 1823.302187] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1823.302195] ? ___ratelimit+0x2cd/0x530 [ 1823.302205] oom_kill_process.cold+0x10/0xa40 [ 1823.302222] out_of_memory+0xe3e/0x1190 [ 1823.310159] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1823.313819] ? oom_killer_disable+0x1c0/0x1c0 [ 1823.313829] ? mutex_trylock+0x152/0x1a0 [ 1823.313839] __alloc_pages_nodemask+0x23e1/0x2720 [ 1823.313857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1823.316491] lowmem_reserve[]: [ 1823.320057] alloc_pages_current+0x155/0x260 [ 1823.323773] 0 [ 1823.328832] filemap_fault+0x11a1/0x1ad0 [ 1823.328857] ext4_filemap_fault+0x84/0xb0 [ 1823.332894] 0 [ 1823.337308] __do_fault+0xfa/0x380 [ 1823.341304] 0 [ 1823.366170] __handle_mm_fault+0x2497/0x4620 [ 1823.366179] ? vm_insert_page+0x7c0/0x7c0 [ 1823.366187] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1823.366194] ? nanosleep_copyout+0x100/0x100 [ 1823.366207] ? mark_held_locks+0xa6/0xf0 [ 1823.366217] handle_mm_fault+0x455/0x9c0 [ 1823.366231] __do_page_fault+0x549/0xad0 [ 1823.370789] 0 [ 1823.374778] ? spurious_fault+0x640/0x640 [ 1823.379598] 0 [ 1823.384551] ? do_page_fault+0x60/0x500 [ 1823.384560] ? page_fault+0x2f/0x50 [ 1823.384566] page_fault+0x45/0x50 [ 1823.384574] RIP: 1bcba1:0x5 [ 1823.384577] RSP: 0045:00007fff70018fac EFLAGS: 00000032 [ 1823.385531] mems_allowed=0-1 [ 1823.600635] CPU: 1 PID: 19959 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1823.608804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1823.618160] Call Trace: [ 1823.620841] dump_stack+0x1b2/0x281 [ 1823.624471] warn_alloc.cold+0x96/0x1cc [ 1823.628445] ? zone_watermark_ok_safe+0x220/0x220 [ 1823.633293] ? usleep_range+0x130/0x130 [ 1823.637265] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1823.642371] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1823.647416] ? run_timer_softirq+0x5a0/0x5a0 [ 1823.652100] __alloc_pages_nodemask+0x2127/0x2720 [ 1823.656962] ? lock_acquire+0x170/0x3f0 [ 1823.660951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1823.665283] Node 1 [ 1823.665790] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1823.665814] Normal free:737856kB min:53696kB low:67120kB high:80544kB active_anon:1204kB inactive_anon:16272kB active_file:8kB inactive_file:712kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:1400kB local_pcp:736kB free_cma:0kB [ 1823.668034] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1823.690652] lowmem_reserve[]: [ 1823.701866] alloc_pages_current+0x155/0x260 [ 1823.701882] ion_page_pool_alloc+0x118/0x1b0 [ 1823.701891] ion_system_heap_allocate+0x133/0x8c0 [ 1823.701900] ? ion_alloc+0x187/0x810 [ 1823.701915] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1823.733235] ? ion_system_contig_heap_create+0x130/0x130 [ 1823.738695] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1823.744079] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1823.748935] ion_alloc+0x204/0x810 [ 1823.752487] ? ion_dma_buf_release+0x40/0x40 [ 1823.756904] ? __might_fault+0x177/0x1b0 [ 1823.760971] ion_ioctl+0xea/0x1f0 [ 1823.764437] ? ion_query_heaps+0x360/0x360 [ 1823.768692] ? ion_query_heaps+0x360/0x360 [ 1823.773730] do_vfs_ioctl+0x75a/0xff0 [ 1823.777543] ? ioctl_preallocate+0x1a0/0x1a0 [ 1823.778409] 0 [ 1823.781960] ? lock_downgrade+0x740/0x740 [ 1823.781974] ? __fget+0x225/0x360 [ 1823.781984] ? do_vfs_ioctl+0xff0/0xff0 [ 1823.782000] ? security_file_ioctl+0x83/0xb0 [ 1823.798677] 0 [ 1823.800719] SyS_ioctl+0x7f/0xb0 [ 1823.800729] ? do_vfs_ioctl+0xff0/0xff0 [ 1823.800742] do_syscall_64+0x1d5/0x640 [ 1823.813757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1823.819645] RIP: 0033:0x466459 [ 1823.822840] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1823.829096] Mem-Info: [ 1823.830548] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1823.830554] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1823.830558] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1823.830563] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1823.830568] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1823.877740] 0 0 0 [ 1823.880042] Node 0 DMA: 16*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 11032kB [ 1823.914612] Node 0 DMA32: 2315*4kB (UME) 472*8kB (UME) 800*16kB (UME) 354*32kB (UME) 1242*64kB (UME) 128*128kB (UME) 21*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 138924kB [ 1823.918425] warn_alloc_show_mem: 2 callbacks suppressed [ 1823.918436] Mem-Info: [ 1823.934896] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1823.970634] active_anon:15105 inactive_anon:26289 isolated_anon:0 [ 1823.970634] active_file:28 inactive_file:831 isolated_file:0 [ 1823.970634] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1823.970634] slab_reclaimable:12678 slab_unreclaimable:126408 [ 1823.970634] mapped:53217 shmem:27412 pagetables:822 bounce:0 [ 1823.970634] free:249724 free_pcp:698 free_cma:0 [ 1823.974730] active_anon:15105 inactive_anon:26289 isolated_anon:0 [ 1823.974730] active_file:28 inactive_file:831 isolated_file:0 [ 1823.974730] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1823.974730] slab_reclaimable:12678 slab_unreclaimable:126408 [ 1823.974730] mapped:53217 shmem:27412 pagetables:822 bounce:0 [ 1823.974730] free:249724 free_pcp:698 free_cma:0 [ 1824.079189] Node 0 active_anon:59216kB inactive_anon:88884kB active_file:76kB inactive_file:2712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145068kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1824.083148] Node 1 Normal: 10730*4kB (UM) 3224*8kB (UM) 1926*16kB (UME) 1099*32kB (UME) 6897*64kB (UM) 1319*128kB (UM) 194*256kB (UM) 55*512kB (U) 18*1024kB (UM) 10*2048kB (UM) 0*4096kB = 861672kB [ 1824.125369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1824.140701] Node 1 active_anon:1204kB inactive_anon:16272kB active_file:24kB inactive_file:744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68068kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1824.170684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1824.181169] Node 0 active_anon:59216kB inactive_anon:88884kB active_file:76kB inactive_file:2712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145068kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1824.211269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1824.270665] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.274508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1824.360679] Node 1 active_anon:1204kB inactive_anon:16272kB active_file:24kB inactive_file:744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68068kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1824.361216] lowmem_reserve[]: [ 1824.430220] 28315 total pagecache pages [ 1824.470632] 0 pages in swap cache [ 1824.484279] Swap cache stats: add 0, delete 0, find 0/0 [ 1824.489812] Free swap = 0kB [ 1824.509411] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.509441] 0 [ 1824.541157] Total swap = 0kB [ 1824.550756] 2717 2718 2718 2718 [ 1824.554160] Node 0 DMA32 free:318892kB min:36200kB low:45248kB high:54296kB active_anon:59216kB inactive_anon:88884kB active_file:76kB inactive_file:2712kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2740kB bounce:0kB free_pcp:1344kB local_pcp:696kB free_cma:0kB [ 1824.556206] 2097051 pages RAM [ 1824.610605] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1824.615674] Node 0 DMA32 free:342580kB min:36200kB low:45248kB high:54296kB active_anon:59216kB inactive_anon:88884kB active_file:76kB inactive_file:2712kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2740kB bounce:0kB free_pcp:1304kB local_pcp:672kB free_cma:0kB [ 1824.616219] lowmem_reserve[]: [ 1824.645428] 0 pages HighMem/MovableOnly [ 1824.645434] 363849 pages reserved [ 1824.645437] 0 pages cma reserved [ 1824.645453] lowmem_reserve[]: 0 0 0 0 0 [ 1824.664695] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.710823] lowmem_reserve[]: 0 0 0 0 0 [ 1824.712256] 0 0 [ 1824.714881] Node 1 Normal free:1287732kB min:53696kB low:67120kB high:80544kB active_anon:1204kB inactive_anon:16272kB active_file:24kB inactive_file:744kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:1452kB local_pcp:728kB free_cma:0kB [ 1824.716859] 0 [ 1824.746479] lowmem_reserve[]: 0 0 0 0 0 [ 1824.746504] Node 0 DMA: 40*4kB (UE) 7*8kB (U) 1*16kB (E) 2*32kB [ 1824.752430] 0 0 [ 1824.765646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.822019] lowmem_reserve[]: 0 0 0 0 0 [ 1824.826054] Node 1 Normal free:1319132kB min:53696kB low:67120kB high:80544kB active_anon:1204kB inactive_anon:16272kB active_file:24kB inactive_file:744kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:1332kB local_pcp:644kB free_cma:0kB [ 1824.840620] (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 11176kB [ 1824.950670] lowmem_reserve[]: 0 0 0 0 0 [ 1824.954702] Node 0 DMA: 51*4kB (UE) 9*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 11236kB [ 1824.980663] Node 0 DMA32: 24659*4kB (UME) 3655*8kB (UME) 3331*16kB (UME) 1037*32kB (UME) 1889*64kB (UME) 326*128kB (UME) 27*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 385940kB [ 1825.001794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1825.020714] Node 0 DMA32: 24659*4kB (UME) 3653*8kB (UME) 3331*16kB (UME) 1037*32kB (UME) 1851*64kB (UME) 326*128kB (UME) 27*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 383492kB [ 1825.025307] Node 1 Normal: 31179*4kB (UM) 5112*8kB [ 1825.078187] Node 0 [ 1825.082180] (UM) 2897*16kB (UME) 1926*32kB (UME) 9145*64kB (UM) 2399*128kB (UM) 416*256kB (UM) 126*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1336956kB [ 1825.090688] Normal: [ 1825.110962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.120782] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1825.126182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.142340] Node 1 Normal: 31088*4kB (UM) 5129*8kB (UM) 2920*16kB (UME) 1974*32kB (UME) 9173*64kB (UM) 2427*128kB (UM) 418*256kB (UM) 126*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1344520kB [ 1825.183756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.192686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.200641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.207371] 28315 total pagecache pages [ 1825.240734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.245798] 0 pages in swap cache [ 1825.249349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.254220] Swap cache stats: add 0, delete 0, find 0/0 [ 1825.313910] Free swap = 0kB [ 1825.316969] Total swap = 0kB [ 1825.320001] 2097051 pages RAM [ 1825.321293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.324800] 0 pages HighMem/MovableOnly [ 1825.340633] 363849 pages reserved [ 1825.344109] 0 pages cma reserved [ 1825.347467] Out of memory (oom_kill_allocating_task): Kill process 17800 (syz-executor.0) score 0 or sacrifice child [ 1825.384859] 28315 total pagecache pages [ 1825.384923] Killed process 19987 (syz-executor.0) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1825.388847] 0 pages in swap cache [ 1825.437051] oom_reaper: reaped process 19987 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1825.450312] Swap cache stats: add 0, delete 0, find 0/0 [ 1825.466038] Free swap = 0kB [ 1825.490647] Total swap = 0kB [ 1825.493708] 2097051 pages RAM [ 1825.507156] 0 pages HighMem/MovableOnly [ 1825.511390] 363849 pages reserved [ 1825.514846] 0 pages cma reserved [ 1825.988983] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1825.991244] syz-executor.3: [ 1826.004514] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1826.009464] page allocation failure: order:4 [ 1826.012944] CPU: 0 PID: 19963 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1826.013551] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1826.017355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1826.017360] Call Trace: [ 1826.017378] dump_stack+0x1b2/0x281 [ 1826.017392] warn_alloc.cold+0x96/0x1cc [ 1826.017403] ? zone_watermark_ok_safe+0x220/0x220 [ 1826.017425] __alloc_pages_nodemask+0x2127/0x2720 [ 1826.017443] ? lock_acquire+0x170/0x3f0 [ 1826.017457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1826.017474] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1826.017487] ? __mutex_unlock_slowpath+0x75/0x770 [ 1826.017495] ? retint_kernel+0x2d/0x2d [ 1826.017509] alloc_pages_current+0x155/0x260 [ 1826.017522] ion_page_pool_alloc+0x118/0x1b0 [ 1826.017533] ion_system_heap_allocate+0x133/0x8c0 [ 1826.034105] (null) [ 1826.042387] ? _raw_spin_unlock+0x29/0x40 [ 1826.042399] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1826.042407] ? ion_system_contig_heap_create+0x130/0x130 [ 1826.042417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1826.042429] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1826.042438] ion_alloc+0x27a/0x810 [ 1826.042451] ? ion_dma_buf_release+0x40/0x40 [ 1826.042461] ? __might_fault+0x177/0x1b0 [ 1826.042472] ion_ioctl+0xea/0x1f0 [ 1826.042483] ? ion_query_heaps+0x360/0x360 [ 1826.045131] syz-executor.3 cpuset= [ 1826.048712] ? ion_query_heaps+0x360/0x360 [ 1826.057897] / [ 1826.062343] do_vfs_ioctl+0x75a/0xff0 [ 1826.066361] mems_allowed=0-1 [ 1826.071139] ? ioctl_preallocate+0x1a0/0x1a0 [ 1826.071150] ? lock_downgrade+0x740/0x740 [ 1826.071161] ? __fget+0x225/0x360 [ 1826.071169] ? do_vfs_ioctl+0xff0/0xff0 [ 1826.071180] ? security_file_ioctl+0x83/0xb0 [ 1826.071190] SyS_ioctl+0x7f/0xb0 [ 1826.071196] ? do_vfs_ioctl+0xff0/0xff0 [ 1826.071208] do_syscall_64+0x1d5/0x640 [ 1826.071222] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1826.198837] RIP: 0033:0x466459 [ 1826.202021] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1826.209742] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1826.217025] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1826.224300] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1826.231571] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1826.238856] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1826.246151] CPU: 1 PID: 19962 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1826.254054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1826.256252] warn_alloc_show_mem: 1 callbacks suppressed [ 1826.256256] Mem-Info: [ 1826.263414] Call Trace: [ 1826.263436] dump_stack+0x1b2/0x281 [ 1826.263449] warn_alloc.cold+0x96/0x1cc [ 1826.263461] ? zone_watermark_ok_safe+0x220/0x220 [ 1826.263481] __alloc_pages_nodemask+0x2127/0x2720 [ 1826.269285] active_anon:15086 inactive_anon:26289 isolated_anon:0 [ 1826.269285] active_file:559 inactive_file:554 isolated_file:0 [ 1826.269285] unevictable:0 dirty:34 writeback:0 unstable:0 [ 1826.269285] slab_reclaimable:12642 slab_unreclaimable:126905 [ 1826.269285] mapped:53564 shmem:27412 pagetables:823 bounce:0 [ 1826.269285] free:149885 free_pcp:86 free_cma:0 [ 1826.271685] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1826.271696] ? lock_acquire+0x170/0x3f0 [ 1826.271711] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1826.271728] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1826.275363] Node 0 active_anon:59256kB inactive_anon:88884kB active_file:2008kB inactive_file:1988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146336kB dirty:136kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1826.279618] ? __mutex_unlock_slowpath+0x75/0x770 [ 1826.284004] Node 1 active_anon:1088kB inactive_anon:16272kB active_file:228kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67920kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1826.289390] alloc_pages_current+0x155/0x260 [ 1826.294283] Node 0 [ 1826.327902] ion_page_pool_alloc+0x118/0x1b0 [ 1826.327913] ion_system_heap_allocate+0x133/0x8c0 [ 1826.327925] ? _raw_spin_unlock+0x29/0x40 [ 1826.327933] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1826.327942] ? ion_system_contig_heap_create+0x130/0x130 [ 1826.327963] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1826.333735] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1826.338306] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1826.343167] lowmem_reserve[]: [ 1826.348577] ion_alloc+0x27a/0x810 [ 1826.377581] 0 [ 1826.382381] ? ion_dma_buf_release+0x40/0x40 [ 1826.382396] ? __might_fault+0x177/0x1b0 [ 1826.410361] 2717 [ 1826.414040] ion_ioctl+0xea/0x1f0 [ 1826.414050] ? ion_query_heaps+0x360/0x360 [ 1826.414061] ? ion_query_heaps+0x360/0x360 [ 1826.414072] do_vfs_ioctl+0x75a/0xff0 [ 1826.414083] ? ioctl_preallocate+0x1a0/0x1a0 [ 1826.416390] 2718 [ 1826.421033] ? lock_downgrade+0x740/0x740 [ 1826.421047] ? __fget+0x225/0x360 [ 1826.421056] ? do_vfs_ioctl+0xff0/0xff0 [ 1826.421068] ? security_file_ioctl+0x83/0xb0 [ 1826.421081] SyS_ioctl+0x7f/0xb0 [ 1826.425970] 2718 [ 1826.430058] ? do_vfs_ioctl+0xff0/0xff0 [ 1826.430071] do_syscall_64+0x1d5/0x640 [ 1826.430087] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1826.435710] 2718 [ 1826.441092] RIP: 0033:0x466459 [ 1826.441097] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1826.441106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1826.441111] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1826.441116] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1826.441120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1826.441125] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1826.606575] Node 0 DMA32 free:247996kB min:36200kB low:45248kB high:54296kB active_anon:59256kB inactive_anon:88884kB active_file:2008kB inactive_file:4004kB unevictable:0kB writepending:136kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2740kB bounce:0kB free_pcp:168kB local_pcp:60kB free_cma:0kB [ 1826.637355] lowmem_reserve[]: 0 0 0 0 0 [ 1826.641439] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1826.667747] lowmem_reserve[]: 0 0 0 0 0 [ 1826.671819] Node 1 Normal free:352728kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:16272kB active_file:228kB inactive_file:228kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:172kB local_pcp:172kB free_cma:0kB [ 1826.701188] lowmem_reserve[]: 0 0 0 0 0 [ 1826.705198] Node 0 DMA: 45*4kB (UE) 13*8kB (U) 5*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10988kB [ 1826.720435] Node 0 DMA32: 3739*4kB (UME) 5228*8kB (UE) 4961*16kB (UE) 1681*32kB (UME) 40*64kB (U) 95*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 204668kB [ 1826.735761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1826.763450] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1826.781233] Node 1 Normal: 38081*4kB (UM) 7640*8kB (UM) 3543*16kB (UME) 2596*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 353204kB [ 1826.800673] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1826.806043] CPU: 1 PID: 19959 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1826.810660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.813938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1826.813946] Call Trace: [ 1826.835339] dump_stack+0x1b2/0x281 [ 1826.838998] warn_alloc.cold+0x96/0x1cc [ 1826.840623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.843021] ? zone_watermark_ok_safe+0x220/0x220 [ 1826.857187] __alloc_pages_nodemask+0x2127/0x2720 [ 1826.862041] ? lock_acquire+0x170/0x3f0 [ 1826.863938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.866023] ? lock_acquire+0x170/0x3f0 [ 1826.878900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1826.883851] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1826.889330] ? __mutex_unlock_slowpath+0x75/0x770 [ 1826.890622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.894180] ? __list_add_valid+0xf/0xa0 [ 1826.906825] alloc_pages_current+0x155/0x260 [ 1826.911265] ion_page_pool_alloc+0x118/0x1b0 [ 1826.915690] ion_system_heap_allocate+0x133/0x8c0 [ 1826.920618] 29073 total pagecache pages [ 1826.921060] ? _raw_spin_unlock+0x29/0x40 [ 1826.925035] 0 pages in swap cache [ 1826.929188] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1826.937572] ? ion_system_contig_heap_create+0x130/0x130 [ 1826.941239] Swap cache stats: add 0, delete 0, find 0/0 [ 1826.943128] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1826.949296] Free swap = 0kB [ 1826.954340] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1826.954352] ion_alloc+0x27a/0x810 [ 1826.954365] ? ion_dma_buf_release+0x40/0x40 [ 1826.954376] ? __might_fault+0x177/0x1b0 [ 1826.954387] ion_ioctl+0xea/0x1f0 [ 1826.954395] ? ion_query_heaps+0x360/0x360 [ 1826.954412] ? ion_query_heaps+0x360/0x360 [ 1826.980617] Total swap = 0kB [ 1826.982743] do_vfs_ioctl+0x75a/0xff0 [ 1826.986975] 2097051 pages RAM [ 1826.989992] ? ioctl_preallocate+0x1a0/0x1a0 [ 1827.001280] ? lock_downgrade+0x740/0x740 [ 1827.005444] ? __fget+0x225/0x360 [ 1827.008910] ? do_vfs_ioctl+0xff0/0xff0 [ 1827.010616] 0 pages HighMem/MovableOnly [ 1827.012910] ? security_file_ioctl+0x83/0xb0 [ 1827.016872] 363849 pages reserved [ 1827.021282] SyS_ioctl+0x7f/0xb0 [ 1827.021292] ? do_vfs_ioctl+0xff0/0xff0 [ 1827.021303] do_syscall_64+0x1d5/0x640 [ 1827.021316] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1827.021325] RIP: 0033:0x466459 [ 1827.021329] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.021339] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1827.021344] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1827.021354] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1827.040625] 0 pages cma reserved [ 1827.041188] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1827.084613] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1827.353296] oom_reaper: reaped process 19992 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1827.412894] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1827.449662] in:imklog cpuset=/ mems_allowed=0-1 [ 1827.472685] CPU: 0 PID: 19880 Comm: in:imklog Not tainted 4.14.231-syzkaller #0 [ 1827.480172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.489526] Call Trace: [ 1827.490698] syz-executor.0: page allocation failure: order:0 [ 1827.492137] dump_stack+0x1b2/0x281 [ 1827.492150] dump_header+0x178/0x82f [ 1827.498290] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1827.502175] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1827.502185] ? ___ratelimit+0x2cd/0x530 [ 1827.502194] oom_kill_process.cold+0x10/0xa40 [ 1827.502211] out_of_memory+0xe3e/0x1190 [ 1827.502222] ? oom_killer_disable+0x1c0/0x1c0 [ 1827.502229] ? mutex_trylock+0x152/0x1a0 [ 1827.502239] __alloc_pages_nodemask+0x23e1/0x2720 [ 1827.502260] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1827.502281] alloc_pages_current+0x155/0x260 [ 1827.502294] filemap_fault+0x11a1/0x1ad0 [ 1827.506199] syz-executor.4: [ 1827.513276] ext4_filemap_fault+0x84/0xb0 [ 1827.513286] __do_fault+0xfa/0x380 [ 1827.513295] __handle_mm_fault+0x2497/0x4620 [ 1827.513305] ? vm_insert_page+0x7c0/0x7c0 [ 1827.513314] ? lock_downgrade+0x740/0x740 [ 1827.513327] ? mark_held_locks+0xa6/0xf0 [ 1827.513337] handle_mm_fault+0x455/0x9c0 [ 1827.513349] __do_page_fault+0x549/0xad0 [ 1827.513359] ? spurious_fault+0x640/0x640 [ 1827.513371] ? do_page_fault+0x60/0x500 [ 1827.522717] page allocation failure: order:0 [ 1827.527042] ? page_fault+0x2f/0x50 [ 1827.539294] (null) [ 1827.542362] page_fault+0x45/0x50 [ 1827.542372] RIP: 1fa0:0x1f9f [ 1827.542376] RSP: 0000:0000561216f7d9d0 EFLAGS: 7f0090cc8da0 [ 1827.580093] Mem-Info: [ 1827.586047] syz-executor.5: [ 1827.589444] active_anon:15061 inactive_anon:26289 isolated_anon:0 [ 1827.589444] active_file:22 inactive_file:8 isolated_file:0 [ 1827.589444] unevictable:0 dirty:1 writeback:23 unstable:0 [ 1827.589444] slab_reclaimable:12638 slab_unreclaimable:126240 [ 1827.589444] mapped:52730 shmem:27412 pagetables:823 bounce:0 [ 1827.589444] free:13936 free_pcp:31 free_cma:0 [ 1827.591492] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1827.595956] syz-executor.2: [ 1827.600012] syz-executor.4 cpuset= [ 1827.604509] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1827.604533] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1827.604559] CPU: 0 PID: 19962 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1827.608538] page allocation failure: order:0 [ 1827.612939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.612944] Call Trace: [ 1827.612966] dump_stack+0x1b2/0x281 [ 1827.612979] warn_alloc.cold+0x96/0x1cc [ 1827.612990] ? zone_watermark_ok_safe+0x220/0x220 [ 1827.613000] ? usleep_range+0x130/0x130 [ 1827.613008] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1827.613020] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1827.613029] ? run_timer_softirq+0x5a0/0x5a0 [ 1827.613047] __alloc_pages_nodemask+0x2127/0x2720 [ 1827.617234] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1827.618821] ? lock_acquire+0x170/0x3f0 [ 1827.622322] (null) [ 1827.625259] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1827.631306] / [ 1827.633634] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1827.636908] mems_allowed=0-1 [ 1827.671501] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1827.671521] alloc_pages_current+0x155/0x260 [ 1827.671535] ion_page_pool_alloc+0x118/0x1b0 [ 1827.671544] ion_system_heap_allocate+0x133/0x8c0 [ 1827.671555] ? _raw_spin_unlock+0x29/0x40 [ 1827.671563] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1827.671570] ? ion_system_contig_heap_create+0x130/0x130 [ 1827.671580] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1827.671590] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1827.671600] ion_alloc+0x27a/0x810 [ 1827.671614] ? ion_dma_buf_release+0x40/0x40 [ 1827.671626] ? __might_fault+0x177/0x1b0 [ 1827.671637] ion_ioctl+0xea/0x1f0 [ 1827.671647] ? ion_query_heaps+0x360/0x360 [ 1827.671657] ? ion_query_heaps+0x360/0x360 [ 1827.671667] do_vfs_ioctl+0x75a/0xff0 [ 1827.671679] ? ioctl_preallocate+0x1a0/0x1a0 [ 1827.671687] ? lock_downgrade+0x740/0x740 [ 1827.671699] ? __fget+0x225/0x360 [ 1827.671707] ? do_vfs_ioctl+0xff0/0xff0 [ 1827.671718] ? security_file_ioctl+0x83/0xb0 [ 1827.671727] SyS_ioctl+0x7f/0xb0 [ 1827.671733] ? do_vfs_ioctl+0xff0/0xff0 [ 1827.671744] do_syscall_64+0x1d5/0x640 [ 1827.671758] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1827.671767] RIP: 0033:0x466459 [ 1827.671772] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.671783] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1827.671788] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1827.671794] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1827.671799] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1827.671805] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1827.680664] Node 0 active_anon:59256kB inactive_anon:88884kB active_file:52kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143456kB dirty:4kB writeback:76kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1827.683303] syz-executor.5 cpuset= [ 1827.687968] Node 1 active_anon:988kB inactive_anon:16272kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67464kB dirty:0kB writeback:16kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1827.699843] / mems_allowed=0-1 [ 1827.699909] CPU: 1 PID: 19963 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1827.699919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.713914] page allocation failure: order:0 [ 1827.717655] Call Trace: [ 1827.727063] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1827.729604] dump_stack+0x1b2/0x281 [ 1827.733280] Node 0 [ 1827.737637] warn_alloc.cold+0x96/0x1cc [ 1827.742944] (null) [ 1827.746862] ? zone_watermark_ok_safe+0x220/0x220 [ 1827.752265] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1827.757382] ? usleep_range+0x130/0x130 [ 1827.762005] syz-executor.2 cpuset= [ 1827.766792] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1827.773955] lowmem_reserve[]: [ 1827.777982] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1827.780105] 0 [ 1827.784945] ? run_timer_softirq+0x5a0/0x5a0 [ 1827.784967] __alloc_pages_nodemask+0x2127/0x2720 [ 1827.784987] ? lock_acquire+0x170/0x3f0 [ 1827.786702] / [ 1827.791263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1827.795934] 2717 [ 1827.802652] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1827.802668] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1827.802688] alloc_pages_current+0x155/0x260 [ 1827.808854] mems_allowed=0-1 [ 1827.813254] ion_page_pool_alloc+0x118/0x1b0 [ 1827.813264] ion_system_heap_allocate+0x133/0x8c0 [ 1827.813276] ? _raw_spin_unlock+0x29/0x40 [ 1827.813289] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1827.818143] warn_alloc_show_mem: 2 callbacks suppressed [ 1827.818147] Mem-Info: [ 1827.822262] ? ion_system_contig_heap_create+0x130/0x130 [ 1827.822273] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1827.822284] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1827.822295] ion_alloc+0x27a/0x810 [ 1827.822309] ? ion_dma_buf_release+0x40/0x40 [ 1827.840610] 2718 [ 1827.842993] ? __might_fault+0x177/0x1b0 [ 1827.846575] 2718 [ 1827.851499] ion_ioctl+0xea/0x1f0 [ 1827.851509] ? ion_query_heaps+0x360/0x360 [ 1827.851520] ? ion_query_heaps+0x360/0x360 [ 1827.851534] do_vfs_ioctl+0x75a/0xff0 [ 1827.855798] active_anon:15061 inactive_anon:26289 isolated_anon:0 [ 1827.855798] active_file:22 inactive_file:8 isolated_file:0 [ 1827.855798] unevictable:0 dirty:1 writeback:23 unstable:0 [ 1827.855798] slab_reclaimable:12638 slab_unreclaimable:126240 [ 1827.855798] mapped:52730 shmem:27412 pagetables:823 bounce:0 [ 1827.855798] free:13936 free_pcp:31 free_cma:0 [ 1827.859205] ? ioctl_preallocate+0x1a0/0x1a0 [ 1827.863501] Node 0 active_anon:59256kB inactive_anon:88884kB active_file:52kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143456kB dirty:4kB writeback:76kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1827.867663] ? lock_downgrade+0x740/0x740 [ 1827.880609] 2718 [ 1827.883797] ? __fget+0x225/0x360 [ 1827.892167] ? do_vfs_ioctl+0xff0/0xff0 [ 1827.892180] ? security_file_ioctl+0x83/0xb0 [ 1827.892189] SyS_ioctl+0x7f/0xb0 [ 1827.892198] ? do_vfs_ioctl+0xff0/0xff0 [ 1827.892210] do_syscall_64+0x1d5/0x640 [ 1827.892225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1827.895644] Node 1 active_anon:988kB inactive_anon:16272kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67464kB dirty:0kB writeback:16kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1827.899572] RIP: 0033:0x466459 [ 1827.920612] Node 0 [ 1827.927226] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.934564] Node 0 [ 1827.941790] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1827.941796] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1827.941801] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1827.941805] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1827.941810] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1827.942658] syz-executor.0 cpuset= [ 1827.952988] CPU: 0 PID: 19992 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1827.956460] / [ 1827.984438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1828.010633] mems_allowed=0-1 [ 1828.017040] Call Trace: [ 1828.370339] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.370634] dump_stack+0x1b2/0x281 [ 1828.370648] warn_alloc.cold+0x96/0x1cc [ 1828.370660] ? zone_watermark_ok_safe+0x220/0x220 [ 1828.370669] ? usleep_range+0x130/0x130 [ 1828.370678] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1828.370690] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1828.370701] ? run_timer_softirq+0x5a0/0x5a0 [ 1828.372966] lowmem_reserve[]: [ 1828.380251] __alloc_pages_nodemask+0x2127/0x2720 [ 1828.446671] 0 [ 1828.463672] ? lock_acquire+0x170/0x3f0 [ 1828.463689] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1828.463699] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1828.463714] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1828.463732] alloc_pages_current+0x155/0x260 [ 1828.463744] ion_page_pool_alloc+0x118/0x1b0 [ 1828.463753] ion_system_heap_allocate+0x133/0x8c0 [ 1828.463763] ? ion_alloc+0x187/0x810 [ 1828.463773] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1828.463782] ? ion_system_contig_heap_create+0x130/0x130 [ 1828.463792] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1828.463801] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1828.463811] ion_alloc+0x204/0x810 [ 1828.463824] ? ion_dma_buf_release+0x40/0x40 [ 1828.463836] ? __might_fault+0x177/0x1b0 [ 1828.463847] ion_ioctl+0xea/0x1f0 [ 1828.514746] 2717 [ 1828.518922] ? ion_query_heaps+0x360/0x360 [ 1828.554454] 2718 [ 1828.557537] ? ion_query_heaps+0x360/0x360 [ 1828.582883] 2718 [ 1828.584185] do_vfs_ioctl+0x75a/0xff0 [ 1828.586236] 2718 [ 1828.590465] ? ioctl_preallocate+0x1a0/0x1a0 [ 1828.602762] ? lock_downgrade+0x740/0x740 [ 1828.606942] ? __fget+0x225/0x360 [ 1828.610392] ? do_vfs_ioctl+0xff0/0xff0 [ 1828.614366] ? security_file_ioctl+0x83/0xb0 [ 1828.618784] SyS_ioctl+0x7f/0xb0 [ 1828.622145] ? do_vfs_ioctl+0xff0/0xff0 [ 1828.626148] do_syscall_64+0x1d5/0x640 [ 1828.626151] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:59256kB inactive_anon:88884kB active_file:20kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2740kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1828.630034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1828.664847] RIP: 0033:0x466459 [ 1828.668081] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1828.675979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1828.684050] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1828.691341] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1828.698619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1828.706178] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1828.713476] CPU: 1 PID: 19959 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1828.721388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1828.724560] DMA32 free:18400kB min:36200kB low:45248kB high:54296kB active_anon:59256kB inactive_anon:88884kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2740kB bounce:0kB free_pcp:120kB local_pcp:284kB free_cma:0kB [ 1828.731194] Call Trace: [ 1828.731218] dump_stack+0x1b2/0x281 [ 1828.731231] warn_alloc.cold+0x96/0x1cc [ 1828.731242] ? zone_watermark_ok_safe+0x220/0x220 [ 1828.731252] ? usleep_range+0x130/0x130 [ 1828.731266] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1828.784987] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1828.790017] ? run_timer_softirq+0x5a0/0x5a0 [ 1828.794513] __alloc_pages_nodemask+0x2127/0x2720 [ 1828.799400] ? lock_acquire+0x170/0x3f0 [ 1828.803408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1828.809236] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1828.814357] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1828.819830] alloc_pages_current+0x155/0x260 [ 1828.820617] lowmem_reserve[]: 0 [ 1828.824256] ion_page_pool_alloc+0x118/0x1b0 [ 1828.824268] ion_system_heap_allocate+0x133/0x8c0 [ 1828.827650] 0 [ 1828.832055] ? _raw_spin_unlock+0x29/0x40 [ 1828.832065] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1828.832073] ? ion_system_contig_heap_create+0x130/0x130 [ 1828.832083] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1828.832095] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1828.832106] ion_alloc+0x27a/0x810 [ 1828.860613] lowmem_reserve[]: [ 1828.862779] ? ion_dma_buf_release+0x40/0x40 [ 1828.867602] 0 [ 1828.871142] ? __might_fault+0x177/0x1b0 [ 1828.871155] ion_ioctl+0xea/0x1f0 [ 1828.871165] ? ion_query_heaps+0x360/0x360 [ 1828.871176] ? ion_query_heaps+0x360/0x360 [ 1828.880620] 0 [ 1828.884983] do_vfs_ioctl+0x75a/0xff0 [ 1828.888423] 0 [ 1828.892680] ? ioctl_preallocate+0x1a0/0x1a0 [ 1828.892690] ? lock_downgrade+0x740/0x740 [ 1828.892701] ? __fget+0x225/0x360 [ 1828.892710] ? do_vfs_ioctl+0xff0/0xff0 [ 1828.892721] ? security_file_ioctl+0x83/0xb0 [ 1828.892732] SyS_ioctl+0x7f/0xb0 [ 1828.908281] 0 [ 1828.908721] ? do_vfs_ioctl+0xff0/0xff0 [ 1828.914825] 0 [ 1828.916363] do_syscall_64+0x1d5/0x640 [ 1828.920332] 0 [ 1828.924753] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1828.924761] RIP: 0033:0x466459 [ 1828.924765] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1828.924776] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1828.924781] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1828.924788] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1828.928163] 0 [ 1828.929928] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1828.929936] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1828.946605] CPU: 1 PID: 19987 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1828.948156] 0 [ 1828.950503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1828.958322] Node 0 [ 1828.965495] Call Trace: [ 1828.965520] dump_stack+0x1b2/0x281 [ 1828.965533] warn_alloc.cold+0x96/0x1cc [ 1828.965544] ? zone_watermark_ok_safe+0x220/0x220 [ 1828.965558] ? usleep_range+0x130/0x130 [ 1828.980196] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1828.982028] Node 0 [ 1828.989258] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1828.996605] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.004591] ? run_timer_softirq+0x5a0/0x5a0 [ 1829.004610] __alloc_pages_nodemask+0x2127/0x2720 [ 1829.004631] ? lock_acquire+0x170/0x3f0 [ 1829.006417] lowmem_reserve[]: [ 1829.016730] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1829.016740] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1829.016756] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1829.016774] alloc_pages_current+0x155/0x260 [ 1829.019024] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.021580] ion_page_pool_alloc+0x118/0x1b0 [ 1829.021589] ion_system_heap_allocate+0x133/0x8c0 [ 1829.021598] ? ion_alloc+0x187/0x810 [ 1829.021608] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1829.021619] ? ion_system_contig_heap_create+0x130/0x130 [ 1829.025228] lowmem_reserve[]: [ 1829.029200] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1829.029214] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1829.034099] 0 [ 1829.038013] ion_alloc+0x204/0x810 [ 1829.043149] 0 [ 1829.045330] ? ion_dma_buf_release+0x40/0x40 [ 1829.050403] 0 [ 1829.075758] ? __might_fault+0x177/0x1b0 [ 1829.075771] ion_ioctl+0xea/0x1f0 [ 1829.075781] ? ion_query_heaps+0x360/0x360 [ 1829.075795] ? ion_query_heaps+0x360/0x360 [ 1829.080225] 0 [ 1829.085067] do_vfs_ioctl+0x75a/0xff0 [ 1829.085080] ? ioctl_preallocate+0x1a0/0x1a0 [ 1829.085089] ? lock_downgrade+0x740/0x740 [ 1829.085101] ? __fget+0x225/0x360 [ 1829.085111] ? do_vfs_ioctl+0xff0/0xff0 [ 1829.089095] 0 [ 1829.092208] ? security_file_ioctl+0x83/0xb0 [ 1829.092219] SyS_ioctl+0x7f/0xb0 [ 1829.092226] ? do_vfs_ioctl+0xff0/0xff0 [ 1829.092237] do_syscall_64+0x1d5/0x640 [ 1829.092258] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1829.097086] 0 [ 1829.101566] RIP: 0033:0x466459 [ 1829.101571] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.101579] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1829.101583] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1829.101588] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1829.101593] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1829.101597] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1829.124803] warn_alloc_show_mem: 1 callbacks suppressed [ 1829.124807] Mem-Info: [ 1829.137102] 0 [ 1829.145226] active_anon:15061 inactive_anon:26289 isolated_anon:0 [ 1829.145226] active_file:16 inactive_file:269 isolated_file:0 [ 1829.145226] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1829.145226] slab_reclaimable:12606 slab_unreclaimable:126132 [ 1829.145226] mapped:52831 shmem:27412 pagetables:823 bounce:0 [ 1829.145226] free:96378 free_pcp:314 free_cma:0 [ 1829.146381] 0 [ 1829.149711] Node 0 active_anon:59256kB inactive_anon:88884kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143364kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1829.155678] 0 [ 1829.165074] Node 1 active_anon:988kB inactive_anon:16272kB active_file:12kB inactive_file:1324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68160kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1829.173678] Node 0 [ 1829.175782] 0 [ 1829.178996] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.181182] Node 1 [ 1829.189084] lowmem_reserve[]: [ 1829.194671] 0 [ 1829.199299] Node 1 [ 1829.207042] 2717 [ 1829.209170] Normal free:349792kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:16272kB active_file:12kB inactive_file:1924kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:752kB local_pcp:628kB free_cma:0kB [ 1829.213239] 2718 [ 1829.217333] Normal free:349792kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:16272kB active_file:12kB inactive_file:1924kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:752kB local_pcp:628kB free_cma:0kB [ 1829.224649] 2718 [ 1829.225265] lowmem_reserve[]: [ 1829.226672] 2718 [ 1829.231478] 0 [ 1829.238934] 0 [ 1829.246829] lowmem_reserve[]: [ 1829.248342] 0 [ 1829.249779] 0 [ 1829.254325] 0 [ 1829.266143] Node 0 [ 1829.269850] 0 [ 1829.276976] DMA32 free:23896kB min:36200kB low:45248kB high:54296kB active_anon:59256kB inactive_anon:88884kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2740kB bounce:0kB free_pcp:460kB local_pcp:176kB free_cma:0kB [ 1829.295541] 0 [ 1829.299247] Node 0 [ 1829.304563] 0 [ 1829.307328] DMA: [ 1829.308708] 0 [ 1829.347906] 37*4kB [ 1829.374669] lowmem_reserve[]: [ 1829.380631] (UE) [ 1829.404186] 0 [ 1829.412709] 13*8kB [ 1829.433924] 0 [ 1829.470605] (U) [ 1829.473991] 0 [ 1829.475486] 5*16kB (UE) 2*32kB [ 1829.505741] 0 [ 1829.544596] (UE) [ 1829.580087] 1*64kB [ 1829.580905] Node 0 [ 1829.587087] (E) [ 1829.589674] DMA: 37*4kB (UE) 13*8kB (U) 5*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10956kB [ 1829.600616] 2*128kB [ 1829.617681] Node 0 DMA32: 608*4kB (ME) 1459*8kB (UME) 169*16kB (UME) 290*32kB (UME) 89*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31912kB [ 1829.635558] 0 0 [ 1829.637567] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.644888] (UE) [ 1829.670640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1829.680666] 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10956kB [ 1829.690662] Node 1 Normal: 7559*4kB (UM) 2*8kB (UM) 2*16kB (ME) 428*32kB (UE) 2678*64kB (UM) 424*128kB (U) 170*256kB (UM) 38*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 334668kB [ 1829.708074] lowmem_reserve[]: 0 0 0 0 0 [ 1829.711012] Node 0 DMA32: 608*4kB (ME) 1988*8kB (UME) 179*16kB (UME) 290*32kB (UME) 89*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36304kB [ 1829.712179] Node 1 [ 1829.726953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.741262] Normal free:333500kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:16272kB active_file:12kB inactive_file:4124kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:552kB bounce:0kB free_pcp:836kB local_pcp:120kB free_cma:0kB [ 1829.755007] Node 0 [ 1829.770833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.782708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.789217] Normal: [ 1829.791748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.791753] 28524 total pagecache pages [ 1829.791762] 0 pages in swap cache [ 1829.791767] Swap cache stats: add 0, delete 0, find 0/0 [ 1829.791771] Free swap = 0kB [ 1829.791775] Total swap = 0kB [ 1829.791782] 2097051 pages RAM [ 1829.791785] 0 pages HighMem/MovableOnly [ 1829.791788] 363849 pages reserved [ 1829.791792] 0 pages cma reserved [ 1829.800691] lowmem_reserve[]: [ 1829.812297] 0*4kB [ 1829.830679] 0 [ 1829.837044] 0*8kB [ 1829.844832] 0 [ 1829.845115] 0*16kB [ 1829.847019] 0 [ 1829.848833] 0*32kB [ 1829.857587] 0 [ 1829.858467] 0*64kB [ 1829.859873] 0 [ 1829.863071] 0*128kB [ 1829.865937] 0*256kB [ 1829.868528] Node 0 [ 1829.868531] 0*512kB 0*1024kB [ 1829.871125] DMA: 37*4kB (UE) 13*8kB (U) 5*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10956kB [ 1829.879996] 0*2048kB [ 1829.891656] Node 0 DMA32: 608*4kB (ME) 2085*8kB (UME) 229*16kB (UME) 291*32kB (UME) 89*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37912kB [ 1829.896273] 0*4096kB = 0kB [ 1829.909395] Node 0 [ 1829.912497] Node 1 Normal: 7559*4kB (UM) 2*8kB (UM) 3*16kB (UME) 391*32kB (UE) 2678*64kB (UM) 424*128kB (U) 170*256kB (UM) 38*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 333500kB [ 1829.916966] Normal: [ 1829.931057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.935983] 0*4kB [ 1829.942410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.942419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.945824] 0*8kB [ 1829.953483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.953488] 28524 total pagecache pages [ 1829.953498] 0 pages in swap cache [ 1829.953503] Swap cache stats: add 0, delete 0, find 0/0 [ 1829.953506] Free swap = 0kB [ 1829.953509] Total swap = 0kB [ 1829.953516] 2097051 pages RAM [ 1829.953519] 0 pages HighMem/MovableOnly [ 1829.953522] 363849 pages reserved [ 1829.953526] 0 pages cma reserved [ 1829.953533] Out of memory (oom_kill_allocating_task): Kill process 19880 (in:imklog) score 0 or sacrifice child [ 1829.953581] Killed process 19878 (rsyslogd) total-vm:254332kB, anon-rss:1500kB, file-rss:0kB, shmem-rss:0kB [ 1830.031774] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1830.044252] oom_reaper: reaped process 19878 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1830.052282] Node 1 Normal: 7548*4kB (UM) 1*8kB (U) 3*16kB (UME) 391*32kB (UE) 2677*64kB (U) 424*128kB (U) 169*256kB (U) 38*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 333128kB [ 1830.072567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1830.088465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1830.105252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1830.118821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1830.129845] 29116 total pagecache pages [ 1830.135002] 0 pages in swap cache 07:58:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x117003, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x14}}, 0x4840) [ 1830.138956] Swap cache stats: add 0, delete 0, find 0/0 [ 1830.146765] Free swap = 0kB [ 1830.157154] Total swap = 0kB [ 1830.162191] 2097051 pages RAM [ 1830.167080] 0 pages HighMem/MovableOnly [ 1830.173798] 363849 pages reserved [ 1830.177958] 0 pages cma reserved 07:58:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2e0880, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53, 0x1}) 07:58:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20044041) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) 07:58:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) 07:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 07:58:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:46 executing program 1: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x15}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000}, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="77400000000000000000300000000c009900000000000000000006003600000000000983163d95dab8ff237fe5e2c32ad943b2b6b76584a0b41c09846107d1d7fe0aca016b6fb19db8888007ff39a888f3f7226b12b205f78a"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r2, 0x300, 0x70bd27, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x101}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xfffffffc}]}, 0x34}}, 0x0) 07:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRES16=r1], 0x14}}, 0x8880) [ 1831.940197] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1831.962158] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1831.963539] syz-executor.3: [ 1831.970639] syz-executor.3: [ 1831.976365] (null) [ 1831.977870] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1831.977888] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1831.977910] CPU: 0 PID: 20010 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1831.977919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1831.981706] syz-executor.2 cpuset= [ 1831.983057] Call Trace: [ 1831.983080] dump_stack+0x1b2/0x281 [ 1831.983095] warn_alloc.cold+0x96/0x1cc [ 1831.983111] ? zone_watermark_ok_safe+0x220/0x220 [ 1831.993718] page allocation failure: order:4 [ 1831.998625] __alloc_pages_nodemask+0x2127/0x2720 [ 1831.998639] ? __schedule+0x893/0x1de0 [ 1831.998655] ? lock_acquire+0x170/0x3f0 [ 1831.998669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.007999] / [ 1832.017119] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1832.020910] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1832.023207] ? __mutex_unlock_slowpath+0x75/0x770 [ 1832.023224] alloc_pages_current+0x155/0x260 [ 1832.023240] ion_page_pool_alloc+0x118/0x1b0 [ 1832.026957] (null) [ 1832.030822] ion_system_heap_allocate+0x133/0x8c0 [ 1832.030832] ? ion_alloc+0x187/0x810 [ 1832.030843] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1832.030853] ? ion_system_contig_heap_create+0x130/0x130 [ 1832.030862] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1832.030873] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1832.030883] ion_alloc+0x204/0x810 [ 1832.030895] ? ion_dma_buf_release+0x40/0x40 [ 1832.030907] ? __might_fault+0x177/0x1b0 [ 1832.030921] ion_ioctl+0xea/0x1f0 [ 1832.035886] mems_allowed=0-1 [ 1832.040190] ? ion_query_heaps+0x360/0x360 [ 1832.040202] ? ion_query_heaps+0x360/0x360 [ 1832.040214] do_vfs_ioctl+0x75a/0xff0 [ 1832.040226] ? ioctl_preallocate+0x1a0/0x1a0 [ 1832.040236] ? lock_downgrade+0x740/0x740 [ 1832.040248] ? __fget+0x225/0x360 [ 1832.046597] syz-executor.3 cpuset= [ 1832.049000] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.049014] ? security_file_ioctl+0x83/0xb0 [ 1832.049025] SyS_ioctl+0x7f/0xb0 [ 1832.049035] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.053168] / [ 1832.057830] do_syscall_64+0x1d5/0x640 [ 1832.066297] mems_allowed=0-1 [ 1832.072073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1832.072083] RIP: 0033:0x466459 [ 1832.072088] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.072099] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1832.072103] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1832.072108] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1832.072112] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1832.072117] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1832.100614] syz-executor.5 cpuset= [ 1832.106545] CPU: 1 PID: 20017 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1832.107487] / [ 1832.112492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.170610] mems_allowed=0-1 [ 1832.172581] Call Trace: [ 1832.269106] dump_stack+0x1b2/0x281 [ 1832.272745] warn_alloc.cold+0x96/0x1cc [ 1832.276727] ? zone_watermark_ok_safe+0x220/0x220 [ 1832.281589] __alloc_pages_nodemask+0x2127/0x2720 [ 1832.286445] ? lock_acquire+0x170/0x3f0 [ 1832.290429] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.295287] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1832.300742] ? __mutex_unlock_slowpath+0x75/0x770 [ 1832.305592] ? alloc_pages_current+0x123/0x260 [ 1832.310185] alloc_pages_current+0x155/0x260 [ 1832.314603] ion_page_pool_alloc+0x118/0x1b0 [ 1832.319014] ion_system_heap_allocate+0x133/0x8c0 [ 1832.323878] ? ion_alloc+0x187/0x810 [ 1832.327587] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1832.333038] ? ion_system_contig_heap_create+0x130/0x130 [ 1832.338496] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1832.343519] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1832.348365] ion_alloc+0x204/0x810 [ 1832.351933] ? ion_dma_buf_release+0x40/0x40 [ 1832.356345] ? __might_fault+0x177/0x1b0 [ 1832.360406] ion_ioctl+0xea/0x1f0 [ 1832.363863] ? ion_query_heaps+0x360/0x360 [ 1832.368134] ? ion_query_heaps+0x360/0x360 [ 1832.372381] do_vfs_ioctl+0x75a/0xff0 [ 1832.376192] ? ioctl_preallocate+0x1a0/0x1a0 [ 1832.380625] ? lock_downgrade+0x740/0x740 [ 1832.384794] ? __fget+0x225/0x360 [ 1832.388258] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.392236] ? security_file_ioctl+0x83/0xb0 [ 1832.396741] SyS_ioctl+0x7f/0xb0 [ 1832.400113] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.400616] warn_alloc_show_mem: 2 callbacks suppressed [ 1832.400620] Mem-Info: [ 1832.404182] do_syscall_64+0x1d5/0x640 [ 1832.404197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1832.404206] RIP: 0033:0x466459 [ 1832.404210] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.430641] active_anon:15016 inactive_anon:26289 isolated_anon:12 [ 1832.430641] active_file:1055 inactive_file:5822 isolated_file:0 [ 1832.430641] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1832.430641] slab_reclaimable:12584 slab_unreclaimable:125732 [ 1832.430641] mapped:57285 shmem:27412 pagetables:822 bounce:0 [ 1832.430641] free:322733 free_pcp:89 free_cma:0 [ 1832.431944] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1832.473116] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1832.480393] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1832.487702] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1832.494977] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1832.510772] CPU: 1 PID: 20014 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1832.518690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.528260] Call Trace: [ 1832.530856] dump_stack+0x1b2/0x281 [ 1832.534527] warn_alloc.cold+0x96/0x1cc [ 1832.538606] ? zone_watermark_ok_safe+0x220/0x220 [ 1832.544367] __alloc_pages_nodemask+0x2127/0x2720 [ 1832.549481] ? __schedule+0x893/0x1de0 [ 1832.553378] ? lock_acquire+0x170/0x3f0 [ 1832.554104] Node 0 active_anon:58348kB inactive_anon:88884kB active_file:360kB inactive_file:9844kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:150516kB dirty:20kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1832.557376] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.557396] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1832.557409] ? __mutex_unlock_slowpath+0x75/0x770 [ 1832.557423] alloc_pages_current+0x155/0x260 [ 1832.605531] ion_page_pool_alloc+0x118/0x1b0 [ 1832.609937] ion_system_heap_allocate+0x133/0x8c0 [ 1832.614777] ? ion_alloc+0x187/0x810 [ 1832.618489] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1832.623939] ? ion_system_contig_heap_create+0x130/0x130 [ 1832.629391] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1832.634412] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1832.639261] ion_alloc+0x204/0x810 [ 1832.642808] ? ion_dma_buf_release+0x40/0x40 [ 1832.647221] ? __might_fault+0x177/0x1b0 [ 1832.651287] ion_ioctl+0xea/0x1f0 [ 1832.654740] ? ion_query_heaps+0x360/0x360 [ 1832.658249] Node 1 active_anon:1716kB inactive_anon:16272kB active_file:3860kB inactive_file:13444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78624kB dirty:4kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1832.658975] ? ion_query_heaps+0x360/0x360 [ 1832.658987] do_vfs_ioctl+0x75a/0xff0 [ 1832.694599] ? ioctl_preallocate+0x1a0/0x1a0 [ 1832.699147] ? lock_downgrade+0x740/0x740 [ 1832.703309] ? __fget+0x225/0x360 [ 1832.706866] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.710866] ? security_file_ioctl+0x83/0xb0 [ 1832.715297] SyS_ioctl+0x7f/0xb0 [ 1832.718718] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.722713] do_syscall_64+0x1d5/0x640 [ 1832.726626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1832.731830] RIP: 0033:0x466459 [ 1832.735022] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.742743] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1832.750015] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1832.757074] Node 0 [ 1832.757379] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1832.757402] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.759625] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1832.759631] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1832.819509] CPU: 0 PID: 20007 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1832.827431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1832.836790] Call Trace: [ 1832.839419] dump_stack+0x1b2/0x281 [ 1832.843062] warn_alloc.cold+0x96/0x1cc [ 1832.847056] ? zone_watermark_ok_safe+0x220/0x220 [ 1832.851918] __alloc_pages_nodemask+0x2127/0x2720 [ 1832.856777] ? lock_acquire+0x170/0x3f0 [ 1832.860765] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1832.865628] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1832.871112] ? __mutex_unlock_slowpath+0x75/0x770 [ 1832.875970] alloc_pages_current+0x155/0x260 [ 1832.880395] ion_page_pool_alloc+0x118/0x1b0 [ 1832.884818] ion_system_heap_allocate+0x133/0x8c0 [ 1832.889682] ? ion_alloc+0x187/0x810 [ 1832.893399] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1832.898885] ? ion_system_contig_heap_create+0x130/0x130 [ 1832.911553] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1832.916579] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1832.921429] ion_alloc+0x204/0x810 [ 1832.924977] ? ion_dma_buf_release+0x40/0x40 [ 1832.929387] ? __might_fault+0x177/0x1b0 [ 1832.933452] ion_ioctl+0xea/0x1f0 [ 1832.936909] ? ion_query_heaps+0x360/0x360 [ 1832.941153] ? ion_query_heaps+0x360/0x360 [ 1832.945388] do_vfs_ioctl+0x75a/0xff0 [ 1832.949462] ? ioctl_preallocate+0x1a0/0x1a0 [ 1832.953868] ? lock_downgrade+0x740/0x740 [ 1832.958030] ? __fget+0x225/0x360 [ 1832.961494] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.965485] ? security_file_ioctl+0x83/0xb0 [ 1832.969904] SyS_ioctl+0x7f/0xb0 [ 1832.973286] ? do_vfs_ioctl+0xff0/0xff0 [ 1832.977265] do_syscall_64+0x1d5/0x640 [ 1832.981790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1832.987067] RIP: 0033:0x466459 [ 1832.990254] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1832.995062] lowmem_reserve[]: [ 1832.997959] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1832.997965] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1832.997970] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1832.997980] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1833.007821] 0 [ 1833.008364] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1833.025648] 2717 2718 2718 2718 [ 1833.042856] Node 0 DMA32 free:145616kB min:36200kB low:45248kB high:54296kB active_anon:58348kB inactive_anon:88884kB active_file:360kB inactive_file:9844kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2412kB bounce:0kB free_pcp:308kB local_pcp:200kB free_cma:0kB [ 1833.103916] lowmem_reserve[]: 0 0 0 0 0 [ 1833.112466] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.165811] lowmem_reserve[]: 0 0 0 0 0 [ 1833.174300] Node 1 Normal free:788876kB min:53696kB low:67120kB high:80544kB active_anon:1716kB inactive_anon:16272kB active_file:3860kB inactive_file:13444kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:876kB bounce:0kB free_pcp:640kB local_pcp:0kB free_cma:0kB [ 1833.234159] lowmem_reserve[]: 0 0 0 0 0 [ 1833.239023] Node 0 DMA: 287*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11116kB [ 1833.274232] Node 0 DMA32: 70*4kB (M) 299*8kB (ME) 147*16kB (ME) 1251*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45056kB [ 1833.292445] warn_alloc_show_mem: 1 callbacks suppressed [ 1833.292450] Mem-Info: [ 1833.305650] active_anon:15017 inactive_anon:26289 isolated_anon:0 [ 1833.305650] active_file:1056 inactive_file:5826 isolated_file:0 [ 1833.305650] unevictable:0 dirty:21 writeback:0 unstable:0 [ 1833.305650] slab_reclaimable:12584 slab_unreclaimable:126515 [ 1833.305650] mapped:57301 shmem:27412 pagetables:822 bounce:0 [ 1833.305650] free:145471 free_pcp:135 free_cma:0 [ 1833.341350] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1833.370693] Node 1 Normal: 10756*4kB (UM) 10023*8kB (UM) 5083*16kB (UME) 3134*32kB (UME) 19*64kB (UM) 2*128kB (M) 116*256kB (UM) 127*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 403064kB [ 1833.400799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1833.409684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1833.420661] Node 0 active_anon:58352kB inactive_anon:88884kB active_file:364kB inactive_file:9860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150580kB dirty:80kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1833.455970] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1833.482921] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1833.490633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1833.495927] CPU: 0 PID: 20004 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1833.499495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1833.507372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1833.507377] Call Trace: [ 1833.507398] dump_stack+0x1b2/0x281 [ 1833.507411] warn_alloc.cold+0x96/0x1cc [ 1833.507422] ? zone_watermark_ok_safe+0x220/0x220 [ 1833.507444] __alloc_pages_nodemask+0x2127/0x2720 [ 1833.507456] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1833.507468] ? lock_acquire+0x170/0x3f0 [ 1833.507482] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1833.507499] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1833.507511] ? __mutex_unlock_slowpath+0x75/0x770 [ 1833.541207] Node 1 active_anon:1716kB inactive_anon:16272kB active_file:3860kB inactive_file:13444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78624kB dirty:4kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1833.545456] alloc_pages_current+0x155/0x260 [ 1833.550457] Node 0 [ 1833.554425] ion_page_pool_alloc+0x118/0x1b0 [ 1833.554435] ion_system_heap_allocate+0x133/0x8c0 [ 1833.554444] ? ion_alloc+0x187/0x810 [ 1833.554454] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1833.554461] ? ion_system_contig_heap_create+0x130/0x130 [ 1833.554471] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1833.554482] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1833.554493] ion_alloc+0x204/0x810 [ 1833.600658] 31780 total pagecache pages [ 1833.601583] ? ion_dma_buf_release+0x40/0x40 [ 1833.603800] 0 pages in swap cache [ 1833.608197] ? __might_fault+0x177/0x1b0 [ 1833.624488] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1833.627641] ion_ioctl+0xea/0x1f0 [ 1833.660667] Swap cache stats: add 0, delete 0, find 0/0 [ 1833.685037] ? ion_query_heaps+0x360/0x360 [ 1833.685049] ? ion_query_heaps+0x360/0x360 [ 1833.685059] do_vfs_ioctl+0x75a/0xff0 [ 1833.685070] ? ioctl_preallocate+0x1a0/0x1a0 [ 1833.685079] ? lock_downgrade+0x740/0x740 [ 1833.685090] ? __fget+0x225/0x360 [ 1833.685099] ? do_vfs_ioctl+0xff0/0xff0 [ 1833.685110] ? security_file_ioctl+0x83/0xb0 [ 1833.685119] SyS_ioctl+0x7f/0xb0 [ 1833.685126] ? do_vfs_ioctl+0xff0/0xff0 [ 1833.685137] do_syscall_64+0x1d5/0x640 [ 1833.685151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1833.685159] RIP: 0033:0x466459 [ 1833.685163] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1833.689238] lowmem_reserve[]: [ 1833.693993] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1833.694000] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1833.694005] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1833.694010] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1833.694014] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1833.802782] Free swap = 0kB [ 1833.805810] Total swap = 0kB [ 1833.808822] 2097051 pages RAM [ 1833.820674] 0 pages HighMem/MovableOnly [ 1833.824688] 363849 pages reserved [ 1833.828139] 0 pages cma reserved [ 1833.837601] 0 2717 2718 2718 2718 [ 1833.880214] Node 0 DMA32 free:36048kB min:36200kB low:45248kB high:54296kB active_anon:58352kB inactive_anon:88884kB active_file:336kB inactive_file:0kB unevictable:0kB writepending:80kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2412kB bounce:0kB free_pcp:664kB local_pcp:544kB free_cma:0kB [ 1833.994755] lowmem_reserve[]: 0 0 0 0 0 [ 1833.997618] oom_reaper: reaped process 20014 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1833.998793] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.078495] lowmem_reserve[]: 0 0 0 0 0 [ 1834.095745] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1834.104500] Node 1 Normal free:27316kB min:53696kB low:67120kB high:80544kB active_anon:1640kB inactive_anon:16272kB active_file:132kB inactive_file:68kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:876kB bounce:0kB free_pcp:424kB local_pcp:0kB free_cma:0kB [ 1834.114932] syz-fuzzer cpuset= [ 1834.147395] lowmem_reserve[]: 0 0 0 0 0 [ 1834.157269] Node 0 DMA: 248*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1834.172998] / mems_allowed=0-1 [ 1834.176226] CPU: 0 PID: 7950 Comm: syz-fuzzer Not tainted 4.14.231-syzkaller #0 [ 1834.178692] Node 0 [ 1834.183724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.183729] Call Trace: [ 1834.183751] dump_stack+0x1b2/0x281 [ 1834.183762] dump_header+0x178/0x82f [ 1834.183772] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1834.183781] ? ___ratelimit+0x2cd/0x530 [ 1834.183790] oom_kill_process.cold+0x10/0xa40 [ 1834.183806] out_of_memory+0xe3e/0x1190 [ 1834.183818] ? oom_killer_disable+0x1c0/0x1c0 [ 1834.183825] ? mutex_trylock+0x152/0x1a0 [ 1834.183836] __alloc_pages_nodemask+0x23e1/0x2720 [ 1834.183858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1834.183884] alloc_pages_current+0x155/0x260 [ 1834.183894] filemap_fault+0x11a1/0x1ad0 [ 1834.183914] ext4_filemap_fault+0x84/0xb0 [ 1834.183924] __do_fault+0xfa/0x380 [ 1834.183935] __handle_mm_fault+0x2497/0x4620 [ 1834.183945] ? vm_insert_page+0x7c0/0x7c0 [ 1834.183964] ? mark_held_locks+0xa6/0xf0 [ 1834.183975] handle_mm_fault+0x455/0x9c0 [ 1834.183988] __do_page_fault+0x549/0xad0 [ 1834.184000] ? spurious_fault+0x640/0x640 [ 1834.184008] ? do_page_fault+0x60/0x500 [ 1834.184020] ? page_fault+0x2f/0x50 [ 1834.186254] DMA32: [ 1834.196252] page_fault+0x45/0x50 [ 1834.196261] RIP: 0900:0x1ab58d231d4 [ 1834.196265] RSP: 03e7:000000c00003fe40 EFLAGS: 00000003 [ 1834.259185] Mem-Info: [ 1834.338100] active_anon:14997 inactive_anon:26289 isolated_anon:0 [ 1834.338100] active_file:15 inactive_file:24 isolated_file:2 [ 1834.338100] unevictable:0 dirty:5 writeback:1 unstable:0 [ 1834.338100] slab_reclaimable:12583 slab_unreclaimable:126351 [ 1834.338100] mapped:52796 shmem:27412 pagetables:822 bounce:0 [ 1834.338100] free:13835 free_pcp:0 free_cma:0 [ 1834.373589] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1834.385472] Node 0 active_anon:58348kB inactive_anon:88884kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143684kB dirty:4kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.416393] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1834.424198] CPU: 0 PID: 19987 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1834.430482] 665*4kB [ 1834.432087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.432091] Call Trace: [ 1834.432111] dump_stack+0x1b2/0x281 [ 1834.432125] warn_alloc.cold+0x96/0x1cc [ 1834.432137] ? zone_watermark_ok_safe+0x220/0x220 [ 1834.432147] ? usleep_range+0x130/0x130 [ 1834.432156] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1834.432168] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1834.432177] ? run_timer_softirq+0x5a0/0x5a0 [ 1834.432194] __alloc_pages_nodemask+0x2127/0x2720 [ 1834.432208] ? lock_acquire+0x170/0x3f0 [ 1834.438795] (ME) [ 1834.443905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1834.443915] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1834.443931] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1834.443949] alloc_pages_current+0x155/0x260 [ 1834.443961] ion_page_pool_alloc+0x118/0x1b0 [ 1834.443971] ion_system_heap_allocate+0x133/0x8c0 [ 1834.443982] ? _raw_spin_unlock+0x29/0x40 [ 1834.443991] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1834.444000] ? ion_system_contig_heap_create+0x130/0x130 [ 1834.444010] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1834.444021] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1834.444031] ion_alloc+0x27a/0x810 [ 1834.446810] syz-executor.3: [ 1834.450410] ? ion_dma_buf_release+0x40/0x40 [ 1834.464801] 530*8kB [ 1834.468242] ? __might_fault+0x177/0x1b0 [ 1834.479370] page allocation failure: order:0 [ 1834.482477] ion_ioctl+0xea/0x1f0 [ 1834.482494] ? ion_query_heaps+0x360/0x360 [ 1834.482505] ? ion_query_heaps+0x360/0x360 [ 1834.482515] do_vfs_ioctl+0x75a/0xff0 [ 1834.482527] ? ioctl_preallocate+0x1a0/0x1a0 [ 1834.482537] ? lock_downgrade+0x740/0x740 [ 1834.482550] ? __fget+0x225/0x360 [ 1834.496768] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1834.498086] ? do_vfs_ioctl+0xff0/0xff0 [ 1834.506087] (ME) [ 1834.507915] ? security_file_ioctl+0x83/0xb0 [ 1834.518370] (null) [ 1834.521299] SyS_ioctl+0x7f/0xb0 [ 1834.521308] ? do_vfs_ioctl+0xff0/0xff0 [ 1834.521319] do_syscall_64+0x1d5/0x640 [ 1834.521334] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1834.521341] RIP: 0033:0x466459 [ 1834.521346] RSP: 002b:00007fe1730aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1834.521356] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1834.521361] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1834.521366] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1834.521372] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1834.521376] R13: 00007fff70018cef R14: 00007fe1730aa300 R15: 0000000000022000 [ 1834.529094] Node 1 active_anon:1640kB inactive_anon:16272kB active_file:24kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:67500kB dirty:16kB writeback:4kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.543106] 172*16kB [ 1834.545677] syz-executor.3: [ 1834.548685] (UME) [ 1834.557668] Node 0 [ 1834.567182] 232*32kB [ 1834.567510] page allocation failure: order:0 [ 1834.575625] syz-executor.3 cpuset= [ 1834.580211] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1834.590980] (UME) [ 1834.594848] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.599051] 8*64kB [ 1834.603058] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1834.603081] Node 0 DMA32 free:17704kB min:36200kB low:45248kB high:54296kB active_anon:58348kB inactive_anon:88884kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2412kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.603099] lowmem_reserve[]: 0 0 0 0 0 [ 1834.603118] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.603134] lowmem_reserve[]: 0 0 0 [ 1834.615694] / [ 1834.622849] (null) [ 1834.628097] (UM) [ 1834.628181] syz-executor.3 cpuset= [ 1834.639011] mems_allowed=0-1 [ 1834.639120] 0 [ 1834.657041] 2*128kB [ 1834.665657] / [ 1834.679877] (U) [ 1834.710970] 0 [ 1834.710980] Node 1 Normal free:26676kB min:53696kB low:67120kB high:80544kB active_anon:1640kB inactive_anon:16272kB active_file:132kB inactive_file:68kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.711001] lowmem_reserve[]: 0 0 0 0 0 [ 1834.722220] CPU: 1 PID: 20014 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1834.722227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.722231] Call Trace: [ 1834.722252] dump_stack+0x1b2/0x281 [ 1834.722266] warn_alloc.cold+0x96/0x1cc [ 1834.722278] ? zone_watermark_ok_safe+0x220/0x220 [ 1834.722289] ? usleep_range+0x130/0x130 [ 1834.722298] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1834.722310] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1834.722320] ? run_timer_softirq+0x5a0/0x5a0 [ 1834.722336] __alloc_pages_nodemask+0x2127/0x2720 [ 1834.729698] warn_alloc_show_mem: 2 callbacks suppressed [ 1834.729702] Mem-Info: [ 1834.733017] ? lock_acquire+0x170/0x3f0 [ 1834.733033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1834.733043] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1834.733059] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1834.735225] active_anon:14997 inactive_anon:26289 isolated_anon:0 [ 1834.735225] active_file:15 inactive_file:24 isolated_file:2 [ 1834.735225] unevictable:0 dirty:5 writeback:1 unstable:0 [ 1834.735225] slab_reclaimable:12583 slab_unreclaimable:126351 [ 1834.735225] mapped:52796 shmem:27412 pagetables:822 bounce:0 [ 1834.735225] free:13835 free_pcp:0 free_cma:0 [ 1834.760732] alloc_pages_current+0x155/0x260 [ 1834.760748] ion_page_pool_alloc+0x118/0x1b0 [ 1834.760758] ion_system_heap_allocate+0x133/0x8c0 [ 1834.760767] ? ion_alloc+0x187/0x810 [ 1834.760782] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1834.763038] mems_allowed=0-1 [ 1834.768032] ? ion_system_contig_heap_create+0x130/0x130 [ 1834.800549] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1834.826378] Node 0 [ 1834.829959] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1834.831731] Node 0 active_anon:58348kB inactive_anon:88884kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143684kB dirty:4kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.833803] ion_alloc+0x204/0x810 [ 1834.836249] Node 1 active_anon:1640kB inactive_anon:16272kB active_file:24kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:67500kB dirty:16kB writeback:4kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.839857] ? ion_dma_buf_release+0x40/0x40 [ 1834.850705] DMA: [ 1834.851166] ? __might_fault+0x177/0x1b0 [ 1834.852971] 248*4kB [ 1834.885023] ion_ioctl+0xea/0x1f0 [ 1834.885034] ? ion_query_heaps+0x360/0x360 [ 1834.885046] ? ion_query_heaps+0x360/0x360 [ 1834.885056] do_vfs_ioctl+0x75a/0xff0 [ 1834.885067] ? ioctl_preallocate+0x1a0/0x1a0 [ 1834.900609] Node 0 [ 1834.906261] ? lock_downgrade+0x740/0x740 [ 1834.908840] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1834.912540] ? __fget+0x225/0x360 [ 1834.912549] ? do_vfs_ioctl+0xff0/0xff0 [ 1834.912559] ? security_file_ioctl+0x83/0xb0 [ 1834.912569] SyS_ioctl+0x7f/0xb0 [ 1834.912579] ? do_vfs_ioctl+0xff0/0xff0 [ 1834.930617] lowmem_reserve[]: [ 1834.935516] do_syscall_64+0x1d5/0x640 [ 1834.935533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1834.939961] 0 [ 1834.944806] RIP: 0033:0x466459 [ 1834.944812] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1834.944820] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1834.944825] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1834.944829] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1834.944834] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1834.944839] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1834.955941] 0*256kB [ 1834.960645] CPU: 0 PID: 20010 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1834.964192] 0*512kB [ 1834.966259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.980436] 0*1024kB [ 1835.005391] Call Trace: [ 1835.005423] dump_stack+0x1b2/0x281 [ 1835.005438] warn_alloc.cold+0x96/0x1cc [ 1835.005449] ? zone_watermark_ok_safe+0x220/0x220 [ 1835.005458] ? usleep_range+0x130/0x130 [ 1835.005467] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1835.005478] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1835.005487] ? run_timer_softirq+0x5a0/0x5a0 [ 1835.005510] __alloc_pages_nodemask+0x2127/0x2720 [ 1835.005526] ? lock_acquire+0x170/0x3f0 [ 1835.005541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1835.005551] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1835.005566] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1835.005585] alloc_pages_current+0x155/0x260 [ 1835.005597] ion_page_pool_alloc+0x118/0x1b0 [ 1835.021058] 0*2048kB [ 1835.023161] ion_system_heap_allocate+0x133/0x8c0 [ 1835.028598] 0*4096kB [ 1835.031702] ? ion_alloc+0x187/0x810 [ 1835.031713] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1835.031722] ? ion_system_contig_heap_create+0x130/0x130 [ 1835.031731] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1835.031742] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1835.031751] ion_alloc+0x204/0x810 [ 1835.031763] ? ion_dma_buf_release+0x40/0x40 [ 1835.031775] ? __might_fault+0x177/0x1b0 [ 1835.031787] ion_ioctl+0xea/0x1f0 [ 1835.031795] ? ion_query_heaps+0x360/0x360 [ 1835.031806] ? ion_query_heaps+0x360/0x360 [ 1835.031818] do_vfs_ioctl+0x75a/0xff0 [ 1835.046951] = 17844kB [ 1835.050941] ? ioctl_preallocate+0x1a0/0x1a0 [ 1835.050951] ? lock_downgrade+0x740/0x740 [ 1835.050963] ? __fget+0x225/0x360 [ 1835.050971] ? do_vfs_ioctl+0xff0/0xff0 [ 1835.050983] ? security_file_ioctl+0x83/0xb0 [ 1835.050992] SyS_ioctl+0x7f/0xb0 [ 1835.051008] ? do_vfs_ioctl+0xff0/0xff0 [ 1835.090812] Node 0 [ 1835.109868] do_syscall_64+0x1d5/0x640 [ 1835.109884] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1835.109892] RIP: 0033:0x466459 [ 1835.109897] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1835.109906] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1835.109910] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1835.109915] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1835.109920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1835.109925] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1835.120607] (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) [ 1835.134086] Normal: [ 1835.139726] 2717 [ 1835.139869] 0*4kB [ 1835.144329] 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) [ 1835.157696] 0*8kB [ 1835.184132] 2718 [ 1835.198087] 0*16kB [ 1835.200619] 2718 [ 1835.202312] 0*32kB [ 1835.206098] 2718 [ 1835.226397] 0*64kB [ 1835.231445] 0*4096kB = 10960kB [ 1835.231455] Node 0 DMA32: 665*4kB (ME) [ 1835.253333] 0*128kB [ 1835.274819] 0*256kB [ 1835.283383] 536*8kB (UME) 174*16kB (UME) 232*32kB (UME) 8*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17924kB [ 1835.283437] Node 0 Normal: [ 1835.300669] 0*512kB [ 1835.301136] Node 0 [ 1835.305077] 0*1024kB [ 1835.310212] DMA32 free:17844kB min:36200kB low:45248kB high:54296kB active_anon:58348kB inactive_anon:88884kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2412kB bounce:0kB free_pcp:32kB local_pcp:8kB free_cma:0kB [ 1835.371194] 0*2048kB [ 1835.376345] 0*4kB [ 1835.377426] 0*4096kB [ 1835.383248] 0*8kB [ 1835.450673] = 0kB [ 1835.457714] lowmem_reserve[]: [ 1835.458364] Node 1 [ 1835.464873] 0 [ 1835.540627] Normal: [ 1835.550979] 0*16kB [ 1835.600680] 1*4kB (U) 2*8kB (UM) 1*16kB (E) 1*32kB (E) 3408*64kB (U) 60*128kB (UM) 4*256kB (UM) 3*512kB (UM) 116*1024kB (UM) 24*2048kB (UM) 0*4096kB = 396356kB [ 1835.719210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.750606] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1835.758384] Node 1 Normal: 544*4kB (U) 1196*8kB (UM) 2*16kB (UE) 5*32kB (UME) 3821*64kB (UM) 179*128kB (U) 30*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 287584kB [ 1835.800668] 0 0 0 0 [ 1835.803043] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.814728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.850631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.859894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.890655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.906144] lowmem_reserve[]: 0 0 0 0 0 [ 1835.929618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.930978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.947908] Node 1 Normal free:60296kB min:53696kB low:67120kB high:80544kB active_anon:1640kB inactive_anon:16272kB active_file:1632kB inactive_file:1780kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:876kB bounce:0kB free_pcp:668kB local_pcp:568kB free_cma:0kB [ 1836.004878] 27702 total pagecache pages [ 1836.007682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.008893] 0 pages in swap cache [ 1836.008899] Swap cache stats: add 0, delete 0, find 0/0 [ 1836.008902] Free swap = 0kB [ 1836.008905] Total swap = 0kB [ 1836.008910] 2097051 pages RAM [ 1836.008913] 0 pages HighMem/MovableOnly [ 1836.008916] 363849 pages reserved [ 1836.008919] 0 pages cma reserved [ 1836.008926] Out of memory (oom_kill_allocating_task): Kill process 7950 (syz-fuzzer) score 0 or sacrifice child [ 1836.008991] Killed process 19416 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1836.044730] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1836.069213] lowmem_reserve[]: [ 1836.072822] 27448 total pagecache pages [ 1836.079192] (null) [ 1836.086081] 0 pages in swap cache [ 1836.094279] Swap cache stats: add 0, delete 0, find 0/0 [ 1836.094517] , order=0, oom_score_adj=0 [ 1836.099661] Free swap = 0kB [ 1836.106375] 0 0 0 0 0 [ 1836.109387] Node 0 DMA: 249*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1836.115779] Total swap = 0kB [ 1836.127724] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1836.128020] syz-executor.3: [ 1836.145730] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1836.153617] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1836.155268] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1836.158746] CPU: 0 PID: 20010 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1836.158755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1836.179271] 2097051 pages RAM [ 1836.185844] Call Trace: [ 1836.185867] dump_stack+0x1b2/0x281 [ 1836.185880] warn_alloc.cold+0x96/0x1cc [ 1836.185892] ? zone_watermark_ok_safe+0x220/0x220 [ 1836.185913] __alloc_pages_nodemask+0x2127/0x2720 [ 1836.185930] ? lock_acquire+0x170/0x3f0 [ 1836.185948] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1836.189043] 0 pages HighMem/MovableOnly [ 1836.191617] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1836.191630] ? __mutex_unlock_slowpath+0x75/0x770 [ 1836.191638] ? retint_kernel+0x2d/0x2d [ 1836.191651] alloc_pages_current+0x155/0x260 [ 1836.191664] ion_page_pool_alloc+0x118/0x1b0 [ 1836.191674] ion_system_heap_allocate+0x133/0x8c0 [ 1836.191685] ? _raw_spin_unlock+0x29/0x40 [ 1836.191694] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1836.191703] ? ion_system_contig_heap_create+0x130/0x130 [ 1836.191713] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1836.191724] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1836.191734] ion_alloc+0x27a/0x810 [ 1836.191750] ? ion_dma_buf_release+0x40/0x40 [ 1836.206260] (null) [ 1836.209166] ? __might_fault+0x177/0x1b0 [ 1836.217027] 363849 pages reserved [ 1836.217947] ion_ioctl+0xea/0x1f0 [ 1836.228440] 0 pages cma reserved [ 1836.232161] ? ion_query_heaps+0x360/0x360 [ 1836.232173] ? ion_query_heaps+0x360/0x360 [ 1836.232184] do_vfs_ioctl+0x75a/0xff0 [ 1836.232195] ? ioctl_preallocate+0x1a0/0x1a0 [ 1836.232204] ? lock_downgrade+0x740/0x740 [ 1836.232218] ? __fget+0x225/0x360 [ 1836.232227] ? do_vfs_ioctl+0xff0/0xff0 [ 1836.232239] ? security_file_ioctl+0x83/0xb0 [ 1836.232249] SyS_ioctl+0x7f/0xb0 [ 1836.239923] syz-executor.3 cpuset= [ 1836.240521] ? do_vfs_ioctl+0xff0/0xff0 [ 1836.253647] / [ 1836.253865] do_syscall_64+0x1d5/0x640 [ 1836.258770] mems_allowed=0-1 [ 1836.264210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1836.264220] RIP: 0033:0x466459 [ 1836.264224] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1836.264234] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1836.264239] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1836.264243] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1836.264248] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1836.264253] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1836.280640] CPU: 0 PID: 7950 Comm: syz-fuzzer Not tainted 4.14.231-syzkaller #0 [ 1836.410837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1836.421054] Call Trace: [ 1836.423647] dump_stack+0x1b2/0x281 [ 1836.427296] dump_header+0x178/0x82f [ 1836.431096] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1836.436193] ? ___ratelimit+0x2cd/0x530 [ 1836.440161] oom_kill_process.cold+0x10/0xa40 [ 1836.444922] out_of_memory+0xe3e/0x1190 [ 1836.448899] ? oom_killer_disable+0x1c0/0x1c0 [ 1836.453391] ? mutex_trylock+0x152/0x1a0 [ 1836.457448] __alloc_pages_nodemask+0x23e1/0x2720 [ 1836.462301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1836.467176] alloc_pages_current+0x155/0x260 [ 1836.471605] filemap_fault+0x11a1/0x1ad0 [ 1836.475687] ext4_filemap_fault+0x84/0xb0 [ 1836.479911] __do_fault+0xfa/0x380 [ 1836.483450] __handle_mm_fault+0x2497/0x4620 [ 1836.487865] ? vm_insert_page+0x7c0/0x7c0 [ 1836.492020] ? mark_held_locks+0xa6/0xf0 [ 1836.496081] handle_mm_fault+0x455/0x9c0 [ 1836.500134] __do_page_fault+0x549/0xad0 [ 1836.504194] ? spurious_fault+0x640/0x640 [ 1836.508337] ? do_page_fault+0x60/0x500 [ 1836.512302] ? page_fault+0x2f/0x50 [ 1836.515919] page_fault+0x45/0x50 [ 1836.519396] RIP: 0900:0x1ab58d231d4 [ 1836.523014] RSP: 03e7:000000c00003fe40 EFLAGS: 00000003 [ 1836.525285] CPU: 1 PID: 20014 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1836.535252] Node 0 [ 1836.538523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1836.538531] DMA32: [ 1836.540759] Call Trace: [ 1836.540779] dump_stack+0x1b2/0x281 [ 1836.540794] warn_alloc.cold+0x96/0x1cc [ 1836.540807] ? zone_watermark_ok_safe+0x220/0x220 [ 1836.550156] 1332*4kB [ 1836.552411] __alloc_pages_nodemask+0x2127/0x2720 [ 1836.552429] ? lock_acquire+0x170/0x3f0 [ 1836.552445] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1836.555026] (UME) [ 1836.559093] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1836.563093] 539*8kB [ 1836.568601] ? __mutex_unlock_slowpath+0x75/0x770 [ 1836.571028] (UME) [ 1836.575828] alloc_pages_current+0x155/0x260 [ 1836.579789] 173*16kB [ 1836.584629] ion_page_pool_alloc+0x118/0x1b0 [ 1836.584639] ion_system_heap_allocate+0x133/0x8c0 [ 1836.584651] ? _raw_spin_unlock+0x29/0x40 [ 1836.584659] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1836.584683] ? ion_system_contig_heap_create+0x130/0x130 [ 1836.586822] (UME) [ 1836.592270] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1836.592284] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1836.592295] ion_alloc+0x27a/0x810 [ 1836.592311] ? ion_dma_buf_release+0x40/0x40 [ 1836.594624] 231*32kB [ 1836.599462] ? __might_fault+0x177/0x1b0 [ 1836.601648] (UME) [ 1836.606005] ion_ioctl+0xea/0x1f0 [ 1836.608406] 0*64kB [ 1836.612820] ? ion_query_heaps+0x360/0x360 [ 1836.612831] ? ion_query_heaps+0x360/0x360 [ 1836.612841] do_vfs_ioctl+0x75a/0xff0 [ 1836.612857] ? ioctl_preallocate+0x1a0/0x1a0 [ 1836.617693] 0*128kB [ 1836.621830] ? lock_downgrade+0x740/0x740 [ 1836.621845] ? __fget+0x225/0x360 [ 1836.621854] ? do_vfs_ioctl+0xff0/0xff0 [ 1836.621865] ? security_file_ioctl+0x83/0xb0 [ 1836.621875] SyS_ioctl+0x7f/0xb0 [ 1836.626800] 0*256kB [ 1836.632245] ? do_vfs_ioctl+0xff0/0xff0 [ 1836.632258] do_syscall_64+0x1d5/0x640 [ 1836.632272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1836.632281] RIP: 0033:0x466459 [ 1836.632290] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 [ 1836.634433] 0*512kB [ 1836.639447] ORIG_RAX: 0000000000000010 [ 1836.639456] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1836.644354] 0*1024kB [ 1836.648354] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1836.652822] 0*2048kB [ 1836.655175] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1836.659310] 0*4096kB [ 1836.661451] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1836.661456] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1836.668253] warn_alloc_show_mem: 2 callbacks suppressed [ 1836.668257] Mem-Info: [ 1836.687207] = 19800kB [ 1836.692123] active_anon:14991 inactive_anon:26289 isolated_anon:0 [ 1836.692123] active_file:14 inactive_file:22 isolated_file:0 [ 1836.692123] unevictable:0 dirty:9 writeback:1 unstable:0 [ 1836.692123] slab_reclaimable:12581 slab_unreclaimable:126874 [ 1836.692123] mapped:52804 shmem:27412 pagetables:799 bounce:0 [ 1836.692123] free:14331 free_pcp:0 free_cma:0 [ 1836.702976] Node 0 [ 1836.708292] Node 0 active_anon:58272kB inactive_anon:88884kB active_file:36kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143732kB dirty:8kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1836.709928] Normal: [ 1836.715346] Node 1 active_anon:1692kB inactive_anon:16272kB active_file:20kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67484kB dirty:28kB writeback:4kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1836.729862] 0*4kB [ 1836.738822] Node 0 [ 1836.755505] 0*8kB [ 1836.762627] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1836.783846] 0*16kB [ 1836.792355] lowmem_reserve[]: [ 1836.807072] 0*32kB [ 1836.868574] 0 [ 1836.906326] Mem-Info: [ 1836.946152] 2717 2718 2718 2718 [ 1836.949565] Node 0 DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:58272kB inactive_anon:88884kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2320kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1836.950768] active_anon:14991 inactive_anon:26289 isolated_anon:0 [ 1836.950768] active_file:14 inactive_file:22 isolated_file:0 [ 1836.950768] unevictable:0 dirty:9 writeback:1 unstable:0 [ 1836.950768] slab_reclaimable:12581 slab_unreclaimable:126874 [ 1836.950768] mapped:52804 shmem:27412 pagetables:799 bounce:0 [ 1836.950768] free:13897 free_pcp:30 free_cma:0 [ 1836.981292] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1836.981317] syz-executor.3 cpuset=/ [ 1837.032803] lowmem_reserve[]: 0 0 0 0 0 [ 1837.040490] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.041386] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1837.077923] lowmem_reserve[]: 0 0 0 0 0 [ 1837.085476] Node 1 [ 1837.089315] Node 1 [ 1837.089319] Normal: 62*4kB [ 1837.100459] mems_allowed=0-1 [ 1837.100522] (UM) [ 1837.105983] CPU: 1 PID: 20014 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1837.109470] 49*8kB [ 1837.117142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1837.117146] Call Trace: [ 1837.117168] dump_stack+0x1b2/0x281 [ 1837.117181] warn_alloc.cold+0x96/0x1cc [ 1837.117193] ? zone_watermark_ok_safe+0x220/0x220 [ 1837.117206] ? usleep_range+0x130/0x130 [ 1837.119443] (UM) [ 1837.128799] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1837.128813] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1837.128823] ? run_timer_softirq+0x5a0/0x5a0 [ 1837.128842] __alloc_pages_nodemask+0x2127/0x2720 [ 1837.131482] Node 0 active_anon:58268kB inactive_anon:88884kB active_file:36kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143732kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.135325] ? lock_acquire+0x170/0x3f0 [ 1837.139629] Node 1 active_anon:1688kB inactive_anon:16272kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67484kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.144482] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1837.144492] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1837.144507] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1837.144525] alloc_pages_current+0x155/0x260 [ 1837.148501] 23*16kB [ 1837.150540] ion_page_pool_alloc+0x118/0x1b0 [ 1837.155665] (UME) [ 1837.160635] ion_system_heap_allocate+0x133/0x8c0 [ 1837.160649] ? _raw_spin_unlock+0x29/0x40 [ 1837.160660] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1837.165072] Node 0 [ 1837.169905] ? ion_system_contig_heap_create+0x130/0x130 [ 1837.198664] 16*32kB [ 1837.202579] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1837.202593] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1837.202605] ion_alloc+0x27a/0x810 [ 1837.229903] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.235126] ? ion_dma_buf_release+0x40/0x40 [ 1837.235140] ? __might_fault+0x177/0x1b0 [ 1837.235151] ion_ioctl+0xea/0x1f0 [ 1837.239715] lowmem_reserve[]: [ 1837.245184] ? ion_query_heaps+0x360/0x360 [ 1837.245195] ? ion_query_heaps+0x360/0x360 [ 1837.245205] do_vfs_ioctl+0x75a/0xff0 [ 1837.245217] ? ioctl_preallocate+0x1a0/0x1a0 [ 1837.249895] (UME) [ 1837.252280] ? lock_downgrade+0x740/0x740 [ 1837.252294] ? __fget+0x225/0x360 [ 1837.252304] ? do_vfs_ioctl+0xff0/0xff0 [ 1837.252318] ? security_file_ioctl+0x83/0xb0 [ 1837.256901] 11*64kB [ 1837.259049] SyS_ioctl+0x7f/0xb0 [ 1837.263930] (M) [ 1837.268741] ? do_vfs_ioctl+0xff0/0xff0 [ 1837.268756] do_syscall_64+0x1d5/0x640 [ 1837.273714] 0 [ 1837.275904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1837.281375] 123*128kB [ 1837.283640] RIP: 0033:0x466459 [ 1837.288637] (UM) [ 1837.293466] RSP: 002b:00007f8faa39a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1837.293475] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459 [ 1837.293480] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1837.293484] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1837.293489] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1837.293493] R13: 00007ffdd07e8f7f R14: 00007f8faa39a300 R15: 0000000000022000 [ 1837.307981] Normal free:26672kB min:53696kB low:67120kB high:80544kB active_anon:1688kB inactive_anon:16272kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:876kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.337502] 2717 [ 1837.340102] lowmem_reserve[]: [ 1837.358487] 2718 [ 1837.370631] 0 [ 1837.390298] 2718 [ 1837.393488] 0 [ 1837.402305] 2718 [ 1837.404216] 0 [ 1837.429784] 0 [ 1837.450907] Node 0 [ 1837.479867] 0 [ 1837.498983] 32*256kB [ 1837.503255] Node 0 DMA: 249*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 3*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1837.508829] (UM) [ 1837.519702] Node 0 DMA32: 898*4kB (UME) 553*8kB (UME) 177*16kB (UME) 233*32kB (UME) 1*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18624kB [ 1837.527763] 1*512kB [ 1837.542507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1837.556008] (M) 0*1024kB 0*2048kB 0*4096kB = 26672kB [ 1837.563834] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (E) 2*32kB (ME) 539*64kB (UM) 123*128kB (UM) 32*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 59036kB [ 1837.587818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.599491] DMA32 free:23364kB min:36200kB low:45248kB high:54296kB active_anon:58268kB inactive_anon:88884kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2232kB bounce:0kB free_pcp:232kB local_pcp:12kB free_cma:0kB [ 1837.621227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.633053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1837.651903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.664264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1837.677409] lowmem_reserve[]: 0 0 0 0 0 [ 1837.691336] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.726173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1837.727228] 28178 total pagecache pages [ 1837.743905] 0 pages in swap cache [ 1837.750359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.751595] Swap cache stats: add 0, delete 0, find 0/0 [ 1837.759561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1837.774173] 27853 total pagecache pages [ 1837.778273] 0 pages in swap cache [ 1837.778554] lowmem_reserve[]: [ 1837.782104] Swap cache stats: add 0, delete 0, find 0/0 [ 1837.790636] Free swap = 0kB [ 1837.790640] Total swap = 0kB [ 1837.790647] 2097051 pages RAM [ 1837.790650] 0 pages HighMem/MovableOnly [ 1837.790653] 363849 pages reserved [ 1837.790656] 0 pages cma reserved [ 1837.800621] 0 [ 1837.808566] Free swap = 0kB [ 1837.823440] Total swap = 0kB [ 1837.826522] 2097051 pages RAM [ 1837.829623] 0 pages HighMem/MovableOnly [ 1837.834920] 0 0 0 0 [ 1837.837827] Node 1 Normal free:115400kB min:53696kB low:67120kB high:80544kB active_anon:1688kB inactive_anon:16272kB active_file:700kB inactive_file:764kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:876kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 1837.891273] 363849 pages reserved [ 1837.895715] 0 pages cma reserved [ 1837.914286] lowmem_reserve[]: 0 0 0 0 0 [ 1837.919141] Node 0 DMA: 249*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11092kB [ 1837.940028] Node 0 DMA32: 22635*4kB (UME) 657*8kB (UME) 202*16kB (UME) 235*32kB (UME) 254*64kB (UM) 15*128kB (UM) 4*256kB (U) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 128820kB [ 1837.970664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1838.006778] Node 1 Normal: 103*4kB (UM) 71*8kB (UM) 37*16kB (UME) 13*32kB (UME) 599*64kB (UM) 204*128kB (UM) 36*256kB (UM) 6*512kB (U) 44*1024kB (U) 0*2048kB 0*4096kB = 123780kB [ 1838.061466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.080671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.110629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.119501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.130632] 27804 total pagecache pages [ 1838.135002] 0 pages in swap cache [ 1838.160619] Swap cache stats: add 0, delete 0, find 0/0 [ 1838.166022] Free swap = 0kB [ 1838.169079] Total swap = 0kB [ 1838.190672] 2097051 pages RAM [ 1838.193832] 0 pages HighMem/MovableOnly [ 1838.197824] 363849 pages reserved [ 1838.211198] 0 pages cma reserved [ 1838.215114] Out of memory (oom_kill_allocating_task): Kill process 7950 (syz-fuzzer) score 0 or sacrifice child [ 1838.244389] Killed process 14209 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1838.278470] oom_reaper: reaped process 14209 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1838.501339] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1838.520965] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1838.526138] CPU: 1 PID: 17800 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 1838.534017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.543370] Call Trace: [ 1838.545970] dump_stack+0x1b2/0x281 [ 1838.549619] dump_header+0x178/0x82f [ 1838.553326] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1838.558426] ? ___ratelimit+0x2cd/0x530 [ 1838.562412] oom_kill_process.cold+0x10/0xa40 [ 1838.566920] out_of_memory+0xe3e/0x1190 [ 1838.570894] ? oom_killer_disable+0x1c0/0x1c0 [ 1838.575393] ? mutex_trylock+0x152/0x1a0 [ 1838.579452] __alloc_pages_nodemask+0x23e1/0x2720 [ 1838.584304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1838.589162] alloc_pages_current+0x155/0x260 [ 1838.593574] filemap_fault+0x11a1/0x1ad0 [ 1838.597643] ext4_filemap_fault+0x84/0xb0 [ 1838.602739] __do_fault+0xfa/0x380 [ 1838.606272] __handle_mm_fault+0x2497/0x4620 [ 1838.610672] ? vm_insert_page+0x7c0/0x7c0 [ 1838.614833] ? lock_downgrade+0x740/0x740 [ 1838.618976] ? mark_held_locks+0xa6/0xf0 [ 1838.623041] handle_mm_fault+0x455/0x9c0 [ 1838.627107] __do_page_fault+0x549/0xad0 [ 1838.631163] ? spurious_fault+0x640/0x640 [ 1838.635317] ? do_page_fault+0x60/0x500 [ 1838.639282] ? page_fault+0x2f/0x50 [ 1838.642903] page_fault+0x45/0x50 [ 1838.646356] RIP: 70018fd0:0x2f50810 [ 1838.649966] RSP: 0065:0000000000000003 EFLAGS: 004bebb2 [ 1838.732421] Mem-Info: [ 1838.740243] active_anon:14993 inactive_anon:26289 isolated_anon:0 [ 1838.740243] active_file:22 inactive_file:0 isolated_file:0 [ 1838.740243] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1838.740243] slab_reclaimable:12570 slab_unreclaimable:127405 [ 1838.740243] mapped:52848 shmem:27412 pagetables:703 bounce:0 [ 1838.740243] free:13902 free_pcp:0 free_cma:0 [ 1838.773693] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1838.793219] Node 0 active_anon:58268kB inactive_anon:88884kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143852kB dirty:4kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1838.807987] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1838.843496] Node 1 active_anon:1704kB inactive_anon:16272kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67540kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1838.857858] CPU: 0 PID: 20010 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1838.877554] Node 0 [ 1838.881409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1838.881415] Call Trace: [ 1838.881437] dump_stack+0x1b2/0x281 [ 1838.881450] warn_alloc.cold+0x96/0x1cc [ 1838.881462] ? zone_watermark_ok_safe+0x220/0x220 [ 1838.881472] ? usleep_range+0x130/0x130 [ 1838.881480] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1838.881492] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1838.881502] ? run_timer_softirq+0x5a0/0x5a0 [ 1838.881517] __alloc_pages_nodemask+0x2127/0x2720 [ 1838.883756] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.893116] ? lock_acquire+0x170/0x3f0 [ 1838.893132] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1838.893142] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1838.893157] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1838.893168] ? retint_kernel+0x2d/0x2d [ 1838.893182] alloc_pages_current+0x155/0x260 [ 1838.893192] ion_page_pool_alloc+0x118/0x1b0 [ 1838.893201] ion_system_heap_allocate+0x133/0x8c0 [ 1838.893212] ? _raw_spin_unlock+0x29/0x40 [ 1838.893223] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1838.900123] lowmem_reserve[]: [ 1838.903575] ? ion_system_contig_heap_create+0x130/0x130 [ 1838.903586] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1838.903596] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1838.903606] ion_alloc+0x27a/0x810 [ 1838.903620] ? ion_dma_buf_release+0x40/0x40 [ 1838.903632] ? __might_fault+0x177/0x1b0 [ 1838.908458] 0 [ 1838.912437] ion_ioctl+0xea/0x1f0 [ 1838.912447] ? ion_query_heaps+0x360/0x360 [ 1838.912458] ? ion_query_heaps+0x360/0x360 [ 1838.912468] do_vfs_ioctl+0x75a/0xff0 [ 1838.912479] ? ioctl_preallocate+0x1a0/0x1a0 [ 1838.912488] ? lock_downgrade+0x740/0x740 [ 1838.912499] ? __fget+0x225/0x360 [ 1838.912508] ? do_vfs_ioctl+0xff0/0xff0 [ 1838.912519] ? security_file_ioctl+0x83/0xb0 [ 1838.912529] SyS_ioctl+0x7f/0xb0 [ 1838.912536] ? do_vfs_ioctl+0xff0/0xff0 [ 1838.912546] do_syscall_64+0x1d5/0x640 [ 1838.912560] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1838.912568] RIP: 0033:0x466459 [ 1838.912576] RSP: 002b:00007f8faa3bb188 EFLAGS: 00000246 [ 1838.922488] 2717 [ 1838.922697] ORIG_RAX: 0000000000000010 [ 1838.927092] 2718 [ 1838.932107] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1838.932112] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1838.932116] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1838.932121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1838.932126] R13: 00007ffdd07e8f7f R14: 00007f8faa3bb300 R15: 0000000000022000 [ 1838.950612] warn_alloc_show_mem: 2 callbacks suppressed [ 1838.950616] Mem-Info: [ 1838.962156] 2718 [ 1838.983043] active_anon:14993 inactive_anon:26289 isolated_anon:0 [ 1838.983043] active_file:22 inactive_file:0 isolated_file:0 [ 1838.983043] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1838.983043] slab_reclaimable:12570 slab_unreclaimable:127405 [ 1838.983043] mapped:52848 shmem:27412 pagetables:703 bounce:0 [ 1838.983043] free:13902 free_pcp:0 free_cma:0 [ 1838.990134] 2718 [ 1838.990296] Node 0 active_anon:58268kB inactive_anon:88884kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143852kB dirty:4kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1838.995222] Node 0 DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:58268kB inactive_anon:88884kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2084kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.995244] lowmem_reserve[]: 0 0 0 0 0 [ 1838.995264] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1838.995282] lowmem_reserve[]: 0 0 [ 1839.015933] Node 1 active_anon:1704kB inactive_anon:16272kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67540kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1839.022880] 0 [ 1839.034158] Node 0 [ 1839.037260] 0 [ 1839.040324] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1839.046822] 0 [ 1839.060311] lowmem_reserve[]: [ 1839.074564] 0 [ 1839.076676] Node 1 [ 1839.095195] 2717 [ 1839.104037] Normal free:27424kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:16272kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:768kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1839.118799] 2718 [ 1839.126788] lowmem_reserve[]: [ 1839.138700] 2718 [ 1839.149401] 0 [ 1839.167414] 2718 [ 1839.194847] 0 [ 1839.261895] 0 [ 1839.289953] Node 0 [ 1839.326139] 0 [ 1839.353390] DMA32 free:18544kB min:36200kB low:45248kB high:54296kB active_anon:58196kB inactive_anon:88884kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2056kB bounce:0kB free_pcp:28kB local_pcp:20kB free_cma:0kB [ 1839.366509] 0 [ 1839.395201] lowmem_reserve[]: [ 1839.444649] 0 0 0 0 0 [ 1839.447215] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1839.453983] Node 0 [ 1839.484608] lowmem_reserve[]: 0 0 0 0 0 [ 1839.495156] DMA: 214*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1839.495678] Node 1 Normal free:27424kB min:53696kB low:67120kB high:80544kB active_anon:1692kB inactive_anon:16272kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:768kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1839.523567] Node 0 [ 1839.557073] lowmem_reserve[]: 0 0 0 0 0 [ 1839.563386] DMA32: 676*4kB (UME) 513*8kB (UME) 156*16kB (UME) 57*32kB (UME) 23*64kB (UM) 15*128kB (UM) 4*256kB (U) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 18616kB [ 1839.565608] Node 0 DMA: 214*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1839.593434] Node 0 [ 1839.611775] Node 0 DMA32: 676*4kB (UME) 513*8kB (UME) 156*16kB (UME) 57*32kB (UME) 23*64kB (UM) 15*128kB (UM) 4*256kB (U) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 18616kB [ 1839.616024] Normal: [ 1839.638999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1839.643617] 0*4kB [ 1839.652198] Node 1 Normal: 40*4kB (UM) 24*8kB (M) 18*16kB (ME) 7*32kB (ME) 17*64kB (UM) 3*128kB (UM) 4*256kB (M) 1*512kB (U) 23*1024kB (U) 0*2048kB 0*4096kB = 27424kB [ 1839.652281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1839.652287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1839.652297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1839.667189] 0*8kB [ 1839.680235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1839.694092] 0*16kB [ 1839.707673] 27439 total pagecache pages [ 1839.716381] 0 pages in swap cache [ 1839.719555] 0*32kB [ 1839.719856] Swap cache stats: add 0, delete 0, find 0/0 [ 1839.719864] 0*64kB [ 1839.722146] Free swap = 0kB [ 1839.722151] Total swap = 0kB [ 1839.722157] 2097051 pages RAM [ 1839.722160] 0 pages HighMem/MovableOnly [ 1839.722163] 363849 pages reserved [ 1839.722167] 0 pages cma reserved 07:58:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) 07:58:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) r1 = socket$kcm(0x29, 0x2, 0x0) accept(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) accept(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="efcb0500", @ANYRESDEC=0x0, @ANYRES64=r2], 0x14}}, 0x4004040) [ 1839.819398] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1839.886126] Node 1 Normal: 1*4kB (M) 0*8kB 3*16kB (UME) 2*32kB (UE) 820*64kB (UM) 206*128kB (UM) 1*256kB (U) 0*512kB 151*1024kB (U) 21*2048kB (U) 0*4096kB = 276852kB [ 1839.944748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1839.984494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 07:58:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) [ 1840.010820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1840.019727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1840.081984] 30033 total pagecache pages [ 1840.086018] 0 pages in swap cache [ 1840.089487] Swap cache stats: add 0, delete 0, find 0/0 [ 1840.122589] Free swap = 0kB [ 1840.125759] Total swap = 0kB [ 1840.128797] 2097051 pages RAM [ 1840.138429] 0 pages HighMem/MovableOnly [ 1840.165175] 363849 pages reserved [ 1840.176280] 0 pages cma reserved [ 1840.194204] Out of memory (oom_kill_allocating_task): Kill process 17800 (syz-executor.0) score 0 or sacrifice child [ 1840.218026] Killed process 17800 (syz-executor.0) total-vm:93120kB, anon-rss:104kB, file-rss:33576kB, shmem-rss:0kB [ 1840.255434] oom_reaper: reaped process 17800 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 07:58:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000000}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x200}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x80000000, 0x53}) [ 1840.914452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.924824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1840.934664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.945093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1840.954736] device bridge_slave_1 left promiscuous mode [ 1840.960322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.011666] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1841.040536] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1841.047839] CPU: 1 PID: 20033 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 1841.055715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1841.065069] Call Trace: [ 1841.067665] dump_stack+0x1b2/0x281 [ 1841.071296] warn_alloc.cold+0x96/0x1cc [ 1841.075271] ? zone_watermark_ok_safe+0x220/0x220 [ 1841.080131] __alloc_pages_nodemask+0x2127/0x2720 [ 1841.084989] ? lock_acquire+0x170/0x3f0 [ 1841.088999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1841.093937] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1841.099393] ? __mutex_unlock_slowpath+0x75/0x770 [ 1841.103216] systemd-rfkill invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1841.104250] ? __sanitizer_cov_trace_pc+0x3a/0x50 [ 1841.104258] (null) [ 1841.114133] alloc_pages_current+0x155/0x260 [ 1841.114154] ion_page_pool_alloc+0x118/0x1b0 [ 1841.114166] ion_system_heap_allocate+0x133/0x8c0 [ 1841.122161] , order=0, oom_score_adj=0 [ 1841.125582] ? ion_alloc+0x187/0x810 [ 1841.130140] systemd-rfkill cpuset= [ 1841.134979] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1841.134990] ? ion_system_contig_heap_create+0x130/0x130 [ 1841.134999] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1841.135010] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1841.135021] ion_alloc+0x204/0x810 [ 1841.138974] / [ 1841.143136] ? ion_dma_buf_release+0x40/0x40 [ 1841.143154] ? __might_fault+0x177/0x1b0 [ 1841.146854] mems_allowed=0-1 [ 1841.152261] ion_ioctl+0xea/0x1f0 [ 1841.152272] ? ion_query_heaps+0x360/0x360 [ 1841.152284] ? ion_query_heaps+0x360/0x360 [ 1841.196268] do_vfs_ioctl+0x75a/0xff0 [ 1841.200076] ? ioctl_preallocate+0x1a0/0x1a0 [ 1841.204476] ? lock_downgrade+0x740/0x740 [ 1841.208708] ? __fget+0x225/0x360 [ 1841.212157] ? do_vfs_ioctl+0xff0/0xff0 [ 1841.216126] ? security_file_ioctl+0x83/0xb0 [ 1841.220543] SyS_ioctl+0x7f/0xb0 [ 1841.223898] ? do_vfs_ioctl+0xff0/0xff0 [ 1841.227867] do_syscall_64+0x1d5/0x640 [ 1841.231753] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1841.236936] RIP: 0033:0x466459 [ 1841.240111] RSP: 002b:00007fa53ce3b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1841.247818] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1841.255086] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1841.262353] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1841.269621] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1841.276895] R13: 00007ffe0f7b0c1f R14: 00007fa53ce3b300 R15: 0000000000022000 [ 1841.284183] CPU: 0 PID: 20041 Comm: systemd-rfkill Not tainted 4.14.231-syzkaller #0 [ 1841.292076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1841.301435] Call Trace: [ 1841.304035] dump_stack+0x1b2/0x281 [ 1841.307673] dump_header+0x178/0x82f [ 1841.311395] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1841.316507] ? ___ratelimit+0x2cd/0x530 [ 1841.320687] oom_kill_process.cold+0x10/0xa40 [ 1841.325217] out_of_memory+0xe3e/0x1190 [ 1841.329195] ? oom_killer_disable+0x1c0/0x1c0 [ 1841.333693] ? mutex_trylock+0x152/0x1a0 [ 1841.337758] __alloc_pages_nodemask+0x23e1/0x2720 [ 1841.342623] ? _find_next_bit+0xdb/0x100 [ 1841.346711] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1841.351568] ? lock_acquire+0x170/0x3f0 [ 1841.355553] ? do_raw_spin_unlock+0x164/0x220 [ 1841.360066] alloc_pages_current+0x155/0x260 [ 1841.364486] __pmd_alloc+0x37/0x3f0 [ 1841.368136] move_page_tables+0xf00/0x17d0 [ 1841.372393] ? vmacache_update+0xbb/0x130 [ 1841.376553] shift_arg_pages+0x17c/0x3e0 [ 1841.380626] ? put_arg_page+0x1c0/0x1c0 [ 1841.384627] ? change_protection+0xa0/0xa0 [ 1841.388878] ? lock_downgrade+0x740/0x740 [ 1841.393040] ? lock_acquire+0x170/0x3f0 [ 1841.397018] ? setup_arg_pages+0x242/0x6f0 [ 1841.401276] setup_arg_pages+0x584/0x6f0 [ 1841.405342] ? shift_arg_pages+0x3e0/0x3e0 [ 1841.409578] ? get_random_u64+0xd4/0x1c0 [ 1841.413653] load_elf_binary+0xa01/0x4750 [ 1841.417922] ? elf_core_dump+0x4410/0x4410 [ 1841.422162] search_binary_handler.part.0+0xd5/0x640 [ 1841.427270] do_execveat_common+0x1099/0x1f30 [ 1841.431773] ? copy_strings_kernel+0x110/0x110 [ 1841.436355] ? strncpy_from_user+0x210/0x2c0 [ 1841.440769] ? getname_flags+0x22e/0x550 [ 1841.444828] SyS_execve+0x3b/0x50 [ 1841.448279] ? setup_new_exec+0x770/0x770 [ 1841.452523] do_syscall_64+0x1d5/0x640 [ 1841.456418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1841.461691] RIP: 0033:0x7f43d4cfd647 [ 1841.465392] RSP: 002b:00007ffc2f6965b8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1841.473363] RAX: ffffffffffffffda RBX: 00005637448cd260 RCX: 00007f43d4cfd647 [ 1841.480744] RDX: 00005637448c8840 RSI: 00005637448c99b0 RDI: 00005637447ff9b0 [ 1841.488017] RBP: 00007ffc2f696720 R08: 000000000000fefe R09: 0000000000000030 [ 1841.495474] R10: 00005637447d2dc0 R11: 0000000000000246 R12: 00005637447a0988 [ 1841.502739] R13: 0000000000000000 R14: 00005637448c99b0 R15: 00007ffc2f696800 [ 1841.569670] Mem-Info: [ 1841.583446] Mem-Info: [ 1841.585922] active_anon:14926 inactive_anon:26289 isolated_anon:0 [ 1841.585922] active_file:24 inactive_file:6 isolated_file:0 [ 1841.585922] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1841.585922] slab_reclaimable:12564 slab_unreclaimable:128199 [ 1841.585922] mapped:35440 shmem:27412 pagetables:617 bounce:0 [ 1841.585922] free:25030 free_pcp:59 free_cma:0 [ 1841.590495] active_anon:14926 inactive_anon:26289 isolated_anon:0 [ 1841.590495] active_file:24 inactive_file:6 isolated_file:0 [ 1841.590495] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1841.590495] slab_reclaimable:12564 slab_unreclaimable:128199 [ 1841.590495] mapped:35440 shmem:27412 pagetables:617 bounce:0 [ 1841.590495] free:25030 free_pcp:59 free_cma:0 [ 1841.631831] Node 0 active_anon:57892kB inactive_anon:88884kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109092kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1841.673064] Node 0 active_anon:57892kB inactive_anon:88884kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109092kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1841.695386] Node 1 active_anon:1812kB inactive_anon:16272kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32668kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1841.728722] Node 1 active_anon:1812kB inactive_anon:16272kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32668kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1841.750735] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.788668] Node 0 [ 1841.822193] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1841.828066] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.829493] Node 0 DMA32 free:35840kB min:36200kB low:45248kB high:54296kB active_anon:57892kB inactive_anon:88884kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:1856kB bounce:0kB free_pcp:236kB local_pcp:124kB free_cma:0kB [ 1841.874622] lowmem_reserve[]: [ 1841.911613] lowmem_reserve[]: 0 0 0 0 0 [ 1841.918764] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1841.921068] 0 [ 1841.955341] lowmem_reserve[]: 0 0 0 0 0 [ 1841.962659] 2717 2718 2718 2718 [ 1841.966131] Node 0 DMA32 free:35840kB min:36200kB low:45248kB high:54296kB active_anon:57892kB inactive_anon:88884kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:1856kB bounce:0kB free_pcp:236kB local_pcp:112kB free_cma:0kB [ 1841.967435] Node 1 Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:1812kB inactive_anon:16272kB active_file:36kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.012866] lowmem_reserve[]: 0 0 0 0 0 [ 1842.054573] lowmem_reserve[]: 0 [ 1842.057822] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.065239] 0 0 0 0 [ 1842.089408] Node 0 DMA: 215*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11020kB [ 1842.092300] lowmem_reserve[]: [ 1842.105040] Node 0 DMA32: 688*4kB (ME) 516*8kB (ME) 161*16kB (ME) 147*32kB (UME) 214*64kB (UM) 27*128kB (UM) 6*256kB (U) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 35920kB [ 1842.108801] 0 [ 1842.124025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1842.127673] 0 0 0 0 [ 1842.137013] Node 1 Normal: [ 1842.139352] 79*4kB (ME) 65*8kB (UME) 57*16kB (UME) 312*32kB (UME) 33*64kB (ME) 138*128kB (UME) 77*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53268kB [ 1842.146298] Node 1 Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:1812kB inactive_anon:16272kB active_file:88kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.157659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1842.191741] lowmem_reserve[]: 0 0 0 0 0 [ 1842.198116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1842.200203] Node 0 [ 1842.209026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1842.209035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1842.215666] DMA: [ 1842.223325] 27443 total pagecache pages [ 1842.236663] 0 pages in swap cache [ 1842.240245] Swap cache stats: add 0, delete 0, find 0/0 [ 1842.245728] Free swap = 0kB [ 1842.246362] 215*4kB [ 1842.248759] Total swap = 0kB [ 1842.248767] (UE) [ 1842.251127] 2097051 pages RAM [ 1842.251131] 0 pages HighMem/MovableOnly [ 1842.251135] 363849 pages reserved [ 1842.251138] 0 pages cma reserved [ 1842.275522] 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11020kB [ 1842.288807] Node 0 DMA32: 717*4kB (UME) 589*8kB (UME) 200*16kB (UME) 157*32kB (UME) 214*64kB (UM) 27*128kB (UM) 6*256kB (U) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 37564kB [ 1842.310372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1842.325179] Node 1 Normal: 79*4kB (ME) 65*8kB (UME) 57*16kB (UME) 312*32kB (UME) 33*64kB (ME) 138*128kB (UME) 77*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53268kB [ 1842.346383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1842.355769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1842.368506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1842.377424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1842.389892] 27443 total pagecache pages [ 1842.394089] 0 pages in swap cache [ 1842.397552] Swap cache stats: add 0, delete 0, find 0/0 [ 1842.406599] Free swap = 0kB [ 1842.409805] Total swap = 0kB [ 1842.412872] 2097051 pages RAM [ 1842.415980] 0 pages HighMem/MovableOnly [ 1842.419951] 363849 pages reserved [ 1842.428432] 0 pages cma reserved [ 1842.431895] Out of memory (oom_kill_allocating_task): Kill process 20041 (systemd-rfkill) score 0 or sacrifice child [ 1842.449165] Killed process 20041 (systemd-rfkill) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1842.541000] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1842.557776] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1842.563131] CPU: 0 PID: 7949 Comm: syz-fuzzer Not tainted 4.14.231-syzkaller #0 [ 1842.570595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1842.579959] Call Trace: [ 1842.582567] dump_stack+0x1b2/0x281 [ 1842.586249] dump_header+0x178/0x82f [ 1842.589976] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1842.595087] ? ___ratelimit+0x2cd/0x530 [ 1842.599075] oom_kill_process.cold+0x10/0xa40 [ 1842.603687] out_of_memory+0xe3e/0x1190 [ 1842.607707] ? oom_killer_disable+0x1c0/0x1c0 [ 1842.612309] ? mutex_trylock+0x152/0x1a0 [ 1842.616375] __alloc_pages_nodemask+0x23e1/0x2720 [ 1842.622019] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1842.627084] alloc_pages_current+0x155/0x260 [ 1842.631611] filemap_fault+0x11a1/0x1ad0 [ 1842.639697] ext4_filemap_fault+0x84/0xb0 [ 1842.643856] __do_fault+0xfa/0x380 [ 1842.651165] __handle_mm_fault+0x2497/0x4620 [ 1842.656120] ? vm_insert_page+0x7c0/0x7c0 [ 1842.660358] ? free_object+0xe4/0x240 [ 1842.664167] ? mark_held_locks+0xa6/0xf0 [ 1842.668246] handle_mm_fault+0x455/0x9c0 [ 1842.672324] __do_page_fault+0x549/0xad0 [ 1842.676389] ? spurious_fault+0x640/0x640 [ 1842.680534] ? do_page_fault+0x60/0x500 [ 1842.684520] ? page_fault+0x2f/0x50 [ 1842.688140] page_fault+0x45/0x50 [ 1842.691601] RIP: 0000:0x9414d4 [ 1842.694893] RSP: 2e000:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1842.719671] Mem-Info: [ 1842.730660] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1842.730682] syz-executor.5: page allocation failure: order:0 [ 1842.750647] active_anon:14925 inactive_anon:26289 isolated_anon:0 [ 1842.750647] active_file:16 inactive_file:9 isolated_file:6 [ 1842.750647] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1842.750647] slab_reclaimable:12555 slab_unreclaimable:127850 [ 1842.750647] mapped:35440 shmem:27412 pagetables:616 bounce:0 [ 1842.750647] free:13913 free_pcp:30 free_cma:0 [ 1842.753323] (null) [ 1842.756572] Node 0 active_anon:57892kB inactive_anon:88884kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109092kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1842.796927] syz-executor.4 cpuset= [ 1842.819799] Node 1 active_anon:1808kB inactive_anon:16272kB active_file:52kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:32668kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1842.819805] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.819823] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1842.819843] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:57892kB inactive_anon:88884kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:1856kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1842.819862] lowmem_reserve[]: 0 0 0 0 0 [ 1842.819882] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.819903] lowmem_reserve[]: [ 1842.830625] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1842.852208] 0 [ 1842.898232] / [ 1842.911680] 0 [ 1842.919864] mems_allowed=0-1 [ 1842.941806] 0 0 0 [ 1842.941822] Node 1 Normal free:26664kB min:53696kB low:67120kB high:80544kB active_anon:1808kB inactive_anon:16272kB active_file:52kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:608kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1842.941843] lowmem_reserve[]: 0 0 0 0 0 [ 1842.941861] Node 0 DMA: 196*4kB (UE) 18*8kB (U) 6*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10944kB [ 1842.941937] Node 0 DMA32: 696*4kB (UME) 517*8kB (UME) 163*16kB (UMEH) [ 1842.969696] CPU: 1 PID: 20004 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1842.991200] (null) [ 1842.995108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.010500] syz-executor.5 cpuset= [ 1843.017101] Call Trace: [ 1843.017124] dump_stack+0x1b2/0x281 [ 1843.017138] warn_alloc.cold+0x96/0x1cc [ 1843.017152] ? zone_watermark_ok_safe+0x220/0x220 [ 1843.025927] / [ 1843.028034] ? usleep_range+0x130/0x130 [ 1843.037410] mems_allowed=0-1 [ 1843.040898] ? queue_work_on+0x10d/0x1d0 [ 1843.040916] ? _find_next_bit+0xdb/0x100 [ 1843.043536] 56*32kB [ 1843.047141] ? run_timer_softirq+0x5a0/0x5a0 [ 1843.060607] (UME) [ 1843.061599] __alloc_pages_nodemask+0x2127/0x2720 [ 1843.064691] 19*64kB [ 1843.068767] ? lock_acquire+0x170/0x3f0 [ 1843.080593] (M) [ 1843.081719] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1843.086639] 7*128kB [ 1843.088963] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1843.106561] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1843.110602] (UM) 6*256kB [ 1843.112015] alloc_pages_current+0x155/0x260 [ 1843.112017] (U) 0*512kB [ 1843.114767] ion_page_pool_alloc+0x118/0x1b0 [ 1843.119192] 3*1024kB [ 1843.121857] ion_system_heap_allocate+0x133/0x8c0 [ 1843.121866] ? ion_alloc+0x187/0x810 [ 1843.121876] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1843.121885] ? ion_system_contig_heap_create+0x130/0x130 [ 1843.121897] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1843.140606] (U) [ 1843.142650] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1843.148074] 0*2048kB [ 1843.153081] ion_alloc+0x204/0x810 [ 1843.153095] ? ion_dma_buf_release+0x40/0x40 [ 1843.153108] ? __might_fault+0x177/0x1b0 [ 1843.153119] ion_ioctl+0xea/0x1f0 [ 1843.170606] 0*4096kB [ 1843.171328] ? ion_query_heaps+0x360/0x360 [ 1843.175367] = 18040kB [ 1843.178900] ? ion_query_heaps+0x360/0x360 [ 1843.190603] Node 0 Normal: [ 1843.192117] do_vfs_ioctl+0x75a/0xff0 [ 1843.192130] ? ioctl_preallocate+0x1a0/0x1a0 [ 1843.195048] 0*4kB [ 1843.198855] ? lock_downgrade+0x740/0x740 [ 1843.209592] ? __fget+0x225/0x360 [ 1843.213063] ? do_vfs_ioctl+0xff0/0xff0 [ 1843.217069] ? security_file_ioctl+0x83/0xb0 [ 1843.220598] 0*8kB 0*16kB [ 1843.221484] SyS_ioctl+0x7f/0xb0 [ 1843.221498] ? do_vfs_ioctl+0xff0/0xff0 [ 1843.224233] 0*32kB [ 1843.227600] do_syscall_64+0x1d5/0x640 [ 1843.237938] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1843.240602] 0*64kB 0*128kB [ 1843.243123] RIP: 0033:0x466459 [ 1843.243130] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 [ 1843.246048] 0*256kB [ 1843.249232] ORIG_RAX: 0000000000000010 [ 1843.249240] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1843.268459] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1843.270607] 0*512kB [ 1843.285458] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1843.285464] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1843.285469] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1843.304471] Mem-Info: [ 1843.325098] active_anon:14925 inactive_anon:26289 isolated_anon:0 [ 1843.325098] active_file:15 inactive_file:16 isolated_file:0 [ 1843.325098] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1843.325098] slab_reclaimable:12539 slab_unreclaimable:127836 [ 1843.325098] mapped:35440 shmem:27412 pagetables:616 bounce:0 [ 1843.325098] free:13853 free_pcp:30 free_cma:0 [ 1843.338219] CPU: 0 PID: 20007 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1843.366158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.372330] Node 0 active_anon:57892kB inactive_anon:88884kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109092kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1843.375511] Call Trace: [ 1843.405771] dump_stack+0x1b2/0x281 [ 1843.409406] warn_alloc.cold+0x96/0x1cc [ 1843.413382] ? zone_watermark_ok_safe+0x220/0x220 [ 1843.417570] Node 1 active_anon:1808kB inactive_anon:16272kB active_file:60kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32668kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1843.418221] ? usleep_range+0x130/0x130 [ 1843.449343] ? try_to_free_pages+0x23f/0x6e0 [ 1843.453752] ? _find_next_bit+0xdb/0x100 [ 1843.457815] ? run_timer_softirq+0x5a0/0x5a0 [ 1843.462242] __alloc_pages_nodemask+0x2127/0x2720 [ 1843.465618] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1843.467099] ? lock_acquire+0x170/0x3f0 [ 1843.467115] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1843.502416] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1843.506918] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1843.509414] lowmem_reserve[]: [ 1843.512374] alloc_pages_current+0x155/0x260 [ 1843.512388] ion_page_pool_alloc+0x118/0x1b0 [ 1843.512397] ion_system_heap_allocate+0x133/0x8c0 [ 1843.512406] ? ion_alloc+0x187/0x810 [ 1843.512416] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1843.512424] ? ion_system_contig_heap_create+0x130/0x130 [ 1843.512434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1843.512444] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1843.512454] ion_alloc+0x204/0x810 [ 1843.512466] ? ion_dma_buf_release+0x40/0x40 [ 1843.512478] ? __might_fault+0x177/0x1b0 [ 1843.535294] 0 [ 1843.538950] ion_ioctl+0xea/0x1f0 [ 1843.560260] 2717 [ 1843.560517] ? ion_query_heaps+0x360/0x360 [ 1843.570103] 2718 [ 1843.572492] ? ion_query_heaps+0x360/0x360 [ 1843.572503] do_vfs_ioctl+0x75a/0xff0 [ 1843.572516] ? ioctl_preallocate+0x1a0/0x1a0 [ 1843.572525] ? lock_downgrade+0x740/0x740 [ 1843.572537] ? __fget+0x225/0x360 [ 1843.572557] ? do_vfs_ioctl+0xff0/0xff0 [ 1843.572570] ? security_file_ioctl+0x83/0xb0 [ 1843.572579] SyS_ioctl+0x7f/0xb0 [ 1843.572586] ? do_vfs_ioctl+0xff0/0xff0 [ 1843.572598] do_syscall_64+0x1d5/0x640 [ 1843.572612] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1843.572622] RIP: 0033:0x466459 [ 1843.590054] 2718 [ 1843.590392] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 [ 1843.610393] 2718 [ 1843.614503] ORIG_RAX: 0000000000000010 [ 1843.614509] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1843.614514] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1843.614518] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1843.614523] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1843.614528] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1843.614946] syz-executor.2: [ 1843.648822] 0*1024kB [ 1843.675485] Node 0 [ 1843.690233] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1843.706738] DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:57892kB inactive_anon:88884kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:1856kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1843.716229] syz-executor.2 cpuset= [ 1843.757405] lowmem_reserve[]: [ 1843.757447] 0*2048kB [ 1843.769124] 0 [ 1843.773161] 0*4096kB = 0kB [ 1843.778057] Node 1 Normal: 80*4kB (UME) 65*8kB (UME) 56*16kB (UME) 35*32kB (UME) 33*64kB (UME) 11*128kB (ME) 71*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26600kB [ 1843.779531] 0 [ 1843.809822] / mems_allowed=0-1 [ 1843.815017] CPU: 0 PID: 20017 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1843.817228] 0 [ 1843.823180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.823185] Call Trace: [ 1843.823206] dump_stack+0x1b2/0x281 [ 1843.823220] warn_alloc.cold+0x96/0x1cc [ 1843.823231] ? zone_watermark_ok_safe+0x220/0x220 [ 1843.823240] ? usleep_range+0x130/0x130 [ 1843.823249] ? try_to_free_pages+0x23f/0x6e0 [ 1843.823259] ? _find_next_bit+0xdb/0x100 [ 1843.823270] ? run_timer_softirq+0x5a0/0x5a0 [ 1843.823286] __alloc_pages_nodemask+0x2127/0x2720 [ 1843.823302] ? lock_acquire+0x170/0x3f0 [ 1843.823316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1843.849862] 0 [ 1843.854251] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1843.854268] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1843.854287] alloc_pages_current+0x155/0x260 [ 1843.854299] ion_page_pool_alloc+0x118/0x1b0 [ 1843.854307] ion_system_heap_allocate+0x133/0x8c0 [ 1843.854317] ? ion_alloc+0x187/0x810 [ 1843.854328] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1843.854337] ? ion_system_contig_heap_create+0x130/0x130 [ 1843.854347] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1843.854357] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1843.854367] ion_alloc+0x204/0x810 [ 1843.854379] ? ion_dma_buf_release+0x40/0x40 [ 1843.854391] ? __might_fault+0x177/0x1b0 [ 1843.874300] 0 [ 1843.875158] ion_ioctl+0xea/0x1f0 [ 1843.889292] ? ion_query_heaps+0x360/0x360 [ 1843.889304] ? ion_query_heaps+0x360/0x360 [ 1843.889314] do_vfs_ioctl+0x75a/0xff0 [ 1843.889325] ? ioctl_preallocate+0x1a0/0x1a0 [ 1843.889335] ? lock_downgrade+0x740/0x740 [ 1843.889354] ? __fget+0x225/0x360 [ 1843.889363] ? do_vfs_ioctl+0xff0/0xff0 [ 1843.889374] ? security_file_ioctl+0x83/0xb0 [ 1843.889384] SyS_ioctl+0x7f/0xb0 [ 1843.889392] ? do_vfs_ioctl+0xff0/0xff0 [ 1843.889403] do_syscall_64+0x1d5/0x640 [ 1843.889418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1843.889428] RIP: 0033:0x466459 [ 1843.889432] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1843.889443] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1843.889453] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1843.920509] Node 0 [ 1843.924172] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1843.924177] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1843.924182] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1843.932102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1843.958275] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1843.967106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1843.988636] lowmem_reserve[]: [ 1843.997084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1844.018080] 0 [ 1844.030074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1844.059159] 0 [ 1844.070239] 27443 total pagecache pages [ 1844.099442] 0 [ 1844.141022] 0 pages in swap cache [ 1844.144356] device bridge_slave_0 left promiscuous mode [ 1844.147068] Swap cache stats: add 0, delete 0, find 0/0 [ 1844.167327] Free swap = 0kB [ 1844.172542] Total swap = 0kB [ 1844.175091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.180626] 2097051 pages RAM [ 1844.185131] 0 pages HighMem/MovableOnly [ 1844.189104] 363849 pages reserved [ 1844.218688] device veth1_macvtap left promiscuous mode [ 1844.262151] 0 pages cma reserved [ 1844.265557] Out of memory (oom_kill_allocating_task): Kill process 7949 (syz-fuzzer) score 0 or sacrifice child [ 1844.289225] device veth0_macvtap left promiscuous mode [ 1844.300690] Killed process 14206 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1844.348851] device veth1_vlan left promiscuous mode [ 1844.370448] oom_reaper: reaped process 14206 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1844.400738] device veth0_vlan left promiscuous mode [ 1844.413150] 0 0 [ 1844.441463] Node 1 Normal free:256596kB min:53696kB low:67120kB high:80544kB active_anon:2008kB inactive_anon:16272kB active_file:1940kB inactive_file:16932kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:756kB bounce:0kB free_pcp:896kB local_pcp:464kB free_cma:0kB [ 1844.513431] oom_reaper: reaped process 20004 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1844.551756] warn_alloc_show_mem: 1 callbacks suppressed [ 1844.551760] Mem-Info: [ 1844.579267] oom_reaper: reaped process 20007 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1844.590107] active_anon:14575 inactive_anon:26289 isolated_anon:0 [ 1844.590107] active_file:565 inactive_file:4958 isolated_file:0 [ 1844.590107] unevictable:0 dirty:50 writeback:0 unstable:0 [ 1844.590107] slab_reclaimable:12539 slab_unreclaimable:128694 [ 1844.590107] mapped:21715 shmem:27412 pagetables:579 bounce:0 [ 1844.590107] free:104706 free_pcp:562 free_cma:0 [ 1844.615454] lowmem_reserve[]: 0 0 0 0 0 [ 1844.648655] oom_reaper: reaped process 20017 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1844.650098] Node 0 DMA: 196*4kB (UE) 19*8kB (U) 6*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1844.740654] Node 0 active_anon:56892kB inactive_anon:88884kB active_file:120kB inactive_file:1200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4892kB dirty:0kB writeback:0kB shmem:93232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1844.785582] Node 0 DMA32: 200*4kB (ME) 554*8kB (UME) 172*16kB (UMEH) 56*32kB (ME) 2660*64kB (UMH) 158*128kB (UM) 16*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 204336kB [ 1844.830631] Node 1 active_anon:1208kB inactive_anon:16272kB active_file:2140kB inactive_file:19032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47268kB dirty:200kB writeback:0kB shmem:16416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1844.879774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1844.920662] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1844.922970] Node 1 [ 1844.949860] device hsr_slave_1 left promiscuous mode [ 1844.982459] device hsr_slave_0 left promiscuous mode [ 1845.000752] Normal: 11*4kB (UM) 23*8kB (UME) 11*16kB (UME) 7*32kB (UE) 278*64kB (UE) 86*128kB (UE) 95*256kB (U) 36*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 72180kB [ 1845.021371] team0 (unregistering): Port device team_slave_1 removed [ 1845.023739] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1845.047684] Node 0 DMA32 free:46920kB min:36200kB low:45248kB high:54296kB active_anon:57128kB inactive_anon:88876kB active_file:344kB inactive_file:2200kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:1744kB bounce:0kB free_pcp:1208kB local_pcp:740kB free_cma:0kB [ 1845.080161] team0 (unregistering): Port device team_slave_0 removed [ 1845.101365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1845.129319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1845.135425] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1845.163763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1845.174688] oom_reaper: reaped process 20033 (syz-executor.1), now anon-rss:0kB, file-rss:20kB, shmem-rss:0kB [ 1845.187063] lowmem_reserve[]: 0 0 0 0 0 [ 1845.202583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1845.216223] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.242396] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1845.257420] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1845.296992] 29237 total pagecache pages [ 1845.303229] 0 pages in swap cache [ 1845.306726] Swap cache stats: add 0, delete 0, find 0/0 [ 1845.318832] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1845.327361] Free swap = 0kB [ 1845.330399] Total swap = 0kB [ 1845.332715] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1845.337510] CPU: 1 PID: 19684 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 1845.353060] bond0 (unregistering): Released all slaves [ 1845.353255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.367864] Call Trace: [ 1845.370577] dump_stack+0x1b2/0x281 [ 1845.374205] dump_header+0x178/0x82f [ 1845.377922] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1845.383028] ? ___ratelimit+0x2cd/0x530 [ 1845.387006] oom_kill_process.cold+0x10/0xa40 [ 1845.391525] out_of_memory+0xe3e/0x1190 [ 1845.395504] ? oom_killer_disable+0x1c0/0x1c0 [ 1845.400013] ? mutex_trylock+0x152/0x1a0 [ 1845.404094] __alloc_pages_nodemask+0x23e1/0x2720 [ 1845.409211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1845.414069] alloc_pages_current+0x155/0x260 [ 1845.418481] filemap_fault+0x11a1/0x1ad0 [ 1845.422587] ext4_filemap_fault+0x84/0xb0 [ 1845.426914] __do_fault+0xfa/0x380 [ 1845.430471] __handle_mm_fault+0x2497/0x4620 [ 1845.434873] ? vm_insert_page+0x7c0/0x7c0 [ 1845.439033] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1845.443454] ? nanosleep_copyout+0x100/0x100 [ 1845.447861] ? mark_held_locks+0xa6/0xf0 [ 1845.451922] handle_mm_fault+0x455/0x9c0 [ 1845.455994] __do_page_fault+0x549/0xad0 [ 1845.460059] ? spurious_fault+0x640/0x640 [ 1845.464210] ? do_page_fault+0x60/0x500 [ 1845.468182] ? page_fault+0x2f/0x50 [ 1845.471814] page_fault+0x45/0x50 [ 1845.475263] RIP: 1c271c:0x6 [ 1845.478183] RSP: 002a:00007ffe0f7b0edc EFLAGS: 0000004d [ 1845.478304] syz-executor.2 cpuset= [ 1845.486370] 2097051 pages RAM [ 1845.494511] lowmem_reserve[]: 0 0 0 0 0 [ 1845.497382] / mems_allowed=0-1 [ 1845.498555] Node 1 [ 1845.502142] CPU: 0 PID: 20017 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1845.504637] 0 pages HighMem/MovableOnly [ 1845.512244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.512249] Call Trace: [ 1845.512272] dump_stack+0x1b2/0x281 [ 1845.512285] warn_alloc.cold+0x96/0x1cc [ 1845.512297] ? zone_watermark_ok_safe+0x220/0x220 [ 1845.512317] __alloc_pages_nodemask+0x2127/0x2720 [ 1845.512325] ? retint_kernel+0x2d/0x2d [ 1845.512340] ? lock_acquire+0x170/0x3f0 [ 1845.512359] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1845.512376] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1845.512388] ? __mutex_unlock_slowpath+0x75/0x770 [ 1845.517862] Normal free:27652kB min:53696kB low:67120kB high:80544kB active_anon:1168kB inactive_anon:16264kB active_file:1144kB inactive_file:236kB unevictable:0kB writepending:204kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:652kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1845.526022] ? __list_del_entry_valid+0xb3/0xf0 [ 1845.526036] alloc_pages_current+0x155/0x260 [ 1845.526049] ion_page_pool_alloc+0x118/0x1b0 [ 1845.526057] ion_system_heap_allocate+0x133/0x8c0 [ 1845.526070] ? _raw_spin_unlock+0x29/0x40 [ 1845.526078] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1845.526086] ? ion_system_contig_heap_create+0x130/0x130 [ 1845.526096] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1845.526105] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1845.526116] ion_alloc+0x27a/0x810 [ 1845.526128] ? ion_dma_buf_release+0x40/0x40 [ 1845.526140] ? __might_fault+0x177/0x1b0 [ 1845.526150] ion_ioctl+0xea/0x1f0 [ 1845.530663] 363849 pages reserved [ 1845.532344] ? ion_query_heaps+0x360/0x360 [ 1845.536295] 0 pages cma reserved [ 1845.541234] ? ion_query_heaps+0x360/0x360 [ 1845.541246] do_vfs_ioctl+0x75a/0xff0 [ 1845.541257] ? ioctl_preallocate+0x1a0/0x1a0 [ 1845.541265] ? lock_downgrade+0x740/0x740 [ 1845.541277] ? __fget+0x225/0x360 [ 1845.541285] ? do_vfs_ioctl+0xff0/0xff0 [ 1845.541296] ? security_file_ioctl+0x83/0xb0 [ 1845.541305] SyS_ioctl+0x7f/0xb0 [ 1845.541312] ? do_vfs_ioctl+0xff0/0xff0 [ 1845.541323] do_syscall_64+0x1d5/0x640 [ 1845.541338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1845.541348] RIP: 0033:0x466459 [ 1845.549552] lowmem_reserve[]: [ 1845.550090] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 [ 1845.554153] 0 [ 1845.558898] ORIG_RAX: 0000000000000010 [ 1845.592616] 0 [ 1845.598816] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1845.622648] 0 [ 1845.626688] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1845.642604] 0 [ 1845.644003] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1845.647538] 0 [ 1845.651932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1845.651938] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1846.044056] Mem-Info: [ 1846.046518] active_anon:14548 inactive_anon:26284 isolated_anon:0 [ 1846.046518] active_file:224 inactive_file:260 isolated_file:0 [ 1846.046518] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1846.046518] slab_reclaimable:12499 slab_unreclaimable:127685 [ 1846.046518] mapped:9570 shmem:27404 pagetables:593 bounce:0 [ 1846.046518] free:205208 free_pcp:658 free_cma:0 [ 1846.140644] Mem-Info: [ 1846.143118] active_anon:14548 inactive_anon:26284 isolated_anon:0 [ 1846.143118] active_file:224 inactive_file:260 isolated_file:0 [ 1846.143118] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1846.143118] slab_reclaimable:12499 slab_unreclaimable:127685 [ 1846.143118] mapped:9570 shmem:27404 pagetables:593 bounce:0 [ 1846.143118] free:208244 free_pcp:651 free_cma:0 [ 1846.153863] Node 0 active_anon:57116kB inactive_anon:88872kB active_file:516kB inactive_file:688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5180kB dirty:44kB writeback:0kB shmem:93216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1846.250673] Node 0 DMA: 220*4kB (UE) 25*8kB (U) 6*16kB (UE) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11160kB [ 1846.298038] Node 0 DMA32: 17698*4kB (UH) 3984*8kB (UEH) 662*16kB (UEH) 609*32kB (UE) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 133000kB [ 1846.321078] Node 0 active_anon:57116kB inactive_anon:88872kB active_file:1116kB inactive_file:4652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8480kB dirty:44kB writeback:0kB shmem:93216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1846.369960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1846.407214] Node 1 Normal: 4186*4kB (UM) 3480*8kB (UM) 2926*16kB (UME) 652*32kB (UME) 474*64kB (UME) 1244*128kB (UME) 371*256kB (UM) 190*512kB (UM) 13*1024kB (U) 0*2048kB 0*4096kB = 507400kB [ 1846.427828] Node 1 active_anon:1076kB inactive_anon:16264kB active_file:380kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33100kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1846.440672] Node 1 active_anon:1076kB inactive_anon:16264kB active_file:380kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33100kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1846.484255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.520635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.529450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1846.563336] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.620657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1846.620686] Node 0 [ 1846.629328] 29688 total pagecache pages [ 1846.629350] DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.629356] lowmem_reserve[]: [ 1846.660629] 0 pages in swap cache [ 1846.700988] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1846.706268] Node 0 DMA32 free:43840kB min:36200kB low:45248kB high:54296kB active_anon:57216kB inactive_anon:88872kB active_file:1316kB inactive_file:6952kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:1720kB bounce:0kB free_pcp:568kB local_pcp:348kB free_cma:0kB [ 1846.742471] Swap cache stats: add 0, delete 0, find 0/0 [ 1846.747991] Free swap = 0kB [ 1846.760653] 0 2717 2718 2718 2718 [ 1846.764241] Node 0 DMA32 free:44568kB min:36200kB low:45248kB high:54296kB active_anon:57216kB inactive_anon:88872kB active_file:1316kB inactive_file:6952kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:1720kB bounce:0kB free_pcp:568kB local_pcp:220kB free_cma:0kB [ 1846.765907] Total swap = 0kB [ 1846.832699] lowmem_reserve[]: 0 0 0 0 0 [ 1846.836739] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.877043] 2097051 pages RAM [ 1846.884707] 0 pages HighMem/MovableOnly [ 1846.888794] 363849 pages reserved [ 1846.912919] 0 pages cma reserved [ 1846.937039] lowmem_reserve[]: 0 0 0 0 0 [ 1846.941790] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1846.980759] lowmem_reserve[]: 0 0 0 0 0 [ 1846.991297] lowmem_reserve[]: 0 0 0 0 0 [ 1847.000623] Node 1 Normal free:28952kB min:53696kB low:67120kB high:80544kB active_anon:1076kB inactive_anon:16264kB active_file:380kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:800kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 1847.032987] Node 1 Normal free:41000kB min:53696kB low:67120kB high:80544kB active_anon:1104kB inactive_anon:16264kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1847.120669] lowmem_reserve[]: 0 0 0 0 0 [ 1847.124713] Node 0 DMA: 191*4kB (UE) 25*8kB (U) 7*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10996kB [ 1847.141583] Node 0 DMA32: 321*4kB (MEH) 440*8kB (UMEH) 477*16kB (UMEH) 1174*32kB (UME) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50260kB [ 1847.156739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1847.160617] lowmem_reserve[]: 0 0 0 0 0 [ 1847.168340] Node 1 Normal: 3740*4kB (UM) 154*8kB (UM) 354*16kB (UME) 975*32kB (UE) 4*64kB (U) 2*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55616kB [ 1847.187686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.196737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.220654] Node 0 DMA: 191*4kB (UE) 25*8kB (U) 7*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10996kB [ 1847.225307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.250633] Node 0 DMA32: 377*4kB (UMEH) 435*8kB (UMEH) 481*16kB (UMEH) 1174*32kB (UME) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50508kB [ 1847.293578] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1847.300609] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1847.330637] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1847.336463] CPU: 0 PID: 20004 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 1847.344349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.350045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.353724] Call Trace: [ 1847.353744] dump_stack+0x1b2/0x281 [ 1847.353758] warn_alloc.cold+0x96/0x1cc [ 1847.353770] ? zone_watermark_ok_safe+0x220/0x220 [ 1847.353792] __alloc_pages_nodemask+0x2127/0x2720 [ 1847.353809] ? lock_acquire+0x170/0x3f0 [ 1847.353823] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1847.353841] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1847.353854] ? __mutex_unlock_slowpath+0x75/0x770 [ 1847.353865] ? alloc_pages_current+0x21c/0x260 [ 1847.353876] alloc_pages_current+0x155/0x260 [ 1847.353889] ion_page_pool_alloc+0x118/0x1b0 [ 1847.353899] ion_system_heap_allocate+0x133/0x8c0 [ 1847.353910] ? _raw_spin_unlock+0x29/0x40 [ 1847.353919] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1847.353928] ? ion_system_contig_heap_create+0x130/0x130 [ 1847.353937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1847.353950] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1847.390616] 28070 total pagecache pages [ 1847.391513] ion_alloc+0x27a/0x810 [ 1847.397064] 0 pages in swap cache [ 1847.402355] ? ion_dma_buf_release+0x40/0x40 [ 1847.402368] ? __might_fault+0x177/0x1b0 [ 1847.402378] ion_ioctl+0xea/0x1f0 [ 1847.402386] ? ion_query_heaps+0x360/0x360 [ 1847.402396] ? ion_query_heaps+0x360/0x360 [ 1847.402406] do_vfs_ioctl+0x75a/0xff0 [ 1847.402418] ? ioctl_preallocate+0x1a0/0x1a0 [ 1847.402427] ? lock_downgrade+0x740/0x740 [ 1847.402438] ? __fget+0x225/0x360 [ 1847.402454] ? do_vfs_ioctl+0xff0/0xff0 [ 1847.402465] ? security_file_ioctl+0x83/0xb0 [ 1847.402475] SyS_ioctl+0x7f/0xb0 [ 1847.402482] ? do_vfs_ioctl+0xff0/0xff0 [ 1847.402492] do_syscall_64+0x1d5/0x640 [ 1847.402506] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1847.402515] RIP: 0033:0x466459 [ 1847.402524] RSP: 002b:00007f5e97091188 EFLAGS: 00000246 [ 1847.451307] Swap cache stats: add 0, delete 0, find 0/0 [ 1847.452731] ORIG_RAX: 0000000000000010 [ 1847.456210] Free swap = 0kB [ 1847.460775] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1847.460781] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1847.460786] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1847.460791] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1847.460795] R13: 00007ffcde252b2f R14: 00007f5e97091300 R15: 0000000000022000 [ 1847.470626] Node 1 [ 1847.500642] Total swap = 0kB [ 1847.570719] Normal: 5903*4kB (U) 163*8kB (U) 356*16kB (UE) 1151*32kB (UE) [ 1847.611300] 2097051 pages RAM [ 1847.613810] 0*64kB [ 1847.619232] 0 pages HighMem/MovableOnly [ 1847.628616] 363849 pages reserved [ 1847.630616] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67444kB [ 1847.633298] 0 pages cma reserved [ 1847.639124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.647016] Out of memory (oom_kill_allocating_task): Kill process 19684 (syz-executor.1) score 0 or sacrifice child [ 1847.680633] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.685337] Killed process 19684 (syz-executor.1) total-vm:93120kB, anon-rss:104kB, file-rss:34444kB, shmem-rss:0kB [ 1847.689242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1847.689250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1847.689255] 28053 total pagecache pages [ 1847.689265] 0 pages in swap cache [ 1847.689270] Swap cache stats: add 0, delete 0, find 0/0 [ 1847.689274] Free swap = 0kB [ 1847.689278] Total swap = 0kB [ 1847.689285] 2097051 pages RAM [ 1847.689288] 0 pages HighMem/MovableOnly [ 1847.689292] 363849 pages reserved [ 1847.689295] 0 pages cma reserved [ 1847.875474] oom_reaper: reaped process 19684 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1847.966487] Mem-Info: [ 1847.968931] active_anon:14635 inactive_anon:26284 isolated_anon:0 [ 1847.968931] active_file:117 inactive_file:143 isolated_file:0 [ 1847.968931] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1847.968931] slab_reclaimable:12489 slab_unreclaimable:128042 [ 1847.968931] mapped:18387 shmem:27404 pagetables:635 bounce:0 [ 1847.968931] free:18968 free_pcp:72 free_cma:0 [ 1848.024159] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1848.055892] Node 0 active_anon:57440kB inactive_anon:88872kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29616kB dirty:0kB writeback:0kB shmem:93220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1848.062840] systemd cpuset= [ 1848.083555] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1848.098827] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1848.105882] Node 1 active_anon:1244kB inactive_anon:16264kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:42908kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1848.117962] syz-executor.1 cpuset= [ 1848.138421] syz-executor.5: [ 1848.141222] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1848.146637] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1848.150098] CPU: 1 PID: 20017 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 1848.150106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1848.160058] (null) [ 1848.167864] Call Trace: [ 1848.167889] dump_stack+0x1b2/0x281 [ 1848.167902] warn_alloc.cold+0x96/0x1cc [ 1848.167914] ? zone_watermark_ok_safe+0x220/0x220 [ 1848.167928] ? usleep_range+0x130/0x130 [ 1848.177321] syz-executor.5 cpuset= [ 1848.179428] ? try_to_free_pages+0x23f/0x6e0 [ 1848.182047] Node 0 [ 1848.185617] ? _find_next_bit+0xdb/0x100 [ 1848.189575] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.194393] ? run_timer_softirq+0x5a0/0x5a0 [ 1848.194410] __alloc_pages_nodemask+0x2127/0x2720 [ 1848.194428] ? lock_acquire+0x170/0x3f0 [ 1848.194442] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1848.198431] / [ 1848.201959] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1848.206415] mems_allowed=0-1 [ 1848.208603] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1848.220623] lowmem_reserve[]: [ 1848.238582] alloc_pages_current+0x155/0x260 [ 1848.238598] ion_page_pool_alloc+0x118/0x1b0 [ 1848.238611] ion_system_heap_allocate+0x133/0x8c0 [ 1848.260660] 0 [ 1848.262844] ? _raw_spin_unlock+0x29/0x40 [ 1848.265927] 2717 [ 1848.271382] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1848.271392] ? ion_system_contig_heap_create+0x130/0x130 [ 1848.271402] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1848.271414] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1848.271425] ion_alloc+0x27a/0x810 [ 1848.290610] 2718 [ 1848.294108] ? ion_dma_buf_release+0x40/0x40 [ 1848.296135] 2718 2718 [ 1848.301062] ? __might_fault+0x177/0x1b0 [ 1848.301075] ion_ioctl+0xea/0x1f0 [ 1848.301084] ? ion_query_heaps+0x360/0x360 [ 1848.301098] ? ion_query_heaps+0x360/0x360 [ 1848.322219] do_vfs_ioctl+0x75a/0xff0 [ 1848.326607] Node 0 [ 1848.329103] ? ioctl_preallocate+0x1a0/0x1a0 [ 1848.350628] DMA32 free:17944kB min:36200kB low:45248kB high:54296kB active_anon:57440kB inactive_anon:88872kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:1948kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 1848.351729] ? lock_downgrade+0x740/0x740 [ 1848.356140] lowmem_reserve[]: [ 1848.384378] ? __fget+0x225/0x360 [ 1848.384389] ? do_vfs_ioctl+0xff0/0xff0 [ 1848.384400] ? security_file_ioctl+0x83/0xb0 [ 1848.384409] SyS_ioctl+0x7f/0xb0 [ 1848.384420] ? do_vfs_ioctl+0xff0/0xff0 [ 1848.410823] do_syscall_64+0x1d5/0x640 [ 1848.414726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1848.419918] RIP: 0033:0x466459 [ 1848.420606] 0 [ 1848.423095] RSP: 002b:00007fe6f0c17188 EFLAGS: 00000246 [ 1848.423104] 0 [ 1848.424885] ORIG_RAX: 0000000000000010 [ 1848.430248] 0 [ 1848.432036] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1848.432041] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1848.432046] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1848.432050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1848.432055] R13: 00007ffd0884d31f R14: 00007fe6f0c17300 R15: 0000000000022000 [ 1848.446426] / [ 1848.471935] CPU: 0 PID: 20007 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 1848.480698] mems_allowed=0-1 [ 1848.484229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1848.496673] Call Trace: [ 1848.499266] dump_stack+0x1b2/0x281 [ 1848.502891] warn_alloc.cold+0x96/0x1cc [ 1848.506862] ? zone_watermark_ok_safe+0x220/0x220 [ 1848.511720] __alloc_pages_nodemask+0x2127/0x2720 [ 1848.516565] ? lock_acquire+0x170/0x3f0 [ 1848.520539] ? lock_acquire+0x170/0x3f0 [ 1848.524516] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1848.529367] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1848.534819] ? __mutex_unlock_slowpath+0x75/0x770 [ 1848.539666] alloc_pages_current+0x155/0x260 [ 1848.544104] ion_page_pool_alloc+0x118/0x1b0 [ 1848.548528] ion_system_heap_allocate+0x133/0x8c0 [ 1848.553375] ? _raw_spin_unlock+0x29/0x40 [ 1848.557526] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1848.562485] ? ion_system_contig_heap_create+0x130/0x130 [ 1848.563371] / [ 1848.567945] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1848.567980] mems_allowed=0-1 [ 1848.569664] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1848.582611] ion_alloc+0x27a/0x810 [ 1848.586187] ? ion_dma_buf_release+0x40/0x40 [ 1848.590600] ? __might_fault+0x177/0x1b0 [ 1848.594669] ion_ioctl+0xea/0x1f0 [ 1848.598128] ? ion_query_heaps+0x360/0x360 [ 1848.602367] ? ion_query_heaps+0x360/0x360 [ 1848.606607] do_vfs_ioctl+0x75a/0xff0 [ 1848.610405] ? ioctl_preallocate+0x1a0/0x1a0 [ 1848.614812] ? lock_downgrade+0x740/0x740 [ 1848.618962] ? __fget+0x225/0x360 [ 1848.622433] ? do_vfs_ioctl+0xff0/0xff0 [ 1848.626422] ? security_file_ioctl+0x83/0xb0 [ 1848.630848] SyS_ioctl+0x7f/0xb0 [ 1848.634215] ? do_vfs_ioctl+0xff0/0xff0 [ 1848.638198] do_syscall_64+0x1d5/0x640 [ 1848.642097] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1848.647382] RIP: 0033:0x466459 [ 1848.650580] RSP: 002b:00007f868acf9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.658324] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1848.665599] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1848.672874] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1848.680144] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1848.687412] R13: 00007ffce51bfb9f R14: 00007f868acf9300 R15: 0000000000022000 [ 1848.695174] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.231-syzkaller #0 [ 1848.702129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1848.708977] 0 [ 1848.711494] Call Trace: [ 1848.711513] dump_stack+0x1b2/0x281 [ 1848.711525] dump_header+0x178/0x82f [ 1848.711535] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1848.711548] ? ___ratelimit+0x2cd/0x530 [ 1848.713377] 0 [ 1848.715955] oom_kill_process.cold+0x10/0xa40 [ 1848.723275] ? lock_downgrade+0x740/0x740 [ 1848.723289] out_of_memory+0x2dc/0x1190 [ 1848.723301] ? oom_killer_disable+0x1c0/0x1c0 [ 1848.723310] ? mutex_trylock+0x152/0x1a0 [ 1848.723321] __alloc_pages_nodemask+0x23e1/0x2720 [ 1848.728412] Node 0 [ 1848.732390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1848.732414] alloc_pages_current+0x155/0x260 [ 1848.732426] filemap_fault+0x11a1/0x1ad0 [ 1848.734242] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1848.738716] ext4_filemap_fault+0x84/0xb0 [ 1848.742882] lowmem_reserve[]: [ 1848.747782] __do_fault+0xfa/0x380 [ 1848.752342] 0 [ 1848.756359] __handle_mm_fault+0x2497/0x4620 [ 1848.761227] 0 [ 1848.763411] ? vm_insert_page+0x7c0/0x7c0 [ 1848.768231] 0 [ 1848.772664] ? lock_downgrade+0x740/0x740 [ 1848.772680] ? mark_held_locks+0xa6/0xf0 [ 1848.772691] handle_mm_fault+0x455/0x9c0 [ 1848.772705] __do_page_fault+0x549/0xad0 [ 1848.772716] ? spurious_fault+0x640/0x640 [ 1848.776778] 0 [ 1848.801685] ? do_page_fault+0x60/0x500 [ 1848.801695] ? page_fault+0x2f/0x50 [ 1848.801701] page_fault+0x45/0x50 [ 1848.801710] RIP: 436cdec0:0x56374484f800 [ 1848.801714] RSP: 4484f800:00007ffc2f696b00 EFLAGS: 00000000 [ 1848.808219] CPU: 1 PID: 20033 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 1848.809190] 0 [ 1848.812488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1848.812493] Call Trace: [ 1848.812511] dump_stack+0x1b2/0x281 [ 1848.812525] warn_alloc.cold+0x96/0x1cc [ 1848.812536] ? zone_watermark_ok_safe+0x220/0x220 [ 1848.812546] ? usleep_range+0x130/0x130 [ 1848.812555] ? try_to_free_pages+0x23f/0x6e0 [ 1848.812565] ? _find_next_bit+0xdb/0x100 [ 1848.812576] ? run_timer_softirq+0x5a0/0x5a0 [ 1848.812592] __alloc_pages_nodemask+0x2127/0x2720 [ 1848.812609] ? lock_acquire+0x170/0x3f0 [ 1848.812624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1848.812633] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1848.812647] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1848.812664] alloc_pages_current+0x155/0x260 [ 1848.812675] ion_page_pool_alloc+0x118/0x1b0 [ 1848.812685] ion_system_heap_allocate+0x133/0x8c0 [ 1848.812695] ? ion_alloc+0x187/0x810 [ 1848.812706] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1848.812714] ? ion_system_contig_heap_create+0x130/0x130 [ 1848.812724] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1848.812734] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1848.812744] ion_alloc+0x204/0x810 [ 1848.812758] ? ion_dma_buf_release+0x40/0x40 [ 1848.812769] ? __might_fault+0x177/0x1b0 [ 1848.812779] ion_ioctl+0xea/0x1f0 [ 1848.812786] ? ion_query_heaps+0x360/0x360 [ 1848.812797] ? ion_query_heaps+0x360/0x360 [ 1848.812806] do_vfs_ioctl+0x75a/0xff0 [ 1848.812816] ? ioctl_preallocate+0x1a0/0x1a0 [ 1848.812823] ? lock_downgrade+0x740/0x740 [ 1848.812835] ? __fget+0x225/0x360 [ 1848.812843] ? do_vfs_ioctl+0xff0/0xff0 [ 1848.812863] ? security_file_ioctl+0x83/0xb0 [ 1848.812874] SyS_ioctl+0x7f/0xb0 [ 1848.812882] ? do_vfs_ioctl+0xff0/0xff0 [ 1848.812894] do_syscall_64+0x1d5/0x640 [ 1848.812909] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1848.812917] RIP: 0033:0x466459 [ 1848.812922] RSP: 002b:00007fa53ce3b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.812933] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1848.812939] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1848.812945] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1848.812950] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1848.812956] R13: 00007ffe0f7b0c1f R14: 00007fa53ce3b300 R15: 0000000000022000 [ 1849.100102] Mem-Info: [ 1849.102816] active_anon:14720 inactive_anon:26286 isolated_anon:0 [ 1849.102816] active_file:79 inactive_file:1162 isolated_file:0 [ 1849.102816] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1849.102816] slab_reclaimable:12489 slab_unreclaimable:128235 [ 1849.102816] mapped:19074 shmem:27407 pagetables:679 bounce:0 [ 1849.102816] free:96996 free_pcp:374 free_cma:0 [ 1849.137077] Node 1 Normal free:345732kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:16272kB active_file:296kB inactive_file:4628kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:768kB bounce:0kB free_pcp:812kB local_pcp:0kB free_cma:0kB [ 1849.190677] Node 0 active_anon:57440kB inactive_anon:88872kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29624kB dirty:4kB writeback:0kB shmem:93220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1849.240936] warn_alloc_show_mem: 1 callbacks suppressed [ 1849.240940] Mem-Info: [ 1849.248879] active_anon:14720 inactive_anon:26286 isolated_anon:0 [ 1849.248879] active_file:80 inactive_file:1162 isolated_file:0 [ 1849.248879] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1849.248879] slab_reclaimable:12465 slab_unreclaimable:128209 [ 1849.248879] mapped:19074 shmem:27407 pagetables:679 bounce:0 [ 1849.248879] free:103770 free_pcp:776 free_cma:0 [ 1849.268869] lowmem_reserve[]: [ 1849.290758] Node 1 active_anon:1440kB inactive_anon:16272kB active_file:296kB inactive_file:4628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46672kB dirty:68kB writeback:0kB shmem:16408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1849.320616] 0 0 0 0 0 [ 1849.340610] Node 0 DMA: 177*4kB (UE) 23*8kB (U) 13*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1849.360664] Node 0 active_anon:57440kB inactive_anon:88872kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29624kB dirty:4kB writeback:0kB shmem:93220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1849.389804] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1849.393850] Node 0 DMA32: 7691*4kB (UMEH) 3648*8kB (UMEH) 172*16kB (UMEH) 310*32kB (UME) 201*64kB (UH) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 86124kB [ 1849.481183] Node 1 active_anon:1440kB inactive_anon:16272kB active_file:296kB inactive_file:4628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46672kB dirty:68kB writeback:0kB shmem:16408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1849.507949] Node 0 Normal: [ 1849.525382] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1849.542449] Node 0 DMA32 free:85940kB min:36200kB low:45248kB high:54296kB active_anon:57440kB inactive_anon:88872kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:1948kB bounce:0kB free_pcp:1536kB local_pcp:800kB free_cma:0kB [ 1849.623362] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1849.630644] 0*4kB [ 1849.660655] lowmem_reserve[]: 0 0 0 0 0 [ 1849.666868] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1849.692154] IPVS: ftp: loaded support on port[0] = 21 [ 1849.713992] lowmem_reserve[]: [ 1849.713999] 0*8kB 0*16kB [ 1849.717134] 0 [ 1849.717144] 0*32kB [ 1849.719895] 2717 2718 2718 2718 [ 1849.748429] Node 0 DMA32 free:100016kB min:36200kB low:45248kB high:54296kB active_anon:57440kB inactive_anon:88872kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:1948kB bounce:0kB free_pcp:1508kB local_pcp:792kB free_cma:0kB [ 1849.748698] 0*64kB [ 1849.779212] lowmem_reserve[]: 0 0 0 0 0 [ 1849.786350] Node 1 Normal free:441140kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:16272kB active_file:296kB inactive_file:4628kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:768kB bounce:0kB free_pcp:1452kB local_pcp:812kB free_cma:0kB [ 1849.817841] lowmem_reserve[]: 0 0 0 0 0 [ 1849.821013] Bluetooth: hci4 command 0x0409 tx timeout [ 1849.823254] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1849.858232] lowmem_reserve[]: 0 0 0 0 0 [ 1849.881185] Node 0 DMA: 184*4kB (UE) 23*8kB (U) 13*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10984kB [ 1849.886784] 0*128kB [ 1849.911129] Node 0 DMA32: 10268*4kB (UMEH) 4165*8kB (UMEH) 343*16kB (UMEH) 487*32kB (UME) 389*64kB (UH) 12*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 121896kB [ 1849.916264] 0*256kB [ 1849.940640] lowmem_reserve[]: 0 0 0 0 0 [ 1849.947081] Node 1 Normal free:325816kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:16272kB active_file:296kB inactive_file:4628kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:768kB bounce:0kB free_pcp:1484kB local_pcp:812kB free_cma:0kB [ 1849.991045] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1850.001972] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1850.015275] Node 1 Normal: 12221*4kB (UM) 1000*8kB (UM) 1417*16kB (UME) 801*32kB (UE) 2100*64kB (U) 344*128kB (U) 22*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 294372kB [ 1850.020683] Node 1 Normal: 12221*4kB (UM) 1000*8kB (UM) 1417*16kB (UME) 801*32kB (UE) 1409*64kB (U) 344*128kB (U) 22*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 250148kB [ 1850.070650] lowmem_reserve[]: 0 0 0 0 0 [ 1850.074706] Node 0 DMA: 199*4kB (UE) 23*8kB (U) 13*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11044kB [ 1850.083262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.100928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.109907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.131267] Node 0 DMA32: 10331*4kB (UMEH) 4360*8kB (UMEH) 663*16kB (UMEH) 506*32kB (UME) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 103260kB [ 1850.160637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.166549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.180906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.190216] 28913 total pagecache pages [ 1850.199325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1850.204604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.230689] 0 pages in swap cache [ 1850.234173] Swap cache stats: add 0, delete 0, find 0/0 [ 1850.239924] Node 1 Normal: 16063*4kB (UM) 1847*8kB (UM) 1656*16kB (UME) 981*32kB (UE) 3*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 137108kB [ 1850.256714] Free swap = 0kB [ 1850.261561] Total swap = 0kB [ 1850.264589] 2097051 pages RAM [ 1850.267706] 0 pages HighMem/MovableOnly [ 1850.276526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.291089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.299953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.306272] 28913 total pagecache pages [ 1850.321259] 363849 pages reserved [ 1850.324731] 0 pages cma reserved [ 1850.328093] Out of memory: Kill process 7948 (syz-fuzzer) score 6 or sacrifice child [ 1850.328096] chnl_net:caif_netlink_parms(): no params data found [ 1850.344167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.352814] syz-executor.3: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1850.363782] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1850.369152] CPU: 0 PID: 20055 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1850.377117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1850.386512] Call Trace: [ 1850.389107] dump_stack+0x1b2/0x281 [ 1850.392740] warn_alloc.cold+0x96/0x1cc [ 1850.393294] Killed process 20054 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1850.396710] ? zone_watermark_ok_safe+0x220/0x220 [ 1850.410323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.411671] ? wake_all_kswapds+0x175/0x360 [ 1850.411686] __alloc_pages_nodemask+0x2127/0x2720 [ 1850.411696] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1850.411703] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1850.411721] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1850.411729] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1850.411737] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1850.411755] ? cache_alloc_refill+0x2fa/0x350 [ 1850.411763] ? ____cache_alloc_node+0x156/0x1d0 [ 1850.411773] cache_grow_begin+0x91/0x700 [ 1850.411784] fallback_alloc+0x207/0x2c0 [ 1850.411796] __kmalloc+0x213/0x400 [ 1850.411803] ? batadv_hash_new+0xaa/0x270 [ 1850.411813] batadv_hash_new+0xaa/0x270 [ 1850.411823] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 1850.422568] 28899 total pagecache pages [ 1850.424724] batadv_tt_init+0x2b2/0x390 [ 1850.424734] batadv_mesh_init+0x478/0x630 [ 1850.424745] batadv_softif_init_late+0xa26/0xc90 [ 1850.424753] ? batadv_get_strings+0x40/0x40 [ 1850.424760] ? dev_valid_name+0x1a0/0x1a0 [ 1850.424768] ? batadv_get_strings+0x40/0x40 [ 1850.424777] register_netdevice+0x291/0xe40 [ 1850.424788] ? netdev_change_features+0xa0/0xa0 [ 1850.424795] ? rtnl_create_link+0x129/0x890 [ 1850.424805] rtnl_newlink+0x14ff/0x1860 [ 1850.424815] ? rtnl_newlink+0x43d/0x1860 [ 1850.433693] 0 pages in swap cache [ 1850.434667] ? __lock_acquire+0x5fc/0x3f20 [ 1850.434685] ? trace_hardirqs_on+0x10/0x10 [ 1850.434694] ? rtnl_dellink+0x6a0/0x6a0 [ 1850.434701] ? trace_hardirqs_on+0x10/0x10 [ 1850.434710] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1850.434718] ? deref_stack_reg+0x124/0x1a0 [ 1850.434761] ? lock_acquire+0x170/0x3f0 [ 1850.434769] ? lock_downgrade+0x740/0x740 [ 1850.434778] ? rtnl_dellink+0x6a0/0x6a0 [ 1850.434787] rtnetlink_rcv_msg+0x3be/0xb10 [ 1850.434798] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1850.441460] Swap cache stats: add 0, delete 0, find 0/0 [ 1850.444643] ? __netlink_lookup+0x345/0x5d0 [ 1850.444658] netlink_rcv_skb+0x125/0x390 [ 1850.444667] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1850.444687] ? netlink_ack+0x9a0/0x9a0 [ 1850.444704] netlink_unicast+0x437/0x610 [ 1850.444713] ? netlink_sendskb+0xd0/0xd0 [ 1850.444721] ? __check_object_size+0x179/0x230 [ 1850.444731] netlink_sendmsg+0x62e/0xb80 [ 1850.444743] ? nlmsg_notify+0x170/0x170 [ 1850.444756] ? security_socket_sendmsg+0x83/0xb0 [ 1850.444766] ? nlmsg_notify+0x170/0x170 [ 1850.470159] Free swap = 0kB [ 1850.472095] sock_sendmsg+0xb5/0x100 [ 1850.472105] SyS_sendto+0x1c7/0x2c0 [ 1850.472113] ? SyS_getpeername+0x220/0x220 [ 1850.472121] ? vm_insert_page+0x7c0/0x7c0 [ 1850.472152] ? up_read+0x17/0x30 [ 1850.472162] ? __do_page_fault+0x159/0xad0 [ 1850.472170] ? do_syscall_64+0x4c/0x640 [ 1850.472176] ? SyS_getpeername+0x220/0x220 [ 1850.472185] do_syscall_64+0x1d5/0x640 [ 1850.472198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1850.472205] RIP: 0033:0x4193ec [ 1850.472209] RSP: 002b:00007ffe63d59e60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1850.472218] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1850.472223] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1850.472228] RBP: 0000000000000000 R08: 00007ffe63d59eb4 R09: 000000000000000c [ 1850.472233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1850.472236] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1850.472350] warn_alloc_show_mem: 1 callbacks suppressed [ 1850.472353] Mem-Info: [ 1850.472373] active_anon:14645 inactive_anon:26287 isolated_anon:12 [ 1850.472373] active_file:634 inactive_file:1086 isolated_file:0 [ 1850.472373] unevictable:0 dirty:24 writeback:0 unstable:0 [ 1850.472373] slab_reclaimable:12440 slab_unreclaimable:127603 [ 1850.472373] mapped:19415 shmem:27408 pagetables:642 bounce:0 [ 1850.472373] free:78553 free_pcp:344 free_cma:0 [ 1850.472388] Node 0 active_anon:57440kB inactive_anon:88876kB active_file:328kB inactive_file:2140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:30988kB dirty:24kB writeback:0kB shmem:93224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1850.472403] Node 1 active_anon:1140kB inactive_anon:16272kB active_file:2208kB inactive_file:2204kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:46672kB dirty:72kB writeback:0kB shmem:16408kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1850.472405] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1850.472423] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1850.472441] Node 0 DMA32 free:138352kB min:36200kB low:45248kB high:54296kB active_anon:57440kB inactive_anon:88876kB active_file:328kB inactive_file:2140kB unevictable:0kB writepending:24kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:1800kB bounce:0kB free_pcp:744kB local_pcp:680kB free_cma:0kB [ 1850.472459] lowmem_reserve[]: 0 0 0 0 0 [ 1850.472476] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1850.472495] lowmem_reserve[]: [ 1850.484283] Total swap = 0kB [ 1850.489185] 0 0 0 0 0 [ 1850.489202] Node 1 Normal free:164880kB min:53696kB low:67120kB high:80544kB active_anon:1440kB inactive_anon:16272kB active_file:2312kB inactive_file:2416kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:768kB bounce:0kB free_pcp:632kB local_pcp:632kB free_cma:0kB [ 1850.489221] lowmem_reserve[]: 0 0 0 0 0 [ 1850.489235] Node 0 DMA: 215*4kB (UE) 23*8kB (U) 13*16kB (UE) 2*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 1850.489299] Node 0 DMA32: 16065*4kB (UMEH) 4211*8kB (UMEH) 808*16kB (UMEH) 831*32kB (UME) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 137724kB [ 1850.489365] Node 0 Normal: [ 1850.494335] 2097051 pages RAM [ 1850.497319] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1850.497353] Node 1 Normal: 19264*4kB (UM) 2113*8kB (UM) 2066*16kB (UME) 1170*32kB (UME) 3*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165288kB [ 1850.497415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.497421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.497426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1850.497431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1850.497439] 29380 total pagecache pages [ 1850.502863] 0 pages HighMem/MovableOnly [ 1850.506320] 0 pages in swap cache [ 1850.506325] Swap cache stats: add 0, delete 0, find 0/0 [ 1850.506328] Free swap = 0kB [ 1850.506331] Total swap = 0kB [ 1850.506498] 2097051 pages RAM [ 1850.520260] oom_reaper: reaped process 20054 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1850.523551] 0 pages HighMem/MovableOnly [ 1850.523555] 363849 pages reserved [ 1850.523558] 0 pages cma reserved [ 1850.534448] 0 pages in swap cache [ 1850.542590] syz-executor.1: [ 1850.571992] Swap cache stats: add 0, delete 0, find 0/0 [ 1850.576074] 363849 pages reserved [ 1850.576367] Free swap = 0kB [ 1850.591427] 0 pages cma reserved [ 1850.650651] Total swap = 0kB [ 1850.659394] page allocation failure: order:4 [ 1850.680635] 2097051 pages RAM [ 1850.688092] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1850.700677] 0 pages HighMem/MovableOnly [ 1850.721896] (null) [ 1850.750648] 363849 pages reserved [ 1850.847013] syz-executor.1 cpuset= [ 1850.992620] 0 pages cma reserved [ 1851.007589] / [ 1851.176592] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1851.188542] ------------[ cut here ]------------ [ 1851.193311] WARNING: CPU: 0 PID: 20055 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1851.202398] Kernel panic - not syncing: panic_on_warn set ... [ 1851.202398] [ 1851.202412] mems_allowed=0-1 [ 1851.209756] CPU: 0 PID: 20055 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 1851.220724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1851.230075] Call Trace: [ 1851.232658] dump_stack+0x1b2/0x281 [ 1851.236276] panic+0x1f9/0x42d [ 1851.239540] ? add_taint.cold+0x16/0x16 [ 1851.243521] ? debug_print_object.cold+0xa7/0xdb [ 1851.248276] ? debug_print_object.cold+0xa7/0xdb [ 1851.253024] __warn.cold+0x20/0x44 [ 1851.256832] ? ist_end_non_atomic+0x10/0x10 [ 1851.261151] ? debug_print_object.cold+0xa7/0xdb [ 1851.265914] report_bug+0x208/0x250 [ 1851.269539] do_error_trap+0x195/0x2d0 [ 1851.273506] ? math_error+0x2d0/0x2d0 [ 1851.277302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1851.282166] invalid_op+0x1b/0x40 [ 1851.285627] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1851.290974] RSP: 0018:ffff888145667248 EFLAGS: 00010086 [ 1851.296327] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1851.303589] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1028acce3f [ 1851.310854] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1851.318126] R10: 0000000000000000 R11: ffff88804d1a6600 R12: 0000000000000000 [ 1851.325393] R13: 0000000000000000 R14: ffff88805168adf0 R15: 1ffff11028acce52 [ 1851.332685] ? debug_print_object.cold+0xa7/0xdb [ 1851.337442] debug_object_assert_init+0x1d3/0x2d0 [ 1851.342285] ? debug_object_active_state+0x330/0x330 [ 1851.347395] ? rtnl_newlink+0x14ff/0x1860 [ 1851.351544] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1851.355952] ? netlink_rcv_skb+0x125/0x390 [ 1851.360229] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1851.365595] del_timer+0x5d/0xe0 [ 1851.368957] ? process_timeout+0x20/0x20 [ 1851.373017] try_to_grab_pending+0x243/0x610 [ 1851.377420] __cancel_work_timer+0x90/0x460 [ 1851.381734] ? work_on_cpu_safe+0x70/0x70 [ 1851.385881] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1851.390834] batadv_nc_mesh_free+0x41/0x120 [ 1851.395155] batadv_mesh_free+0x70/0x150 [ 1851.399213] batadv_mesh_init+0x561/0x630 [ 1851.403358] batadv_softif_init_late+0xa26/0xc90 [ 1851.408118] ? batadv_get_strings+0x40/0x40 [ 1851.412430] ? dev_valid_name+0x1a0/0x1a0 [ 1851.416576] ? batadv_get_strings+0x40/0x40 [ 1851.420919] register_netdevice+0x291/0xe40 [ 1851.425242] ? netdev_change_features+0xa0/0xa0 [ 1851.429909] ? rtnl_create_link+0x129/0x890 [ 1851.434228] rtnl_newlink+0x14ff/0x1860 [ 1851.438362] ? rtnl_newlink+0x43d/0x1860 [ 1851.442420] ? __lock_acquire+0x5fc/0x3f20 [ 1851.446659] ? trace_hardirqs_on+0x10/0x10 [ 1851.450895] ? rtnl_dellink+0x6a0/0x6a0 [ 1851.454872] ? trace_hardirqs_on+0x10/0x10 [ 1851.459111] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1851.465007] ? deref_stack_reg+0x124/0x1a0 [ 1851.469297] ? lock_acquire+0x170/0x3f0 [ 1851.473262] ? lock_downgrade+0x740/0x740 [ 1851.477408] ? rtnl_dellink+0x6a0/0x6a0 [ 1851.481382] rtnetlink_rcv_msg+0x3be/0xb10 [ 1851.485630] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1851.491601] ? __netlink_lookup+0x345/0x5d0 [ 1851.495934] netlink_rcv_skb+0x125/0x390 [ 1851.499988] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1851.504486] ? netlink_ack+0x9a0/0x9a0 [ 1851.508384] netlink_unicast+0x437/0x610 [ 1851.512461] ? netlink_sendskb+0xd0/0xd0 [ 1851.516536] ? __check_object_size+0x179/0x230 [ 1851.521254] netlink_sendmsg+0x62e/0xb80 [ 1851.525317] ? nlmsg_notify+0x170/0x170 [ 1851.529289] ? security_socket_sendmsg+0x83/0xb0 [ 1851.534058] ? nlmsg_notify+0x170/0x170 [ 1851.538168] sock_sendmsg+0xb5/0x100 [ 1851.541887] SyS_sendto+0x1c7/0x2c0 [ 1851.545526] ? SyS_getpeername+0x220/0x220 [ 1851.549760] ? vm_insert_page+0x7c0/0x7c0 [ 1851.553938] ? up_read+0x17/0x30 [ 1851.557301] ? __do_page_fault+0x159/0xad0 [ 1851.561538] ? do_syscall_64+0x4c/0x640 [ 1851.566999] ? SyS_getpeername+0x220/0x220 [ 1851.571263] do_syscall_64+0x1d5/0x640 [ 1851.575161] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1851.580359] RIP: 0033:0x4193ec [ 1851.583548] RSP: 002b:00007ffe63d59e60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1851.591255] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 1851.598550] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1851.606434] RBP: 0000000000000000 R08: 00007ffe63d59eb4 R09: 000000000000000c [ 1851.613708] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1851.621005] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1851.629215] Kernel Offset: disabled [ 1851.633082] Rebooting in 86400 seconds..